$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: OS9xqyTZtLOCt0GB+d5+ywdQ2IwIG4botu5QAhkh6gE= Subject key identifier: BC:E1:D1:B4:04:F3:17:1E:14:4F:6F:81:5C:A6:E1:2F:3F:2D:0A:14 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 6614527128D7DAE17B6FF6569EC2A4E4A6851FDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 01D2 Signing time: Sun 11 May 2025 05:51:18 +0000 Manifest this update: Sun 11 May 2025 05:46:18 +0000 Manifest next update: Wed 14 May 2025 16:18:18 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: uSoQOsZ7itLFaux6xreaYpsiZNpzP9t8hGj0A5WfGo4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 16:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:14:52:71:28:d7:da:e1:7b:6f:f6:56:9e:c2:a4:e4:a6:85:1f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: May 11 05:46:18 2025 GMT Not After : May 14 16:18:18 2025 GMT Subject: CN=BCE1D1B404F3171E144F6F815CA6E12F3F2D0A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:81:96:51:89:93:70:53:55:c4:c1:67:2a: 7f:73:1b:6d:c5:d9:75:e5:20:34:fa:88:92:30:58: 59:a2:e7:c7:37:9d:d4:b0:ef:c1:ea:49:3d:c5:c1: 70:1f:95:f2:4d:24:c0:ca:46:13:ce:98:ee:33:9c: bd:2e:bf:22:8d:89:26:99:7f:f6:90:1e:fb:9f:d2: 4f:24:59:a8:c0:b5:c4:38:6c:83:d9:6b:ed:47:01: 23:65:51:97:67:d4:a2:ea:3b:02:8e:ca:0a:a3:e8: ac:cb:f7:b3:f9:57:ca:44:38:ac:6b:6c:8c:e1:11: 5b:e4:e3:d9:f1:09:6b:fe:60:f5:d3:be:d5:de:ca: ae:cd:40:7d:27:b3:8b:1d:22:d9:b6:1c:1b:a8:fa: c3:57:9e:64:33:82:cf:a8:91:18:28:d6:e5:0b:cf: 57:57:da:60:18:88:07:30:19:73:89:dd:f0:b1:1b: c8:9a:99:4a:05:66:cf:78:29:d7:e0:64:40:88:fa: 43:63:7e:60:04:dc:3f:c9:23:f1:19:cf:da:03:57: f4:ac:6d:ad:49:50:2a:f9:93:d1:c8:8c:26:83:2b: 97:04:1b:d6:c7:06:21:b8:94:aa:1a:12:4b:12:d0: 20:1c:aa:82:7a:68:85:df:18:a1:ee:ef:59:ee:2a: 50:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E1:D1:B4:04:F3:17:1E:14:4F:6F:81:5C:A6:E1:2F:3F:2D:0A:14 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6e:a4:bd:8b:5d:ff:33:ca:bc:80:de:31:39:8c:33:84:8e: 20:4b:bf:68:e4:f7:10:16:56:f5:34:fc:4e:8c:76:63:a5:ad: c8:dc:55:2b:b5:d7:4b:de:7f:b9:83:89:d7:e7:e4:53:1b:23: 09:4f:ca:be:ca:7b:6d:44:88:19:3d:c6:ff:d0:25:43:b7:46: 90:64:23:fb:33:d5:a8:93:3b:ef:86:0f:b3:7e:b9:33:6d:4a: 69:84:3c:fe:78:49:b1:38:3a:b0:1d:9a:ee:e6:0d:62:85:7a: 50:37:5a:24:32:3e:21:1d:b7:30:0e:d7:15:52:02:dd:a6:8c: 5c:76:af:19:57:db:4d:b9:e3:22:e3:44:67:c7:e3:7b:60:42: fd:1f:f1:e3:9a:7f:50:e9:d0:32:bd:25:5d:41:df:62:b6:4e: 3a:58:4b:6c:8d:fc:19:e6:ad:f0:b2:a9:bf:ce:d8:53:6d:cf: aa:1e:4d:e7:28:e6:0c:41:23:33:4f:38:05:d4:fa:27:b0:11: 3d:95:0e:15:96:64:5f:87:62:3e:c7:60:b5:f8:25:82:2f:77: 73:1c:1d:bc:98:86:28:f1:c5:1d:7b:87:43:84:00:af:a7:20: 37:32:2d:14:e6:2c:8f:c5:bf:2e:90:f5:ce:1b:18:4d:97:b4: 6f:65:5a:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZhRScSjX2uF7b/ZWnsKk5KaFH98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNTA1MTEwNTQ2MThaFw0yNTA1MTQxNjE4MThaMDMxMTAvBgNV BAMTKEJDRTFEMUI0MDRGMzE3MUUxNDRGNkY4MTVDQTZFMTJGM0YyRDBBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEB4GWUYmTcFNVxMFnKn9zG23F 2XXlIDT6iJIwWFmi58c3ndSw78HqST3FwXAflfJNJMDKRhPOmO4znL0uvyKNiSaZ f/aQHvuf0k8kWajAtcQ4bIPZa+1HASNlUZdn1KLqOwKOygqj6KzL97P5V8pEOKxr bIzhEVvk49nxCWv+YPXTvtXeyq7NQH0ns4sdItm2HBuo+sNXnmQzgs+okRgo1uUL z1dX2mAYiAcwGXOJ3fCxG8iamUoFZs94KdfgZECI+kNjfmAE3D/JI/EZz9oDV/Ss ba1JUCr5k9HIjCaDK5cEG9bHBiG4lKoaEksS0CAcqoJ6aIXfGKHu71nuKlDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvOHRtATzFx4UT2+BXKbhLz8tChQwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRupL2LXf8zyryA3jE5jDOEjiBLv2jk9xAW VvU0/E6MdmOlrcjcVSu110vef7mDidfn5FMbIwlPyr7Ke21EiBk9xv/QJUO3RpBk I/sz1aiTO++GD7N+uTNtSmmEPP54SbE4OrAdmu7mDWKFelA3WiQyPiEdtzAO1xVS At2mjFx2rxlX20254yLjRGfH43tgQv0f8eOaf1Dp0DK9JV1B32K2TjpYS2yN/Bnm rfCyqb/O2FNtz6oeTeco5gxBIzNPOAXU+iewET2VDhWWZF+HYj7HYLX4JYIvd3Mc HbyYhijxxR17h0OEAK+nIDcyLRTmLI/Fvy6Q9c4bGE2XtG9lWsQ= -----END CERTIFICATE-----Generated at Mon May 12 08:02:08 2025 by rpki-client