$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: 2ND3oeyqgUxED1wjG84/5UJ5tVB0b2zmCyuY8TTl+DI= Subject key identifier: 8B:3B:55:D8:BE:5F:50:E1:3D:F9:2E:38:D8:B3:11:62:CB:D7:B7:87 Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 47D14EFBC57BF0BFB85D9A5A7B4C46BA9131C065 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 0231 Signing time: Mon 28 Apr 2025 04:21:43 +0000 Manifest this update: Mon 28 Apr 2025 04:16:43 +0000 Manifest next update: Thu 01 May 2025 08:02:43 +0000 Files and hashes: 1: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: wPOMPJ0BqKMfEw1WVwzP5Xp6LTGJd3g7273WvScx5Hc=) 2: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: BJAdOo0RGebUk8ZnI6ST00lTNYWrEJhZQcWUbVVtqAs=) 3: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: z9nuGGm9+X+UiQ3AhEMfAsL6iP+1xleYaHuS5B7A/bU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 08:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d1:4e:fb:c5:7b:f0:bf:b8:5d:9a:5a:7b:4c:46:ba:91:31:c0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Apr 28 04:16:43 2025 GMT Not After : May 1 08:02:43 2025 GMT Subject: CN=8B3B55D8BE5F50E13DF92E38D8B31162CBD7B787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:e7:40:f0:43:5d:0d:3e:ca:20:8b:36:57: 88:7d:a8:77:37:67:74:08:d2:44:01:3a:d6:12:5c: 98:4f:4f:46:e8:fd:e6:58:49:45:ca:a9:64:09:50: 03:17:50:04:93:bc:06:e7:cf:df:eb:01:23:bb:5b: 18:a7:2c:3f:51:47:0d:80:26:c4:5a:d2:88:4a:bc: b9:b8:ca:01:05:21:7f:8e:c1:94:77:42:8e:86:7f: 41:f5:52:0d:84:90:04:d6:46:b0:1e:1d:70:8b:7f: 00:5a:f2:5f:ed:0e:54:29:b8:19:c7:b1:5a:4a:5c: 3e:9b:53:9b:fa:06:95:42:d5:c2:0c:93:a1:fa:65: ca:22:03:75:10:65:56:32:de:f9:a5:0b:38:c7:a1: a5:fb:e7:be:72:46:8a:ce:09:87:73:1d:a5:5e:13: 0d:53:d6:5d:fd:59:1e:29:71:3b:6a:e0:aa:d9:36: 2d:8a:3b:ff:92:6b:45:26:cd:39:cf:08:d8:43:3a: 38:6a:ff:bc:07:bc:d0:15:66:83:5e:ef:86:f4:39: 1a:d2:e4:a0:c8:0f:f4:9d:eb:46:ba:6a:1b:ea:71: e2:8f:75:84:cf:43:76:f5:fb:bb:88:9b:af:3e:08: d9:87:39:15:3a:0d:3f:3f:2b:e9:03:1e:ae:90:f6: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3B:55:D8:BE:5F:50:E1:3D:F9:2E:38:D8:B3:11:62:CB:D7:B7:87 X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:f9:0a:89:41:71:16:ab:2c:94:9b:69:34:2e:3c:0f:26:55: ce:c3:9e:87:e1:25:c7:10:ce:e8:13:35:c2:ee:5d:52:c0:d6: b9:88:f4:3e:94:a9:0a:7d:5b:de:fe:92:67:8e:81:bf:ae:6c: de:17:0a:29:b1:a4:e4:af:c2:bc:77:af:01:03:d1:ad:96:fe: 6f:41:f3:b5:c1:14:c4:78:c8:c2:f6:c5:dd:7d:f4:25:88:08: 1c:f4:1f:bb:00:45:83:dc:29:86:a0:5f:b9:27:7d:a6:d3:91: fe:00:cc:9d:aa:3c:78:e2:1c:26:63:91:55:9f:ad:b5:05:4d: 43:7b:14:ce:d0:12:14:ef:82:95:1e:cf:c0:4e:49:cb:19:5e: 39:b8:4e:fa:ad:fc:51:eb:5b:41:bd:93:43:1c:6d:b2:4e:0d: ca:aa:e8:cf:d9:09:97:41:f0:a2:06:2f:d0:17:59:24:fd:9f: 36:a6:77:cb:c0:88:f0:bd:77:39:6f:ed:c6:39:39:4d:5a:46: 2d:ba:49:72:e9:1e:2d:33:80:a8:5d:75:17:4a:e3:a4:11:c1: f2:03:35:e4:3a:a3:24:b0:89:bb:ca:ba:4f:96:56:a8:01:85: 06:de:86:78:6e:e8:ed:15:f3:ef:13:c4:00:4a:d0:11:ef:88: 4d:ee:e2:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR9FO+8V78L+4XZpae0xGupExwGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNTA0MjgwNDE2NDNaFw0yNTA1MDEwODAyNDNaMDMxMTAvBgNV BAMTKDhCM0I1NUQ4QkU1RjUwRTEzREY5MkUzOEQ4QjMxMTYyQ0JEN0I3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgedA8ENdDT7KIIs2V4h9qHc3 Z3QI0kQBOtYSXJhPT0bo/eZYSUXKqWQJUAMXUASTvAbnz9/rASO7WxinLD9RRw2A JsRa0ohKvLm4ygEFIX+OwZR3Qo6Gf0H1Ug2EkATWRrAeHXCLfwBa8l/tDlQpuBnH sVpKXD6bU5v6BpVC1cIMk6H6ZcoiA3UQZVYy3vmlCzjHoaX7575yRorOCYdzHaVe Ew1T1l39WR4pcTtq4KrZNi2KO/+Sa0UmzTnPCNhDOjhq/7wHvNAVZoNe74b0ORrS 5KDID/Sd60a6ahvqceKPdYTPQ3b1+7uIm68+CNmHORU6DT8/K+kDHq6Q9rz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiztV2L5fUOE9+S442LMRYsvXt4cwHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAX5ColBcRarLJSbaTQuPA8mVc7DnofhJccQ zugTNcLuXVLA1rmI9D6UqQp9W97+kmeOgb+ubN4XCimxpOSvwrx3rwED0a2W/m9B 87XBFMR4yML2xd199CWICBz0H7sARYPcKYagX7knfabTkf4AzJ2qPHjiHCZjkVWf rbUFTUN7FM7QEhTvgpUez8BOScsZXjm4Tvqt/FHrW0G9k0McbbJODcqq6M/ZCZdB 8KIGL9AXWST9nzamd8vAiPC9dzlv7cY5OU1aRi26SXLpHi0zgKhddRdK46QRwfID NeQ6oySwibvKuk+WVqgBhQbehnhu6O0V8+8TxABK0BHviE3u4m0= -----END CERTIFICATE-----Generated at Wed Apr 30 08:16:24 2025 by rpki-client