$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft File: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft (raw, json) Hash identifier: Kbs9HfrWsDwOsRCBxtaQGfO6z8jtbEkwwAyspMJH6ig= Subject key identifier: 66:D9:63:64:EF:35:68:3A:1A:E9:DD:5A:DB:0D:7A:3D:65:57:2C:75 Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C Certificate issuer: /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Certificate serial: 204E2848BB3227037D71BCCAAD15FB4A96B65757 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft Manifest number: 011E Signing time: Thu 26 Mar 2026 12:20:55 +0000 Manifest this update: Thu 26 Mar 2026 12:15:55 +0000 Manifest next update: Sun 29 Mar 2026 15:48:55 +0000 Files and hashes: 1: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl (hash: ELBoev4s+T1MLJvsnwmlWPJKum9yOP0QiwoSeuVsXhI=) 2: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: VQEEEXuPlisinrBwT/1FJcAfMTnGRscgl2dxnDWnkuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4e:28:48:bb:32:27:03:7d:71:bc:ca:ad:15:fb:4a:96:b6:57:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Validity Not Before: Mar 26 12:15:55 2026 GMT Not After : Mar 29 15:48:55 2026 GMT Subject: CN=66D96364EF35683A1AE9DD5ADB0D7A3D65572C75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cf:12:6d:9e:cf:fe:79:3c:01:95:b9:86:da: 93:5b:33:66:81:ab:b9:27:dd:3f:04:87:47:4c:18: 17:b9:97:f7:34:65:cf:13:55:34:a9:62:b1:93:4c: 55:35:a2:76:00:2a:93:36:5c:e2:95:6b:5b:c6:af: 90:76:a9:29:bc:43:d1:f3:cc:3d:85:3b:ce:f2:f5: 7d:41:1e:6a:fe:15:92:72:dc:ee:7f:45:d2:36:de: 60:96:07:c1:a6:55:29:94:ad:29:14:4e:d4:4a:d0: 3f:1f:53:58:92:69:fb:25:77:25:34:90:ae:c2:44: aa:29:84:57:41:54:81:81:c5:37:6b:45:bc:64:16: 18:a3:e6:41:39:fa:00:77:08:35:f8:23:36:4c:d7: 5f:2f:b7:4b:6c:ec:46:f9:61:42:80:c4:a9:52:6a: d8:e9:1e:01:e6:df:b3:cf:33:ea:3a:d0:19:dd:35: c3:0b:d7:37:ca:cc:42:81:e2:b0:25:45:7a:a9:c4: 2e:33:d4:ae:05:93:e2:5b:ef:1f:e6:04:e5:aa:50: 6b:5b:f3:75:8f:21:44:72:4e:31:05:0e:44:b2:f8: 37:6f:bb:33:9e:28:cf:18:0a:d6:c4:b4:8e:8d:4d: 11:1a:83:71:74:20:f4:20:3c:9d:9d:d7:81:eb:ba: 8f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D9:63:64:EF:35:68:3A:1A:E9:DD:5A:DB:0D:7A:3D:65:57:2C:75 X509v3 Authority Key Identifier: keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:06:9f:e2:79:5d:fb:09:63:c6:a4:4e:a1:51:29:39:9d:4a: d7:f8:1e:b6:71:70:60:03:3e:7a:42:ec:da:c6:76:aa:08:be: 5c:b0:b9:ee:8a:07:3e:34:25:a0:63:85:3b:ef:07:c1:80:e9: 0c:62:e8:40:87:5c:65:d3:17:fd:e2:81:67:a3:0b:94:22:28: 53:02:a8:93:38:bb:91:e8:09:e7:30:d1:12:ef:dc:9a:22:c6: d7:34:a1:59:2c:ed:4a:40:fd:a5:e9:6b:7e:c4:42:bf:bc:d5: 0c:20:ed:2b:9a:63:99:07:61:6e:da:8d:bf:47:cf:78:84:64: aa:14:c3:d0:c9:0e:c8:47:08:76:d1:27:81:cd:ca:9c:8b:0e: 86:a0:83:85:fb:18:16:3c:f2:21:31:c6:76:eb:a3:4e:c4:ba: 80:bf:44:2d:f6:cb:91:9d:7b:c7:36:37:97:fb:4a:e7:a7:1c: d9:34:9b:26:11:8b:a7:c3:92:7a:72:98:54:95:a7:d7:67:97: ee:d3:29:b7:b2:7a:48:08:4c:31:fe:19:10:5f:b8:20:49:14: 48:72:e9:75:2a:84:c3:31:88:df:11:05:52:76:fd:aa:7b:3b: 42:62:45:29:06:e6:21:79:59:bc:93:9c:c2:39:d9:5a:f7:ea: ec:19:3b:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIE4oSLsyJwN9cbzKrRX7Spa2V1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2 NEJCOTM1QzAeFw0yNjAzMjYxMjE1NTVaFw0yNjAzMjkxNTQ4NTVaMDMxMTAvBgNV BAMTKDY2RDk2MzY0RUYzNTY4M0ExQUU5REQ1QURCMEQ3QTNENjU1NzJDNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfzxJtns/+eTwBlbmG2pNbM2aB q7kn3T8Eh0dMGBe5l/c0Zc8TVTSpYrGTTFU1onYAKpM2XOKVa1vGr5B2qSm8Q9Hz zD2FO87y9X1BHmr+FZJy3O5/RdI23mCWB8GmVSmUrSkUTtRK0D8fU1iSafsldyU0 kK7CRKophFdBVIGBxTdrRbxkFhij5kE5+gB3CDX4IzZM118vt0ts7Eb5YUKAxKlS atjpHgHm37PPM+o60BndNcML1zfKzEKB4rAlRXqpxC4z1K4Fk+Jb7x/mBOWqUGtb 83WPIURyTjEFDkSy+DdvuzOeKM8YCtbEtI6NTREag3F0IPQgPJ2d14Hruo8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZtljZO81aDoa6d1a2w16PWVXLHUwHwYDVR0j BBgwFoAUYLwwfOHdHI7Z2ch9heTYAGS7k1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGRlNmM4Mi1kOTJiLTQwODUtODg5My1kNjQ3NzkxYzI3N2YvMC82MEJDMzA3Q0Ux REQxQzhFRDlEOUM4N0Q4NUU0RDgwMDY0QkI5MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2NEJC OTM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4 MDA2NEJCOTM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8Gn+J5XfsJY8akTqFRKTmdStf4HrZxcGAD PnpC7NrGdqoIvlywue6KBz40JaBjhTvvB8GA6Qxi6ECHXGXTF/3igWejC5QiKFMC qJM4u5HoCecw0RLv3Joixtc0oVks7UpA/aXpa37EQr+81Qwg7SuaY5kHYW7ajb9H z3iEZKoUw9DJDshHCHbRJ4HNypyLDoagg4X7GBY88iExxnbro07EuoC/RC32y5Gd e8c2N5f7SuenHNk0myYRi6fDknpymFSVp9dnl+7TKbeyekgITDH+GRBfuCBJFEhy 6XUqhMMxiN8RBVJ2/ap7O0JiRSkG5iF5WbyTnMI52Vr36uwZO9U= -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:12 2026 by rpki-client