$ rpki-client -vvf rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft File: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft (raw, json) Hash identifier: PoJXwUwN33eH7jPgfgKvoZ2YlRHpByHMv6Lwtqgchh4= Subject key identifier: 05:07:BB:71:D0:66:B5:12:A4:B3:45:B4:F2:D9:CA:8E:D1:BF:94:48 Authority key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 Certificate issuer: /CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Certificate serial: 1169A4A3296FE61149C567FEFDF07108D4832CDE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:11:54 +0000 Manifest this update: Tue 12 May 2026 20:06:54 +0000 Manifest next update: Wed 13 May 2026 20:22:54 +0000 Files and hashes: 1: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: +HH+aPxPZPLQQ1zvNRP5gbXlwdQSzndcy7J0pXkGHPc=) 2: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: JiRJdm1oFhxxxMsJqGXfYKhPIquMJhUAFsZ9oA78Y3M=) 3: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl (hash: IPjyjSiMuCMfCSAi6IC9OozfPSulP3tcrJGigdEuV6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:69:a4:a3:29:6f:e6:11:49:c5:67:fe:fd:f0:71:08:d4:83:2c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Validity Not Before: May 12 20:06:54 2026 GMT Not After : May 13 20:22:54 2026 GMT Subject: CN=0507BB71D066B512A4B345B4F2D9CA8ED1BF9448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:39:80:9f:d0:da:3e:c2:ba:cf:25:12:4e: 10:ca:ca:f2:87:19:37:9c:f1:8e:8e:d8:bc:ef:cf: 6a:73:a6:12:cf:90:c1:2a:f3:05:e1:66:dd:70:3a: e5:83:c3:21:b9:a5:99:aa:c8:7e:cf:9f:b5:0f:d1: b0:f7:5a:44:1b:82:ce:94:c4:07:a3:43:4f:e0:69: a6:3b:61:75:23:74:73:df:2a:6b:8d:bd:48:be:08: 99:7b:cd:e8:61:19:8d:57:42:59:37:15:62:ea:e5: 61:9f:76:ad:b8:db:0d:f6:95:e1:1a:53:03:e5:05: f8:c7:3a:70:de:3b:32:e5:b3:97:30:96:01:40:55: d5:1d:33:65:d4:37:a2:71:64:77:61:6e:9e:80:86: 05:52:e5:69:cf:fc:82:75:0d:85:a1:c2:fc:dd:28: 9e:ea:cb:7c:70:1f:1d:6d:b7:31:26:ff:d2:75:77: 82:17:82:03:cb:76:99:ef:06:9f:4f:a5:99:59:cb: 66:e3:50:1c:c7:c4:ae:01:07:57:eb:52:3b:c7:d0: b1:32:2a:11:59:d0:e4:8d:c5:ee:74:9a:37:66:9a: 0d:e4:93:2b:f2:76:25:72:82:73:01:40:a7:d7:72: 20:b3:7a:1c:88:08:d5:6b:d0:d8:f3:48:db:07:03: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:07:BB:71:D0:66:B5:12:A4:B3:45:B4:F2:D9:CA:8E:D1:BF:94:48 X509v3 Authority Key Identifier: keyid:60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f2:dd:c7:c3:b8:68:ee:f9:fe:92:1c:b9:47:da:3b:39:dc: f0:1e:b3:2d:96:14:3c:f1:68:3d:81:a0:f7:c0:20:70:33:45: 12:0e:7a:3e:3a:13:cd:68:f6:68:91:84:08:2b:e9:75:21:be: 1e:f6:89:85:74:6f:f0:bd:3e:1c:36:2f:5e:4e:5c:3d:80:06: 7c:17:56:7d:24:fd:d1:df:97:d6:92:61:aa:72:56:16:d0:fb: 92:91:bb:cd:7b:e3:e8:12:15:a3:03:0c:9d:f4:61:b2:1d:a8: e5:28:37:2c:09:22:02:20:07:21:47:69:35:c9:e5:77:ab:e5: 74:ac:91:16:a7:39:5e:e0:96:c2:44:c6:3c:b2:aa:09:0f:1c: 45:aa:57:2d:08:93:87:e7:59:90:2f:95:09:94:8e:5f:1d:b0: c9:5d:4d:85:af:f7:24:aa:fe:66:44:5d:91:fa:da:0b:66:99: ef:fa:c4:4d:e8:aa:2a:e4:e6:f8:ee:0f:5c:39:3d:ce:3f:6c: 09:83:4e:51:56:04:b2:51:28:c9:84:02:8a:f5:0a:99:1f:b2: 8f:3e:28:7d:df:0e:cc:26:e1:70:2d:e5:d9:a7:32:f8:a4:f4: 62:22:a8:81:16:cf:09:90:c1:f8:2b:67:b9:01:38:60:14:a1: 27:a6:b8:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWmkoylv5hFJxWf+/fBxCNSDLN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2 MzI5QkEwNzAeFw0yNjA1MTIyMDA2NTRaFw0yNjA1MTMyMDIyNTRaMDMxMTAvBgNV BAMTKDA1MDdCQjcxRDA2NkI1MTJBNEIzNDVCNEYyRDlDQThFRDFCRjk0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUPDmAn9DaPsK6zyUSThDKyvKH GTec8Y6O2Lzvz2pzphLPkMEq8wXhZt1wOuWDwyG5pZmqyH7Pn7UP0bD3WkQbgs6U xAejQ0/gaaY7YXUjdHPfKmuNvUi+CJl7zehhGY1XQlk3FWLq5WGfdq242w32leEa UwPlBfjHOnDeOzLls5cwlgFAVdUdM2XUN6JxZHdhbp6AhgVS5WnP/IJ1DYWhwvzd KJ7qy3xwHx1ttzEm/9J1d4IXggPLdpnvBp9PpZlZy2bjUBzHxK4BB1frUjvH0LEy KhFZ0OSNxe50mjdmmg3kkyvydiVygnMBQKfXciCzehyICNVr0NjzSNsHAx9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBQe7cdBmtRKks0W08tnKjtG/lEgwHwYDVR0j BBgwFoAUYMkcSM6/3vCBzO5EHYTswmMpugcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5NzFhZTktNWNkZC00ZDQxLWI2MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhD RUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2MzI5QkEwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEM5MUM0OENFQkZERUYwODFDQ0VFNDQxRDg0RUNDMjYzMjlC QTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVD QzI2MzI5QkEwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKry3cfDuGju+f6SHLlH2js53PAesy2WFDzx aD2BoPfAIHAzRRIOej46E81o9miRhAgr6XUhvh72iYV0b/C9Phw2L15OXD2ABnwX Vn0k/dHfl9aSYapyVhbQ+5KRu8174+gSFaMDDJ30YbIdqOUoNywJIgIgByFHaTXJ 5Xer5XSskRanOV7glsJExjyyqgkPHEWqVy0Ik4fnWZAvlQmUjl8dsMldTYWv9ySq /mZEXZH62gtmme/6xE3oqirk5vjuD1w5Pc4/bAmDTlFWBLJRKMmEAor1Cpkfso8+ KH3fDswm4XAt5dmnMvik9GIiqIEWzwmQwfgrZ7kBOGAUoSemuLk= -----END CERTIFICATE-----Generated at Tue May 12 23:45:44 2026 by rpki-client