$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft (raw, json) Hash identifier: PYr169Tzyzpjk8OGm2Pgo1KC5updPRuDWbP1ygLmZEs= Subject key identifier: 0B:8A:C0:BF:26:D7:67:7F:5E:96:6D:44:71:D0:18:CB:E4:EC:15:12 Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 39EACC84717F69A2BCC689F0A1C6ED0BC685F88A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft Manifest number: 01BC Signing time: Tue 04 Nov 2025 07:40:56 +0000 Manifest this update: Tue 04 Nov 2025 07:35:56 +0000 Manifest next update: Fri 07 Nov 2025 17:03:56 +0000 Files and hashes: 1: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl (hash: IKls872++qMEYAFgwDwM2nf921rWuzqNiALMmKWcvpU=) 2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: BdVYdxczoI+ws1l/hFqXFbC3eYppxkpNCDa2zzpcHMc=) 3: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: ZDyxHBlNGIzYgtnVCT1eXLwOr1vFMRFU8WTMZvphid0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ea:cc:84:71:7f:69:a2:bc:c6:89:f0:a1:c6:ed:0b:c6:85:f8:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: Nov 4 07:35:56 2025 GMT Not After : Nov 7 17:03:56 2025 GMT Subject: CN=0B8AC0BF26D7677F5E966D4471D018CBE4EC1512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:a6:6f:27:cb:2c:6d:37:63:2a:6d:84:ec: 1e:7f:60:ef:22:30:6f:29:d5:5d:bd:42:8e:6d:f4: fc:e5:be:6b:ad:45:4f:fa:18:e1:1c:13:cf:37:e9: f2:ae:2f:4b:c1:61:aa:4b:9a:bc:e2:65:b4:18:d9: d1:f7:86:63:e4:8b:71:dd:b8:1a:17:a4:52:b8:d0: d3:15:26:1d:b9:95:a0:04:91:d6:9f:4b:8c:dd:d3: bf:59:28:53:5c:c6:03:93:01:2d:00:40:d7:24:19: cb:43:97:89:e9:48:7c:a0:0c:3e:81:17:ed:83:e5: 3d:2e:89:48:90:66:8e:7e:57:e1:d4:df:ab:f7:05: 0d:33:44:f7:ea:a3:f1:90:b1:c5:d5:4b:11:62:83: f0:88:dd:5e:a1:c7:a9:c4:aa:02:10:dc:5f:a3:7f: f3:b3:83:a0:df:58:31:db:45:33:e6:75:7c:0e:04: fc:a2:d5:02:06:2d:a6:84:66:14:60:0e:29:4f:26: b9:c6:d6:c6:06:38:6a:20:d7:21:2c:55:e6:7b:a3: b8:ec:69:d5:37:27:83:78:a5:7b:82:1c:3a:09:52: 4b:88:2d:e1:5f:88:ac:06:d7:8f:a2:9a:71:2f:10: a5:97:c8:4b:1a:a9:22:67:3f:c3:82:bd:b9:00:b9: 15:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8A:C0:BF:26:D7:67:7F:5E:96:6D:44:71:D0:18:CB:E4:EC:15:12 X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5a:52:eb:95:b3:b8:91:ed:00:e5:5f:03:94:c8:ab:82:01: 85:22:32:17:75:31:1c:00:24:f9:f5:cc:bd:1d:b7:63:53:0f: fa:5a:d5:13:57:70:6d:fe:9e:e8:43:63:e4:c8:1f:f1:22:ec: bd:03:89:79:e1:50:fc:3a:48:37:a4:20:05:77:54:68:99:87: 4e:25:d3:2d:7f:a9:5b:03:35:a7:db:3a:5b:80:a6:8d:f3:1a: b2:c5:a4:ac:50:7a:ac:fb:ae:5a:a4:c4:d3:f6:48:ea:63:22: b1:28:db:51:25:92:22:12:fd:2c:e3:df:8f:c3:c6:eb:c7:18: aa:48:f5:af:c0:87:86:d4:df:e6:4d:7d:b9:64:b6:34:eb:37: ac:a8:8b:8e:9d:99:28:42:53:82:60:83:81:91:14:e1:fb:78: 87:49:fa:88:bd:8c:bd:6b:8e:3a:dc:a7:9f:56:6b:5f:82:ab: d1:65:65:18:66:76:cc:c6:0f:89:48:16:00:86:b5:53:0b:e8: 68:37:db:39:89:ae:8f:d9:e6:4c:55:2c:a5:1c:ee:72:7f:d5: 47:1a:68:40:6b:20:66:d4:ab:57:ff:7d:a5:2d:01:89:e3:ba: 75:e0:34:96:19:45:84:3a:ca:7f:51:bb:87:b5:a4:42:f6:ba: d9:26:03:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOerMhHF/aaK8xonwocbtC8aF+IowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNTExMDQwNzM1NTZaFw0yNTExMDcxNzAzNTZaMDMxMTAvBgNV BAMTKDBCOEFDMEJGMjZENzY3N0Y1RTk2NkQ0NDcxRDAxOENCRTRFQzE1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3maZvJ8ssbTdjKm2E7B5/YO8i MG8p1V29Qo5t9PzlvmutRU/6GOEcE8836fKuL0vBYapLmrziZbQY2dH3hmPki3Hd uBoXpFK40NMVJh25laAEkdafS4zd079ZKFNcxgOTAS0AQNckGctDl4npSHygDD6B F+2D5T0uiUiQZo5+V+HU36v3BQ0zRPfqo/GQscXVSxFig/CI3V6hx6nEqgIQ3F+j f/Ozg6DfWDHbRTPmdXwOBPyi1QIGLaaEZhRgDilPJrnG1sYGOGog1yEsVeZ7o7js adU3J4N4pXuCHDoJUkuILeFfiKwG14+imnEvEKWXyEsaqSJnP8OCvbkAuRV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4rAvybXZ39elm1EcdAYy+TsFRIwHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNF REY4RUIxMTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdaUuuVs7iR7QDlXwOUyKuCAYUiMhd1MRwA JPn1zL0dt2NTD/pa1RNXcG3+nuhDY+TIH/Ei7L0DiXnhUPw6SDekIAV3VGiZh04l 0y1/qVsDNafbOluApo3zGrLFpKxQeqz7rlqkxNP2SOpjIrEo21ElkiIS/Szj34/D xuvHGKpI9a/Ah4bU3+ZNfblktjTrN6yoi46dmShCU4Jgg4GRFOH7eIdJ+oi9jL1r jjrcp59Wa1+Cq9FlZRhmdszGD4lIFgCGtVML6Gg32zmJro/Z5kxVLKUc7nJ/1Uca aEBrIGbUq1f/faUtAYnjunXgNJYZRYQ6yn9Ru4e1pEL2utkmA7c= -----END CERTIFICATE-----Generated at Wed Nov 5 09:36:40 2025 by rpki-client