$ rpki-client -vvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft File: 60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json) Hash identifier: ZVNSJvzrCWJy2c0VwML0aq4z21j+PNBtxTEVzWN+SWM= Subject key identifier: CF:1F:A7:F2:8D:0E:11:99:8B:A9:03:4D:FE:35:50:38:30:3A:05:38 Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05 Certificate issuer: /CN=60B7F65507671C158E1D599CEE8EC29532B62A05 Certificate serial: 04DE7C9B0A67514A0EC89ECE574ADE8AE79B7CD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:39:09 +0000 Manifest this update: Thu 23 Jul 2026 19:34:09 +0000 Manifest next update: Fri 24 Jul 2026 21:57:09 +0000 Files and hashes: 1: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: f5mDSvfNih7PxqkFXcHJMpbKEMxOygYgqTNtyiZK1q4=) 2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:de:7c:9b:0a:67:51:4a:0e:c8:9e:ce:57:4a:de:8a:e7:9b:7c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05 Validity Not Before: Jul 23 19:34:09 2026 GMT Not After : Jul 24 21:57:09 2026 GMT Subject: CN=CF1FA7F28D0E11998BA9034DFE355038303A0538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:76:32:33:f2:93:69:c2:35:af:93:38:f1:53: 66:9f:3b:fe:86:16:03:b6:2f:2d:1c:a8:0b:58:1d: 8b:80:85:6f:48:a0:c1:0f:d0:ea:8a:bd:d3:06:51: e1:57:d6:57:62:98:69:d5:ff:04:c8:b9:a9:40:62: 8d:23:ba:11:0a:e9:60:2b:b7:e2:dc:35:ff:48:4a: d3:97:00:82:67:45:cd:51:65:39:72:24:14:fa:1d: a0:0f:04:75:f0:a6:27:0c:70:7f:e7:90:2a:67:a6: b4:cb:93:f4:31:39:ac:5f:72:76:a9:00:b4:44:af: 98:9f:ce:c0:1b:c4:b3:8e:09:5a:6d:23:37:fe:e5: 37:58:57:ea:1b:c0:36:27:ff:a4:a9:fc:19:4b:ec: 4d:42:a4:c4:e6:41:46:38:c2:24:37:fd:97:e8:56: f4:c6:d4:75:7d:c0:2c:13:5f:dc:9d:03:cc:4b:e7: cc:02:4f:23:62:bd:2d:69:48:9b:aa:84:6b:1f:32: ed:5c:8f:51:62:f1:69:07:8c:10:64:5a:b3:25:b3: 40:06:3d:a9:3a:71:e6:68:2d:b7:9e:6b:50:74:ad: c4:19:96:79:31:2d:88:70:93:b9:78:a4:19:d0:3e: d6:5e:4e:b9:cd:7f:64:fc:4e:bb:cf:cb:fd:4f:3d: f9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1F:A7:F2:8D:0E:11:99:8B:A9:03:4D:FE:35:50:38:30:3A:05:38 X509v3 Authority Key Identifier: keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3e:b0:bd:bf:ed:56:24:ec:89:e5:59:67:b4:2f:7b:62:20: 2d:8c:d0:e0:e4:e8:3e:39:1a:fa:b8:8f:13:4a:3b:ec:4e:59: 88:2f:df:fc:d8:75:c5:9d:7c:96:86:fd:62:ca:71:23:3a:06: a9:79:bf:21:6d:df:e9:7d:9c:cf:ed:30:f4:58:42:bd:23:4e: 7e:31:14:2d:97:98:82:7e:39:90:22:ec:18:75:52:c8:bf:a3: 19:b5:b2:a0:19:1b:7c:4f:22:3c:23:86:c0:c9:12:fb:bb:e3: 44:a3:a2:f6:9f:36:cf:98:f9:44:42:78:c7:ad:ea:28:69:2f: d3:50:3e:a2:01:82:1e:3c:0f:2f:bf:e8:50:1d:90:f5:6a:73: 84:b6:16:99:a9:1d:9d:eb:df:1f:0b:10:4f:47:2f:f8:ba:53: 2f:69:6e:49:d9:db:98:eb:8e:48:7b:6b:3b:21:01:41:46:dd: ae:07:22:aa:a6:71:3d:0b:af:0b:d1:18:3a:3a:08:68:53:dd: 9c:5e:62:1d:57:c9:c3:77:8f:74:a3:cd:25:98:5d:27:1a:8e: e1:45:55:9a:8b:99:17:d5:de:19:27:bb:fe:e9:82:61:35:5d: a5:a4:c7:a0:1d:53:ca:e7:10:36:c8:63:75:72:f8:57:89:05: 64:0c:69:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBN58mwpnUUoOyJ7OV0reiuebfNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUz MkI2MkEwNTAeFw0yNjA3MjMxOTM0MDlaFw0yNjA3MjQyMTU3MDlaMDMxMTAvBgNV BAMTKENGMUZBN0YyOEQwRTExOTk4QkE5MDM0REZFMzU1MDM4MzAzQTA1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCddjIz8pNpwjWvkzjxU2afO/6G FgO2Ly0cqAtYHYuAhW9IoMEP0OqKvdMGUeFX1ldimGnV/wTIualAYo0juhEK6WAr t+LcNf9IStOXAIJnRc1RZTlyJBT6HaAPBHXwpicMcH/nkCpnprTLk/QxOaxfcnap ALREr5ifzsAbxLOOCVptIzf+5TdYV+obwDYn/6Sp/BlL7E1CpMTmQUY4wiQ3/Zfo VvTG1HV9wCwTX9ydA8xL58wCTyNivS1pSJuqhGsfMu1cj1Fi8WkHjBBkWrMls0AG Pak6ceZoLbeea1B0rcQZlnkxLYhwk7l4pBnQPtZeTrnNf2T8TrvPy/1PPfmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzx+n8o0OEZmLqQNN/jVQODA6BTgwHwYDVR0j BBgwFoAUYLf2VQdnHBWOHVmc7o7ClTK2KgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFlMTNiYWMtOTFjMS00NjNiLTgzMzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUw NzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUzMkI2MkEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MEI3RjY1NTA3NjcxQzE1OEUxRDU5OUNFRThFQzI5NTMyQjYy QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMy OTUzMkI2MkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADw+sL2/7VYk7InlWWe0L3tiIC2M0ODk6D45 Gvq4jxNKO+xOWYgv3/zYdcWdfJaG/WLKcSM6Bql5vyFt3+l9nM/tMPRYQr0jTn4x FC2XmIJ+OZAi7Bh1Usi/oxm1sqAZG3xPIjwjhsDJEvu740SjovafNs+Y+URCeMet 6ihpL9NQPqIBgh48Dy+/6FAdkPVqc4S2FpmpHZ3r3x8LEE9HL/i6Uy9pbknZ25jr jkh7azshAUFG3a4HIqqmcT0LrwvRGDo6CGhT3ZxeYh1XycN3j3SjzSWYXScajuFF VZqLmRfV3hknu/7pgmE1XaWkx6AdU8rnEDbIY3Vy+FeJBWQMac8= -----END CERTIFICATE-----Generated at Fri Jul 24 12:07:02 2026 by rpki-client