$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: L/AOnwZARUxmS/Q9tfW1bZy/mMBLduPL0+Jrkynnvow= Subject key identifier: 73:78:FA:37:B6:00:E9:56:CA:18:F0:11:82:BB:E9:B9:4F:FD:DD:A9 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 198350A30A1B449F99C983E4A9CE572FF1347347 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 01F9 Signing time: Thu 07 Aug 2025 14:51:19 +0000 Manifest this update: Thu 07 Aug 2025 14:46:19 +0000 Manifest next update: Sun 10 Aug 2025 19:54:19 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: RFIhXtpLWk4iGEf4Ln3tVNvrZRfMXNjuKylK44KRRTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 19:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:83:50:a3:0a:1b:44:9f:99:c9:83:e4:a9:ce:57:2f:f1:34:73:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Aug 7 14:46:19 2025 GMT Not After : Aug 10 19:54:19 2025 GMT Subject: CN=7378FA37B600E956CA18F01182BBE9B94FFDDDA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:87:b5:2f:fb:8d:f1:48:2d:e9:7a:8c:f4:22: fb:d2:f7:5e:67:e3:5a:08:85:26:80:5b:29:92:a0: 3a:3c:8e:37:33:c5:23:43:e4:17:87:02:5d:a2:d5: f0:38:e7:5c:8b:7d:9e:d4:c0:b3:10:2c:31:20:5e: 84:9d:3d:bd:99:4e:60:1b:ff:26:ef:b2:c0:80:cc: cf:c9:7d:54:5f:80:09:83:5d:14:92:f6:c4:67:b8: e7:7d:5c:be:87:ef:ec:97:91:e0:71:8d:52:4e:fc: 37:81:5d:91:bc:9b:3a:a4:e3:77:0e:34:4f:d7:21: b4:6e:85:a0:0b:93:1c:f2:b8:ef:e8:3a:70:15:b9: 28:97:46:7f:9d:9e:08:c0:6e:8d:95:c8:65:96:29: c6:f8:43:1f:ca:e6:1f:04:54:e3:60:93:6a:1e:d0: 94:d5:e3:63:22:77:70:da:9f:a4:51:94:28:be:10: 3d:ed:3f:28:81:b7:a4:ae:a6:24:e2:3f:a2:39:40: 45:e9:76:7a:0e:b4:e0:79:66:0f:9f:64:fe:ce:d2: c3:13:f5:7d:05:cf:cc:a7:2f:f0:f0:7f:d0:80:e9: c9:09:cd:2f:25:e0:45:7e:d7:8f:e4:92:5e:62:03: d3:de:c5:7a:2d:7d:fb:5f:c9:96:38:57:32:8c:18: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:78:FA:37:B6:00:E9:56:CA:18:F0:11:82:BB:E9:B9:4F:FD:DD:A9 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f1:75:4b:38:7d:74:43:87:c8:96:84:59:1d:97:9e:bb:6a: b5:a6:c8:8a:60:a2:6a:8f:d8:80:c6:18:c3:1f:5f:59:5d:cd: 3b:2d:2c:e4:c3:eb:99:50:8d:b2:56:ae:a6:16:6e:ae:6e:27: e3:6d:f5:54:4b:96:64:76:56:40:48:cd:cc:1f:9b:be:88:90: fc:62:ce:89:b7:d3:d4:74:d1:02:8e:c8:4d:cb:09:d1:6d:5b: 5a:0e:5d:81:70:ac:d1:4f:b9:a3:af:2a:8f:9e:c0:ab:bf:ca: dc:a8:13:95:89:a9:52:ca:bf:ec:e9:67:fe:26:2f:12:ea:4d: fb:80:f2:c0:7e:cb:e1:50:24:b5:35:35:9e:07:12:72:78:4c: bd:c8:bd:86:1b:8e:60:f4:ea:a1:9d:52:c4:5e:1b:8f:ea:42: c0:34:91:46:05:37:9e:a6:a9:44:6e:23:1c:0d:49:af:b9:be: 36:da:d4:05:7f:18:8e:fd:8f:2d:3d:27:8f:8b:2a:ef:53:e2: d0:12:34:fa:d2:1a:b5:b5:af:e1:9b:d8:04:a0:91:08:da:ad: 6e:6a:eb:ad:1d:87:82:58:cb:93:6a:b4:02:84:dc:2b:7a:c5: 28:a9:59:a2:76:05:1b:18:9d:95:0b:a0:94:c7:bd:01:be:46: f3:e4:5e:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYNQowobRJ+ZyYPkqc5XL/E0c0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNTA4MDcxNDQ2MTlaFw0yNTA4MTAxOTU0MTlaMDMxMTAvBgNV BAMTKDczNzhGQTM3QjYwMEU5NTZDQTE4RjAxMTgyQkJFOUI5NEZGREREQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMh7Uv+43xSC3peoz0IvvS915n 41oIhSaAWymSoDo8jjczxSND5BeHAl2i1fA451yLfZ7UwLMQLDEgXoSdPb2ZTmAb /ybvssCAzM/JfVRfgAmDXRSS9sRnuOd9XL6H7+yXkeBxjVJO/DeBXZG8mzqk43cO NE/XIbRuhaALkxzyuO/oOnAVuSiXRn+dngjAbo2VyGWWKcb4Qx/K5h8EVONgk2oe 0JTV42Mid3Dan6RRlCi+ED3tPyiBt6SupiTiP6I5QEXpdnoOtOB5Zg+fZP7O0sMT 9X0Fz8ynL/Dwf9CA6ckJzS8l4EV+14/kkl5iA9PexXotfftfyZY4VzKMGLAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc3j6N7YA6VbKGPARgrvpuU/93akwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7xdUs4fXRDh8iWhFkdl567arWmyIpgomqP 2IDGGMMfX1ldzTstLOTD65lQjbJWrqYWbq5uJ+Nt9VRLlmR2VkBIzcwfm76IkPxi zom309R00QKOyE3LCdFtW1oOXYFwrNFPuaOvKo+ewKu/ytyoE5WJqVLKv+zpZ/4m LxLqTfuA8sB+y+FQJLU1NZ4HEnJ4TL3IvYYbjmD06qGdUsReG4/qQsA0kUYFN56m qURuIxwNSa+5vjba1AV/GI79jy09J4+LKu9T4tASNPrSGrW1r+Gb2ASgkQjarW5q 660dh4JYy5NqtAKE3Ct6xSipWaJ2BRsYnZULoJTHvQG+RvPkXv0= -----END CERTIFICATE-----Generated at Sat Aug 9 20:34:01 2025 by rpki-client