$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft File: 60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json) Hash identifier: blvBZJ457SgsSnBnXBxFurwNCGRx7y5wAy8YEC0xmpw= Subject key identifier: 4D:F0:E0:FB:FD:27:C7:3E:8C:62:73:DD:C5:3B:15:4F:29:24:35:D7 Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05 Certificate issuer: /CN=60B7F65507671C158E1D599CEE8EC29532B62A05 Certificate serial: 2EC37B48775E2D88EDA803231F37EB84B5E7BCB2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 14:58:10 +0000 Manifest this update: Sat 14 Nov 2026 14:53:10 +0000 Manifest next update: Sun 15 Nov 2026 18:56:10 +0000 Files and hashes: 1: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: Eo0qAAOdb4PtAGV69z6blRuBKaXHuPOrH44VN9f44jk=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c3:7b:48:77:5e:2d:88:ed:a8:03:23:1f:37:eb:84:b5:e7:bc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05 Validity Not Before: Nov 14 14:53:10 2026 GMT Not After : Nov 15 18:56:10 2026 GMT Subject: CN=4DF0E0FBFD27C73E8C6273DDC53B154F292435D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:df:b2:d9:f3:32:62:54:df:18:c9:aa:47: 69:d0:df:85:08:b1:2b:c2:15:e5:57:4d:02:d3:93: aa:f7:94:dd:22:78:29:f3:6b:b3:74:d6:61:c2:c6: e1:29:f7:6d:f1:a8:78:cd:84:6c:86:1c:a1:a2:b0: fa:d5:67:c0:f3:de:a0:a6:37:4b:56:05:b4:2a:e9: 32:de:ef:ac:f2:9c:53:f8:f3:1a:3d:5f:70:99:38: 61:c5:15:bd:b1:7b:ed:ec:7a:3e:8f:dd:5f:ac:88: 55:86:ca:2d:be:0e:ed:e9:a0:8d:9a:29:09:d9:5a: 47:3f:eb:9e:dc:f0:e8:41:3f:26:6d:dc:bf:11:46: ed:83:ef:67:2a:a3:22:3f:79:76:7d:0c:bc:28:b6: d2:41:ff:c6:51:54:04:d2:01:b6:4a:da:97:b4:8b: 01:9f:b7:84:88:84:1f:51:29:e0:7f:f5:59:4c:52: ac:32:61:f7:6f:a0:28:c8:1d:9e:00:6f:56:73:06: 2a:15:6f:4a:a0:f1:78:fd:04:0c:14:b9:32:cd:08: de:9c:68:f9:da:ac:b9:14:fc:1e:31:58:d2:0b:f5: da:92:29:5e:39:6c:e0:19:1c:68:df:ef:1d:6b:8f: 66:3d:91:9f:52:9f:65:97:c7:be:19:11:c3:a9:c4: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:E0:FB:FD:27:C7:3E:8C:62:73:DD:C5:3B:15:4F:29:24:35:D7 X509v3 Authority Key Identifier: keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a5:87:91:0e:14:18:68:da:d2:00:c4:5a:8d:d8:43:cd:64: d9:ca:52:e0:49:e8:06:5c:83:40:6b:de:f3:dd:05:04:2b:d7: 8e:c9:ac:f2:71:e3:b7:ce:ec:e7:81:ce:fc:1b:bb:0a:4b:d3: dd:fa:26:d0:5b:83:50:9d:92:92:24:11:3d:ce:80:e0:47:26: c3:72:37:fe:bb:83:9c:eb:5c:07:4b:b5:be:4b:7c:84:80:5a: 84:e4:05:14:78:e3:d1:1a:a1:09:7c:5a:61:80:a8:21:47:ce: 50:53:c3:a5:96:a9:44:7d:0b:2b:b7:bb:28:8a:18:d3:bf:fb: d7:b2:16:c2:d5:68:76:ca:94:b8:03:1d:55:0f:31:c0:6b:88: 99:40:47:46:41:37:7c:74:af:19:af:4e:71:2e:2b:c7:ca:49: 82:90:85:23:eb:ab:b8:8e:c7:95:c1:e2:6e:9f:1c:26:fe:fe: 4c:c1:83:3a:a4:66:26:96:55:a1:e9:73:9d:31:25:59:7e:de: f9:cf:68:c5:d3:c1:2a:91:82:f0:cb:81:06:b2:22:b5:70:23: 15:ce:f2:af:5a:b5:71:5a:75:c4:e9:27:cd:d3:c0:9a:ca:87: 5a:d5:76:d9:72:b8:83:4e:96:b7:7d:f3:89:fb:3d:be:e7:9e: 56:25:a5:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULsN7SHdeLYjtqAMjHzfrhLXnvLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUz MkI2MkEwNTAeFw0yNjExMTQxNDUzMTBaFw0yNjExMTUxODU2MTBaMDMxMTAvBgNV BAMTKDRERjBFMEZCRkQyN0M3M0U4QzYyNzNEREM1M0IxNTRGMjkyNDM1RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWHN+y2fMyYlTfGMmqR2nQ34UI sSvCFeVXTQLTk6r3lN0ieCnza7N01mHCxuEp923xqHjNhGyGHKGisPrVZ8Dz3qCm N0tWBbQq6TLe76zynFP48xo9X3CZOGHFFb2xe+3sej6P3V+siFWGyi2+Du3poI2a KQnZWkc/657c8OhBPyZt3L8RRu2D72cqoyI/eXZ9DLwottJB/8ZRVATSAbZK2pe0 iwGft4SIhB9RKeB/9VlMUqwyYfdvoCjIHZ4Ab1ZzBioVb0qg8Xj9BAwUuTLNCN6c aPnarLkU/B4xWNIL9dqSKV45bOAZHGjf7x1rj2Y9kZ9Sn2WXx74ZEcOpxM1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTfDg+/0nxz6MYnPdxTsVTykkNdcwHwYDVR0j BBgwFoAUYLf2VQdnHBWOHVmc7o7ClTK2KgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFlMTNiYWMtOTFjMS00NjNiLTgzMzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUw NzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUzMkI2MkEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MEI3RjY1NTA3NjcxQzE1OEUxRDU5OUNFRThFQzI5NTMyQjYy QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMy OTUzMkI2MkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOlh5EOFBho2tIAxFqN2EPNZNnKUuBJ6AZc g0Br3vPdBQQr147JrPJx47fO7OeBzvwbuwpL0936JtBbg1CdkpIkET3OgOBHJsNy N/67g5zrXAdLtb5LfISAWoTkBRR449EaoQl8WmGAqCFHzlBTw6WWqUR9Cyu3uyiK GNO/+9eyFsLVaHbKlLgDHVUPMcBriJlAR0ZBN3x0rxmvTnEuK8fKSYKQhSPrq7iO x5XB4m6fHCb+/kzBgzqkZiaWVaHpc50xJVl+3vnPaMXTwSqRgvDLgQayIrVwIxXO 8q9atXFadcTpJ83TwJrKh1rVdtlyuINOlrd984n7Pb7nnlYlpbg= -----END CERTIFICATE-----Generated at Sun Nov 15 08:35:41 2026 by rpki-client