$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: sFJSwdzaQa6UQFIZ3z5Rg/qSWpaT8Et9gkyXM1+kAd4= Subject key identifier: AE:28:A9:D3:27:51:42:A7:5A:6B:3B:32:06:80:67:6D:52:9B:77:99 Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 147AA96D29C0BAA718F3B058888D7FEECF3B81F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 024C Signing time: Sat 28 Jun 2025 11:11:43 +0000 Manifest this update: Sat 28 Jun 2025 11:06:43 +0000 Manifest next update: Tue 01 Jul 2025 18:51:43 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: BJAdOo0RGebUk8ZnI6ST00lTNYWrEJhZQcWUbVVtqAs=) 2: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: DWxytKW7BSJtFD025Lf119qWUFeHArofhFeuxHNbgyg=) 3: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: z9nuGGm9+X+UiQ3AhEMfAsL6iP+1xleYaHuS5B7A/bU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 18:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7a:a9:6d:29:c0:ba:a7:18:f3:b0:58:88:8d:7f:ee:cf:3b:81:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Jun 28 11:06:43 2025 GMT Not After : Jul 1 18:51:43 2025 GMT Subject: CN=AE28A9D3275142A75A6B3B320680676D529B7799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a1:ce:ae:94:5a:39:7d:8d:61:68:23:77:32: b2:c6:f2:b6:f7:ce:f9:66:8f:8c:b1:5d:a1:f5:c3: ac:67:59:59:91:45:96:02:66:45:96:c4:6c:52:ae: 02:51:68:8e:d2:d4:7c:77:f1:7c:2b:8b:9a:5f:ab: 63:dd:65:94:a9:ca:f1:39:33:a3:94:e1:91:ee:cf: 2c:6c:35:e8:89:d2:9f:50:98:ab:19:79:35:13:22: 94:ff:63:68:cc:7f:18:eb:26:16:cd:52:8e:fa:7e: 96:17:bb:3f:7e:c1:bf:fb:15:9a:54:36:a5:d7:d4: 9f:a4:91:54:5e:48:99:83:67:0d:6e:34:59:e1:70: 4a:fc:d5:e8:85:3d:eb:38:ba:19:b7:5c:db:aa:ef: b9:76:42:97:a1:97:2d:69:48:33:d6:e9:d2:7e:dc: 07:d9:2a:de:4c:7a:12:54:2c:5c:f1:6d:68:af:fa: bd:2c:43:5d:6d:51:de:1e:78:f9:4e:d6:d6:f9:82: a3:be:7f:3f:7e:d1:a0:5c:60:f7:f0:5d:59:54:1d: 9b:26:cf:dc:35:cf:4a:49:ad:55:d4:59:36:4e:cd: 56:cb:53:5e:36:29:28:47:e5:c0:29:b5:26:81:29: 47:f7:6a:7e:0c:82:51:f5:f9:99:7e:1f:85:21:28: da:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:28:A9:D3:27:51:42:A7:5A:6B:3B:32:06:80:67:6D:52:9B:77:99 X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f6:33:83:56:03:60:1c:6e:3c:a8:ab:3b:79:dc:da:4c:a8: b9:eb:65:c6:cb:cc:a4:98:8c:08:ff:a2:47:47:9c:fb:90:7d: b9:f0:ee:04:a6:90:0f:eb:bb:2b:04:da:c6:94:20:7e:21:60: c0:c1:44:91:2d:40:60:2f:fd:8f:df:e8:56:b5:12:1c:2d:68: 95:f6:a8:ce:95:6c:c9:a1:66:78:82:9b:ab:c5:10:07:88:f8: 35:91:a5:57:82:e1:6a:ca:00:f0:c0:75:6a:ea:8a:7f:7c:41: 51:26:aa:3f:fb:74:7a:1d:19:72:e3:7b:99:49:98:1e:51:55: f9:ff:a1:d5:91:fa:33:51:a3:40:e8:17:97:4b:7c:aa:86:b6: af:20:47:77:3b:7c:e9:15:b1:ee:0d:44:60:65:9b:2a:50:9c: 6d:69:ab:e0:77:8a:53:d9:b7:a4:f0:de:0d:b5:00:95:07:8c: 88:24:10:c8:6b:fe:82:2b:73:01:96:dc:31:d3:06:57:e4:80: 67:36:7b:a4:20:8c:f6:36:e0:08:ba:11:79:d8:82:93:d3:cc: 1e:aa:cb:0c:cf:c4:71:9d:89:36:5b:58:bf:57:c3:88:95:3d: f9:eb:c2:ad:26:d5:f7:92:0b:9a:cf:19:d3:1b:6c:fe:0d:b0: 38:50:e1:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHqpbSnAuqcY87BYiI1/7s87gfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNTA2MjgxMTA2NDNaFw0yNTA3MDExODUxNDNaMDMxMTAvBgNV BAMTKEFFMjhBOUQzMjc1MTQyQTc1QTZCM0IzMjA2ODA2NzZENTI5Qjc3OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXoc6ulFo5fY1haCN3MrLG8rb3 zvlmj4yxXaH1w6xnWVmRRZYCZkWWxGxSrgJRaI7S1Hx38Xwri5pfq2PdZZSpyvE5 M6OU4ZHuzyxsNeiJ0p9QmKsZeTUTIpT/Y2jMfxjrJhbNUo76fpYXuz9+wb/7FZpU NqXX1J+kkVReSJmDZw1uNFnhcEr81eiFPes4uhm3XNuq77l2Qpehly1pSDPW6dJ+ 3AfZKt5MehJULFzxbWiv+r0sQ11tUd4eePlO1tb5gqO+fz9+0aBcYPfwXVlUHZsm z9w1z0pJrVXUWTZOzVbLU142KShH5cAptSaBKUf3an4MglH1+Zl+H4UhKNpjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUriip0ydRQqdaazsyBoBnbVKbd5kwHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH72M4NWA2Acbjyoqzt53NpMqLnrZcbLzKSY jAj/okdHnPuQfbnw7gSmkA/ruysE2saUIH4hYMDBRJEtQGAv/Y/f6Fa1EhwtaJX2 qM6VbMmhZniCm6vFEAeI+DWRpVeC4WrKAPDAdWrqin98QVEmqj/7dHodGXLje5lJ mB5RVfn/odWR+jNRo0DoF5dLfKqGtq8gR3c7fOkVse4NRGBlmypQnG1pq+B3ilPZ t6Tw3g21AJUHjIgkEMhr/oIrcwGW3DHTBlfkgGc2e6QgjPY24Ai6EXnYgpPTzB6q ywzPxHGdiTZbWL9Xw4iVPfnrwq0m1feSC5rPGdMbbP4NsDhQ4dc= -----END CERTIFICATE-----Generated at Sun Jun 29 21:48:47 2025 by rpki-client