$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: utNXirMaFXlY2srA/5HYIs1SB3FApq4ciaSfrIHh6v4= Subject key identifier: F9:D2:37:D3:84:07:51:A3:3A:54:7B:68:B5:0B:CF:3E:B0:05:05:67 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 344182B378B310E73B42FA27BE976A36A4F4127D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 04D0 Signing time: Wed 23 Apr 2025 03:31:43 +0000 Manifest this update: Wed 23 Apr 2025 03:26:43 +0000 Manifest next update: Sat 26 Apr 2025 08:38:43 +0000 Files and hashes: 1: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: mR5LKNgThN6yFAVVQevImW1UBN6/bmnFML8XWT4UGIA=) 2: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: qM2kxE4q5UQrBccbNY1O6ebEV5oWPEzBK2gVPgFfWIQ=) 3: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: Ab8CnzslbwlkXNujhfNosDv709J9CyUBxdRpZd7eP2M=) 4: 3130332e3132302e3230342e302f32342d3234203d3e203336333532.roa (hash: +6RwBw8a02xlm03ODZ149Daz0Yr8Syx/BUjtCmLmM7U=) 5: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: wJb3CBAySVHDdpYaaX5eKYUpjI8Nns4hI0mK3tPArpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 08:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:41:82:b3:78:b3:10:e7:3b:42:fa:27:be:97:6a:36:a4:f4:12:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Apr 23 03:26:43 2025 GMT Not After : Apr 26 08:38:43 2025 GMT Subject: CN=F9D237D3840751A33A547B68B50BCF3EB0050567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:c2:fd:52:95:36:3e:b7:9b:50:a5:35:3e: df:ce:7e:ae:0e:3f:35:2c:fc:b0:ce:82:de:49:85: 0a:3c:42:f6:57:44:c4:70:24:62:86:3d:4c:d8:6d: 57:35:e1:85:fb:c5:b4:c6:d9:62:6f:ff:b2:6b:82: b7:0f:c4:c9:fa:0f:33:f5:36:a5:51:bb:38:e5:60: 90:47:20:d8:ae:a0:29:8c:54:1f:9c:f1:d5:6d:2e: f0:c2:ba:d3:84:fc:83:85:93:ed:fb:db:2e:e2:4a: e5:7b:79:92:69:f5:8c:36:01:4a:b0:1d:75:db:4c: 3a:7b:e3:67:63:25:41:3c:e3:16:44:a6:07:be:11: 49:2d:94:a4:a3:21:ad:16:7e:4c:e8:da:66:a3:a1: d3:70:69:30:1a:f9:32:62:58:ab:bb:d9:e7:56:94: 65:11:7c:1e:09:35:d8:50:14:f2:df:58:b8:f0:90: ca:3e:28:01:b1:13:a9:43:2f:0c:5c:d1:62:8b:75: b4:78:49:e4:a2:9d:f5:0b:11:1c:7f:a2:1c:81:11: 2d:1c:50:8a:74:a9:2d:ef:a1:d6:84:43:45:81:39: 29:53:ea:29:b1:4f:ac:b6:e1:15:69:7c:99:a5:85: 26:9a:16:e0:68:cb:bb:4b:f1:24:d1:99:6a:75:2c: 9f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D2:37:D3:84:07:51:A3:3A:54:7B:68:B5:0B:CF:3E:B0:05:05:67 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:05:6f:40:09:a5:e3:35:25:67:18:91:b6:ee:0b:cf:52:2d: c6:8a:7e:49:a4:a2:fd:7d:43:96:51:47:f8:03:92:b9:76:99: 72:3f:dc:12:a0:80:9a:69:38:88:3e:a1:6d:9e:01:b6:85:df: e6:b9:46:50:b6:51:89:d2:02:46:02:78:48:d7:91:89:d0:3b: ca:eb:aa:a0:ea:e5:dc:f5:a4:e5:d1:71:63:42:78:52:a2:29: 06:8b:d6:52:4c:c2:9c:26:c8:5c:d8:76:33:d6:d6:0d:6b:8e: 31:4c:83:33:ef:65:5a:57:e3:17:24:1e:12:1b:7c:fb:82:d7: f9:e6:8c:64:40:14:e5:5c:73:d3:4f:c0:4c:5f:04:af:a5:0b: de:c9:4c:a2:77:66:40:2a:98:7e:a0:83:8c:bc:3e:aa:34:53: 1a:13:2f:79:dd:cf:59:12:5e:20:a4:db:8e:cb:6a:dd:0c:05: aa:92:de:ff:23:ee:f6:bd:9d:6d:97:2f:86:ea:af:16:af:48: a0:07:02:9a:06:95:b1:89:73:df:3e:40:c5:cc:26:b9:de:40: e4:bf:3f:0b:03:be:37:f6:4e:7a:9f:08:a6:7d:ca:48:83:4c: 70:f3:12:c4:e3:7a:22:56:8b:ed:d0:75:3a:5c:30:9b:7c:48: 6c:fa:b8:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNEGCs3izEOc7QvonvpdqNqT0En0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNTA0MjMwMzI2NDNaFw0yNTA0MjYwODM4NDNaMDMxMTAvBgNV BAMTKEY5RDIzN0QzODQwNzUxQTMzQTU0N0I2OEI1MEJDRjNFQjAwNTA1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQs8L9UpU2PrebUKU1Pt/Ofq4O PzUs/LDOgt5JhQo8QvZXRMRwJGKGPUzYbVc14YX7xbTG2WJv/7JrgrcPxMn6DzP1 NqVRuzjlYJBHINiuoCmMVB+c8dVtLvDCutOE/IOFk+372y7iSuV7eZJp9Yw2AUqw HXXbTDp742djJUE84xZEpge+EUktlKSjIa0Wfkzo2majodNwaTAa+TJiWKu72edW lGURfB4JNdhQFPLfWLjwkMo+KAGxE6lDLwxc0WKLdbR4SeSinfULERx/ohyBES0c UIp0qS3vodaEQ0WBOSlT6imxT6y24RVpfJmlhSaaFuBoy7tL8STRmWp1LJ+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+dI304QHUaM6VHtotQvPPrAFBWcwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkFb0AJpeM1JWcYkbbuC89SLcaKfkmkov19 Q5ZRR/gDkrl2mXI/3BKggJppOIg+oW2eAbaF3+a5RlC2UYnSAkYCeEjXkYnQO8rr qqDq5dz1pOXRcWNCeFKiKQaL1lJMwpwmyFzYdjPW1g1rjjFMgzPvZVpX4xckHhIb fPuC1/nmjGRAFOVcc9NPwExfBK+lC97JTKJ3ZkAqmH6gg4y8Pqo0UxoTL3ndz1kS XiCk247Lat0MBaqS3v8j7va9nW2XL4bqrxavSKAHApoGlbGJc98+QMXMJrneQOS/ PwsDvjf2TnqfCKZ9ykiDTHDzEsTjeiJWi+3QdTpcMJt8SGz6uFI= -----END CERTIFICATE-----Generated at Wed Apr 23 06:31:50 2025 by rpki-client on console.sobornost.net