$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: TyzGE6jIB/po0W7nljXAXoNVe6oNWVK515D4gb5xwI4= Subject key identifier: 02:46:55:1D:50:01:A6:C2:F6:8D:58:69:4C:45:17:C6:12:99:9F:D6 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 42FB0761CE9E10D4AD97628946467ED5F0ECFAF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 0522 Signing time: Mon 20 Oct 2025 09:51:46 +0000 Manifest this update: Mon 20 Oct 2025 09:46:46 +0000 Manifest next update: Thu 23 Oct 2025 10:51:46 +0000 Files and hashes: 1: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 2: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 3: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: Il7FdNxRbmM/mP7ydRzRDInvMX2QLpfan/ubLzw63bY=) 4: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) 5: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fb:07:61:ce:9e:10:d4:ad:97:62:89:46:46:7e:d5:f0:ec:fa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Oct 20 09:46:46 2025 GMT Not After : Oct 23 10:51:46 2025 GMT Subject: CN=0246551D5001A6C2F68D58694C4517C612999FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c3:0d:3e:3b:e1:17:c8:24:40:18:43:25:79: 3f:32:11:74:20:d2:d1:1b:37:a7:d7:b3:cf:78:de: f9:95:f2:15:2f:b8:9a:a5:06:ce:78:2f:5b:73:06: 44:fb:92:88:b1:d4:7d:90:6c:ed:cc:26:15:37:32: 9f:a9:85:ee:68:92:8e:be:39:2f:ad:c0:2f:ef:30: a1:77:0d:7d:a0:09:22:09:49:bc:7c:6c:97:85:81: 52:e6:10:dc:73:5c:73:1b:09:f9:b6:23:fc:c8:46: e9:52:b8:7f:3e:8f:9b:75:6d:0b:66:f1:55:2a:9b: 67:5a:7c:ae:62:55:0e:7c:95:0d:11:47:70:0c:27: 85:cf:bf:ba:85:10:2c:cc:05:97:97:87:3e:02:fb: ff:25:59:1e:84:b4:55:22:16:ae:92:02:48:c6:9a: 6f:ee:6a:e3:fa:68:cc:75:5a:5e:5a:59:1b:42:f4: 87:4e:f9:4f:7b:c4:b5:c7:85:de:37:c4:e2:65:58: 54:84:cc:30:05:5b:6e:9d:3e:04:f7:53:c2:da:18: 08:76:2f:e5:df:2c:c1:5d:e1:c9:6d:9a:f7:49:a6: bf:78:1c:61:04:4f:63:d5:04:27:84:96:13:fa:97: 89:54:f2:26:66:1c:10:52:46:9b:4e:73:e4:35:a0: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:46:55:1D:50:01:A6:C2:F6:8D:58:69:4C:45:17:C6:12:99:9F:D6 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3d:d3:55:18:e0:28:8a:7e:7f:7f:3e:de:66:c0:20:68:dc: 91:83:1c:d4:17:b3:4c:7e:e0:83:9b:b6:d5:57:de:6f:60:d0: bb:9d:11:52:ab:01:10:a5:fd:b1:0f:26:ea:25:7c:9b:9e:6b: de:6b:16:62:48:67:fc:fa:d4:62:5f:73:65:38:cb:3a:99:07: a8:c5:82:a4:58:3d:46:07:3c:4c:04:82:f8:0c:1f:53:05:11: 99:a7:62:a0:50:b0:b3:0c:59:19:fb:e0:f8:1c:42:a8:82:d0: 5c:85:83:20:ef:5e:67:67:76:60:9a:75:db:91:ea:33:6a:78: 8a:60:b0:17:21:9e:2f:95:5c:3a:5a:c5:60:b1:a8:4e:4b:fb: e0:f7:0c:d9:f2:74:d0:43:d5:2f:19:11:38:09:2a:a2:06:47: de:13:88:1b:8c:e4:66:30:63:53:6d:90:8f:9f:cd:f7:e2:df: 02:ea:1c:fd:4e:41:a9:f8:1d:9c:11:a1:51:de:ab:23:59:e8: 0b:4a:e6:2d:51:6d:14:a8:f5:b0:38:ff:05:1d:11:87:74:dc: 3a:bd:f8:63:a7:e8:7f:8d:64:f8:2a:ee:c1:b3:a8:d4:9a:0e: 3e:5f:44:f0:ff:8e:75:55:e4:37:8f:be:e4:0c:3d:6d:2c:e0: 6b:c4:95:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQvsHYc6eENStl2KJRkZ+1fDs+vAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTEwMjAwOTQ2NDZaFw0yNTEwMjMxMDUxNDZaMDMxMTAvBgNV BAMTKDAyNDY1NTFENTAwMUE2QzJGNjhENTg2OTRDNDUxN0M2MTI5OTlGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgww0+O+EXyCRAGEMleT8yEXQg 0tEbN6fXs8943vmV8hUvuJqlBs54L1tzBkT7koix1H2QbO3MJhU3Mp+phe5oko6+ OS+twC/vMKF3DX2gCSIJSbx8bJeFgVLmENxzXHMbCfm2I/zIRulSuH8+j5t1bQtm 8VUqm2dafK5iVQ58lQ0RR3AMJ4XPv7qFECzMBZeXhz4C+/8lWR6EtFUiFq6SAkjG mm/uauP6aMx1Wl5aWRtC9IdO+U97xLXHhd43xOJlWFSEzDAFW26dPgT3U8LaGAh2 L+XfLMFd4cltmvdJpr94HGEET2PVBCeElhP6l4lU8iZmHBBSRptOc+Q1oDE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAkZVHVABpsL2jVhpTEUXxhKZn9YwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY901UY4CiKfn9/Pt5mwCBo3JGDHNQXs0x+ 4IObttVX3m9g0LudEVKrARCl/bEPJuolfJuea95rFmJIZ/z61GJfc2U4yzqZB6jF gqRYPUYHPEwEgvgMH1MFEZmnYqBQsLMMWRn74PgcQqiC0FyFgyDvXmdndmCadduR 6jNqeIpgsBchni+VXDpaxWCxqE5L++D3DNnydNBD1S8ZETgJKqIGR94TiBuM5GYw Y1NtkI+fzffi3wLqHP1OQan4HZwRoVHeqyNZ6AtK5i1RbRSo9bA4/wUdEYd03Dq9 +GOn6H+NZPgq7sGzqNSaDj5fRPD/jnVV5DePvuQMPW0s4GvElfQ= -----END CERTIFICATE-----Generated at Mon Oct 20 22:42:31 2025 by rpki-client