$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft (raw, json) Hash identifier: sflDrnDkb61CyeBx9JX06MXq43NJl/Tad5CqVCuCxeA= Subject key identifier: E8:BF:F1:FA:8B:0F:58:02:E9:51:B2:07:70:05:B3:43:9C:FB:1D:AC Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 1B598B8D9CD0278370A0BB3AFC3D5DC0E2ADB9F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft Manifest number: 019C Signing time: Fri 22 Aug 2025 18:00:57 +0000 Manifest this update: Fri 22 Aug 2025 17:55:57 +0000 Manifest next update: Tue 26 Aug 2025 05:48:57 +0000 Files and hashes: 1: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: ZDyxHBlNGIzYgtnVCT1eXLwOr1vFMRFU8WTMZvphid0=) 2: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl (hash: EFefYhdjY5RDjyOwmRAKySU3d1uTNgpptAB0uZB7tts=) 3: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: BdVYdxczoI+ws1l/hFqXFbC3eYppxkpNCDa2zzpcHMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:59:8b:8d:9c:d0:27:83:70:a0:bb:3a:fc:3d:5d:c0:e2:ad:b9:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: Aug 22 17:55:57 2025 GMT Not After : Aug 26 05:48:57 2025 GMT Subject: CN=E8BFF1FA8B0F5802E951B2077005B3439CFB1DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1d:ec:61:53:23:d3:ab:64:85:f0:a7:2c:e1: 7a:f5:87:f5:20:c3:b4:96:5d:ab:ee:69:1a:33:12: 36:ec:f4:2e:0b:51:21:89:56:6e:0f:b7:96:9a:e9: 15:62:e5:19:d0:7c:58:4c:41:4d:52:93:f7:d9:e1: 60:a9:1a:d0:b0:74:94:3b:fa:6d:d6:f0:dc:e0:28: 07:5e:5b:c9:23:bc:7a:f0:72:e5:0a:94:d8:25:ec: b3:d3:fa:9b:36:e0:19:e7:9e:e4:01:b0:ba:8c:3a: 6a:d2:ce:b2:a5:8c:c1:64:d3:27:ac:ca:17:ff:ee: 18:07:44:4b:a6:61:9f:4f:07:cd:a6:9f:1c:0d:09: 0c:f3:1e:a8:7f:b8:77:4a:71:f4:00:b8:17:55:a0: 6a:ec:64:c9:09:66:fc:e8:4e:56:b5:bd:be:f4:01: 75:da:fb:2d:73:a3:dc:1b:88:0c:3e:88:af:10:0f: e3:8d:1c:6c:33:62:fb:01:c9:4a:58:fa:31:6c:1a: c0:b1:5a:87:d3:22:13:cc:35:88:bd:45:3f:16:36: 97:70:17:c9:79:13:2d:78:4c:e8:ca:7b:78:1d:33: 08:55:e0:ae:c3:ec:ff:66:15:ef:34:75:0b:05:c4: 54:4e:13:e7:a4:83:39:54:10:fe:ef:7d:26:6a:2e: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:BF:F1:FA:8B:0F:58:02:E9:51:B2:07:70:05:B3:43:9C:FB:1D:AC X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c1:02:86:96:8a:53:d5:96:2e:45:57:3a:d3:56:8c:b7:92: 59:c1:93:4c:8a:dd:92:96:ef:47:5a:75:4b:f3:48:01:cb:09: d0:e1:e8:e2:33:a8:d1:f9:a3:6d:c8:30:74:6a:8e:39:7b:4a: 0c:ef:0d:dc:b6:59:51:0e:da:ce:84:6b:d6:df:93:e1:89:42: f4:94:75:bb:87:57:8f:3b:70:bb:b3:51:d5:7a:7a:58:e8:c4: ef:b0:32:86:36:41:ef:02:54:37:5a:7c:c0:cf:22:9c:cc:a5: 58:81:be:e0:b8:a8:f7:a6:7d:30:1a:1c:58:3b:0c:ac:9a:00: 65:37:53:15:84:b6:65:17:3e:27:e0:b5:75:8b:39:0b:58:b8: a4:64:25:25:af:c0:4d:00:2e:81:8d:de:b2:b0:e5:cf:c5:86: 71:05:e7:f2:21:3f:16:bc:6e:13:61:b5:0f:53:d8:5f:46:c5: 06:6b:91:ce:13:44:22:40:c8:1f:55:cc:86:d5:25:3f:8c:10: a8:cd:9b:dd:20:f3:3d:13:57:c0:43:91:f1:ed:4e:34:96:9c: cb:a9:b5:cd:07:41:09:5c:22:9c:1c:1c:9e:a3:7d:2f:87:a8: 22:b4:e9:99:86:85:d1:19:38:d3:44:14:de:86:ef:43:7f:2e: 25:dd:6b:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1mLjZzQJ4NwoLs6/D1dwOKtufUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNTA4MjIxNzU1NTdaFw0yNTA4MjYwNTQ4NTdaMDMxMTAvBgNV BAMTKEU4QkZGMUZBOEIwRjU4MDJFOTUxQjIwNzcwMDVCMzQzOUNGQjFEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHexhUyPTq2SF8Kcs4Xr1h/Ug w7SWXavuaRozEjbs9C4LUSGJVm4Pt5aa6RVi5RnQfFhMQU1Sk/fZ4WCpGtCwdJQ7 +m3W8NzgKAdeW8kjvHrwcuUKlNgl7LPT+ps24BnnnuQBsLqMOmrSzrKljMFk0yes yhf/7hgHREumYZ9PB82mnxwNCQzzHqh/uHdKcfQAuBdVoGrsZMkJZvzoTla1vb70 AXXa+y1zo9wbiAw+iK8QD+ONHGwzYvsByUpY+jFsGsCxWofTIhPMNYi9RT8WNpdw F8l5Ey14TOjKe3gdMwhV4K7D7P9mFe80dQsFxFROE+ekgzlUEP7vfSZqLgYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6L/x+osPWALpUbIHcAWzQ5z7HawwHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNF REY4RUIxMTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHBAoaWilPVli5FVzrTVoy3klnBk0yK3ZKW 70dadUvzSAHLCdDh6OIzqNH5o23IMHRqjjl7SgzvDdy2WVEO2s6Ea9bfk+GJQvSU dbuHV487cLuzUdV6eljoxO+wMoY2Qe8CVDdafMDPIpzMpViBvuC4qPemfTAaHFg7 DKyaAGU3UxWEtmUXPifgtXWLOQtYuKRkJSWvwE0ALoGN3rKw5c/FhnEF5/IhPxa8 bhNhtQ9T2F9GxQZrkc4TRCJAyB9VzIbVJT+MEKjNm90g8z0TV8BDkfHtTjSWnMup tc0HQQlcIpwcHJ6jfS+HqCK06ZmGhdEZONNEFN6G70N/LiXda8g= -----END CERTIFICATE-----Generated at Sat Aug 23 15:21:15 2025 by rpki-client