$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: mjzuhLY+c/owsLvzbxgfQlyOzeLL/hms+CtmR1euJDc= Subject key identifier: 22:50:CB:F8:6F:3F:0C:34:0B:7D:CE:0F:B3:35:D6:3A:00:F2:25:59 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 1FAD8FC6D8026A90639DF52FF654039DFC2534D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 0260 Signing time: Thu 26 Mar 2026 02:01:32 +0000 Manifest this update: Thu 26 Mar 2026 01:56:32 +0000 Manifest next update: Sun 29 Mar 2026 13:13:32 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: jlqIxsTPoe8n224G+/5T94Pc02aE3iIcz3YZTPDHxx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ad:8f:c6:d8:02:6a:90:63:9d:f5:2f:f6:54:03:9d:fc:25:34:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Mar 26 01:56:32 2026 GMT Not After : Mar 29 13:13:32 2026 GMT Subject: CN=2250CBF86F3F0C340B7DCE0FB335D63A00F22559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:77:b5:45:f3:34:e3:7b:b8:37:98:6f:04: 19:01:ba:d8:4b:ca:88:e2:4a:ae:4d:e0:51:26:80: a4:95:f9:4b:82:a1:73:a0:8e:7b:48:61:f5:1a:a2: 40:34:10:13:d8:f7:76:56:09:72:da:3c:12:8a:00: 41:dd:a0:55:8f:3d:92:04:9d:51:f6:a7:39:e6:71: 0d:b0:3a:87:cc:6a:ba:41:ce:09:70:f0:f7:3c:57: 97:0e:ee:9d:16:8e:54:28:6d:91:eb:26:2f:80:df: 1d:96:d6:1c:91:4b:e0:02:11:17:45:f6:f5:0e:e2: 55:ea:fb:87:26:33:a7:8d:05:dc:22:e6:ae:bf:e1: e9:9c:aa:fa:88:a4:d7:9d:be:3b:d8:6e:84:b0:68: 34:86:35:c4:e1:97:ef:59:74:f4:f0:2a:98:80:17: 08:99:46:ee:2d:bd:38:b2:d2:b2:1c:b1:1a:ac:78: b0:5b:4a:08:fc:ad:b5:de:37:95:67:6f:94:a4:30: b4:94:02:a3:f3:c4:6c:49:4b:1c:d3:f1:29:bb:d1: 97:19:26:6a:25:ca:eb:e0:50:66:ac:2f:80:e6:ca: ed:c2:07:04:a8:b6:84:fa:0a:93:92:a0:79:e9:c8: b8:ec:f5:84:d3:e5:c6:47:09:c6:e9:83:8d:9c:34: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:50:CB:F8:6F:3F:0C:34:0B:7D:CE:0F:B3:35:D6:3A:00:F2:25:59 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e7:e2:7a:90:0b:c9:5e:6e:1d:2e:ec:cd:d9:ad:a1:ed:a9: 6e:a0:4e:b7:3f:4d:4e:44:a1:d9:5c:c0:9c:2c:9d:01:f2:ee: 67:68:b3:35:6a:fe:21:40:f9:bf:5f:75:d7:59:0c:b9:42:4a: 19:c0:f8:ef:b2:0f:15:0b:b7:fa:28:14:45:77:aa:ad:9c:b3: aa:dd:21:3a:6d:8a:84:91:46:2c:d3:bc:bc:12:ab:48:c1:40: de:e6:6a:da:29:ca:1f:03:33:9d:37:c2:52:93:b4:1c:2d:dd: ed:9c:3a:ec:65:db:60:4a:c7:0c:36:dd:26:8d:99:fd:8f:0f: fb:66:27:0c:bc:d8:19:21:9b:67:ce:ab:c5:43:ab:71:02:e3: 30:00:3a:df:3d:94:fd:55:fe:e2:c5:9b:e6:fa:cf:a6:3f:a2: 05:a7:1e:d0:ea:7f:ed:01:6f:c4:3b:3c:e1:ba:98:52:be:55: 67:44:c3:ea:d6:69:4d:f9:d3:8a:3e:a2:94:a1:21:6a:e5:d5: ac:64:2a:40:bf:40:1d:ff:4f:e0:7e:c2:2f:02:51:66:00:6e: 9c:76:06:ba:c8:7e:8e:7b:53:00:47:20:6b:71:a7:b7:65:38: 01:f0:4f:12:a3:8c:63:ae:a5:90:26:0b:d7:30:91:77:6d:ce: 47:d3:6e:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH62PxtgCapBjnfUv9lQDnfwlNNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNjAzMjYwMTU2MzJaFw0yNjAzMjkxMzEzMzJaMDMxMTAvBgNV BAMTKDIyNTBDQkY4NkYzRjBDMzQwQjdEQ0UwRkIzMzVENjNBMDBGMjI1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYAXe1RfM043u4N5hvBBkButhL yojiSq5N4FEmgKSV+UuCoXOgjntIYfUaokA0EBPY93ZWCXLaPBKKAEHdoFWPPZIE nVH2pznmcQ2wOofMarpBzglw8Pc8V5cO7p0WjlQobZHrJi+A3x2W1hyRS+ACERdF 9vUO4lXq+4cmM6eNBdwi5q6/4emcqvqIpNedvjvYboSwaDSGNcThl+9ZdPTwKpiA FwiZRu4tvTiy0rIcsRqseLBbSgj8rbXeN5Vnb5SkMLSUAqPzxGxJSxzT8Sm70ZcZ JmolyuvgUGasL4Dmyu3CBwSotoT6CpOSoHnpyLjs9YTT5cZHCcbpg42cNG1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIlDL+G8/DDQLfc4PszXWOgDyJVkwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzn4nqQC8lebh0u7M3ZraHtqW6gTrc/TU5E odlcwJwsnQHy7mdoszVq/iFA+b9fdddZDLlCShnA+O+yDxULt/ooFEV3qq2cs6rd ITptioSRRizTvLwSq0jBQN7matopyh8DM503wlKTtBwt3e2cOuxl22BKxww23SaN mf2PD/tmJwy82Bkhm2fOq8VDq3EC4zAAOt89lP1V/uLFm+b6z6Y/ogWnHtDqf+0B b8Q7POG6mFK+VWdEw+rWaU3504o+opShIWrl1axkKkC/QB3/T+B+wi8CUWYAbpx2 BrrIfo57UwBHIGtxp7dlOAHwTxKjjGOupZAmC9cwkXdtzkfTboY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:21 2026 by rpki-client