$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft File: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft (raw, json) Hash identifier: maJXNNuWDNa6st6r0ELs/go/7Ay9dUpFQkeGsRqzpYM= Subject key identifier: C7:05:02:8B:C8:E0:68:E3:65:D1:FE:47:E6:46:50:B8:61:F5:A3:7A Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C Certificate issuer: /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Certificate serial: 089C1EA58F7E19AC3655E89BE679A410AB4D34DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft Manifest number: A6 Signing time: Sat 28 Jun 2025 17:40:46 +0000 Manifest this update: Sat 28 Jun 2025 17:35:46 +0000 Manifest next update: Wed 02 Jul 2025 01:05:46 +0000 Files and hashes: 1: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl (hash: UDNc08n9OW6deQWShW1v70/iMJU7LnSWS5vsteGhc/k=) 2: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: VQEEEXuPlisinrBwT/1FJcAfMTnGRscgl2dxnDWnkuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9c:1e:a5:8f:7e:19:ac:36:55:e8:9b:e6:79:a4:10:ab:4d:34:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Validity Not Before: Jun 28 17:35:46 2025 GMT Not After : Jul 2 01:05:46 2025 GMT Subject: CN=C705028BC8E068E365D1FE47E64650B861F5A37A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:f3:b3:b7:7c:20:72:f7:1e:ee:c3:d5:05: 49:d2:69:e9:44:10:42:c4:af:19:b7:49:e0:10:aa: e9:8b:ad:aa:df:6d:f4:39:f1:d4:bb:9e:b8:37:f3: 36:62:b3:bf:ae:c6:23:59:10:a7:a4:ea:95:87:ca: 42:e7:bf:13:68:09:67:fd:24:db:fe:ab:ef:17:fa: 15:d9:04:91:3a:3d:af:d6:74:80:e6:e9:18:ee:1a: 01:af:68:7b:d7:79:71:12:e5:5b:c0:1d:ce:54:c5: 59:2a:ca:fe:c4:da:61:03:ec:9c:6d:85:7a:1c:e2: ca:9a:cd:66:e9:9b:7d:d4:38:a3:c4:34:fa:bb:65: 15:e6:96:3e:b0:03:ff:f1:37:88:17:95:14:5a:7b: 20:af:5e:20:52:92:68:a2:b0:33:76:7a:05:a7:92: 3d:0a:4a:04:fc:08:99:39:4a:7e:85:de:29:3f:4f: 65:83:ad:14:4a:3e:6e:9e:44:6c:f3:9a:93:e0:a8: 24:d1:01:44:7a:84:a5:cc:a7:58:8d:b0:9d:f9:63: 36:d7:7b:6d:65:78:7f:1c:a4:18:e9:9b:2f:52:83: 6c:05:07:8e:7a:67:64:37:d8:cc:38:69:8f:05:98: 9f:a5:bc:6c:d0:c8:99:a7:36:9a:ab:a4:ff:c9:fa: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:05:02:8B:C8:E0:68:E3:65:D1:FE:47:E6:46:50:B8:61:F5:A3:7A X509v3 Authority Key Identifier: keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:12:8e:92:c7:18:b7:4f:1a:28:00:9c:36:9d:00:ca:5f:a0: bf:f6:65:96:ae:04:8c:20:6b:26:52:1d:d0:94:03:e8:3e:23: cf:ed:f3:ae:b5:c6:29:74:c7:9e:99:3a:08:d9:2f:a4:c9:45: 39:47:3c:52:d1:de:d5:d2:03:9f:1d:02:dd:f2:13:f7:5e:b5: e7:a1:ba:c0:77:22:58:cf:98:ca:95:89:f8:e4:05:15:e0:71: a5:c8:aa:f5:13:b5:00:6a:c7:52:b7:8b:f6:dc:a3:d7:be:2f: ca:5d:bf:a7:25:ab:d2:06:95:00:ff:01:8d:68:d5:19:35:e2: e7:87:e1:01:79:a1:16:17:5f:20:db:a0:45:2e:e5:a3:03:5b: 22:38:76:ca:da:16:c1:d7:bd:e8:38:08:d3:e1:11:c1:42:10: 7d:2b:8d:cf:a4:ae:c2:12:ae:3c:ea:40:d5:5a:96:59:91:2d: c4:9f:7f:60:6e:7f:c7:10:09:51:89:95:0f:5b:00:16:48:c7: 0f:5e:00:8f:d9:11:c5:9b:76:72:e9:25:3f:2d:b2:6b:e0:15: c7:1c:c3:a3:7b:51:57:07:a1:48:4b:47:31:4e:68:6e:87:94: 16:fe:60:f5:e9:c4:20:3c:39:d0:30:c4:a7:ef:d2:56:66:84: 40:64:24:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJwepY9+Gaw2Veib5nmkEKtNNN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2 NEJCOTM1QzAeFw0yNTA2MjgxNzM1NDZaFw0yNTA3MDIwMTA1NDZaMDMxMTAvBgNV BAMTKEM3MDUwMjhCQzhFMDY4RTM2NUQxRkU0N0U2NDY1MEI4NjFGNUEzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQPOzt3wgcvce7sPVBUnSaelE EELErxm3SeAQqumLrarfbfQ58dS7nrg38zZis7+uxiNZEKek6pWHykLnvxNoCWf9 JNv+q+8X+hXZBJE6Pa/WdIDm6RjuGgGvaHvXeXES5VvAHc5UxVkqyv7E2mED7Jxt hXoc4sqazWbpm33UOKPENPq7ZRXmlj6wA//xN4gXlRRaeyCvXiBSkmiisDN2egWn kj0KSgT8CJk5Sn6F3ik/T2WDrRRKPm6eRGzzmpPgqCTRAUR6hKXMp1iNsJ35YzbX e21leH8cpBjpmy9Sg2wFB456Z2Q32Mw4aY8FmJ+lvGzQyJmnNpqrpP/J+tp9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxwUCi8jgaONl0f5H5kZQuGH1o3owHwYDVR0j BBgwFoAUYLwwfOHdHI7Z2ch9heTYAGS7k1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGRlNmM4Mi1kOTJiLTQwODUtODg5My1kNjQ3NzkxYzI3N2YvMC82MEJDMzA3Q0Ux REQxQzhFRDlEOUM4N0Q4NUU0RDgwMDY0QkI5MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2NEJC OTM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4 MDA2NEJCOTM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8SjpLHGLdPGigAnDadAMpfoL/2ZZauBIwg ayZSHdCUA+g+I8/t8661xil0x56ZOgjZL6TJRTlHPFLR3tXSA58dAt3yE/deteeh usB3IljPmMqVifjkBRXgcaXIqvUTtQBqx1K3i/bco9e+L8pdv6clq9IGlQD/AY1o 1Rk14ueH4QF5oRYXXyDboEUu5aMDWyI4dsraFsHXveg4CNPhEcFCEH0rjc+krsIS rjzqQNVallmRLcSff2Buf8cQCVGJlQ9bABZIxw9eAI/ZEcWbdnLpJT8tsmvgFccc w6N7UVcHoUhLRzFOaG6HlBb+YPXpxCA8OdAwxKfv0lZmhEBkJCc= -----END CERTIFICATE-----Generated at Sun Jun 29 19:17:51 2025 by rpki-client