$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: daewumXoj5c0hSyPwBSQ9p9gZsSuhf21UGu+3aBw7Jw= Subject key identifier: F7:83:C6:CF:A8:0B:AA:3A:B6:66:64:02:98:DF:D4:3F:67:39:36:16 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 2846384C6ECB64DFA90BF23DFDA205128CF63AAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 04FE Signing time: Mon 04 Aug 2025 16:51:49 +0000 Manifest this update: Mon 04 Aug 2025 16:46:49 +0000 Manifest next update: Thu 07 Aug 2025 20:14:49 +0000 Files and hashes: 1: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: VZf5+QQwtSQVdn53++bx8YXQ29H9NGuK2naRti8kdAM=) 2: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) 3: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) 4: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 5: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 20:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:46:38:4c:6e:cb:64:df:a9:0b:f2:3d:fd:a2:05:12:8c:f6:3a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Aug 4 16:46:49 2025 GMT Not After : Aug 7 20:14:49 2025 GMT Subject: CN=F783C6CFA80BAA3AB666640298DFD43F67393616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:c3:95:fb:ce:e0:10:78:81:1e:0b:8a:4d: aa:6c:48:88:da:e3:22:f0:fe:b7:32:9a:8b:94:c4: 1c:60:2b:b4:9c:65:4a:ba:a2:a8:7b:3f:a0:50:74: 31:82:f9:15:a6:50:3e:ea:7b:53:b4:fc:f3:d0:e5: 0b:47:5a:7b:bd:c0:90:45:e6:6b:01:95:04:07:17: fb:79:0f:a9:57:b7:37:95:50:d4:74:57:e4:51:de: 71:e0:04:ee:3d:59:f3:10:a6:7e:e1:1d:09:c5:3a: bb:b9:80:69:ee:11:1d:36:4b:26:0c:89:4e:3e:22: 30:c7:ef:88:74:d9:d6:5f:7c:0a:2a:9f:dc:02:36: d4:af:ff:7d:e7:5e:19:0f:3a:e1:36:17:04:b6:66: d7:2d:8b:c9:13:53:8f:28:21:e1:ff:36:66:7d:e9: 41:8a:56:74:be:82:df:a1:1f:9e:c5:8d:11:41:1f: 26:fa:db:f6:67:25:55:b0:f8:9f:e3:91:d3:b6:52: 5f:3a:47:c2:c0:38:78:e7:26:13:00:66:03:6d:17: 01:94:e0:d5:42:0b:21:d7:73:55:66:04:b0:49:45: 6a:90:50:06:45:34:9e:9f:fc:80:a1:87:41:3d:22: dc:ff:3f:4f:b5:2d:86:d7:c4:18:ca:bc:1f:7c:8b: cd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:83:C6:CF:A8:0B:AA:3A:B6:66:64:02:98:DF:D4:3F:67:39:36:16 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b7:22:1e:d8:07:d4:8b:e3:5a:1b:8c:d8:30:3e:d0:25:28: 15:57:ea:24:54:31:c4:94:88:ed:1b:94:a6:58:22:47:e4:97: 3e:68:e6:a9:70:0a:6b:2f:7a:55:7c:57:22:4e:51:d6:90:20: b9:e5:43:6c:c8:71:64:a8:63:84:ad:cd:46:06:b2:e8:17:8f: ef:81:b8:f7:8f:07:b1:f7:1a:39:55:6d:b1:c8:25:67:47:e4: 67:13:96:6e:1b:68:a7:92:d3:b3:b2:7e:21:33:f4:4f:be:22: f3:a9:c1:e2:34:ca:a5:a4:9f:08:dc:ff:08:5d:e9:56:4e:a0: 2f:95:83:13:09:a8:50:9f:34:3d:45:2e:26:23:3b:76:8c:81: f2:01:f5:cb:7e:59:0a:29:c9:64:25:b0:45:75:4f:0d:00:c0: f2:00:63:ed:5e:87:27:01:e7:29:43:d9:89:71:45:c4:cc:a6: ae:a3:81:a8:81:72:14:b8:55:95:8e:c3:bd:f7:ca:06:7f:79: c4:d8:04:50:73:75:0b:3f:49:c5:c2:79:49:69:67:16:31:cb: 55:b7:a0:1b:f0:5e:87:51:96:9d:08:d2:5f:d7:2c:c2:b9:24: 2b:79:8d:d9:72:24:3d:86:5c:eb:50:2a:35:ce:88:fb:53:5d: 9b:c1:53:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEY4TG7LZN+pC/I9/aIFEoz2OqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTA4MDQxNjQ2NDlaFw0yNTA4MDcyMDE0NDlaMDMxMTAvBgNV BAMTKEY3ODNDNkNGQTgwQkFBM0FCNjY2NjQwMjk4REZENDNGNjczOTM2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNcOV+87gEHiBHguKTapsSIja 4yLw/rcymouUxBxgK7ScZUq6oqh7P6BQdDGC+RWmUD7qe1O0/PPQ5QtHWnu9wJBF 5msBlQQHF/t5D6lXtzeVUNR0V+RR3nHgBO49WfMQpn7hHQnFOru5gGnuER02SyYM iU4+IjDH74h02dZffAoqn9wCNtSv/33nXhkPOuE2FwS2Ztcti8kTU48oIeH/NmZ9 6UGKVnS+gt+hH57FjRFBHyb62/ZnJVWw+J/jkdO2Ul86R8LAOHjnJhMAZgNtFwGU 4NVCCyHXc1VmBLBJRWqQUAZFNJ6f/IChh0E9Itz/P0+1LYbXxBjKvB98i82hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU94PGz6gLqjq2ZmQCmN/UP2c5NhYwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+3Ih7YB9SL41objNgwPtAlKBVX6iRUMcSU iO0blKZYIkfklz5o5qlwCmsvelV8VyJOUdaQILnlQ2zIcWSoY4StzUYGsugXj++B uPePB7H3GjlVbbHIJWdH5GcTlm4baKeS07OyfiEz9E++IvOpweI0yqWknwjc/whd 6VZOoC+VgxMJqFCfND1FLiYjO3aMgfIB9ct+WQopyWQlsEV1Tw0AwPIAY+1ehycB 5ylD2YlxRcTMpq6jgaiBchS4VZWOw733ygZ/ecTYBFBzdQs/ScXCeUlpZxYxy1W3 oBvwXodRlp0I0l/XLMK5JCt5jdlyJD2GXOtQKjXOiPtTXZvBU1o= -----END CERTIFICATE-----Generated at Wed Aug 6 12:28:42 2025 by rpki-client