$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: bsyb2EocO8NtWGT7BYePc7bWDp+IcD1rkzRdWE6xNFI= Subject key identifier: CB:12:B9:AF:AF:77:42:F6:8A:67:0B:AE:F0:81:19:D4:71:46:92:2C Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 4E87AB7AF39CB391F082B95A07A42D51B6C25C44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 01E9 Signing time: Tue 01 Jul 2025 18:11:18 +0000 Manifest this update: Tue 01 Jul 2025 18:06:18 +0000 Manifest next update: Sat 05 Jul 2025 02:03:18 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: +PeUjr8wdLwuAex5dvKJ6FY0H7VZX3I1dozcdSn4hHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:87:ab:7a:f3:9c:b3:91:f0:82:b9:5a:07:a4:2d:51:b6:c2:5c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Jul 1 18:06:18 2025 GMT Not After : Jul 5 02:03:18 2025 GMT Subject: CN=CB12B9AFAF7742F68A670BAEF08119D47146922C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:07:56:b8:01:c7:44:4a:5a:ce:c2:28:6b:b6: 06:f8:7a:4f:68:57:0b:cf:40:60:ca:ae:8a:aa:35: e4:09:a9:1f:c3:29:ef:ee:ab:ea:a7:56:90:60:81: 3e:b0:4a:ac:7f:bf:52:17:4d:27:51:db:18:e5:d7: d6:24:02:21:94:70:35:05:89:86:89:f9:00:89:fa: fb:00:15:09:59:f8:bf:a8:20:ab:b8:6c:d2:64:ed: 62:76:83:e0:57:65:60:f5:f1:35:d1:cb:61:63:c4: 31:50:28:fe:48:25:55:65:d7:33:fc:a9:ec:b1:19: 23:cf:f9:e1:63:6c:53:d7:17:a0:a3:0a:f3:d1:15: 06:fb:93:c1:9d:0f:50:68:d4:17:c9:85:aa:aa:8f: 23:0b:31:11:b8:2b:56:6b:5f:28:62:b4:cb:c1:e5: 18:7a:96:a3:3c:0a:cb:42:4d:50:58:bf:a7:0d:99: d8:cb:ce:43:a5:b9:b1:f7:99:a3:57:42:fe:9a:75: c5:2c:ea:a7:dc:9c:aa:c4:0c:c8:4d:4b:af:58:57: 12:37:8b:e3:13:3b:4c:90:cd:4b:73:85:2e:41:d6: 92:d4:d2:aa:f8:e1:bd:c0:41:40:4a:89:2a:4d:5d: 7a:61:56:47:8b:f5:6d:a2:cc:1e:6b:53:51:24:65: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:12:B9:AF:AF:77:42:F6:8A:67:0B:AE:F0:81:19:D4:71:46:92:2C X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e4:b8:35:e5:cb:9a:e2:03:12:24:64:7f:37:8e:b4:cd:89: c3:23:27:c3:16:55:50:ad:dd:3c:ca:ee:51:2a:89:0b:ac:f9: 6e:41:c0:99:0d:25:72:ca:62:34:3e:c7:1a:5b:ec:57:f6:cc: 60:a7:43:9a:43:43:3c:67:a6:5b:38:c6:fa:b4:9e:5a:de:38: 19:71:f4:dd:34:e2:75:b4:9e:fd:a2:c1:73:bf:67:9a:14:5e: 03:59:db:f8:d7:25:03:7c:19:43:f0:a5:04:ee:c0:0d:b7:ad: 06:98:57:5a:68:e1:1a:0f:91:d5:dd:59:e4:48:9d:c7:4b:08: 7d:bb:44:73:18:7f:d5:f6:7a:3f:c9:7e:3d:f8:23:30:cd:e7: 43:95:26:ff:be:2c:45:52:9f:d5:a5:a2:e2:e5:6c:e6:ea:47: 23:0b:16:9d:5a:fd:54:99:37:46:de:df:82:2e:8b:32:e2:52: c5:90:76:95:87:b7:63:40:1a:78:37:a0:e8:40:67:5e:8e:fe: 3c:37:c1:4e:f0:27:e6:3b:ef:34:66:58:87:ab:50:7f:f9:60: a3:be:9f:c8:59:9a:8c:97:16:a2:6e:48:75:40:60:1f:0d:5e: b7:39:ed:26:18:0e:00:fa:b7:24:bc:72:57:57:c9:c7:fc:57: 34:05:fb:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUToerevOcs5HwgrlaB6QtUbbCXEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNTA3MDExODA2MThaFw0yNTA3MDUwMjAzMThaMDMxMTAvBgNV BAMTKENCMTJCOUFGQUY3NzQyRjY4QTY3MEJBRUYwODExOUQ0NzE0NjkyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxB1a4AcdESlrOwihrtgb4ek9o VwvPQGDKroqqNeQJqR/DKe/uq+qnVpBggT6wSqx/v1IXTSdR2xjl19YkAiGUcDUF iYaJ+QCJ+vsAFQlZ+L+oIKu4bNJk7WJ2g+BXZWD18TXRy2FjxDFQKP5IJVVl1zP8 qeyxGSPP+eFjbFPXF6CjCvPRFQb7k8GdD1Bo1BfJhaqqjyMLMRG4K1ZrXyhitMvB 5Rh6lqM8CstCTVBYv6cNmdjLzkOlubH3maNXQv6adcUs6qfcnKrEDMhNS69YVxI3 i+MTO0yQzUtzhS5B1pLU0qr44b3AQUBKiSpNXXphVkeL9W2izB5rU1EkZe77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyxK5r693QvaKZwuu8IEZ1HFGkiwwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTkuDXly5riAxIkZH83jrTNicMjJ8MWVVCt 3TzK7lEqiQus+W5BwJkNJXLKYjQ+xxpb7Ff2zGCnQ5pDQzxnpls4xvq0nlreOBlx 9N004nW0nv2iwXO/Z5oUXgNZ2/jXJQN8GUPwpQTuwA23rQaYV1po4RoPkdXdWeRI ncdLCH27RHMYf9X2ej/Jfj34IzDN50OVJv++LEVSn9WlouLlbObqRyMLFp1a/VSZ N0be34IuizLiUsWQdpWHt2NAGng3oOhAZ16O/jw3wU7wJ+Y77zRmWIerUH/5YKO+ n8hZmoyXFqJuSHVAYB8NXrc57SYYDgD6tyS8cldXycf8VzQF+3Q= -----END CERTIFICATE-----Generated at Tue Jul 1 23:27:21 2025 by rpki-client