$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: zM5wwF89mar9XEXlTAMkz3P1jh2rFh3k123YuAu5oyI= Subject key identifier: 8A:16:20:EC:F4:78:F1:9D:62:8F:51:21:8B:F8:83:F2:A3:0E:32:AA Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 5FA7982440017657D207E62F9D5A305A997C5FE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 0265 Signing time: Sat 23 Aug 2025 10:11:47 +0000 Manifest this update: Sat 23 Aug 2025 10:06:47 +0000 Manifest next update: Tue 26 Aug 2025 22:01:47 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: BJAdOo0RGebUk8ZnI6ST00lTNYWrEJhZQcWUbVVtqAs=) 2: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: 4FheTLh9fS5tyuAuAxgPIe+txFTXqP5aVpF34ggl5yA=) 3: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: z9nuGGm9+X+UiQ3AhEMfAsL6iP+1xleYaHuS5B7A/bU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a7:98:24:40:01:76:57:d2:07:e6:2f:9d:5a:30:5a:99:7c:5f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Aug 23 10:06:47 2025 GMT Not After : Aug 26 22:01:47 2025 GMT Subject: CN=8A1620ECF478F19D628F51218BF883F2A30E32AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:05:c6:56:9d:22:ef:73:70:fc:01:9c:9b:30: ec:11:f4:5c:9f:6d:4f:59:e4:f4:f8:6f:a9:21:55: 1e:f2:34:24:a7:4a:c5:14:d1:77:b4:bf:dd:fc:9c: 72:79:9e:d8:68:6d:bd:13:89:db:e9:35:96:1b:4a: 57:5b:71:1f:7e:6f:0f:32:6f:06:d4:f1:b7:67:10: 3b:59:76:9a:4a:b2:e6:62:0c:c3:06:7f:a5:78:58: 96:fc:06:9f:ad:01:28:dc:9e:fa:bb:a9:70:14:2e: 24:44:e1:bb:dd:5d:9a:26:4a:99:aa:81:80:c9:06: 7b:68:2f:d3:1c:1d:08:19:91:9b:00:85:fc:e6:89: 6c:a0:aa:3b:bf:76:50:b3:f4:e2:be:42:2d:37:0b: 8c:17:88:cf:34:45:54:1f:fb:52:6b:cc:63:52:2a: a0:27:9c:83:9e:dd:d2:a7:68:53:50:01:e6:1c:04: e1:9e:91:88:c2:12:69:91:52:0a:1b:1c:02:c9:d4: e5:e5:96:96:b4:d9:d4:37:7d:3c:f4:a4:3d:55:cd: 43:0b:90:a5:0e:32:0b:e2:8a:7e:7f:3c:c3:8d:b1: b7:dc:42:49:36:f2:28:23:af:07:7a:a8:9b:8e:0b: f2:f2:5d:9e:7e:56:ea:93:0a:c5:ab:e3:c5:9b:8f: 35:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:16:20:EC:F4:78:F1:9D:62:8F:51:21:8B:F8:83:F2:A3:0E:32:AA X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:32:6d:b4:82:ea:ce:ef:01:db:df:49:20:06:d6:31:1a:99: fc:a1:39:01:c3:1e:04:d7:23:38:01:b4:19:a3:fc:22:d3:e9: 49:81:a3:8c:3d:8a:d5:2b:53:f8:45:96:6f:97:10:9f:b6:d4: dd:d0:fa:7f:08:6e:13:6e:73:93:18:fb:09:42:d5:43:7c:fa: 47:30:8d:70:3d:34:49:54:b4:5b:4d:51:a8:e7:fd:8c:71:58: 61:50:7a:72:0e:24:c8:c0:8e:ff:aa:bf:42:23:da:54:10:a5: 57:ee:42:bf:ee:ae:e5:0c:6d:43:be:c0:14:d1:56:31:a6:d0: f3:7a:bf:49:25:64:6d:91:af:8e:53:4d:8e:bd:54:b9:72:23: 64:03:77:91:cf:82:90:94:f9:52:a9:60:46:36:88:06:98:0b: 2a:6d:5c:c6:c6:61:d9:bb:b8:7f:c6:b3:d3:09:af:97:21:55: 05:5b:12:b4:d5:f2:ff:48:46:16:2b:94:fd:ca:66:af:12:ae: e0:07:ab:cb:ee:d2:75:d3:cf:97:cc:e3:33:3f:15:02:ef:70: b2:e8:c9:c4:14:1f:e8:87:7b:a7:c2:0a:13:dc:cd:55:7c:ef: cf:48:d5:25:0b:8e:f2:f1:38:41:2f:f0:da:51:13:cd:c9:b7: 80:a9:84:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6eYJEABdlfSB+YvnVowWpl8X+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNTA4MjMxMDA2NDdaFw0yNTA4MjYyMjAxNDdaMDMxMTAvBgNV BAMTKDhBMTYyMEVDRjQ3OEYxOUQ2MjhGNTEyMThCRjg4M0YyQTMwRTMyQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBcZWnSLvc3D8AZybMOwR9Fyf bU9Z5PT4b6khVR7yNCSnSsUU0Xe0v938nHJ5nthobb0TidvpNZYbSldbcR9+bw8y bwbU8bdnEDtZdppKsuZiDMMGf6V4WJb8Bp+tASjcnvq7qXAULiRE4bvdXZomSpmq gYDJBntoL9McHQgZkZsAhfzmiWygqju/dlCz9OK+Qi03C4wXiM80RVQf+1JrzGNS KqAnnIOe3dKnaFNQAeYcBOGekYjCEmmRUgobHALJ1OXllpa02dQ3fTz0pD1VzUML kKUOMgviin5/PMONsbfcQkk28igjrwd6qJuOC/LyXZ5+VuqTCsWr48WbjzWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUihYg7PR48Z1ij1Ehi/iD8qMOMqowHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0ybbSC6s7vAdvfSSAG1jEamfyhOQHDHgTX IzgBtBmj/CLT6UmBo4w9itUrU/hFlm+XEJ+21N3Q+n8IbhNuc5MY+wlC1UN8+kcw jXA9NElUtFtNUajn/YxxWGFQenIOJMjAjv+qv0Ij2lQQpVfuQr/uruUMbUO+wBTR VjGm0PN6v0klZG2Rr45TTY69VLlyI2QDd5HPgpCU+VKpYEY2iAaYCyptXMbGYdm7 uH/Gs9MJr5chVQVbErTV8v9IRhYrlP3KZq8SruAHq8vu0nXTz5fM4zM/FQLvcLLo ycQUH+iHe6fCChPczVV8789I1SULjvLxOEEv8NpRE83Jt4CphI0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:02:58 2025 by rpki-client