$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft File: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft (raw, json) Hash identifier: q7UTyoknimzdyRBKQ70W9WVtUflW8kpj+RZb2Zv8j3A= Subject key identifier: 15:4A:B1:8B:5F:A9:64:DF:6F:55:A2:BC:6A:89:EF:A9:EB:F9:7A:88 Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A Certificate issuer: /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Certificate serial: 6E31B9C41B94E0195CC0E2ECB9B1D2D2557B264B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft Manifest number: 0166 Signing time: Wed 23 Apr 2025 18:10:55 +0000 Manifest this update: Wed 23 Apr 2025 18:05:55 +0000 Manifest next update: Sat 26 Apr 2025 23:41:55 +0000 Files and hashes: 1: 60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl (hash: 3as4GbqQplRGazuIbzS+On06BJsMrPiB5I3fgBaCVF8=) 2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: 0uc+kOCgK/ThUQQa26NKJhz1A+pFk8KkCK2KrDxl9cs=) 3: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: ZDyxHBlNGIzYgtnVCT1eXLwOr1vFMRFU8WTMZvphid0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 23:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:31:b9:c4:1b:94:e0:19:5c:c0:e2:ec:b9:b1:d2:d2:55:7b:26:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A Validity Not Before: Apr 23 18:05:55 2025 GMT Not After : Apr 26 23:41:55 2025 GMT Subject: CN=154AB18B5FA964DF6F55A2BC6A89EFA9EBF97A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:00:5d:74:d2:c1:9c:8b:4f:c7:a0:96:0d:66: d6:77:00:a6:48:61:bd:e3:36:82:ee:59:38:a3:76: 05:ce:e0:37:3d:0a:ad:3d:08:c2:03:26:b2:c9:d0: 63:74:93:2d:1f:fe:88:3a:77:e1:7f:1b:de:c2:e9: f8:c0:23:44:4f:a6:2f:f9:6c:91:e6:29:2a:ab:c2: b7:8c:30:c9:11:4b:3a:bb:bd:fa:ca:56:66:46:ba: b1:cc:51:c1:04:a8:d4:ab:4b:c6:19:8f:9f:19:9d: ee:cb:d2:61:60:45:9c:14:07:19:ad:99:e2:af:80: ab:84:68:b9:bb:46:bd:6a:ed:62:b3:40:42:6a:c1: 56:a8:cb:43:10:e8:80:5f:9b:eb:eb:b7:8c:7d:ee: 22:e4:93:65:f0:d6:69:14:23:96:b6:dd:fc:58:d7: e6:c6:76:47:d5:a1:9f:83:9c:0e:df:3b:08:16:8e: ef:ca:35:8a:72:41:9c:a7:1f:04:9a:82:f4:7e:c9: 13:ba:f2:41:c1:e8:17:eb:33:6b:e0:77:c1:3f:c8: 37:dc:68:cf:27:df:d7:94:49:7e:e9:ef:70:f7:92: c7:08:31:a3:1f:98:48:d0:71:08:5b:55:33:cd:cc: 18:b9:6a:b4:e1:c5:0a:dd:64:a4:59:57:2c:1b:76: 65:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:B1:8B:5F:A9:64:DF:6F:55:A2:BC:6A:89:EF:A9:EB:F9:7A:88 X509v3 Authority Key Identifier: keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:12:c8:2e:ce:0f:5f:99:59:f8:a1:41:de:d1:f1:aa:10:76: 3d:19:89:7d:9c:dc:3b:37:ba:c9:4a:5b:55:5e:13:38:65:a6: 86:64:e8:82:20:3b:84:3e:ba:d3:3b:8e:80:ab:60:84:a4:54: 97:a4:7e:3b:8e:47:1a:c1:90:8c:e4:52:35:c4:ee:7a:a1:2b: 3c:53:3d:2f:0c:43:af:ec:23:97:af:51:7f:2f:34:3d:a1:a0: 07:9b:d3:0c:ee:20:a7:a3:70:6b:c7:90:aa:76:9c:90:4c:62: 1a:83:7e:d8:bb:5b:0b:fe:71:77:e6:c4:99:49:d1:9f:80:c8: d6:38:03:0b:a2:c8:13:b1:72:ea:d5:1d:51:18:34:fd:65:e7: fa:7d:f7:45:7b:ea:2d:aa:fb:1f:66:17:bf:31:6e:00:ee:74: df:ab:d7:6f:95:b6:2a:b5:e5:2e:fc:25:f2:39:39:35:0e:25: 9a:f0:61:60:a1:01:7c:26:58:51:49:83:6a:d0:15:89:d5:23: d6:2c:76:ff:87:d3:0b:4b:3d:f5:28:65:4b:cd:2b:c8:7e:ae: 39:b8:db:6a:a8:25:76:f0:18:0d:ca:ef:14:19:ee:5d:4e:b1: 08:64:d5:29:27:4f:eb:ed:8b:72:ab:34:71:07:f1:49:7b:66: b8:f3:51:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjG5xBuU4BlcwOLsubHS0lV7JkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4 RUIxMTk2QTAeFw0yNTA0MjMxODA1NTVaFw0yNTA0MjYyMzQxNTVaMDMxMTAvBgNV BAMTKDE1NEFCMThCNUZBOTY0REY2RjU1QTJCQzZBODlFRkE5RUJGOTdBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAF100sGci0/HoJYNZtZ3AKZI Yb3jNoLuWTijdgXO4Dc9Cq09CMIDJrLJ0GN0ky0f/og6d+F/G97C6fjAI0RPpi/5 bJHmKSqrwreMMMkRSzq7vfrKVmZGurHMUcEEqNSrS8YZj58Zne7L0mFgRZwUBxmt meKvgKuEaLm7Rr1q7WKzQEJqwVaoy0MQ6IBfm+vrt4x97iLkk2Xw1mkUI5a23fxY 1+bGdkfVoZ+DnA7fOwgWju/KNYpyQZynHwSagvR+yRO68kHB6BfrM2vgd8E/yDfc aM8n39eUSX7p73D3kscIMaMfmEjQcQhbVTPNzBi5arThxQrdZKRZVywbdmXZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUqxi1+pZN9vVaK8aonvqev5eogwHwYDVR0j BBgwFoAUYL1Uz9Z7L/+xO1R9nwbO346xGWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTU3NjEzYi04YjA0LTRjNDUtYmVkZi00YWIwNjFkNGRjZjkvMC82MEJENTRDRkQ2 N0IyRkZGQjEzQjU0N0Q5RjA2Q0VERjhFQjExOTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNFREY4RUIx MTk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE1NzYxM2ItOGIwNC00YzQ1LWJl ZGYtNGFiMDYxZDRkY2Y5LzAvNjBCRDU0Q0ZENjdCMkZGRkIxM0I1NDdEOUYwNkNF REY4RUIxMTk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkSyC7OD1+ZWfihQd7R8aoQdj0ZiX2c3Ds3 uslKW1VeEzhlpoZk6IIgO4Q+utM7joCrYISkVJekfjuORxrBkIzkUjXE7nqhKzxT PS8MQ6/sI5evUX8vND2hoAeb0wzuIKejcGvHkKp2nJBMYhqDfti7Wwv+cXfmxJlJ 0Z+AyNY4AwuiyBOxcurVHVEYNP1l5/p990V76i2q+x9mF78xbgDudN+r12+Vtiq1 5S78JfI5OTUOJZrwYWChAXwmWFFJg2rQFYnVI9Ysdv+H0wtLPfUoZUvNK8h+rjm4 22qoJXbwGA3K7xQZ7l1OsQhk1SknT+vti3KrNHEH8Ul7ZrjzUfw= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:54 2025 by rpki-client on console.sobornost.net