$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: rj2bYCu/E9+KHNUOzkc1vIz8eaml9osbEAgK6ALb/N4= Subject key identifier: A0:EC:76:55:D2:18:71:51:E0:90:65:F8:F6:2B:84:25:57:CA:FE:1E Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 5F62AAB61169F344E96271DEF96980916E974048 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 0521 Signing time: Sat 18 Oct 2025 08:02:28 +0000 Manifest this update: Sat 18 Oct 2025 07:57:28 +0000 Manifest next update: Tue 21 Oct 2025 09:47:28 +0000 Files and hashes: 1: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 2: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 3: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) 4: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) 5: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: wF3rYDgH6FRxg9LrIGVIErWaNmkg0H3amPSVgay06qM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 09:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:62:aa:b6:11:69:f3:44:e9:62:71:de:f9:69:80:91:6e:97:40:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Oct 18 07:57:28 2025 GMT Not After : Oct 21 09:47:28 2025 GMT Subject: CN=A0EC7655D2187151E09065F8F62B842557CAFE1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:8f:d5:38:30:bb:c3:d0:5b:b5:74:d3:cb: 8b:b5:56:8a:dd:0c:da:ad:d6:06:34:62:0f:d3:f7: 62:33:aa:fa:00:fe:d5:cc:17:e8:73:d3:65:7c:85: f6:e2:d2:a4:1e:e0:34:d2:b4:6f:b4:7b:ce:3f:d1: 05:8d:2b:f8:47:69:a6:a5:a0:08:97:60:26:cf:53: 58:c0:fc:79:f7:c2:7d:11:8b:92:5a:fa:1a:a2:51: 62:a3:24:5e:85:4a:24:bc:11:a4:08:c7:9e:59:dc: 94:89:5e:00:56:bd:5e:2a:b8:c8:ad:8b:60:41:09: 31:04:24:e3:33:0c:51:2c:0f:d7:a2:66:51:29:d0: 71:27:12:55:b0:06:e6:e8:4a:e5:05:36:16:6a:1b: 8b:13:3b:03:38:50:be:13:80:bf:d5:06:c5:52:ab: 41:58:b6:1e:f1:8b:aa:4d:d0:e5:4b:c9:d2:53:1a: 20:27:8e:c6:1b:02:3d:80:50:d1:ce:0e:ed:11:8e: e4:31:58:52:2b:ee:ca:d6:ca:c8:ad:ff:fd:e9:d9: 71:76:c8:ca:9d:8b:6b:f7:b5:49:5d:23:f9:d8:73: a1:47:96:57:a9:4f:21:97:38:7a:fe:2c:28:ae:b2: 1c:4f:03:11:43:af:51:c7:3a:19:87:7e:ac:f8:87: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EC:76:55:D2:18:71:51:E0:90:65:F8:F6:2B:84:25:57:CA:FE:1E X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:72:cd:7b:fa:f9:2c:7b:e8:34:4b:50:a4:45:16:5c:1e:78: 87:29:88:65:ad:5b:4b:f0:b5:7b:7c:3d:91:2e:bb:22:51:ab: 92:07:d4:e2:ce:19:50:20:41:83:ce:77:e4:08:67:0c:55:c4: 01:80:94:8c:29:eb:b9:b2:8d:e6:7e:c8:f6:84:de:3b:fd:c2: 7b:b5:21:42:c0:1e:74:40:87:a5:b9:a1:b9:97:7a:94:09:a7: 50:f3:a6:45:e3:ca:f7:7c:c6:e1:28:30:ac:c2:dc:99:2a:f3: 6a:17:ad:bd:98:27:60:22:29:ab:0d:18:33:a6:22:ee:c6:fa: 90:c3:de:30:df:d4:fe:40:d1:cb:8c:67:8e:29:94:9b:ab:f7: be:72:69:a6:43:6a:90:16:11:ad:8b:1f:d1:c6:5d:54:e4:32: b0:ab:17:67:08:17:2e:39:ba:e2:a5:51:53:19:69:4a:b5:79: da:6f:0a:64:d1:46:fd:d1:ee:c8:1e:47:65:3a:4d:aa:5c:bb: 87:6f:81:96:ca:74:b6:85:de:9c:4b:a9:08:20:20:b4:bf:5d: b5:3d:7a:d8:43:24:8c:a6:0d:d4:73:1a:f2:69:23:f1:1d:9c: 95:49:17:5b:99:c3:11:94:e6:1a:30:7a:bf:fd:a1:6e:2c:6d: ba:33:d2:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX2KqthFp80TpYnHe+WmAkW6XQEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTEwMTgwNzU3MjhaFw0yNTEwMjEwOTQ3MjhaMDMxMTAvBgNV BAMTKEEwRUM3NjU1RDIxODcxNTFFMDkwNjVGOEY2MkI4NDI1NTdDQUZFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKU4/VODC7w9BbtXTTy4u1Vord DNqt1gY0Yg/T92IzqvoA/tXMF+hz02V8hfbi0qQe4DTStG+0e84/0QWNK/hHaaal oAiXYCbPU1jA/Hn3wn0Ri5Ja+hqiUWKjJF6FSiS8EaQIx55Z3JSJXgBWvV4quMit i2BBCTEEJOMzDFEsD9eiZlEp0HEnElWwBuboSuUFNhZqG4sTOwM4UL4TgL/VBsVS q0FYth7xi6pN0OVLydJTGiAnjsYbAj2AUNHODu0RjuQxWFIr7srWysit//3p2XF2 yMqdi2v3tUldI/nYc6FHllepTyGXOHr+LCiushxPAxFDr1HHOhmHfqz4h9FVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoOx2VdIYcVHgkGX49iuEJVfK/h4wHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5yzXv6+Sx76DRLUKRFFlweeIcpiGWtW0vw tXt8PZEuuyJRq5IH1OLOGVAgQYPOd+QIZwxVxAGAlIwp67myjeZ+yPaE3jv9wnu1 IULAHnRAh6W5obmXepQJp1DzpkXjyvd8xuEoMKzC3Jkq82oXrb2YJ2AiKasNGDOm Iu7G+pDD3jDf1P5A0cuMZ44plJur975yaaZDapAWEa2LH9HGXVTkMrCrF2cIFy45 uuKlUVMZaUq1edpvCmTRRv3R7sgeR2U6Tapcu4dvgZbKdLaF3pxLqQggILS/XbU9 ethDJIymDdRzGvJpI/EdnJVJF1uZwxGU5hower/9oW4sbboz0rU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:52:34 2025 by rpki-client