$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: coGX5CqXrlmzCEQPfiQU11+Jyy14C+4rM9C6xnRCng8= Subject key identifier: AE:CD:23:C7:43:FB:A6:D8:48:5A:97:D7:F0:7D:3F:F5:17:49:72:B6 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 383975F0624C67037EED46FB2D5E025B2B26774A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 0506 Signing time: Thu 21 Aug 2025 23:31:48 +0000 Manifest this update: Thu 21 Aug 2025 23:26:47 +0000 Manifest next update: Mon 25 Aug 2025 04:25:47 +0000 Files and hashes: 1: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: 65q1KtHqpqZ086SKriOfPD8nW/dfrqZJcflRjLPvoDk=) 2: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) 3: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 4: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) 5: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:39:75:f0:62:4c:67:03:7e:ed:46:fb:2d:5e:02:5b:2b:26:77:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Aug 21 23:26:47 2025 GMT Not After : Aug 25 04:25:47 2025 GMT Subject: CN=AECD23C743FBA6D8485A97D7F07D3FF5174972B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7b:f9:c6:eb:a9:f8:92:ff:7a:53:fe:08:9a: 45:d0:2b:c9:74:7d:df:f7:7b:86:ff:f0:b3:e9:7e: f6:3c:75:f8:e4:60:a9:c7:05:d0:30:71:37:74:9c: 02:8d:41:43:ba:3c:dd:24:bf:b4:f0:73:68:fe:82: 33:5d:e2:be:e0:8e:b6:bd:2a:34:ba:26:47:53:8c: b9:8a:ab:80:bf:d3:67:f1:66:88:da:62:5b:cf:a9: c5:c4:a3:66:93:fe:88:20:3f:b7:07:c6:50:78:56: 6b:da:c9:95:b3:26:e5:28:36:f8:e9:07:3c:4e:f4: 00:97:39:43:38:8f:c3:c4:20:79:40:05:05:2e:66: fd:b0:f8:a9:23:5b:8c:8f:15:31:66:59:bc:00:9d: 2f:c7:7a:01:8f:0c:ca:ff:ba:4f:fc:fa:8d:7f:71: 09:9c:f4:fe:b2:fb:9c:8b:57:10:39:27:48:3e:e1: be:29:9c:5c:3f:b1:ab:0c:5e:4a:ea:f3:da:07:2a: 3a:23:21:c6:c5:5b:b4:36:7a:f1:ae:11:c4:b7:bb: a2:06:a9:b7:81:48:3f:32:c9:3c:23:a7:b5:bc:be: 31:9e:b4:bc:3f:b6:ca:12:2a:13:a0:f4:20:eb:ac: 88:46:bb:e3:52:e8:b6:5f:ff:2b:df:ac:68:1c:93: f8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:CD:23:C7:43:FB:A6:D8:48:5A:97:D7:F0:7D:3F:F5:17:49:72:B6 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f1:f8:9e:54:e3:e9:4d:b3:88:91:30:7a:b4:80:76:14:4f: e6:40:3e:3e:3c:a2:34:52:da:40:7f:50:08:7b:8c:7e:6b:2e: c1:fb:80:b6:e8:bc:4b:2b:c4:b8:ee:15:f8:08:13:fb:b8:45: e2:eb:b7:ba:42:1e:ec:a2:62:68:fc:d5:cc:8e:48:a8:af:bd: fa:96:00:9b:33:3c:87:08:94:ca:f6:eb:6e:7f:c0:5a:4d:29: a5:d6:ea:06:56:99:6f:aa:f4:ac:8d:7d:bb:05:1f:d4:3b:f0: 5f:34:89:a6:3e:9c:c2:98:c2:32:75:89:d6:f0:b2:8f:32:a0: 2b:b7:09:53:9b:a3:54:78:f4:84:b4:6d:1e:db:9d:12:a1:9a: f4:bb:6e:7f:7f:cf:cb:b1:63:14:cb:d3:11:3e:64:c9:a3:6b: f5:89:fa:92:54:33:4c:8d:77:57:b8:e6:24:eb:45:07:f4:18: 94:dc:07:c0:06:b4:c7:84:48:fd:9e:12:e8:d0:f9:eb:ca:55: dd:41:f4:45:d9:98:39:4f:e9:b4:e9:52:fa:ec:65:8f:d0:a7: 43:11:49:74:ed:5e:32:a7:1c:1e:98:9a:20:d0:ec:24:3e:e2: b6:62:e5:13:f5:6b:cc:1e:78:ea:22:a8:c3:20:34:ee:c0:1f: 54:d2:2c:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODl18GJMZwN+7Ub7LV4CWysmd0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTA4MjEyMzI2NDdaFw0yNTA4MjUwNDI1NDdaMDMxMTAvBgNV BAMTKEFFQ0QyM0M3NDNGQkE2RDg0ODVBOTdEN0YwN0QzRkY1MTc0OTcyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDte/nG66n4kv96U/4ImkXQK8l0 fd/3e4b/8LPpfvY8dfjkYKnHBdAwcTd0nAKNQUO6PN0kv7Twc2j+gjNd4r7gjra9 KjS6JkdTjLmKq4C/02fxZojaYlvPqcXEo2aT/oggP7cHxlB4VmvayZWzJuUoNvjp BzxO9ACXOUM4j8PEIHlABQUuZv2w+KkjW4yPFTFmWbwAnS/HegGPDMr/uk/8+o1/ cQmc9P6y+5yLVxA5J0g+4b4pnFw/sasMXkrq89oHKjojIcbFW7Q2evGuEcS3u6IG qbeBSD8yyTwjp7W8vjGetLw/tsoSKhOg9CDrrIhGu+NS6LZf/yvfrGgck/iDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrs0jx0P7pthIWpfX8H0/9RdJcrYwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzx+J5U4+lNs4iRMHq0gHYUT+ZAPj48ojRS 2kB/UAh7jH5rLsH7gLbovEsrxLjuFfgIE/u4ReLrt7pCHuyiYmj81cyOSKivvfqW AJszPIcIlMr2625/wFpNKaXW6gZWmW+q9KyNfbsFH9Q78F80iaY+nMKYwjJ1idbw so8yoCu3CVObo1R49IS0bR7bnRKhmvS7bn9/z8uxYxTL0xE+ZMmja/WJ+pJUM0yN d1e45iTrRQf0GJTcB8AGtMeESP2eEujQ+evKVd1B9EXZmDlP6bTpUvrsZY/Qp0MR SXTtXjKnHB6YmiDQ7CQ+4rZi5RP1a8weeOoiqMMgNO7AH1TSLOg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:40 2025 by rpki-client