$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft (raw, json) Hash identifier: qxLjPQJ8lsUqlCmnoclRy1dSDzgqq9ecTrVHgnbeOuI= Subject key identifier: 7D:33:37:8E:8A:07:DA:A5:34:29:7E:34:92:9B:25:AF:76:52:13:C5 Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 5DB2288E8E33A9FC2F2549F761698375AD102F02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft Manifest number: 016A Signing time: Fri 02 May 2025 23:10:56 +0000 Manifest this update: Fri 02 May 2025 23:05:56 +0000 Manifest next update: Tue 06 May 2025 09:20:56 +0000 Files and hashes: 1: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl (hash: WVEjFs6/T1+2xIcV9yr+sJa84hQyyZOpfOYP9MnGDO8=) 2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: 0uc+kOCgK/ThUQQa26NKJhz1A+pFk8KkCK2KrDxl9cs=) 3: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: ZDyxHBlNGIzYgtnVCT1eXLwOr1vFMRFU8WTMZvphid0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 09:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b2:28:8e:8e:33:a9:fc:2f:25:49:f7:61:69:83:75:ad:10:2f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: May 2 23:05:56 2025 GMT Not After : May 6 09:20:56 2025 GMT Subject: CN=7D33378E8A07DAA534297E34929B25AF765213C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:89:76:51:34:52:ee:fd:f1:a6:a7:de:07: 69:ab:12:cf:63:f0:ee:b2:b3:0d:92:8f:7e:6b:20: a1:e6:65:f2:17:f6:90:11:c9:4a:61:8e:1d:19:4b: af:3f:4f:2f:5f:b3:82:20:dd:ca:15:7d:9a:3c:91: 26:b3:df:a4:12:4a:67:c6:8a:7d:23:01:68:ff:6e: 7d:17:db:a2:fe:c5:04:25:4f:53:b8:24:be:f8:f8: 7f:7e:81:30:6e:1a:13:da:07:2a:c9:91:2d:d8:69: 46:56:08:74:a7:61:dc:bb:bc:67:6c:d5:a0:49:a3: 54:ba:65:d4:37:ce:b1:ff:b2:47:eb:9b:95:dc:7c: a1:66:ee:33:bb:99:88:fa:3f:ce:71:22:ba:54:a7: 3a:80:3a:04:d9:6d:7d:67:a1:49:e5:78:25:1a:1a: f5:5e:bc:2c:b8:a1:ed:ae:ce:19:fe:4f:ee:09:43: d8:a5:7f:9a:d6:80:ee:82:4a:68:82:0e:50:ad:07: 6d:dc:35:65:19:cd:c7:38:ee:50:fb:a5:3e:2f:94: 3f:01:cf:12:1a:e7:c7:84:d8:22:f7:1f:e7:70:57: 57:ad:bf:f7:dc:e8:5c:68:31:c1:ef:54:88:60:89: 69:b3:04:c8:3e:6e:e1:fb:52:2d:e0:15:ae:70:0d: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:33:37:8E:8A:07:DA:A5:34:29:7E:34:92:9B:25:AF:76:52:13:C5 X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f2:bf:4a:21:85:05:a3:25:37:10:23:18:6a:4c:5a:06:9c: 85:ca:4d:5b:3a:69:eb:f9:3a:9a:47:36:e8:ad:9e:99:cb:cc: a8:88:07:7e:0f:a5:f9:74:ae:aa:c2:c4:3a:1a:1a:3e:79:8f: 4a:42:de:3d:ed:b2:77:5a:06:44:1c:50:ba:33:89:4e:50:31: bf:c3:fc:1a:8d:65:7a:e3:ef:06:54:2c:f5:c1:0e:1f:99:8c: b5:aa:cd:0d:01:39:06:66:2c:d8:ed:f2:e3:87:fe:70:b0:c4: c2:13:c0:a5:d6:f0:d6:75:23:45:d6:65:95:21:83:8f:33:b3: 1c:60:c4:97:6d:21:7a:48:24:5b:4a:51:41:bf:c9:cc:3f:61: 82:31:48:b1:e7:c4:9f:d6:d5:90:70:25:48:33:e2:d6:93:2e: b5:b4:62:54:64:ff:bc:c5:2f:f7:62:41:f9:66:fd:84:63:e1: 2d:fb:cb:2c:af:be:a4:cb:be:49:27:e0:9d:5a:55:0f:a8:af: ee:44:d6:cc:eb:5b:05:ed:ee:7e:a2:b5:70:72:af:b6:5d:30: 36:81:6d:84:94:78:89:6a:d2:11:6c:a4:5a:34:9d:4b:3a:23: 0e:79:24:ea:eb:06:4d:03:07:7e:0f:d7:88:ef:f6:0d:5b:24: 1d:b8:75:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXbIojo4zqfwvJUn3YWmDda0QLwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNTA1MDIyMzA1NTZaFw0yNTA1MDYwOTIwNTZaMDMxMTAvBgNV BAMTKDdEMzMzNzhFOEEwN0RBQTUzNDI5N0UzNDkyOUIyNUFGNzY1MjEzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzol2UTRS7v3xpqfeB2mrEs9j 8O6ysw2Sj35rIKHmZfIX9pARyUphjh0ZS68/Ty9fs4Ig3coVfZo8kSaz36QSSmfG in0jAWj/bn0X26L+xQQlT1O4JL74+H9+gTBuGhPaByrJkS3YaUZWCHSnYdy7vGds 1aBJo1S6ZdQ3zrH/skfrm5XcfKFm7jO7mYj6P85xIrpUpzqAOgTZbX1noUnleCUa GvVevCy4oe2uzhn+T+4JQ9ilf5rWgO6CSmiCDlCtB23cNWUZzcc47lD7pT4vlD8B zxIa58eE2CL3H+dwV1etv/fc6FxoMcHvVIhgiWmzBMg+buH7Ui3gFa5wDQUFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfTM3jooH2qU0KX40kpslr3ZSE8UwHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNF REY4RUIxMTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDyv0ohhQWjJTcQIxhqTFoGnIXKTVs6aev5 OppHNuitnpnLzKiIB34Ppfl0rqrCxDoaGj55j0pC3j3tsndaBkQcULoziU5QMb/D /BqNZXrj7wZULPXBDh+ZjLWqzQ0BOQZmLNjt8uOH/nCwxMITwKXW8NZ1I0XWZZUh g48zsxxgxJdtIXpIJFtKUUG/ycw/YYIxSLHnxJ/W1ZBwJUgz4taTLrW0YlRk/7zF L/diQflm/YRj4S37yyyvvqTLvkkn4J1aVQ+or+5E1szrWwXt7n6itXByr7ZdMDaB bYSUeIlq0hFspFo0nUs6Iw55JOrrBk0DB34P14jv9g1bJB24dd4= -----END CERTIFICATE-----Generated at Tue May 6 01:49:22 2025 by rpki-client