$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft File: 60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json) Hash identifier: 9YKFG34k2WUNEpZYkEacgj/299fqBobpp5IW4gvbt4Q= Subject key identifier: D7:E6:CA:F6:C8:72:BA:52:15:65:1B:22:44:39:03:FB:9D:16:15:00 Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3 Certificate issuer: /CN=60E799376F38EB181976A659060E6D998B4DB2D3 Certificate serial: 251B9651FE056EE94F61689F5BBBF12C360CB16C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 16:56:59 +0000 Manifest this update: Wed 23 Sep 2026 16:51:59 +0000 Manifest next update: Thu 24 Sep 2026 20:24:59 +0000 Files and hashes: 1: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: 8d/P1C6djho+LCNEm08Lf17mPnka8GpZ70Vwy4hMm8c=) 2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=) 3: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=) 4: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:1b:96:51:fe:05:6e:e9:4f:61:68:9f:5b:bb:f1:2c:36:0c:b1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3 Validity Not Before: Sep 23 16:51:59 2026 GMT Not After : Sep 24 20:24:59 2026 GMT Subject: CN=D7E6CAF6C872BA5215651B22443903FB9D161500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:a8:6e:30:cf:93:ac:9d:ee:b1:b6:7e:e5: 23:7f:e7:25:14:7b:1c:39:b1:31:7b:f9:0a:33:3a: 92:09:7e:17:d6:10:bb:a8:e5:ef:17:8a:80:6d:57: 0f:df:c1:6d:af:2e:0d:13:47:13:43:e4:fd:ee:2e: 39:16:c4:03:71:49:d1:17:9f:69:5d:e9:7f:65:5f: 11:5c:72:0b:80:eb:72:3a:3d:8e:f8:ba:be:1c:c3: 71:52:89:bb:d6:21:fd:f9:3e:73:50:83:4d:53:ae: 3c:2a:2a:94:78:8f:71:68:ad:1a:0c:bd:0c:30:79: da:cb:9c:32:c4:69:c3:29:e3:63:61:62:1c:02:58: d7:55:5f:4e:33:2c:69:5b:a3:f8:ca:9b:24:28:a6: 7a:5e:4a:17:ef:5d:04:da:04:89:63:e8:ce:5a:06: 9b:05:04:a8:9b:2e:06:85:49:ed:16:30:53:b2:45: 91:5e:27:3d:d1:79:06:fb:b9:0e:a4:ee:b9:1f:19: 7d:aa:21:b6:eb:b7:c1:d3:43:68:75:0d:2b:e4:cf: c6:fc:43:0f:cd:53:ce:61:f8:16:6f:27:d3:b3:bb: 10:b4:77:8d:d4:9e:c8:c2:9c:68:82:03:b1:98:55: 74:77:5b:56:ef:16:63:93:49:0c:43:0b:d6:e2:c6: 5b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E6:CA:F6:C8:72:BA:52:15:65:1B:22:44:39:03:FB:9D:16:15:00 X509v3 Authority Key Identifier: keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:84:94:27:8a:60:ad:6f:43:d5:ac:30:c2:f7:db:10:23:bd: b7:3d:73:c2:bb:64:88:24:ab:3f:01:d5:c9:c3:c4:92:e0:5e: 98:e2:ba:cb:fe:84:be:41:f9:41:27:e2:55:e6:87:41:37:87: da:6b:e8:60:42:0a:e9:b7:58:62:da:e0:4a:ea:f8:e5:92:fc: e3:c3:71:11:20:73:6b:91:33:94:29:e4:18:7e:eb:d7:26:a7: 1e:47:be:f8:e7:27:2a:55:23:cc:95:dd:ca:95:c0:ab:5c:ec: 98:3a:7f:14:b9:a7:9a:ce:2e:9e:f1:4b:b8:c0:6b:cb:da:50: 71:ae:5a:db:bb:ff:56:25:7c:46:bb:f4:a5:67:54:2f:08:02: 7d:ff:fb:c2:f6:a8:36:f0:9a:62:65:8e:c4:cd:5c:5a:eb:7b: b9:8e:f4:19:f2:ad:1f:6e:a0:99:e5:44:16:92:1a:19:96:38: fd:34:5f:9e:0b:1b:74:7c:54:03:79:e4:03:17:fd:d5:db:36: e6:ad:26:71:da:4c:e8:2d:67:e7:c0:d5:11:35:10:e1:bd:d3: a1:01:a9:a3:39:dc:c4:02:ae:86:ce:45:de:ec:b1:95:45:c6: 35:06:93:2d:41:62:7e:0f:c5:52:a7:f3:fd:1a:13:d6:a2:89: b4:bd:48:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJRuWUf4FbulPYWifW7vxLDYMsWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFNzk5Mzc2RjM4RUIxODE5NzZBNjU5MDYwRTZEOTk4 QjREQjJEMzAeFw0yNjA5MjMxNjUxNTlaFw0yNjA5MjQyMDI0NTlaMDMxMTAvBgNV BAMTKEQ3RTZDQUY2Qzg3MkJBNTIxNTY1MUIyMjQ0MzkwM0ZCOUQxNjE1MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXqhuMM+TrJ3usbZ+5SN/5yUU exw5sTF7+QozOpIJfhfWELuo5e8XioBtVw/fwW2vLg0TRxND5P3uLjkWxANxSdEX n2ld6X9lXxFccguA63I6PY74ur4cw3FSibvWIf35PnNQg01TrjwqKpR4j3ForRoM vQwwedrLnDLEacMp42NhYhwCWNdVX04zLGlbo/jKmyQopnpeShfvXQTaBIlj6M5a BpsFBKibLgaFSe0WMFOyRZFeJz3ReQb7uQ6k7rkfGX2qIbbrt8HTQ2h1DSvkz8b8 Qw/NU85h+BZvJ9OzuxC0d43UnsjCnGiCA7GYVXR3W1bvFmOTSQxDC9bixluTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1+bK9shyulIVZRsiRDkD+50WFQAwHwYDVR0j BBgwFoAUYOeZN2846xgZdqZZBg5tmYtNstMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTlmNTc1ZGItYzczOC00YjhlLWIzNmEtNmIwMjBjNjY4NDlkLzAvNjBFNzk5Mzc2 RjM4RUIxODE5NzZBNjU5MDYwRTZEOTk4QjREQjJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEU3OTkzNzZGMzhFQjE4MTk3NkE2NTkwNjBFNkQ5OThCNERC MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvNjBFNzk5Mzc2RjM4RUIxODE5NzZBNjU5MDYwRTZE OTk4QjREQjJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2ElCeKYK1vQ9WsMML32xAjvbc9c8K7ZIgk qz8B1cnDxJLgXpjiusv+hL5B+UEn4lXmh0E3h9pr6GBCCum3WGLa4Erq+OWS/OPD cREgc2uRM5Qp5Bh+69cmpx5HvvjnJypVI8yV3cqVwKtc7Jg6fxS5p5rOLp7xS7jA a8vaUHGuWtu7/1YlfEa79KVnVC8IAn3/+8L2qDbwmmJljsTNXFrre7mO9BnyrR9u oJnlRBaSGhmWOP00X54LG3R8VAN55AMX/dXbNuatJnHaTOgtZ+fA1RE1EOG906EB qaM53MQCrobORd7ssZVFxjUGky1BYn4PxVKn8/0aE9aiibS9SKQ= -----END CERTIFICATE-----Generated at Thu Sep 24 01:40:51 2026 by rpki-client