$ rpki-client -vvf repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft File: 60EED32BAAFA382342DABD544A906AFB859D9026.mft (raw, json) Hash identifier: CtilWyIZ2JistEw8oX6lTbj2EBV6tZ1sWta5T8+3j/o= Subject key identifier: 16:8F:77:3C:65:D6:CB:B4:C1:10:C7:2E:EF:C8:73:CF:55:8A:2A:37 Authority key identifier: 60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 Certificate issuer: /CN=60EED32BAAFA382342DABD544A906AFB859D9026 Certificate serial: 489DDDDFCEFAA25A1F5C49D90CFC73AB197BD037 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft Manifest number: 0255 Signing time: Sun 01 Mar 2026 09:21:32 +0000 Manifest this update: Sun 01 Mar 2026 09:16:32 +0000 Manifest next update: Wed 04 Mar 2026 13:44:32 +0000 Files and hashes: 1: 60EED32BAAFA382342DABD544A906AFB859D9026.crl (hash: XuxmmnAWUvZIbnwSQyAVtmNHWarrCKgAR9iimiClXEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9d:dd:df:ce:fa:a2:5a:1f:5c:49:d9:0c:fc:73:ab:19:7b:d0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EED32BAAFA382342DABD544A906AFB859D9026 Validity Not Before: Mar 1 09:16:32 2026 GMT Not After : Mar 4 13:44:32 2026 GMT Subject: CN=168F773C65D6CBB4C110C72EEFC873CF558A2A37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:35:1e:9d:b9:ba:9a:8d:3f:be:95:51:9e:55: 03:ca:a0:04:c4:a2:2d:80:0f:06:f5:1d:d9:b9:be: 58:50:11:da:a7:da:15:67:b3:1c:77:5d:0e:76:3b: 03:a5:93:4b:71:fb:1f:28:69:a5:ab:43:81:d2:c3: d4:fb:68:12:0b:36:64:d2:33:1e:a8:c6:11:b2:db: 25:77:8c:04:06:20:2a:f3:89:b0:0d:93:29:07:d2: 0c:b2:4b:db:bf:c7:5f:83:3e:f6:74:cc:6a:c2:7f: 27:08:b9:c7:9f:2b:01:ff:d7:70:fe:e9:d4:33:86: 2d:2b:b8:a1:de:07:25:fd:69:e2:7a:6d:ba:c2:e6: 28:69:83:c5:3e:d4:71:3e:d8:36:22:76:32:a8:14: c5:29:90:ca:ff:ad:4e:c0:f6:b6:a5:44:5c:4d:15: 60:61:5b:01:3a:cb:82:b8:36:1c:8d:db:06:93:7d: 3f:c8:a4:7a:6c:2e:24:16:b6:2a:10:7a:ab:c0:68: dc:8f:c1:c5:7f:fe:33:ca:24:7c:f5:1c:13:b0:01: 09:3b:46:13:38:06:12:a1:94:dc:2c:18:2f:23:aa: 60:e4:91:a8:02:b2:77:12:28:5e:9f:91:7b:77:ce: 77:c7:36:3d:b6:16:e4:40:1e:28:3e:e3:d4:96:1c: 43:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8F:77:3C:65:D6:CB:B4:C1:10:C7:2E:EF:C8:73:CF:55:8A:2A:37 X509v3 Authority Key Identifier: keyid:60:EE:D3:2B:AA:FA:38:23:42:DA:BD:54:4A:90:6A:FB:85:9D:90:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EED32BAAFA382342DABD544A906AFB859D9026.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0560d2df-65ff-43a8-a983-3320cf9fd292/0/60EED32BAAFA382342DABD544A906AFB859D9026.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:b3:e5:68:93:7e:7b:27:de:26:e1:29:96:44:5b:48:5e:5a: 84:8c:91:45:27:2c:19:01:53:91:e2:7b:b3:3b:93:96:32:7c: 03:d1:05:95:9b:a9:a5:66:16:9a:95:f2:61:31:98:f8:ee:be: cf:76:1e:36:d8:9e:18:0e:f9:5a:e9:4b:5e:83:a2:a4:8b:44: ef:71:b6:ab:0e:22:c6:e9:5f:b7:f0:ce:49:d2:b4:64:3d:6e: 66:17:5a:bb:1e:7a:3d:f5:b3:22:56:0c:5d:7b:e9:a1:a3:f2: 24:49:e2:aa:49:f0:45:da:a9:1c:1f:1d:df:b1:24:14:4e:f9: b8:a1:55:eb:ab:b3:8c:de:48:f9:bf:36:8c:72:96:d6:ca:72: 4b:0f:6f:26:4f:41:55:7f:7d:fc:33:68:33:a8:cc:de:7e:91: d6:33:c2:87:3b:17:02:45:7b:f6:fe:d3:42:d2:cd:f7:67:a7: e4:f9:38:f6:1c:0f:d6:87:07:d7:41:37:c9:1b:14:89:b4:f7: ec:76:1b:5e:64:a3:ad:f4:29:a3:eb:d0:f8:a3:fd:27:6e:f2: 2c:ed:92:34:8e:1a:8d:2c:18:0b:7d:9d:9d:6e:8a:91:02:2e: 10:b5:fe:eb:1f:49:5e:d9:b9:97:aa:73:48:e4:d5:ee:27:0d: 8c:9f:e5:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJ3d3876olofXEnZDPxzqxl70DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4 NTlEOTAyNjAeFw0yNjAzMDEwOTE2MzJaFw0yNjAzMDQxMzQ0MzJaMDMxMTAvBgNV BAMTKDE2OEY3NzNDNjVENkNCQjRDMTEwQzcyRUVGQzg3M0NGNTU4QTJBMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNR6dubqajT++lVGeVQPKoATE oi2ADwb1Hdm5vlhQEdqn2hVnsxx3XQ52OwOlk0tx+x8oaaWrQ4HSw9T7aBILNmTS Mx6oxhGy2yV3jAQGICrzibANkykH0gyyS9u/x1+DPvZ0zGrCfycIucefKwH/13D+ 6dQzhi0ruKHeByX9aeJ6bbrC5ihpg8U+1HE+2DYidjKoFMUpkMr/rU7A9ralRFxN FWBhWwE6y4K4NhyN2waTfT/IpHpsLiQWtioQeqvAaNyPwcV//jPKJHz1HBOwAQk7 RhM4BhKhlNwsGC8jqmDkkagCsncSKF6fkXt3znfHNj22FuRAHig+49SWHEP9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFo93PGXWy7TBEMcu78hzz1WKKjcwHwYDVR0j BBgwFoAUYO7TK6r6OCNC2r1USpBq+4WdkCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NTYwZDJkZi02NWZmLTQzYTgtYTk4My0zMzIwY2Y5ZmQyOTIvMC82MEVFRDMyQkFB RkEzODIzNDJEQUJENTQ0QTkwNkFGQjg1OUQ5MDI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZBRkI4NTlE OTAyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDU2MGQyZGYtNjVmZi00M2E4LWE5 ODMtMzMyMGNmOWZkMjkyLzAvNjBFRUQzMkJBQUZBMzgyMzQyREFCRDU0NEE5MDZB RkI4NTlEOTAyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKz5WiTfnsn3ibhKZZEW0heWoSMkUUnLBkB U5Hie7M7k5YyfAPRBZWbqaVmFpqV8mExmPjuvs92HjbYnhgO+VrpS16DoqSLRO9x tqsOIsbpX7fwzknStGQ9bmYXWrseej31syJWDF176aGj8iRJ4qpJ8EXaqRwfHd+x JBRO+bihVeurs4zeSPm/NoxyltbKcksPbyZPQVV/ffwzaDOozN5+kdYzwoc7FwJF e/b+00LSzfdnp+T5OPYcD9aHB9dBN8kbFIm09+x2G15ko630KaPr0Pij/Sdu8izt kjSOGo0sGAt9nZ1uipECLhC1/usfSV7ZuZeqc0jk1e4nDYyf5Zk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:43 2026 by rpki-client