$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: uv1XJqvJus9IxKdTcVHK1ZGKfOaNpL1he8bVauyEy7I= Subject key identifier: 60:7F:7F:5B:CA:AF:2B:D2:9C:14:5E:1C:E2:4B:8E:B5:5E:6F:D7:14 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 4B93306F595D8DFF3B52E2AF4C3A0C02A2719194 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 04ED Signing time: Fri 27 Jun 2025 10:31:46 +0000 Manifest this update: Fri 27 Jun 2025 10:26:46 +0000 Manifest next update: Mon 30 Jun 2025 16:38:46 +0000 Files and hashes: 1: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: +Jgkg5fCk7CTTU1paoczIrumnGae5R4kJH3oaDMZgU0=) 2: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) 3: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) 4: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 5: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 16:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:93:30:6f:59:5d:8d:ff:3b:52:e2:af:4c:3a:0c:02:a2:71:91:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Jun 27 10:26:46 2025 GMT Not After : Jun 30 16:38:46 2025 GMT Subject: CN=607F7F5BCAAF2BD29C145E1CE24B8EB55E6FD714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:44:92:28:02:c7:38:07:4c:a3:18:ff:f6: dc:36:e3:bb:e5:d3:d5:05:20:30:3e:d6:bc:29:37: fb:53:08:77:24:45:d1:05:41:85:3c:b6:34:3c:ae: 99:32:d9:44:86:34:39:b1:65:44:24:14:1e:38:4a: f4:63:2b:83:27:95:87:c7:7b:fb:a6:5d:21:d7:c5: 9a:26:ca:62:de:b7:4a:e0:b9:39:39:6f:01:3c:09: 53:f0:a5:0f:5b:b2:66:d3:ba:fb:3f:25:19:a1:8c: 74:d6:62:3b:74:a8:52:ff:e1:4f:46:e8:87:fe:a4: c2:11:e6:64:1a:b4:15:ba:1d:7c:4e:cc:ca:80:99: f2:54:26:ae:12:8b:c4:53:e2:48:8c:8d:ee:2a:14: a3:ff:0f:96:93:f6:8b:2a:a2:2a:c9:a5:8a:0c:c4: f8:6e:60:c7:d5:5c:03:9e:91:78:27:76:0e:86:c3: 79:77:fd:c4:20:44:7a:5e:c8:d5:14:84:46:04:4b: 2c:42:91:14:d5:8b:7f:a4:3d:3e:b1:01:32:f8:71: 55:c0:b1:fa:9e:cd:01:22:d6:6b:3c:46:88:fd:7e: aa:a2:44:7e:57:cc:a1:14:7e:ed:d2:23:46:bb:cd: 52:9d:fc:5b:40:e3:ef:f2:44:e8:c9:20:0b:05:bf: dc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7F:7F:5B:CA:AF:2B:D2:9C:14:5E:1C:E2:4B:8E:B5:5E:6F:D7:14 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:14:4f:bb:70:c5:da:52:79:89:6a:de:18:4d:da:02:ae:d3: e1:5c:fa:46:8f:35:9f:02:50:9d:dc:5f:ad:84:6e:bc:65:b0: c0:03:98:ca:62:56:b2:83:46:ff:1a:58:78:34:15:88:28:44: ef:dd:1f:fd:ea:a1:1d:83:c3:a8:8f:fd:e7:0a:78:c5:c6:8c: 1e:bd:a6:19:e8:30:b1:4e:62:4b:f1:d5:9d:1e:30:f3:54:53: 42:30:a9:bf:e2:d9:3a:f4:c1:74:34:83:72:0a:06:4e:35:8d: fb:67:08:d8:fb:ac:35:35:2d:92:c4:5e:5c:68:22:3f:17:2d: da:dd:75:54:9d:b3:5e:09:78:ba:64:fb:a5:57:2f:67:31:64: 61:be:41:10:17:01:25:11:70:79:4f:bf:d8:06:56:fe:15:bd: dd:e2:ba:9a:61:6c:da:6a:72:91:4d:4d:83:34:ee:fb:40:de: 00:4b:87:8b:a4:5b:71:7d:92:86:07:44:ae:44:44:5a:8b:2d: 99:5f:6a:4e:a9:55:c9:8e:b2:87:bb:d3:14:1e:ab:5a:57:98: 6b:56:1f:08:6d:90:dd:f9:21:7e:5d:2c:35:49:47:49:bc:19: 81:20:ba:61:8f:68:35:64:f7:78:be:a6:21:9a:40:13:64:b0: 2b:3d:41:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5Mwb1ldjf87UuKvTDoMAqJxkZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTA2MjcxMDI2NDZaFw0yNTA2MzAxNjM4NDZaMDMxMTAvBgNV BAMTKDYwN0Y3RjVCQ0FBRjJCRDI5QzE0NUUxQ0UyNEI4RUI1NUU2RkQ3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWkSSKALHOAdMoxj/9tw247vl 09UFIDA+1rwpN/tTCHckRdEFQYU8tjQ8rpky2USGNDmxZUQkFB44SvRjK4MnlYfH e/umXSHXxZomymLet0rguTk5bwE8CVPwpQ9bsmbTuvs/JRmhjHTWYjt0qFL/4U9G 6If+pMIR5mQatBW6HXxOzMqAmfJUJq4Si8RT4kiMje4qFKP/D5aT9osqoirJpYoM xPhuYMfVXAOekXgndg6Gw3l3/cQgRHpeyNUUhEYESyxCkRTVi3+kPT6xATL4cVXA sfqezQEi1ms8Roj9fqqiRH5XzKEUfu3SI0a7zVKd/FtA4+/yROjJIAsFv9x7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYH9/W8qvK9KcFF4c4kuOtV5v1xQwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMUT7twxdpSeYlq3hhN2gKu0+Fc+kaPNZ8C UJ3cX62EbrxlsMADmMpiVrKDRv8aWHg0FYgoRO/dH/3qoR2Dw6iP/ecKeMXGjB69 phnoMLFOYkvx1Z0eMPNUU0Iwqb/i2Tr0wXQ0g3IKBk41jftnCNj7rDU1LZLEXlxo Ij8XLdrddVSds14JeLpk+6VXL2cxZGG+QRAXASURcHlPv9gGVv4Vvd3iupphbNpq cpFNTYM07vtA3gBLh4ukW3F9koYHRK5ERFqLLZlfak6pVcmOsoe70xQeq1pXmGtW HwhtkN35IX5dLDVJR0m8GYEgumGPaDVk93i+piGaQBNksCs9QcA= -----END CERTIFICATE-----Generated at Sun Jun 29 16:11:42 2025 by rpki-client