$ rpki-client -vvf rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft File: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft (raw, json) Hash identifier: xt4HTH9HnIvlKS9heXhswgFFmgZLirWzGSbaXTgtCTI= Subject key identifier: 1D:96:0C:BD:C0:47:8D:87:07:A0:2B:CB:DE:F5:60:7E:CD:7A:2A:88 Authority key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 Certificate issuer: /CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Certificate serial: 467D919C272AE4AC2C2846F14DB38F8AEA9C58BD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 00:55:10 +0000 Manifest this update: Fri 24 Jul 2026 00:50:10 +0000 Manifest next update: Sat 25 Jul 2026 03:56:10 +0000 Files and hashes: 1: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl (hash: rI89RAQE4BzIb+rL/M4AGRFJBwgUJG7OtJfdyl/WOB4=) 2: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: JiRJdm1oFhxxxMsJqGXfYKhPIquMJhUAFsZ9oA78Y3M=) 3: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: +HH+aPxPZPLQQ1zvNRP5gbXlwdQSzndcy7J0pXkGHPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7d:91:9c:27:2a:e4:ac:2c:28:46:f1:4d:b3:8f:8a:ea:9c:58:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Validity Not Before: Jul 24 00:50:10 2026 GMT Not After : Jul 25 03:56:10 2026 GMT Subject: CN=1D960CBDC0478D8707A02BCBDEF5607ECD7A2A88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:31:70:96:bc:d3:2a:e7:21:c4:06:59:fe: c8:5f:b9:80:b9:b0:b8:e0:b9:11:3c:9c:5f:92:02: 20:b4:0f:27:79:fc:bd:8e:a0:77:a1:2e:05:2e:19: 0a:bd:48:55:6c:d1:6a:48:a8:17:93:36:9a:3b:f2: 55:2b:ab:d0:21:40:47:63:6e:cc:00:97:1b:84:a2: 28:44:cb:d5:a6:eb:eb:36:22:a4:19:b0:44:95:14: 4d:ac:f0:80:db:56:db:66:b3:7e:39:2b:cd:09:01: f3:71:a6:8c:a6:ce:e9:54:a4:f3:47:22:c8:f0:cf: c0:9c:25:6c:bc:20:e2:9b:7e:06:5b:99:d6:9f:1f: 0d:d1:07:cd:c2:9a:75:8c:6d:3a:f7:ef:21:a8:05: 18:c0:6f:d7:c5:cf:a2:77:07:ba:bc:85:87:68:10: 9e:e0:d2:57:71:c9:89:fe:20:64:28:14:45:a9:31: 6c:72:73:4b:8d:eb:6b:cf:25:d5:08:79:cb:16:aa: 75:e0:ae:42:df:50:21:ad:2d:5b:ea:d6:f9:bc:53: ab:b0:13:af:cb:a4:5d:c9:fe:b1:64:dd:9c:f6:17: a2:41:94:77:a8:79:da:e4:ea:5d:63:f0:40:95:cc: e9:76:67:75:2b:c9:1b:0b:85:28:1b:90:d3:cb:61: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:96:0C:BD:C0:47:8D:87:07:A0:2B:CB:DE:F5:60:7E:CD:7A:2A:88 X509v3 Authority Key Identifier: keyid:60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f0:6d:09:f1:d5:ee:7e:0a:f8:45:62:d0:f5:5c:9e:dd:70: 19:b8:57:d2:dc:27:72:e2:7b:64:a2:a3:00:6d:74:cc:23:2c: 6d:f1:18:9c:8b:be:d3:da:19:7e:98:c7:38:83:60:95:50:32: 4c:7c:41:0e:f2:6b:37:80:c3:c1:f2:93:7a:34:cc:e2:11:da: 45:ac:d5:22:20:8f:b5:ff:52:32:bd:5b:ec:73:86:8e:d9:f3: f5:36:1c:03:08:57:60:ca:06:71:ce:b3:c6:d3:94:23:f9:60: b2:86:5c:fd:92:39:78:33:61:f9:e4:94:eb:47:75:6a:12:83: 0a:6e:68:d2:90:8d:9c:1d:61:4a:1b:dd:3b:17:af:29:67:a7: 1f:ba:ef:58:7c:b0:8b:bc:45:4b:f8:50:12:82:51:f7:8f:7c: ea:03:fa:8e:4b:59:2c:1d:ef:2c:5b:dc:52:19:77:31:34:42: d2:00:5b:b3:ee:32:42:8f:79:3c:b1:de:4a:1e:be:36:59:77: 1e:b9:c6:8d:4a:82:ce:75:5b:15:1a:98:e6:03:62:18:64:45: ec:26:f6:55:1b:4f:d9:cc:82:95:f8:41:17:24:b2:67:38:c3: 0f:f8:52:42:c4:ce:e4:c1:d3:98:ef:4d:ad:cb:01:8d:60:63: c7:f5:00:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURn2RnCcq5KwsKEbxTbOPiuqcWL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2 MzI5QkEwNzAeFw0yNjA3MjQwMDUwMTBaFw0yNjA3MjUwMzU2MTBaMDMxMTAvBgNV BAMTKDFEOTYwQ0JEQzA0NzhEODcwN0EwMkJDQkRFRjU2MDdFQ0Q3QTJBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWDFwlrzTKuchxAZZ/shfuYC5 sLjguRE8nF+SAiC0Dyd5/L2OoHehLgUuGQq9SFVs0WpIqBeTNpo78lUrq9AhQEdj bswAlxuEoihEy9Wm6+s2IqQZsESVFE2s8IDbVttms345K80JAfNxpoymzulUpPNH Isjwz8CcJWy8IOKbfgZbmdafHw3RB83CmnWMbTr37yGoBRjAb9fFz6J3B7q8hYdo EJ7g0ldxyYn+IGQoFEWpMWxyc0uN62vPJdUIecsWqnXgrkLfUCGtLVvq1vm8U6uw E6/LpF3J/rFk3Zz2F6JBlHeoedrk6l1j8ECVzOl2Z3UryRsLhSgbkNPLYY6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHZYMvcBHjYcHoCvL3vVgfs16KogwHwYDVR0j BBgwFoAUYMkcSM6/3vCBzO5EHYTswmMpugcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5NzFhZTktNWNkZC00ZDQxLWI2MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhD RUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2MzI5QkEwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEM5MUM0OENFQkZERUYwODFDQ0VFNDQxRDg0RUNDMjYzMjlC QTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVD QzI2MzI5QkEwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjwbQnx1e5+CvhFYtD1XJ7dcBm4V9LcJ3Li e2SiowBtdMwjLG3xGJyLvtPaGX6YxziDYJVQMkx8QQ7yazeAw8Hyk3o0zOIR2kWs 1SIgj7X/UjK9W+xzho7Z8/U2HAMIV2DKBnHOs8bTlCP5YLKGXP2SOXgzYfnklOtH dWoSgwpuaNKQjZwdYUob3TsXrylnpx+671h8sIu8RUv4UBKCUfePfOoD+o5LWSwd 7yxb3FIZdzE0QtIAW7PuMkKPeTyx3koevjZZdx65xo1Kgs51WxUamOYDYhhkRewm 9lUbT9nMgpX4QRcksmc4ww/4UkLEzuTB05jvTa3LAY1gY8f1AGQ= -----END CERTIFICATE-----Generated at Fri Jul 24 08:49:54 2026 by rpki-client