$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: 2YKDAjj2Gyp4Dnc7/3Vu08JS/MiuYuiZB3O6nCoq3Eg= Subject key identifier: B0:D3:19:24:5D:88:7C:75:84:06:37:8C:D6:E3:55:5F:F7:D7:5D:80 Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 72E32B93818DF7C818BDB48193F55992CCFF36D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 0230 Signing time: Fri 25 Apr 2025 22:11:43 +0000 Manifest this update: Fri 25 Apr 2025 22:06:43 +0000 Manifest next update: Tue 29 Apr 2025 04:16:43 +0000 Files and hashes: 1: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: z9nuGGm9+X+UiQ3AhEMfAsL6iP+1xleYaHuS5B7A/bU=) 2: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: L8gwKTUGVyd5bDsNApPaahTszGJdxUBng/2ZKf/OK7o=) 3: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: BJAdOo0RGebUk8ZnI6ST00lTNYWrEJhZQcWUbVVtqAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 04:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e3:2b:93:81:8d:f7:c8:18:bd:b4:81:93:f5:59:92:cc:ff:36:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Apr 25 22:06:43 2025 GMT Not After : Apr 29 04:16:43 2025 GMT Subject: CN=B0D319245D887C758406378CD6E3555FF7D75D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:13:cc:25:bc:17:75:f2:67:11:a1:11:15: b5:23:3f:fa:77:d6:9f:0b:0e:b0:ab:13:25:d7:15: 38:a7:c7:52:da:f9:a4:51:09:08:0b:58:61:d1:5f: 75:da:8d:b9:4f:8d:e3:e9:ee:5b:51:d8:13:0c:f0: 76:e0:a3:51:26:be:4d:7c:fe:bd:c2:c7:9f:a3:d3: 10:7f:c9:4f:2b:3e:85:45:a0:eb:ca:98:59:c1:e1: 41:1a:fe:0f:61:89:05:38:62:d5:b5:68:9c:e7:44: 8f:f3:74:3f:13:99:f0:25:17:0e:24:41:08:8f:42: 1f:fb:2d:c0:01:77:7d:f1:25:71:48:6d:c6:04:db: 9d:60:89:c6:44:94:22:31:1f:49:8e:cb:19:a4:92: 9f:47:13:de:89:05:7b:98:da:a6:ef:a6:1d:d5:3a: fd:5c:ae:5e:6e:51:69:0d:54:f5:03:ac:20:56:49: f6:7b:c8:c4:2a:d7:81:c0:d4:ee:5e:99:75:32:0a: 09:1e:33:98:0b:da:92:95:0f:f3:ea:bd:af:7c:b3: 14:5a:e0:95:ef:b3:74:61:ca:14:b7:b5:34:04:a0: f4:51:c3:07:08:ca:a0:3b:be:45:31:8a:86:6a:35: 22:3b:e9:48:8b:28:df:b7:8a:37:3f:c6:f3:d6:7a: 94:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D3:19:24:5D:88:7C:75:84:06:37:8C:D6:E3:55:5F:F7:D7:5D:80 X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:59:d0:13:3a:f8:f2:ad:42:ca:d1:31:c5:6f:f8:61:aa:13: 38:84:2c:73:f0:21:70:7f:58:f0:9c:1a:d0:4d:ca:ad:d7:de: 6d:28:17:a1:a8:eb:00:9d:3f:4c:b5:47:b3:a0:1a:33:2d:a5: 92:7c:c1:10:cb:b8:50:ab:34:7c:26:45:f0:66:91:b9:8b:b3: a3:32:eb:06:be:e1:b2:b5:54:e0:6f:52:5d:3d:fa:27:0c:33: 18:f3:97:8f:fe:14:98:3d:7b:99:27:9a:d8:57:19:8a:c9:e6: b6:bd:df:23:a1:5a:f7:82:47:fb:12:90:06:a0:f8:1b:67:1d: 4a:80:d3:08:ea:d7:a8:e1:99:1e:fe:2b:4c:a4:a9:68:7a:63: 2f:63:66:2b:17:96:6b:46:5d:4f:7b:de:0c:b9:35:f8:13:d4: 50:7e:bb:ca:b4:30:ef:b4:54:2e:4e:dd:c0:5f:5c:06:7c:73: fd:86:5b:12:cc:39:a3:47:03:bb:23:c2:ed:1b:10:6b:3b:06: d4:9a:fe:d7:8e:fc:39:2c:b3:09:67:76:a2:c7:e0:9c:d2:fc: c4:cb:8d:15:c6:c5:f5:c4:02:4d:ba:ea:1f:92:c4:e7:c7:11: 98:74:e4:b0:7c:05:93:bd:74:75:3d:43:78:04:80:66:4d:c0: db:68:03:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuMrk4GN98gYvbSBk/VZksz/NtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNTA0MjUyMjA2NDNaFw0yNTA0MjkwNDE2NDNaMDMxMTAvBgNV BAMTKEIwRDMxOTI0NUQ4ODdDNzU4NDA2Mzc4Q0Q2RTM1NTVGRjdENzVEODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/IxPMJbwXdfJnEaERFbUjP/p3 1p8LDrCrEyXXFTinx1La+aRRCQgLWGHRX3XajblPjePp7ltR2BMM8Hbgo1Emvk18 /r3Cx5+j0xB/yU8rPoVFoOvKmFnB4UEa/g9hiQU4YtW1aJznRI/zdD8TmfAlFw4k QQiPQh/7LcABd33xJXFIbcYE251gicZElCIxH0mOyxmkkp9HE96JBXuY2qbvph3V Ov1crl5uUWkNVPUDrCBWSfZ7yMQq14HA1O5emXUyCgkeM5gL2pKVD/Pqva98sxRa 4JXvs3RhyhS3tTQEoPRRwwcIyqA7vkUxioZqNSI76UiLKN+3ijc/xvPWepQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsNMZJF2IfHWEBjeM1uNVX/fXXYAwHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFZ0BM6+PKtQsrRMcVv+GGqEziELHPwIXB/ WPCcGtBNyq3X3m0oF6Go6wCdP0y1R7OgGjMtpZJ8wRDLuFCrNHwmRfBmkbmLs6My 6wa+4bK1VOBvUl09+icMMxjzl4/+FJg9e5knmthXGYrJ5ra93yOhWveCR/sSkAag +BtnHUqA0wjq16jhmR7+K0ykqWh6Yy9jZisXlmtGXU973gy5NfgT1FB+u8q0MO+0 VC5O3cBfXAZ8c/2GWxLMOaNHA7sjwu0bEGs7BtSa/teO/DksswlndqLH4JzS/MTL jRXGxfXEAk266h+SxOfHEZh05LB8BZO9dHU9Q3gEgGZNwNtoA6M= -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:29 2025 by rpki-client on console.sobornost.net