$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: fmYP+LMq8Bz3GY/P3NL2FU/6e72vSnN1qlgSk/UmS2E= Subject key identifier: 02:08:A3:68:55:69:C8:78:3E:F7:C8:8F:B4:11:2A:93:76:56:01:57 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 6139108A1B86CDFD30D3C8704AD8BDA3E8C50F8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 0528 Signing time: Mon 03 Nov 2025 00:41:47 +0000 Manifest this update: Mon 03 Nov 2025 00:36:47 +0000 Manifest next update: Thu 06 Nov 2025 06:30:47 +0000 Files and hashes: 1: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 2: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 3: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) 4: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: YaW0YlZElkGCVltK0xdUyd/HKBTg0jR+bdFJk+vvAb0=) 5: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 06:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:39:10:8a:1b:86:cd:fd:30:d3:c8:70:4a:d8:bd:a3:e8:c5:0f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Nov 3 00:36:47 2025 GMT Not After : Nov 6 06:30:47 2025 GMT Subject: CN=0208A3685569C8783EF7C88FB4112A9376560157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:45:31:e5:4a:72:f4:5d:4e:68:38:0f:cf:46: fb:e1:af:45:d9:87:25:42:62:bd:fa:91:c3:ab:73: c4:3d:51:2a:31:22:cb:b3:be:df:08:e2:78:0c:3e: 5f:61:0c:6d:e1:a4:43:4b:5f:2c:7b:b7:ae:2f:7e: ae:f3:f3:ea:57:38:54:01:4e:f2:4b:83:a8:d7:5c: 58:08:63:55:12:78:11:aa:e3:b5:ce:49:3d:a8:31: ad:9c:5b:5c:c7:a6:53:3d:5e:29:ff:3d:31:1f:fd: 01:b1:ee:dd:b4:b9:91:b5:f7:38:15:e1:f1:9c:96: c0:5d:2d:4f:0f:d1:1b:e7:61:e6:bb:06:53:b1:07: 25:85:2b:04:78:be:e6:d5:ad:7c:02:3c:f6:5a:94: e7:46:4b:76:e7:d2:0d:2b:5a:7d:84:57:85:06:80: 30:1c:38:b0:ac:ff:d9:1d:57:a3:c4:02:36:4b:9a: 8e:c9:97:c8:7a:1c:b2:ec:dc:47:f6:55:d6:04:62: eb:78:20:22:46:2c:f0:f9:37:a9:58:54:b3:56:9e: fc:a0:8d:6f:93:fe:64:a7:03:3a:57:19:56:97:b2: b8:f8:fc:f8:1d:00:13:bf:6c:30:69:5b:dd:ab:a3: cc:9f:ba:21:23:21:c4:9a:e8:3d:c9:51:b4:40:7f: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:08:A3:68:55:69:C8:78:3E:F7:C8:8F:B4:11:2A:93:76:56:01:57 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b2:24:ef:37:97:8e:28:e3:c9:7e:2c:f7:05:a2:65:4e:b8: 84:e4:84:97:a4:4e:96:ad:d5:50:2c:4b:0a:e0:58:d5:60:e6: af:36:bf:b7:e8:dc:df:3a:1d:c4:44:8b:ac:31:75:d7:7a:ba: 3e:b1:a9:27:7e:5e:e7:c3:9d:d9:44:49:7f:8b:cb:ba:93:59: fe:a3:5b:f0:86:ed:be:63:bd:09:1b:73:5d:4c:77:e5:43:ce: d9:d0:cb:10:b6:08:a9:c5:1a:49:d7:61:82:5e:e8:2b:69:2e: 58:8a:1a:27:e0:13:d2:5c:39:bd:53:d6:dd:c1:98:44:f2:13: cb:bf:eb:66:ee:db:98:25:b7:44:2d:5a:ac:4b:27:53:b8:25: 19:f9:14:e4:57:c3:48:7e:b9:5a:e4:48:d7:5c:17:2a:f6:7f: 95:0e:e9:8e:20:f3:71:e5:3a:04:98:97:c9:fc:bd:72:9a:9f: 5e:fc:06:d5:43:51:6a:4e:f6:13:f7:8a:ad:e2:47:5f:24:4b: c6:4c:c9:95:b6:48:10:d2:f1:ad:5b:08:fd:8b:92:af:c7:1b: 29:6d:69:f8:88:a6:7c:22:b0:50:b5:59:1d:c0:15:f8:38:b7: 9d:55:b4:45:02:02:40:21:87:6c:0f:e6:e4:48:75:64:de:86: 76:f9:07:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYTkQihuGzf0w08hwSti9o+jFD40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTExMDMwMDM2NDdaFw0yNTExMDYwNjMwNDdaMDMxMTAvBgNV BAMTKDAyMDhBMzY4NTU2OUM4NzgzRUY3Qzg4RkI0MTEyQTkzNzY1NjAxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgRTHlSnL0XU5oOA/PRvvhr0XZ hyVCYr36kcOrc8Q9USoxIsuzvt8I4ngMPl9hDG3hpENLXyx7t64vfq7z8+pXOFQB TvJLg6jXXFgIY1USeBGq47XOST2oMa2cW1zHplM9Xin/PTEf/QGx7t20uZG19zgV 4fGclsBdLU8P0RvnYea7BlOxByWFKwR4vubVrXwCPPZalOdGS3bn0g0rWn2EV4UG gDAcOLCs/9kdV6PEAjZLmo7Jl8h6HLLs3Ef2VdYEYut4ICJGLPD5N6lYVLNWnvyg jW+T/mSnAzpXGVaXsrj4/PgdABO/bDBpW92ro8yfuiEjIcSa6D3JUbRAf1BDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAgijaFVpyHg+98iPtBEqk3ZWAVcwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSyJO83l44o48l+LPcFomVOuITkhJekTpat 1VAsSwrgWNVg5q82v7fo3N86HcREi6wxddd6uj6xqSd+XufDndlESX+Ly7qTWf6j W/CG7b5jvQkbc11Md+VDztnQyxC2CKnFGknXYYJe6CtpLliKGifgE9JcOb1T1t3B mETyE8u/62bu25glt0QtWqxLJ1O4JRn5FORXw0h+uVrkSNdcFyr2f5UO6Y4g83Hl OgSYl8n8vXKan178BtVDUWpO9hP3iq3iR18kS8ZMyZW2SBDS8a1bCP2Lkq/HGylt afiIpnwisFC1WR3AFfg4t51VtEUCAkAhh2wP5uRIdWTehnb5ByU= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:21 2025 by rpki-client