$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft File: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft (raw, json) Hash identifier: ZUgAIr8nI3RvZxl2N6IVOmWeUXCfAu4SJSWS8h0Z38s= Subject key identifier: 0D:07:C3:A1:FC:6B:34:60:5C:D9:00:90:40:0B:A4:A6:5F:7F:32:11 Authority key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 Certificate issuer: /CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Certificate serial: 6F10B405EEEBBBC39A7B634AD4EE63EF2E98E303 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 07:15:05 +0000 Manifest this update: Wed 23 Sep 2026 07:10:05 +0000 Manifest next update: Thu 24 Sep 2026 09:20:05 +0000 Files and hashes: 1: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl (hash: +PbhrLpevljk6xTD2sXS8mk8ZshpUn/6Nq0/EISFi9g=) 2: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: +HH+aPxPZPLQQ1zvNRP5gbXlwdQSzndcy7J0pXkGHPc=) 3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: JiRJdm1oFhxxxMsJqGXfYKhPIquMJhUAFsZ9oA78Y3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:10:b4:05:ee:eb:bb:c3:9a:7b:63:4a:d4:ee:63:ef:2e:98:e3:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Validity Not Before: Sep 23 07:10:05 2026 GMT Not After : Sep 24 09:20:05 2026 GMT Subject: CN=0D07C3A1FC6B34605CD90090400BA4A65F7F3211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e0:85:b3:0d:c7:f4:85:27:ca:73:dd:bf:03: a6:9e:7f:ba:c9:f9:23:1b:09:10:18:74:33:2a:71: d4:de:fd:a5:3c:4e:65:c5:d7:9a:de:72:86:cb:5a: d8:5a:4d:5a:ac:7f:98:f8:cb:f5:d4:89:f5:88:45: a6:cc:a1:c5:f6:33:8d:1b:bd:64:85:ec:a2:a5:16: 5b:8a:c2:19:9e:5e:54:27:69:0b:dd:76:42:16:12: a1:6d:95:d8:b3:7e:1e:bc:0b:58:7a:43:e6:b4:94: bf:0a:69:0a:f0:fa:40:3a:9d:7b:52:0d:39:bd:50: 92:46:78:3d:29:c3:4e:82:5d:fa:b6:ba:9e:16:04: 9a:6f:36:24:ff:5f:bc:4c:f3:78:ea:1a:1e:cb:2e: 42:41:17:fa:ad:dd:20:5f:db:9e:eb:30:16:a3:43: 9c:3c:12:7e:5d:45:8d:85:aa:14:ba:e1:41:c1:6f: 00:9b:a0:6b:2f:af:bd:9c:73:2b:86:35:2a:b1:bf: fd:22:05:e4:7e:89:64:e2:19:2b:0b:8b:b5:e4:f1: 27:b7:93:1e:01:a6:36:51:8c:41:fc:ad:ee:6c:21: 31:ab:bd:50:20:b9:f7:6f:40:3c:6c:4b:d3:ef:bf: b3:0f:ff:10:99:25:ee:41:25:9d:c4:46:a5:b5:77: fd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:07:C3:A1:FC:6B:34:60:5C:D9:00:90:40:0B:A4:A6:5F:7F:32:11 X509v3 Authority Key Identifier: keyid:60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:33:a8:10:ef:04:6e:db:14:72:ce:ab:1d:e6:9d:43:75:d3: 0c:34:e8:e5:70:cc:b8:00:10:59:2d:9a:fa:e9:1a:a8:9e:e1: 8e:6e:b7:70:d0:69:a3:c9:f4:88:36:2b:9b:e7:63:b8:62:67: 44:7a:84:4e:ed:0c:9a:10:68:50:89:fb:1d:10:0f:c7:60:c1: 74:51:f9:b0:1a:de:f8:79:72:1f:1d:b4:2a:af:6a:96:f9:60: 7e:f4:ac:1a:75:6e:d8:2c:8a:02:6f:61:c7:84:36:e3:d6:2b: af:12:70:2d:2f:47:55:c0:60:82:8a:d6:c6:8d:4f:d3:bd:3d: eb:29:cb:15:5c:3e:19:72:27:d6:14:33:ab:10:bc:94:6c:38: 96:02:26:84:6c:7a:d3:39:2d:fd:c6:d3:e4:81:7d:81:0c:75: 5c:4e:d2:2a:4a:b8:04:6a:4e:e6:7a:fa:ce:f6:89:30:55:a2: 83:ad:27:a6:b0:c2:11:0d:1c:04:86:84:02:9c:cc:32:7c:38: 67:d7:bc:96:3c:dd:bf:ef:4e:b5:25:82:af:2e:68:17:66:8d: f3:1a:04:8c:ed:26:c4:30:c1:46:38:2d:60:ce:2b:5b:ab:85: 92:28:1e:f4:d5:d0:2f:7c:78:a0:f3:c5:af:78:6e:65:71:62: db:03:5a:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbxC0Be7ru8Oae2NK1O5j7y6Y4wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2 MzI5QkEwNzAeFw0yNjA5MjMwNzEwMDVaFw0yNjA5MjQwOTIwMDVaMDMxMTAvBgNV BAMTKDBEMDdDM0ExRkM2QjM0NjA1Q0Q5MDA5MDQwMEJBNEE2NUY3RjMyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4IWzDcf0hSfKc92/A6aef7rJ +SMbCRAYdDMqcdTe/aU8TmXF15recobLWthaTVqsf5j4y/XUifWIRabMocX2M40b vWSF7KKlFluKwhmeXlQnaQvddkIWEqFtldizfh68C1h6Q+a0lL8KaQrw+kA6nXtS DTm9UJJGeD0pw06CXfq2up4WBJpvNiT/X7xM83jqGh7LLkJBF/qt3SBf257rMBaj Q5w8En5dRY2FqhS64UHBbwCboGsvr72ccyuGNSqxv/0iBeR+iWTiGSsLi7Xk8Se3 kx4BpjZRjEH8re5sITGrvVAgufdvQDxsS9Pvv7MP/xCZJe5BJZ3ERqW1d/2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQfDofxrNGBc2QCQQAukpl9/MhEwHwYDVR0j BBgwFoAUYMkcSM6/3vCBzO5EHYTswmMpugcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5NzFhZTktNWNkZC00ZDQxLWI2MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhD RUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2MzI5QkEwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEM5MUM0OENFQkZERUYwODFDQ0VFNDQxRDg0RUNDMjYzMjlC QTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVD QzI2MzI5QkEwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwzqBDvBG7bFHLOqx3mnUN10ww06OVwzLgA EFktmvrpGqie4Y5ut3DQaaPJ9Ig2K5vnY7hiZ0R6hE7tDJoQaFCJ+x0QD8dgwXRR +bAa3vh5ch8dtCqvapb5YH70rBp1btgsigJvYceENuPWK68ScC0vR1XAYIKK1saN T9O9PespyxVcPhlyJ9YUM6sQvJRsOJYCJoRsetM5Lf3G0+SBfYEMdVxO0ipKuARq TuZ6+s72iTBVooOtJ6awwhENHASGhAKczDJ8OGfXvJY83b/vTrUlgq8uaBdmjfMa BIztJsQwwUY4LWDOK1urhZIoHvTV0C98eKDzxa94bmVxYtsDWmE= -----END CERTIFICATE-----Generated at Thu Sep 24 02:22:33 2026 by rpki-client