$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: R0Pm0ZouNf8t18b/lWiVf4fgBOxfcFkQd3U2nXW4mLM= Subject key identifier: 4B:6A:7F:C7:02:1B:1F:E1:EC:32:FB:80:74:1F:3C:4E:4B:CA:6A:FE Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 428D2E251D0CCB6FD44DEE8067DF041696083091 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 02C4 Signing time: Tue 24 Mar 2026 22:42:01 +0000 Manifest this update: Tue 24 Mar 2026 22:37:01 +0000 Manifest next update: Sat 28 Mar 2026 05:02:01 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: xJcRLYTxWRUWjbwdb5KhzRkssxV8FAGUCJzxledmdRo=) 2: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: 4MkbDCUGmV2F/lzy5rwNWuvitXi6+bb0IAP7g3LuKDk=) 3: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: +xcxN+4e+D+gyfY3CKK8YfXazcHblakfG9WnHK8J/Es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8d:2e:25:1d:0c:cb:6f:d4:4d:ee:80:67:df:04:16:96:08:30:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Mar 24 22:37:01 2026 GMT Not After : Mar 28 05:02:01 2026 GMT Subject: CN=4B6A7FC7021B1FE1EC32FB80741F3C4E4BCA6AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:43:af:54:a3:6d:81:20:d2:85:da:55:a8: 3f:eb:bd:d1:81:72:5f:ad:f2:28:34:7d:60:45:9a: b1:5e:79:de:58:89:b4:ff:01:3f:d9:ce:fa:4a:db: 60:3d:4b:1a:7a:18:77:f5:05:b8:d9:ad:4c:2a:0e: 7f:b1:70:78:69:23:c9:f3:b0:5f:7b:e4:11:29:30: b4:a8:4e:28:a4:61:0a:37:d5:18:26:17:5b:dd:20: 84:56:21:7b:ae:bb:12:63:54:8a:f4:06:fe:56:f4: 39:45:ec:76:1b:0f:6c:5a:04:8b:ae:e3:66:73:14: f8:61:30:68:71:69:3a:e0:cf:33:e2:0f:c2:ad:be: c1:91:32:fe:04:a5:3c:a8:dc:6e:7e:ae:05:97:b8: 45:53:c0:c9:cb:34:fe:b8:54:17:f0:dd:59:da:3b: 03:41:88:9c:07:77:1f:af:6a:50:23:cd:4a:47:20: dd:fb:0b:21:ec:01:00:13:dc:d4:78:4f:c9:3f:65: b6:fa:20:b4:03:26:d2:87:f2:d2:79:ee:40:93:5e: 9a:13:af:f6:38:a9:0d:c3:37:34:cd:6d:fe:81:3b: af:6c:f9:ef:07:89:d3:31:29:04:eb:4a:a4:b9:a0: 52:72:af:f3:48:a9:e4:dc:c0:c5:7a:23:40:69:45: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6A:7F:C7:02:1B:1F:E1:EC:32:FB:80:74:1F:3C:4E:4B:CA:6A:FE X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:cb:51:1c:06:46:7e:a6:75:78:75:bb:54:1d:76:c1:8d:ad: 17:f0:c4:af:16:d3:23:c3:51:f4:9e:d9:b9:26:fb:c8:a5:60: e0:ce:48:66:a7:30:6f:b9:7d:6f:67:7f:51:ce:18:08:5e:3a: 2a:a8:a4:2b:fc:2c:4d:43:a7:d7:90:00:37:8f:b0:08:38:fc: 75:74:ac:43:2e:af:43:fd:d2:19:e0:29:10:8e:14:d3:3a:68: e1:51:d7:70:b9:88:65:1c:f6:9e:2b:8d:15:c7:d3:95:f9:33: 9c:cd:5d:51:66:c3:b3:0a:30:cb:45:b2:bf:4f:8b:f7:ed:c2: 77:e4:16:45:10:15:3a:b2:7e:93:df:35:df:36:19:00:aa:be: 72:9a:8b:14:c5:65:c3:74:7b:4d:df:53:4a:db:83:d6:86:01: 4a:ca:13:5a:63:76:d6:bf:f1:6e:a8:35:bd:3d:8a:d5:69:6a: 8e:a0:35:fa:3c:6e:05:d7:fa:e1:38:86:93:57:da:70:2b:a8: 25:b7:81:8a:e8:80:ed:dc:44:77:01:56:a8:b4:14:39:c7:7b: 2e:2c:56:a8:3a:c3:f8:6a:13:cd:39:99:d4:cd:89:e7:54:f6: cb:28:33:b2:a1:10:9e:42:2a:7e:f9:7b:1d:03:8f:d4:1d:83: 60:dc:b3:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQo0uJR0My2/UTe6AZ98EFpYIMJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNjAzMjQyMjM3MDFaFw0yNjAzMjgwNTAyMDFaMDMxMTAvBgNV BAMTKDRCNkE3RkM3MDIxQjFGRTFFQzMyRkI4MDc0MUYzQzRFNEJDQTZBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINEOvVKNtgSDShdpVqD/rvdGB cl+t8ig0fWBFmrFeed5YibT/AT/ZzvpK22A9Sxp6GHf1BbjZrUwqDn+xcHhpI8nz sF975BEpMLSoTiikYQo31RgmF1vdIIRWIXuuuxJjVIr0Bv5W9DlF7HYbD2xaBIuu 42ZzFPhhMGhxaTrgzzPiD8KtvsGRMv4EpTyo3G5+rgWXuEVTwMnLNP64VBfw3Vna OwNBiJwHdx+valAjzUpHIN37CyHsAQAT3NR4T8k/Zbb6ILQDJtKH8tJ57kCTXpoT r/Y4qQ3DNzTNbf6BO69s+e8HidMxKQTrSqS5oFJyr/NIqeTcwMV6I0BpRa+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2p/xwIbH+HsMvuAdB88TkvKav4wHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPLURwGRn6mdXh1u1QddsGNrRfwxK8W0yPD UfSe2bkm+8ilYODOSGanMG+5fW9nf1HOGAheOiqopCv8LE1Dp9eQADePsAg4/HV0 rEMur0P90hngKRCOFNM6aOFR13C5iGUc9p4rjRXH05X5M5zNXVFmw7MKMMtFsr9P i/ftwnfkFkUQFTqyfpPfNd82GQCqvnKaixTFZcN0e03fU0rbg9aGAUrKE1pjdta/ 8W6oNb09itVpao6gNfo8bgXX+uE4hpNX2nArqCW3gYrogO3cRHcBVqi0FDnHey4s Vqg6w/hqE805mdTNiedU9ssoM7KhEJ5CKn75ex0Dj9Qdg2Dcs0w= -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:22 2026 by rpki-client