$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: jl9pxoCoOe1GN2jdirXUkVPgBfJmh9MG06f51RZ+0U8= Subject key identifier: 27:95:4C:AA:54:9F:2A:28:6E:E5:7E:FD:B4:28:70:7A:D8:31:A1:B9 Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 682A76D2716E8641759DE1EFE054C836910597C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 056A Signing time: Wed 25 Mar 2026 10:03:49 +0000 Manifest this update: Wed 25 Mar 2026 09:58:49 +0000 Manifest next update: Sat 28 Mar 2026 16:33:49 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) 2: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: LxSVJV070gN5FjdUX054wO7XGmRkz6K/WxRCNonXpkA=) 3: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: xUdwfWhj/DTW37oHxA2M7SzJ+NkmDLXU1C60QSD07Pk=) 4: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: yys074r5HWDU9b98bt+wzugZ8IAR1X5XFPUx+DwB7F8=) 5: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 6: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2a:76:d2:71:6e:86:41:75:9d:e1:ef:e0:54:c8:36:91:05:97:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Mar 25 09:58:49 2026 GMT Not After : Mar 28 16:33:49 2026 GMT Subject: CN=27954CAA549F2A286EE57EFDB428707AD831A1B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:8e:14:d7:ab:54:ab:52:3e:b6:07:8d:2c: 1a:2c:9a:68:a8:39:45:74:81:37:69:23:80:5e:61: 87:88:ca:b3:69:b6:4c:e7:f3:e6:3f:6c:dd:cd:c0: ce:4c:39:09:32:15:02:33:95:5d:9e:bb:24:9b:73: 96:07:2a:ac:9d:42:3d:32:01:9a:1c:9b:52:54:e8: 15:b9:69:36:a4:48:aa:70:16:19:ff:61:50:04:8e: 4b:7e:58:ae:a6:02:9e:1f:9d:0c:12:70:94:61:4f: ea:c4:70:64:6f:fb:9c:3c:af:1c:45:f8:14:98:99: 6a:aa:1b:72:05:6d:45:a1:19:bf:86:5e:34:ac:35: bf:13:b2:30:6e:67:5e:6f:1b:4e:03:c6:16:2a:a0: dd:fb:16:c5:1b:4b:81:2a:7e:dc:9d:4b:67:97:ba: 7a:b8:a3:2a:c4:7d:8b:e7:ab:56:0d:e8:7a:07:3f: 96:b3:bc:8b:14:10:95:57:73:20:58:f2:c6:8d:cd: fe:64:2c:92:d0:92:5c:c2:08:4d:4b:a1:d4:1c:80: 35:c2:ca:47:42:83:f2:50:4e:a3:9d:d4:4e:c9:86: c5:bc:b6:68:9f:80:c2:cc:b1:23:84:de:4e:18:eb: d7:63:57:0c:38:4d:52:f6:69:db:61:31:4d:7d:cd: 4a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:95:4C:AA:54:9F:2A:28:6E:E5:7E:FD:B4:28:70:7A:D8:31:A1:B9 X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4e:a2:d4:f6:18:9b:70:3c:e0:7c:fe:61:7f:78:5c:9a:51: eb:71:e8:73:0f:73:d4:32:d9:4d:cb:a7:6f:e4:f9:b1:2f:c7: b5:0d:63:d7:1f:87:5b:7f:53:0c:b6:0f:05:82:d5:95:d8:35: 2c:93:b5:04:39:78:75:69:f7:40:71:85:b0:cf:74:53:59:f5: 13:7e:61:b3:a5:25:6c:3e:b5:9d:a5:80:5f:bc:b3:05:56:ca: e3:56:43:e3:d7:32:f5:c5:b2:fa:32:29:ff:30:d7:93:5f:07: 21:d4:eb:fd:8a:45:93:78:ce:f2:5a:9d:50:1f:b3:a3:2b:1c: 36:2f:6c:d4:0f:9e:ce:7d:9e:d7:07:c8:20:87:b9:86:3a:3f: 6d:11:50:03:cf:dc:4f:16:3e:37:87:3b:0a:a9:3e:18:d3:40: e3:59:58:57:9e:c9:2c:6d:44:2b:62:d4:a6:c0:cd:55:eb:18: ae:2c:5b:1f:de:d5:3b:14:6d:fe:0e:26:9d:42:e4:fb:58:b8: 17:28:82:8e:07:d9:35:da:56:a4:3f:3b:1c:81:75:00:6a:c2: aa:23:aa:3c:fd:97:f2:d9:cd:f3:61:c8:bd:56:fc:ea:74:4f: 64:a9:6d:16:af:6c:32:5e:68:0f:aa:5a:dd:b9:a1:d9:3d:58: 3a:80:9e:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaCp20nFuhkF1neHv4FTINpEFl8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNjAzMjUwOTU4NDlaFw0yNjAzMjgxNjMzNDlaMDMxMTAvBgNV BAMTKDI3OTU0Q0FBNTQ5RjJBMjg2RUU1N0VGREI0Mjg3MDdBRDgzMUExQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOc44U16tUq1I+tgeNLBosmmio OUV0gTdpI4BeYYeIyrNptkzn8+Y/bN3NwM5MOQkyFQIzlV2euySbc5YHKqydQj0y AZocm1JU6BW5aTakSKpwFhn/YVAEjkt+WK6mAp4fnQwScJRhT+rEcGRv+5w8rxxF +BSYmWqqG3IFbUWhGb+GXjSsNb8TsjBuZ15vG04DxhYqoN37FsUbS4EqftydS2eX unq4oyrEfYvnq1YN6HoHP5azvIsUEJVXcyBY8saNzf5kLJLQklzCCE1LodQcgDXC ykdCg/JQTqOd1E7JhsW8tmifgMLMsSOE3k4Y69djVww4TVL2adthMU19zUoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ5VMqlSfKihu5X79tChwetgxobkwHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxOotT2GJtwPOB8/mF/eFyaUetx6HMPc9Qy 2U3Lp2/k+bEvx7UNY9cfh1t/Uwy2DwWC1ZXYNSyTtQQ5eHVp90BxhbDPdFNZ9RN+ YbOlJWw+tZ2lgF+8swVWyuNWQ+PXMvXFsvoyKf8w15NfByHU6/2KRZN4zvJanVAf s6MrHDYvbNQPns59ntcHyCCHuYY6P20RUAPP3E8WPjeHOwqpPhjTQONZWFeeySxt RCti1KbAzVXrGK4sWx/e1TsUbf4OJp1C5PtYuBcogo4H2TXaVqQ/OxyBdQBqwqoj qjz9l/LZzfNhyL1W/Op0T2SpbRavbDJeaA+qWt25odk9WDqAnh0= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:59 2026 by rpki-client