$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: CzgyFSIlxSEcYZSZPp9VGa5imFBAeaFciGgCTqJzg60= Subject key identifier: C1:AD:7A:6E:5C:81:F1:70:1F:19:53:86:2C:BD:14:4D:A8:79:21:C7 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 05A713811A8E7316DCEC6ACB08F00FF63A0154A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 026A Signing time: Sat 18 Apr 2026 16:41:32 +0000 Manifest this update: Sat 18 Apr 2026 16:36:32 +0000 Manifest next update: Tue 21 Apr 2026 18:30:32 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: 2sm2Fa/cJDGSCOEWdKFFPkWLLzAu/geUOOn7MkK1smk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 18:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a7:13:81:1a:8e:73:16:dc:ec:6a:cb:08:f0:0f:f6:3a:01:54:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Apr 18 16:36:32 2026 GMT Not After : Apr 21 18:30:32 2026 GMT Subject: CN=C1AD7A6E5C81F1701F1953862CBD144DA87921C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:f0:25:30:27:0d:25:3e:05:39:f5:67:ff: 36:6a:9c:df:0a:66:0f:3d:1e:ab:a5:b9:dc:0f:00: c1:10:2e:41:40:03:83:bb:bf:bc:03:e1:66:e4:1b: bf:a7:40:7c:c6:b8:33:75:aa:58:ee:b0:58:be:3d: fe:be:d1:c1:06:e2:85:52:08:93:94:a8:34:2b:c4: fc:6d:ec:3a:ab:3c:73:1a:86:be:9a:14:e7:9e:6b: a1:a2:ad:03:51:9c:9f:8a:05:bd:80:31:2e:c8:22: 42:de:e9:ad:76:de:96:a4:c8:12:7c:c1:f6:ee:23: 1b:f3:d5:f4:82:f0:d9:1e:6b:03:b9:c1:fc:4e:7c: c5:e4:53:3c:e7:07:4a:22:0c:0e:c0:94:54:d4:e6: ed:24:8b:8a:27:d9:bd:a7:00:68:b5:68:6f:26:61: 77:ba:b4:9a:13:75:55:1a:10:a8:50:89:d7:4d:8a: cb:db:d6:58:47:de:b7:49:bb:7b:b1:57:65:19:cc: a7:7f:5a:d4:90:7e:27:fc:4b:7b:50:fb:6d:f0:fc: 77:72:2f:54:bb:e5:e2:73:42:20:df:86:cc:6d:f4: 94:12:9e:58:73:68:3b:b2:9f:8a:5a:be:b6:83:ac: c5:d8:b5:91:51:85:08:22:13:5d:13:9c:66:60:4c: 10:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AD:7A:6E:5C:81:F1:70:1F:19:53:86:2C:BD:14:4D:A8:79:21:C7 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:89:de:99:eb:31:db:b6:33:87:33:cc:07:38:2c:23:f5:2f: 0c:9e:07:c4:a4:ce:d8:f5:8f:4d:4c:52:1b:63:12:b4:80:64: 25:30:58:7d:45:dd:f2:4e:16:ca:13:0e:9a:31:be:2c:ab:82: 09:41:44:b7:d4:19:77:2a:70:02:66:da:71:21:2d:a7:6f:03: c9:eb:1b:e8:ed:f7:bb:48:12:65:93:64:1f:0b:55:32:21:3c: 50:09:df:fa:a5:23:a8:01:6f:5c:e1:76:ef:f2:7b:37:9b:0e: 2c:0c:39:3a:da:7d:17:c7:66:42:19:66:03:14:d1:9b:81:42: 52:e3:2a:3b:6e:ec:1b:a3:ae:c2:41:d6:75:b8:d0:b2:61:8f: 61:9a:e2:33:dc:b5:c8:d0:8f:b7:65:40:f2:60:5f:ec:de:95: c1:b8:ae:b4:a1:f6:e5:a8:f5:ae:77:a8:53:c3:ad:ae:c2:a0: 8d:60:37:18:49:98:37:d9:92:6f:21:7e:07:07:a3:9a:f9:6a: 1e:80:af:17:9d:c4:f7:ca:06:b9:3e:bf:f9:7b:c7:38:15:1e: d4:37:86:ae:fd:ca:07:b4:ca:f8:f7:0b:59:40:ce:ac:1c:3c: b9:d3:ba:8b:a4:4c:14:77:79:c5:29:d7:a0:d5:64:c6:8b:e2: 3c:b3:3e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBacTgRqOcxbc7GrLCPAP9joBVKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNjA0MTgxNjM2MzJaFw0yNjA0MjExODMwMzJaMDMxMTAvBgNV BAMTKEMxQUQ3QTZFNUM4MUYxNzAxRjE5NTM4NjJDQkQxNDREQTg3OTIxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5k/AlMCcNJT4FOfVn/zZqnN8K Zg89HquludwPAMEQLkFAA4O7v7wD4WbkG7+nQHzGuDN1qljusFi+Pf6+0cEG4oVS CJOUqDQrxPxt7DqrPHMahr6aFOeea6GirQNRnJ+KBb2AMS7IIkLe6a123pakyBJ8 wfbuIxvz1fSC8NkeawO5wfxOfMXkUzznB0oiDA7AlFTU5u0ki4on2b2nAGi1aG8m YXe6tJoTdVUaEKhQiddNisvb1lhH3rdJu3uxV2UZzKd/WtSQfif8S3tQ+23w/Hdy L1S75eJzQiDfhsxt9JQSnlhzaDuyn4pavraDrMXYtZFRhQgiE10TnGZgTBD/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwa16blyB8XAfGVOGLL0UTah5IccwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISJ3pnrMdu2M4czzAc4LCP1LwyeB8Skztj1 j01MUhtjErSAZCUwWH1F3fJOFsoTDpoxviyrgglBRLfUGXcqcAJm2nEhLadvA8nr G+jt97tIEmWTZB8LVTIhPFAJ3/qlI6gBb1zhdu/yezebDiwMOTrafRfHZkIZZgMU 0ZuBQlLjKjtu7BujrsJB1nW40LJhj2Ga4jPctcjQj7dlQPJgX+zelcG4rrSh9uWo 9a53qFPDra7CoI1gNxhJmDfZkm8hfgcHo5r5ah6ArxedxPfKBrk+v/l7xzgVHtQ3 hq79yge0yvj3C1lAzqwcPLnTuoukTBR3ecUp16DVZMaL4jyzPoQ= -----END CERTIFICATE-----Generated at Sun Apr 19 13:02:39 2026 by rpki-client