$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: opOlWq0sgUQKRYAnZdsBGe4D9CkIKp4/iYCWJuKqE3E= Subject key identifier: FA:98:1E:B4:F9:E1:76:8F:83:2B:98:E2:70:3F:EC:F7:0C:13:C3:53 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 3ACEEFD049E64FF453506D8E86A756DB9ADF75AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 0200 Signing time: Sat 23 Aug 2025 07:01:20 +0000 Manifest this update: Sat 23 Aug 2025 06:56:20 +0000 Manifest next update: Tue 26 Aug 2025 09:14:20 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: 6ZvLRyPUJXeQhd65CD157HkVt4pHo0lBsCne27WTj1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ce:ef:d0:49:e6:4f:f4:53:50:6d:8e:86:a7:56:db:9a:df:75:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Aug 23 06:56:20 2025 GMT Not After : Aug 26 09:14:20 2025 GMT Subject: CN=FA981EB4F9E1768F832B98E2703FECF70C13C353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:f3:c0:d8:e3:a4:23:99:bb:a0:fd:e6:26: 71:cb:c9:d7:d0:22:56:7e:d0:7e:3f:1a:fe:a7:27: 96:86:65:b0:14:2d:9b:e0:d5:df:f2:11:1c:30:4b: 9c:f4:19:11:b7:b7:6f:9c:03:4c:bc:2c:45:a6:f2: c0:04:3f:f1:88:83:ab:6b:59:24:2f:ee:e7:6c:ca: ce:93:8c:e5:4b:d1:be:29:1b:22:e6:86:63:45:b4: 94:f8:1d:2b:3e:76:ba:3c:9f:c5:7c:79:df:16:04: ff:1f:00:6f:ea:8a:98:91:6d:12:c3:75:8d:3a:04: ad:15:f9:34:25:96:8d:0a:11:e2:4f:9e:f7:b4:48: e4:a8:85:cc:bc:43:8d:3e:3c:55:b3:ef:7a:d2:bf: 55:68:d1:90:71:2e:35:49:c3:b5:54:00:84:96:c3: 77:7b:b1:c2:dc:eb:45:1b:c3:99:a5:2b:51:cc:9b: f6:0f:77:d5:12:7a:03:23:bd:47:f9:be:da:52:47: 1e:1e:e6:91:bd:ea:eb:38:e3:de:9f:74:da:f5:13: 45:13:31:6d:8d:e3:57:47:63:21:e5:50:87:70:8f: 4c:2b:a0:7d:4f:96:ff:83:5e:f2:6a:3e:a8:38:7f: f6:ba:6d:9d:7f:81:8e:15:15:30:80:83:2b:8f:a3: 5b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:98:1E:B4:F9:E1:76:8F:83:2B:98:E2:70:3F:EC:F7:0C:13:C3:53 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:54:ec:8c:7f:9e:03:44:3b:75:ba:bf:2a:db:f9:c8:60:7d: f7:39:d4:32:42:f4:68:fd:e9:03:bf:cc:2a:42:cd:3e:62:70: 98:87:c3:96:5d:9e:6f:5f:fe:06:b7:07:f3:23:71:91:d5:d2: d7:b0:aa:6d:c0:35:40:d2:33:63:23:44:b2:3b:19:a1:5e:fd: 5c:d6:81:fe:d8:37:17:36:b4:21:d2:51:3a:eb:4e:be:31:b5: d8:ab:d6:a8:8e:36:90:c4:45:7a:64:59:d7:e3:86:17:f1:f2: 1f:d5:6a:f4:65:ef:77:7e:85:95:35:81:32:9d:5f:6e:17:0e: 09:ac:37:e4:4e:2a:3d:81:2e:93:66:04:57:c8:3a:8c:a2:e6: 94:40:b6:69:cd:64:6d:0b:68:98:63:83:65:38:ca:35:76:e6: 75:8d:b8:b6:43:15:8f:b7:b4:5b:c7:37:d1:18:9d:63:f8:a5: 2e:11:ef:f5:22:35:9f:67:f3:f3:99:14:4e:f9:68:2b:f3:e8: a8:09:05:75:2b:a8:fa:92:75:fa:44:88:66:3c:6e:5d:65:60: 0e:b2:20:77:e8:b8:b0:06:ca:6a:70:f1:39:25:23:d5:b4:3e: f0:cf:be:04:0d:b9:c4:a9:49:d1:e2:e6:b8:25:3d:91:50:2f: 54:e5:78:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOs7v0EnmT/RTUG2OhqdW25rfda0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNTA4MjMwNjU2MjBaFw0yNTA4MjYwOTE0MjBaMDMxMTAvBgNV BAMTKEZBOTgxRUI0RjlFMTc2OEY4MzJCOThFMjcwM0ZFQ0Y3MEMxM0MzNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOY/PA2OOkI5m7oP3mJnHLydfQ IlZ+0H4/Gv6nJ5aGZbAULZvg1d/yERwwS5z0GRG3t2+cA0y8LEWm8sAEP/GIg6tr WSQv7udsys6TjOVL0b4pGyLmhmNFtJT4HSs+dro8n8V8ed8WBP8fAG/qipiRbRLD dY06BK0V+TQllo0KEeJPnve0SOSohcy8Q40+PFWz73rSv1Vo0ZBxLjVJw7VUAISW w3d7scLc60Ubw5mlK1HMm/YPd9USegMjvUf5vtpSRx4e5pG96us4496fdNr1E0UT MW2N41dHYyHlUIdwj0wroH1Plv+DXvJqPqg4f/a6bZ1/gY4VFTCAgyuPo1txAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+pgetPnhdo+DK5jicD/s9wwTw1MwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxU7Ix/ngNEO3W6vyrb+chgffc51DJC9Gj9 6QO/zCpCzT5icJiHw5Zdnm9f/ga3B/MjcZHV0tewqm3ANUDSM2MjRLI7GaFe/VzW gf7YNxc2tCHSUTrrTr4xtdir1qiONpDERXpkWdfjhhfx8h/VavRl73d+hZU1gTKd X24XDgmsN+ROKj2BLpNmBFfIOoyi5pRAtmnNZG0LaJhjg2U4yjV25nWNuLZDFY+3 tFvHN9EYnWP4pS4R7/UiNZ9n8/OZFE75aCvz6KgJBXUrqPqSdfpEiGY8bl1lYA6y IHfouLAGympw8TklI9W0PvDPvgQNucSpSdHi5rglPZFQL1TleGM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:10 2025 by rpki-client