$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: AyW586Qureit4tl9kp3DrNdBLEb1bypk+XSHrCO7Dgs= Subject key identifier: EA:E2:C9:53:48:46:A0:7F:2D:FA:D0:62:0B:2E:C0:3A:15:A7:20:00 Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 53D92CEA8FE26BBA667DFAD6C10FD4548F234FDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 0286 Signing time: Mon 03 Nov 2025 20:01:47 +0000 Manifest this update: Mon 03 Nov 2025 19:56:47 +0000 Manifest next update: Fri 07 Nov 2025 01:35:47 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: xJcRLYTxWRUWjbwdb5KhzRkssxV8FAGUCJzxledmdRo=) 2: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: +xcxN+4e+D+gyfY3CKK8YfXazcHblakfG9WnHK8J/Es=) 3: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: B/OlUgnqx6hezVmnY0qT7Hn0nP4H8QuLu5wGm1HH07Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d9:2c:ea:8f:e2:6b:ba:66:7d:fa:d6:c1:0f:d4:54:8f:23:4f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Nov 3 19:56:47 2025 GMT Not After : Nov 7 01:35:47 2025 GMT Subject: CN=EAE2C9534846A07F2DFAD0620B2EC03A15A72000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:ca:b4:0a:33:71:4c:49:d1:1c:c8:ce:c9: a2:5c:9c:e9:a9:51:8c:29:58:c9:f9:64:a4:17:2a: 2a:25:87:28:98:ce:25:e6:27:15:d6:fb:f5:5c:f5: 6f:cd:c6:68:f6:33:f6:f8:38:df:60:67:f9:40:5c: 5f:25:75:3c:84:93:cf:52:d7:40:ce:96:62:10:a1: 3c:0e:49:9f:f5:86:8b:af:19:1c:b2:48:6c:a2:b7: ba:23:bd:bc:24:8d:65:b4:f4:56:89:89:8a:79:28: 5a:f3:17:ba:a6:b1:79:c1:64:54:94:ba:c0:11:61: 65:ee:c4:61:9e:1f:7f:61:97:d9:c8:f2:0f:65:64: 56:6e:4a:1e:29:9c:9d:a6:d1:28:f4:e8:ba:63:07: 1a:76:02:08:e8:82:6b:8f:45:10:bb:77:22:1d:ac: e4:30:5a:b3:1a:44:52:b8:af:e4:df:39:98:68:4d: 23:73:8b:cf:81:00:2d:f4:58:8a:bc:48:17:93:31: 65:d0:95:86:4f:31:40:7d:3e:0a:27:3d:f9:ba:3f: ce:66:56:df:65:31:b9:f3:0f:d4:11:9a:c2:bc:ac: 78:30:90:40:a2:33:11:f5:6b:8c:50:8d:37:ef:d9: 0b:da:87:5f:f8:75:b5:c5:e9:de:62:2f:32:bb:86: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E2:C9:53:48:46:A0:7F:2D:FA:D0:62:0B:2E:C0:3A:15:A7:20:00 X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:75:70:81:cb:41:a5:60:d7:2b:f2:ab:c6:c2:0c:1f:70:2a: 6e:8a:7f:53:34:7d:1b:39:ee:c9:a9:26:97:ec:c3:cd:e4:7f: 8d:34:8e:d7:df:3a:32:bb:b0:21:1e:5b:b9:96:80:d1:6b:0d: b7:45:e9:42:f2:75:72:04:d4:b4:fe:38:77:0b:65:3c:a8:5f: 5a:8e:4d:42:10:79:1e:82:e8:c0:d4:0d:6b:8f:5a:7a:30:53: 52:a9:11:07:70:79:77:91:fb:1c:75:42:88:44:cc:f5:7b:50: 50:b9:91:39:dd:49:12:15:59:02:35:87:19:a2:34:3f:1c:fc: 6a:35:36:ef:9c:3d:82:09:ed:52:44:49:fa:29:cf:5e:c4:ba: e5:0f:25:6c:16:ae:2b:17:b6:04:8e:e2:a6:2b:16:30:46:90: 33:1d:f9:f4:30:a2:86:8f:35:6d:17:0e:83:43:9b:7b:09:04: 97:37:9a:8b:fa:18:54:2b:b4:9a:b7:40:43:b8:bb:33:5a:8c: 75:25:f8:fc:d9:21:8e:e3:de:fe:f1:3b:2b:64:5c:fe:b5:0e: 0e:d9:ca:82:64:fe:9b:38:cc:c8:7e:e8:70:48:be:31:d3:f3: 1d:17:5f:da:48:bf:fd:2e:96:d2:c9:0b:cc:9f:51:5f:c5:b5: 93:cc:f4:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9ks6o/ia7pmffrWwQ/UVI8jT9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNTExMDMxOTU2NDdaFw0yNTExMDcwMTM1NDdaMDMxMTAvBgNV BAMTKEVBRTJDOTUzNDg0NkEwN0YyREZBRDA2MjBCMkVDMDNBMTVBNzIwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVMq0CjNxTEnRHMjOyaJcnOmp UYwpWMn5ZKQXKiolhyiYziXmJxXW+/Vc9W/Nxmj2M/b4ON9gZ/lAXF8ldTyEk89S 10DOlmIQoTwOSZ/1houvGRyySGyit7ojvbwkjWW09FaJiYp5KFrzF7qmsXnBZFSU usARYWXuxGGeH39hl9nI8g9lZFZuSh4pnJ2m0Sj06LpjBxp2AgjogmuPRRC7dyId rOQwWrMaRFK4r+TfOZhoTSNzi8+BAC30WIq8SBeTMWXQlYZPMUB9PgonPfm6P85m Vt9lMbnzD9QRmsK8rHgwkECiMxH1a4xQjTfv2Qvah1/4dbXF6d5iLzK7hhJ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6uLJU0hGoH8t+tBiCy7AOhWnIAAwHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB1cIHLQaVg1yvyq8bCDB9wKm6Kf1M0fRs5 7smpJpfsw83kf400jtffOjK7sCEeW7mWgNFrDbdF6ULydXIE1LT+OHcLZTyoX1qO TUIQeR6C6MDUDWuPWnowU1KpEQdweXeR+xx1QohEzPV7UFC5kTndSRIVWQI1hxmi ND8c/Go1Nu+cPYIJ7VJESfopz17EuuUPJWwWrisXtgSO4qYrFjBGkDMd+fQwooaP NW0XDoNDm3sJBJc3mov6GFQrtJq3QEO4uzNajHUl+PzZIY7j3v7xOytkXP61Dg7Z yoJk/ps4zMh+6HBIvjHT8x0XX9pIv/0ultLJC8yfUV/FtZPM9Pc= -----END CERTIFICATE-----Generated at Wed Nov 5 06:25:28 2025 by rpki-client