$ rpki-client -vvf repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft File: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft (raw, json) Hash identifier: 6Ar5AKgwl568CR28+K1VG2ZZfLslUuaxHHZYhUfi39U= Subject key identifier: A2:D1:E4:AB:A8:0A:D9:A9:62:A2:B0:05:1D:83:9B:DF:F2:E5:6B:56 Authority key identifier: 60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 Certificate issuer: /CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Certificate serial: 4DE5549E57D5BF9D67DE65A4682C231D213925A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft Manifest number: 02BA Signing time: Sun 01 Mar 2026 16:42:00 +0000 Manifest this update: Sun 01 Mar 2026 16:37:00 +0000 Manifest next update: Wed 04 Mar 2026 21:19:00 +0000 Files and hashes: 1: 3130332e3136382e34342e302f32342d3234203d3e20313432333037.roa (hash: xJcRLYTxWRUWjbwdb5KhzRkssxV8FAGUCJzxledmdRo=) 2: 60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl (hash: mu7q12tRkp7t7Qy9eke/WDd9bbqYrsZFKw+E7tQ7iXI=) 3: 3130332e3137392e38342e302f32342d3234203d3e20313432333037.roa (hash: +xcxN+4e+D+gyfY3CKK8YfXazcHblakfG9WnHK8J/Es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e5:54:9e:57:d5:bf:9d:67:de:65:a4:68:2c:23:1d:21:39:25:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60AA01200D121EEEFE22CEFEE76B55720E8D9439 Validity Not Before: Mar 1 16:37:00 2026 GMT Not After : Mar 4 21:19:00 2026 GMT Subject: CN=A2D1E4ABA80AD9A962A2B0051D839BDFF2E56B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e4:e5:18:a8:5e:ec:1f:a5:be:33:9d:52:fe: ea:a2:ce:87:26:c5:3f:89:45:20:3c:0a:0d:c8:1a: a8:cd:7b:0f:f1:71:b1:18:2a:31:d0:48:d7:77:8d: 46:67:7a:3a:8e:90:a9:a1:f2:0e:f4:e8:c5:32:7b: f6:74:83:16:97:d1:ae:cf:8f:58:93:23:15:b0:4f: a2:80:79:da:e4:37:e0:ca:d1:f8:5e:1b:8f:cb:22: 9c:22:45:49:1c:6d:33:64:3c:f7:46:d3:80:a6:6f: a3:fb:2b:6e:cb:36:9b:c9:f1:03:97:9b:0e:4f:55: ad:71:1b:ea:10:bb:23:6e:46:79:f9:b4:86:f7:ae: bb:58:c9:dd:27:c6:8f:30:05:df:5f:7f:18:aa:83: 5b:04:3c:45:ed:08:c3:a1:84:08:6e:c1:e7:ba:77: 4f:b1:7f:33:5c:06:40:fc:06:9b:1b:c3:ca:69:e8: 06:d5:d5:91:b1:24:c5:db:bb:45:c6:7c:a8:39:b5: cc:68:e4:75:75:ed:27:f6:62:db:dd:45:33:3f:c9: 4d:d7:dc:34:8c:02:4b:53:db:6b:b7:75:70:7d:44: 7b:9d:51:08:e7:f4:54:ff:54:f9:6b:39:86:7e:7b: f5:d1:3f:cf:94:66:53:d0:94:d2:64:2e:de:55:a1: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D1:E4:AB:A8:0A:D9:A9:62:A2:B0:05:1D:83:9B:DF:F2:E5:6B:56 X509v3 Authority Key Identifier: keyid:60:AA:01:20:0D:12:1E:EE:FE:22:CE:FE:E7:6B:55:72:0E:8D:94:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60AA01200D121EEEFE22CEFEE76B55720E8D9439.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05f20b2e-a7a8-42fd-92f8-9496233b2c9e/0/60AA01200D121EEEFE22CEFEE76B55720E8D9439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c3:89:13:8a:c1:59:30:55:2d:be:ec:9a:15:64:00:fd:87: 83:8e:44:ca:ad:e1:78:f3:34:ae:d7:2d:57:7c:91:2c:2e:df: 5f:8c:99:c3:3a:4a:94:a7:e7:51:52:23:20:7a:76:ad:aa:69: 8d:89:00:cb:cb:69:5f:6b:b9:06:26:44:e1:94:e1:09:c0:c3: 9c:14:29:64:fd:3d:95:12:20:b2:02:4b:5f:ef:b6:17:4b:f6: 3e:7b:4e:6a:65:e6:c4:ee:ef:97:d5:c4:9c:e5:fb:a6:51:f2: b8:a8:b4:9a:e9:e7:71:1a:12:bd:40:19:e0:6b:18:cf:67:e7: a1:b4:c1:dc:1b:ad:0f:55:a7:61:8c:85:b1:46:cf:0a:ca:65: 06:7e:4b:ea:a4:80:8e:a9:14:48:7e:58:c0:2b:e6:4a:ce:d0: d1:42:f2:f3:08:7e:95:c8:51:fd:e0:46:4d:fe:67:7e:4a:47: 5b:1e:74:6c:0c:2b:48:e6:c7:06:35:5f:20:dc:2c:b0:f2:31: f9:62:15:85:9c:94:57:4e:e8:6a:de:36:3c:77:6f:bf:33:3e: 25:86:86:9e:ef:d3:65:4d:e5:7a:14:0e:17:6e:7b:67:5a:f2: 1b:61:fe:7a:d9:cc:7a:64:c4:a5:6c:5a:9e:04:7c:51:fe:de: c2:4e:47:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeVUnlfVv51n3mWkaCwjHSE5JacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIw RThEOTQzOTAeFw0yNjAzMDExNjM3MDBaFw0yNjAzMDQyMTE5MDBaMDMxMTAvBgNV BAMTKEEyRDFFNEFCQTgwQUQ5QTk2MkEyQjAwNTFEODM5QkRGRjJFNTZCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW5OUYqF7sH6W+M51S/uqizocm xT+JRSA8Cg3IGqjNew/xcbEYKjHQSNd3jUZnejqOkKmh8g706MUye/Z0gxaX0a7P j1iTIxWwT6KAedrkN+DK0fheG4/LIpwiRUkcbTNkPPdG04Cmb6P7K27LNpvJ8QOX mw5PVa1xG+oQuyNuRnn5tIb3rrtYyd0nxo8wBd9ffxiqg1sEPEXtCMOhhAhuwee6 d0+xfzNcBkD8Bpsbw8pp6AbV1ZGxJMXbu0XGfKg5tcxo5HV17Sf2YtvdRTM/yU3X 3DSMAktT22u3dXB9RHudUQjn9FT/VPlrOYZ+e/XRP8+UZlPQlNJkLt5VobWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUotHkq6gK2aliorAFHYOb3/Lla1YwHwYDVR0j BBgwFoAUYKoBIA0SHu7+Is7+52tVcg6NlDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWYyMGIyZS1hN2E4LTQyZmQtOTJmOC05NDk2MjMzYjJjOWUvMC82MEFBMDEyMDBE MTIxRUVFRkUyMkNFRkVFNzZCNTU3MjBFOEQ5NDM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1NzIwRThE OTQzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVmMjBiMmUtYTdhOC00MmZkLTky ZjgtOTQ5NjIzM2IyYzllLzAvNjBBQTAxMjAwRDEyMUVFRUZFMjJDRUZFRTc2QjU1 NzIwRThEOTQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDDiROKwVkwVS2+7JoVZAD9h4OORMqt4Xjz NK7XLVd8kSwu31+MmcM6SpSn51FSIyB6dq2qaY2JAMvLaV9ruQYmROGU4QnAw5wU KWT9PZUSILICS1/vthdL9j57Tmpl5sTu75fVxJzl+6ZR8riotJrp53EaEr1AGeBr GM9n56G0wdwbrQ9Vp2GMhbFGzwrKZQZ+S+qkgI6pFEh+WMAr5krO0NFC8vMIfpXI Uf3gRk3+Z35KR1sedGwMK0jmxwY1XyDcLLDyMfliFYWclFdO6GreNjx3b78zPiWG hp7v02VN5XoUDhdue2da8hth/nrZzHpkxKVsWp4EfFH+3sJORzo= -----END CERTIFICATE-----Generated at Mon Mar 2 09:15:15 2026 by rpki-client