$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: RBrxIhV2r2x1Gng1UIoA99AfBsb9lPw9eQ3e1TZFWzA= Subject key identifier: BA:56:1C:D4:7D:BC:31:F4:86:33:E5:E3:4F:F5:DE:77:52:C7:04:FF Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 5537705CF0083F371A57B78F0061D2A91C79E4F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 04D6 Signing time: Tue 06 May 2025 12:31:45 +0000 Manifest this update: Tue 06 May 2025 12:26:45 +0000 Manifest next update: Fri 09 May 2025 22:30:45 +0000 Files and hashes: 1: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) 2: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) 3: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: TqWL7zbBNPeibGOvAu1jDHgqQRO9R0sVFJM/ApA8jCE=) 4: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 5: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 22:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:37:70:5c:f0:08:3f:37:1a:57:b7:8f:00:61:d2:a9:1c:79:e4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: May 6 12:26:45 2025 GMT Not After : May 9 22:30:45 2025 GMT Subject: CN=BA561CD47DBC31F48633E5E34FF5DE7752C704FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:17:ce:fc:8a:12:cb:e0:a1:c6:60:4f:d5: 98:95:d1:4b:94:1a:c6:61:ff:a1:77:a1:e4:c1:d5: 4f:56:27:d3:08:db:e9:14:8d:b0:ab:0a:21:9c:f3: ad:96:38:55:24:2e:12:e2:5c:e3:4e:6a:90:36:8d: 5d:32:63:a0:ea:53:ea:41:1c:3e:c2:04:b2:2d:30: b4:bf:ad:7d:1d:03:f5:76:df:ba:e2:89:41:5b:65: 8c:24:06:0b:ef:b0:79:3a:b7:8a:9d:12:61:23:31: 7a:37:a5:8f:fc:3e:47:3a:03:81:49:55:31:5f:46: 84:79:29:15:6c:25:67:a3:e4:43:f7:84:fe:c3:6c: 80:99:c7:03:fd:48:f1:fd:21:b3:2c:b0:e5:88:0a: 42:08:86:72:1f:de:19:8e:a6:30:94:45:1e:e9:ef: 6e:61:40:c9:1d:7a:c1:f8:a6:d4:9c:60:61:f9:52: c6:a9:66:18:75:81:1f:e7:a9:b2:9b:73:92:79:37: 4e:df:f0:59:8a:80:16:f6:88:d7:b4:e6:85:dd:d2: da:c6:d5:99:cc:2f:07:5f:fd:49:7f:3b:d4:1f:aa: 65:9d:a0:b2:99:72:31:a4:a9:5c:12:86:cd:bf:fc: 33:77:4f:e9:bd:d9:2b:91:ab:4e:16:68:42:47:b7: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:56:1C:D4:7D:BC:31:F4:86:33:E5:E3:4F:F5:DE:77:52:C7:04:FF X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6a:6e:88:8b:ab:cb:58:b4:a4:7d:f7:b1:58:95:61:66:7f: ab:e1:98:f7:e2:14:0b:40:c3:44:60:d6:39:55:5f:93:36:9e: 63:2e:5b:75:8a:08:99:bf:f3:3e:85:1d:6f:42:89:b5:6e:f1: 9d:1b:b5:69:2a:60:de:0c:eb:0f:a4:5b:fd:f3:5d:20:65:26: d6:1a:45:87:05:0c:79:ce:17:13:65:c7:91:43:40:d3:b0:69: 7e:44:4b:a5:83:f1:88:d6:3d:d1:ee:c6:c1:b6:02:09:c0:1c: d5:d8:a7:c2:cc:a1:40:40:f1:e9:b3:d4:39:65:c3:49:ad:3b: ba:de:7c:26:0c:cd:1b:92:0c:3b:38:9c:94:41:6c:16:b4:01: 9a:a9:90:d0:9a:63:13:86:e1:c5:ff:b3:cc:98:66:02:9b:9c: 3f:c6:c4:7e:b2:f5:8d:4e:90:dc:4b:a5:26:03:b7:61:1c:74: a5:23:eb:0f:75:c0:04:96:ed:a4:a4:1b:ef:c8:53:60:62:67: 7a:c7:d9:1b:55:99:1c:01:ef:40:bf:3e:99:d2:1d:11:a3:22: c2:f5:c2:86:e2:35:1b:23:e9:f5:f9:23:9c:9c:50:0e:20:f6: 5e:fa:bc:5b:4d:be:39:3a:42:40:a7:84:87:2c:8a:86:85:d8: 70:15:ac:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTdwXPAIPzcaV7ePAGHSqRx55PYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTA1MDYxMjI2NDVaFw0yNTA1MDkyMjMwNDVaMDMxMTAvBgNV BAMTKEJBNTYxQ0Q0N0RCQzMxRjQ4NjMzRTVFMzRGRjVERTc3NTJDNzA0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuphfO/IoSy+ChxmBP1ZiV0UuU GsZh/6F3oeTB1U9WJ9MI2+kUjbCrCiGc862WOFUkLhLiXONOapA2jV0yY6DqU+pB HD7CBLItMLS/rX0dA/V237riiUFbZYwkBgvvsHk6t4qdEmEjMXo3pY/8Pkc6A4FJ VTFfRoR5KRVsJWej5EP3hP7DbICZxwP9SPH9IbMssOWICkIIhnIf3hmOpjCURR7p 725hQMkdesH4ptScYGH5UsapZhh1gR/nqbKbc5J5N07f8FmKgBb2iNe05oXd0trG 1ZnMLwdf/Ul/O9QfqmWdoLKZcjGkqVwShs2//DN3T+m92SuRq04WaEJHt96BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUulYc1H28MfSGM+XjT/Xed1LHBP8wHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZqboiLq8tYtKR997FYlWFmf6vhmPfiFAtA w0Rg1jlVX5M2nmMuW3WKCJm/8z6FHW9CibVu8Z0btWkqYN4M6w+kW/3zXSBlJtYa RYcFDHnOFxNlx5FDQNOwaX5ES6WD8YjWPdHuxsG2AgnAHNXYp8LMoUBA8emz1Dll w0mtO7refCYMzRuSDDs4nJRBbBa0AZqpkNCaYxOG4cX/s8yYZgKbnD/GxH6y9Y1O kNxLpSYDt2EcdKUj6w91wASW7aSkG+/IU2BiZ3rH2RtVmRwB70C/PpnSHRGjIsL1 wobiNRsj6fX5I5ycUA4g9l76vFtNvjk6QkCnhIcsioaF2HAVrAE= -----END CERTIFICATE-----Generated at Thu May 8 20:44:11 2025 by rpki-client