$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: RUVPzggJiAS7L01KkAXWHy/SsdCE9507xn2VEL238SI= Subject key identifier: 7D:C5:E3:0F:8C:7E:4D:72:6C:C8:10:13:D6:49:B4:54:6F:94:4D:B6 Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 1179DA55B4F2AB7B2E296CB40A87EF1858DBE913 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 0234 Signing time: Sun 04 May 2025 16:21:43 +0000 Manifest this update: Sun 04 May 2025 16:16:43 +0000 Manifest next update: Thu 08 May 2025 00:43:43 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: BJAdOo0RGebUk8ZnI6ST00lTNYWrEJhZQcWUbVVtqAs=) 2: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: 2YgkEQkeGmqFhKh36OZtW5bXREVpZI8qz+9R9/1DYlo=) 3: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: z9nuGGm9+X+UiQ3AhEMfAsL6iP+1xleYaHuS5B7A/bU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:79:da:55:b4:f2:ab:7b:2e:29:6c:b4:0a:87:ef:18:58:db:e9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: May 4 16:16:43 2025 GMT Not After : May 8 00:43:43 2025 GMT Subject: CN=7DC5E30F8C7E4D726CC81013D649B4546F944DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:72:90:23:1b:1e:82:a1:e8:a2:72:84:af: 58:32:d5:d8:9e:44:bd:12:79:7e:ac:f3:86:99:a8: 34:aa:78:a5:8a:f1:6a:84:ff:6b:9b:3d:05:1b:25: 9d:31:02:fb:90:02:62:73:ad:4e:56:12:a0:67:03: 52:d1:93:1f:48:2d:4e:c6:7a:62:6e:d2:09:22:ac: e0:98:67:05:04:65:3b:12:62:f0:5d:c5:ef:61:fd: c3:e7:28:bf:ad:c5:e6:9c:06:49:35:ad:f2:fa:2b: 06:3b:0f:a2:fa:00:fa:37:8a:2b:39:b0:27:a6:02: e0:d4:1d:c2:66:c9:1d:01:62:4b:56:07:51:93:4c: 0f:fe:db:53:46:fb:cb:7b:b5:cb:e9:21:b4:f8:f0: e1:ea:5e:ba:f5:e1:62:71:5e:02:de:fc:af:28:94: 01:da:b4:cd:0b:4a:ac:d7:d0:04:b1:c1:b1:03:20: 6c:a5:8e:8c:fb:a4:fe:80:a8:7d:79:a5:57:72:7a: 2c:e7:ed:17:9e:80:5d:34:52:9e:0f:76:55:15:b3: de:39:b6:c9:36:e3:ba:9a:19:9c:a6:3d:e3:2c:8c: 8f:2c:04:4b:db:a4:76:d2:30:f6:c9:6e:e5:ae:38: 20:dc:38:04:99:2b:4a:27:43:cf:b4:e5:ae:e8:2b: 9d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C5:E3:0F:8C:7E:4D:72:6C:C8:10:13:D6:49:B4:54:6F:94:4D:B6 X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:85:22:cf:2e:5f:98:87:66:46:dd:68:99:0a:d3:c1:07:ff: f6:10:c6:14:b7:0e:88:a0:b3:d5:cf:d6:c1:43:fc:3a:0b:07: 4c:b3:20:ed:73:9a:fe:ad:93:80:72:ae:94:fb:c6:3a:de:ad: c3:c9:a2:54:f5:a0:d9:8c:95:42:6b:c5:e7:12:1c:fe:2e:8a: df:ea:d8:bc:07:67:c9:d7:ce:b8:e4:6a:46:a3:1e:af:6e:7d: 86:c4:ce:67:31:03:08:f8:10:7f:c9:e8:39:de:29:a8:91:c9: a7:8b:96:7e:2a:2c:7e:fb:28:79:0b:f4:34:9b:aa:ba:2a:71: b0:2c:43:a8:ef:e7:f1:56:56:c2:12:29:29:a7:5f:2e:df:ea: 5e:f7:45:c4:36:d8:d6:77:84:f3:38:ae:94:22:fc:9c:6a:b9: cf:e1:4b:dc:33:59:e7:c1:f3:f8:a4:19:74:de:4e:40:95:44: 28:aa:d6:3a:6e:e4:c5:37:5e:11:4b:10:58:86:15:e2:13:b3: d1:b2:48:da:d7:21:66:3f:15:b1:6a:04:59:83:6e:c3:73:10: 10:eb:52:bd:66:c8:14:36:53:6e:fc:d9:a6:c2:2d:40:8d:d5: 08:e5:7c:93:8a:b0:f9:b1:11:53:09:0f:78:ef:5d:aa:0a:79: 85:25:0a:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEXnaVbTyq3suKWy0CofvGFjb6RMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNTA1MDQxNjE2NDNaFw0yNTA1MDgwMDQzNDNaMDMxMTAvBgNV BAMTKDdEQzVFMzBGOEM3RTRENzI2Q0M4MTAxM0Q2NDlCNDU0NkY5NDREQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkUXKQIxsegqHoonKEr1gy1die RL0SeX6s84aZqDSqeKWK8WqE/2ubPQUbJZ0xAvuQAmJzrU5WEqBnA1LRkx9ILU7G emJu0gkirOCYZwUEZTsSYvBdxe9h/cPnKL+txeacBkk1rfL6KwY7D6L6APo3iis5 sCemAuDUHcJmyR0BYktWB1GTTA/+21NG+8t7tcvpIbT48OHqXrr14WJxXgLe/K8o lAHatM0LSqzX0ASxwbEDIGyljoz7pP6AqH15pVdyeizn7ReegF00Up4PdlUVs945 tsk247qaGZymPeMsjI8sBEvbpHbSMPbJbuWuOCDcOASZK0onQ8+05a7oK51zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfcXjD4x+TXJsyBAT1km0VG+UTbYwHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyFIs8uX5iHZkbdaJkK08EH//YQxhS3Doig s9XP1sFD/DoLB0yzIO1zmv6tk4ByrpT7xjrercPJolT1oNmMlUJrxecSHP4uit/q 2LwHZ8nXzrjkakajHq9ufYbEzmcxAwj4EH/J6DneKaiRyaeLln4qLH77KHkL9DSb qroqcbAsQ6jv5/FWVsISKSmnXy7f6l73RcQ22NZ3hPM4rpQi/Jxquc/hS9wzWefB 8/ikGXTeTkCVRCiq1jpu5MU3XhFLEFiGFeITs9GySNrXIWY/FbFqBFmDbsNzEBDr Ur1myBQ2U2782abCLUCN1QjlfJOKsPmxEVMJD3jvXaoKeYUlClg= -----END CERTIFICATE-----Generated at Tue May 6 00:15:57 2025 by rpki-client