$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: OqIraNMgyARBrpWz3Bte3Uh2oU2qD38zvWVF9ZI7BME= Subject key identifier: AB:C2:73:EC:15:12:3E:14:1A:00:9C:22:63:D6:F0:20:67:59:32:E5 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 1F372C1A3ACE02058C7E1E8F772777BDFF2C1654 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 021A Signing time: Mon 20 Oct 2025 08:51:20 +0000 Manifest this update: Mon 20 Oct 2025 08:46:20 +0000 Manifest next update: Thu 23 Oct 2025 14:56:20 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: jz8Pkg+LUCPMhMM28sOU+tH6j3T8QR1ieazH+cTDoeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:37:2c:1a:3a:ce:02:05:8c:7e:1e:8f:77:27:77:bd:ff:2c:16:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Oct 20 08:46:20 2025 GMT Not After : Oct 23 14:56:20 2025 GMT Subject: CN=ABC273EC15123E141A009C2263D6F020675932E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:64:cb:d0:6d:ed:d1:13:7b:d0:69:ae:e7:14: cc:25:82:25:4e:4d:6e:20:2c:2d:f1:52:2f:f4:e5: a9:ed:c4:f5:29:a0:b2:3f:0d:76:4c:29:17:99:05: 1f:d4:af:f9:c4:df:d4:91:45:c3:b4:dc:e3:8f:6c: 42:85:e9:57:a7:9a:41:bb:58:1b:4d:9c:2b:9e:40: 2f:d8:94:33:01:29:5f:01:05:dd:c8:c8:94:0f:88: 00:20:bf:d4:f6:23:bf:1c:72:24:5a:54:72:44:16: 5d:5d:83:77:fe:f8:3a:a7:f4:2d:7a:04:e4:fa:9e: 05:a5:b7:08:ba:83:78:c6:29:a4:c7:c7:74:cb:b4: c3:ec:b0:a9:63:d3:da:cd:d1:3f:28:5d:ac:28:07: 9b:02:69:0d:f3:1e:2b:83:32:79:e8:51:db:75:0c: 47:be:ee:d1:f6:a4:01:2a:46:ef:bb:72:a2:38:5c: 19:9b:90:d8:76:bf:94:ab:1e:60:27:a4:af:f7:b3: 3d:37:cc:44:92:36:71:b5:44:ba:e2:08:5e:c5:bd: 81:1c:c4:c3:5d:c1:e4:9b:50:84:16:fc:8b:89:c3: 8f:50:00:0b:9f:28:4c:36:a6:c6:b8:cd:1c:e9:6d: e7:5a:bc:33:7a:07:f9:0a:66:2d:53:8b:7b:db:66: 79:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C2:73:EC:15:12:3E:14:1A:00:9C:22:63:D6:F0:20:67:59:32:E5 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ff:ec:00:69:e2:49:e0:5a:90:6d:eb:d6:34:bd:59:8a:f7: 75:1d:30:01:c2:15:2e:a2:33:9c:e4:91:a0:1e:19:00:95:9c: 72:67:f8:40:8d:f6:c2:77:d2:78:b6:17:1a:9d:ba:a5:14:59: 99:7e:5c:e6:f6:4a:8c:3c:b5:6a:3a:2d:77:58:32:a8:73:22: 15:7a:b7:cc:63:e9:8c:9c:ce:f5:bf:ef:51:6b:f3:7b:b5:c2: 72:e2:9d:8c:df:03:c8:76:6b:f1:21:84:47:62:7e:c5:5c:dc: 20:35:e4:03:31:39:b2:f4:ac:14:0a:5c:09:b2:f3:87:63:b5: bd:54:2d:1d:eb:6d:a8:4e:d8:51:40:ce:e9:68:3b:a1:43:42: 3d:7f:87:47:3d:96:b2:d3:49:13:dd:a1:77:f1:20:25:9d:cd: 1f:05:a4:ec:c9:5a:fc:d5:37:e2:d2:7d:78:46:cf:b4:cf:8f: dc:46:78:39:8d:56:e3:d3:6b:8e:c7:2d:95:f0:6d:25:e5:d2: ad:52:05:55:d6:6e:2c:3a:9b:00:54:4c:0d:bd:7c:f1:c4:b6: 53:5a:09:89:f1:18:8e:9f:1e:0f:f1:71:8d:2a:58:8a:65:e7: 16:7d:b9:5e:d7:10:23:0d:f8:7f:42:0d:6c:a8:b4:62:1e:e1: ac:da:b7:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHzcsGjrOAgWMfh6Pdyd3vf8sFlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNTEwMjAwODQ2MjBaFw0yNTEwMjMxNDU2MjBaMDMxMTAvBgNV BAMTKEFCQzI3M0VDMTUxMjNFMTQxQTAwOUMyMjYzRDZGMDIwNjc1OTMyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZMvQbe3RE3vQaa7nFMwlgiVO TW4gLC3xUi/05antxPUpoLI/DXZMKReZBR/Ur/nE39SRRcO03OOPbEKF6VenmkG7 WBtNnCueQC/YlDMBKV8BBd3IyJQPiAAgv9T2I78cciRaVHJEFl1dg3f++Dqn9C16 BOT6ngWltwi6g3jGKaTHx3TLtMPssKlj09rN0T8oXawoB5sCaQ3zHiuDMnnoUdt1 DEe+7tH2pAEqRu+7cqI4XBmbkNh2v5SrHmAnpK/3sz03zESSNnG1RLriCF7FvYEc xMNdweSbUIQW/IuJw49QAAufKEw2psa4zRzpbedavDN6B/kKZi1Ti3vbZnmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq8Jz7BUSPhQaAJwiY9bwIGdZMuUwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7/7ABp4kngWpBt69Y0vVmK93UdMAHCFS6i M5zkkaAeGQCVnHJn+ECN9sJ30ni2FxqduqUUWZl+XOb2Sow8tWo6LXdYMqhzIhV6 t8xj6YyczvW/71Fr83u1wnLinYzfA8h2a/EhhEdifsVc3CA15AMxObL0rBQKXAmy 84djtb1ULR3rbahO2FFAzuloO6FDQj1/h0c9lrLTSRPdoXfxICWdzR8FpOzJWvzV N+LSfXhGz7TPj9xGeDmNVuPTa47HLZXwbSXl0q1SBVXWbiw6mwBUTA29fPHEtlNa CYnxGI6fHg/xcY0qWIpl5xZ9uV7XECMN+H9CDWyotGIe4azat5U= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:16 2025 by rpki-client