$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: eU83N8QmlnK8XXoJ9nqFzLtt4QRH16aEU9Mv09LuBE4= Subject key identifier: 7C:4E:31:46:39:38:A0:E6:FE:CF:D6:20:9F:8A:F7:B5:6D:2B:2F:7E Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 0C20D069E0572CDADD7845D8D617DFDFC9E44059 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 0574 Signing time: Thu 16 Apr 2026 19:21:59 +0000 Manifest this update: Thu 16 Apr 2026 19:16:59 +0000 Manifest next update: Sun 19 Apr 2026 19:58:59 +0000 Files and hashes: 1: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) 2: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: UDzDrpoFBXiuF91g0Gi7oyZo3s0Ls2KH3veJrEkaJ0o=) 3: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) 4: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) 5: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: LxSVJV070gN5FjdUX054wO7XGmRkz6K/WxRCNonXpkA=) 6: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: xUdwfWhj/DTW37oHxA2M7SzJ+NkmDLXU1C60QSD07Pk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 19:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:20:d0:69:e0:57:2c:da:dd:78:45:d8:d6:17:df:df:c9:e4:40:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Apr 16 19:16:59 2026 GMT Not After : Apr 19 19:58:59 2026 GMT Subject: CN=7C4E31463938A0E6FECFD6209F8AF7B56D2B2F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:a3:fc:1e:72:69:0d:41:4f:a0:26:de:0f: ea:16:3b:1b:2f:3d:a6:43:e3:07:cf:ac:f1:94:b7: 9d:43:f5:fa:26:ec:16:f0:be:55:7f:89:62:87:0b: 3e:58:94:ea:ba:3e:28:6c:cc:c3:9b:6d:90:a6:c6: 00:84:b8:2e:a2:b4:74:05:66:ad:53:75:63:74:1d: 32:f9:ca:8f:e7:d5:34:86:a1:cb:ea:60:45:be:9c: 95:75:9b:ae:52:c0:ff:d9:e4:ae:1b:f2:df:d2:9b: eb:da:7f:d3:4c:c4:6c:a8:a6:20:a4:3c:12:2e:19: 2c:34:a0:e7:cd:59:38:45:9e:ae:55:99:41:2e:e4: 72:65:c4:ef:03:78:c0:0d:8d:a0:e3:38:bb:15:37: 60:32:74:90:8c:ed:ca:96:43:73:e8:84:47:e4:da: bb:87:a8:c5:53:2d:24:2c:04:a1:5e:b8:e8:c9:81: 23:21:9c:eb:07:25:1d:65:40:ab:03:25:f2:1d:e5: a8:a3:15:e8:bc:28:5b:3d:7c:c6:7d:5d:ed:9b:ab: 68:68:a4:c0:11:b9:db:e8:ce:4f:3a:fe:f9:81:83: 63:62:e7:6c:dc:ae:52:8f:26:83:28:26:f9:ad:64: a1:54:60:ef:a8:97:73:6f:e0:29:30:2f:49:2e:e4: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4E:31:46:39:38:A0:E6:FE:CF:D6:20:9F:8A:F7:B5:6D:2B:2F:7E X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f8:13:5f:8c:b0:fe:2c:6e:50:5c:9e:cd:34:22:ce:c0:dc: 59:1b:a8:8a:3f:97:b2:04:6a:ac:52:f5:9a:c2:04:6c:4f:f8: 75:22:2b:b2:bb:df:06:47:b2:e8:b7:47:49:60:fe:49:26:2f: 9e:b7:a9:ab:2b:2d:48:d9:e4:70:54:df:3e:a4:5c:bc:4b:91: 07:d3:ed:76:77:9c:3e:00:f4:90:8e:11:2e:e8:34:fd:dd:1c: 6d:52:5d:39:f5:11:32:c4:00:bf:e7:8f:2d:58:99:4d:2c:d8: a3:9c:54:3f:b9:bf:2a:ee:22:d0:52:f1:85:b8:8b:3d:05:6b: 7b:a2:97:3f:dd:65:ac:56:59:4b:6d:44:7c:23:48:f9:88:4f: fc:5c:6d:b6:df:4d:81:89:76:45:a4:09:d8:e5:64:46:c2:90: dd:07:09:a2:54:8a:62:57:ec:22:37:60:67:c0:0c:e6:e8:f8: 53:5e:15:b4:3f:37:3d:9a:30:0e:44:a9:91:ee:6c:8d:55:e7: d7:81:f3:35:46:03:6a:64:a9:8c:f0:97:d5:e2:6d:85:20:34: 74:2e:1b:ae:77:89:91:0f:38:98:5f:e6:75:3a:76:79:04:b2: f2:c1:81:70:54:88:3b:f6:1f:fb:d2:fb:fb:3b:09:46:3e:28: 42:07:26:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCDQaeBXLNrdeEXY1hff38nkQFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNjA0MTYxOTE2NTlaFw0yNjA0MTkxOTU4NTlaMDMxMTAvBgNV BAMTKDdDNEUzMTQ2MzkzOEEwRTZGRUNGRDYyMDlGOEFGN0I1NkQyQjJGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsqP8HnJpDUFPoCbeD+oWOxsv PaZD4wfPrPGUt51D9fom7BbwvlV/iWKHCz5YlOq6PihszMObbZCmxgCEuC6itHQF Zq1TdWN0HTL5yo/n1TSGocvqYEW+nJV1m65SwP/Z5K4b8t/Sm+vaf9NMxGyopiCk PBIuGSw0oOfNWThFnq5VmUEu5HJlxO8DeMANjaDjOLsVN2AydJCM7cqWQ3PohEfk 2ruHqMVTLSQsBKFeuOjJgSMhnOsHJR1lQKsDJfId5aijFei8KFs9fMZ9Xe2bq2ho pMARudvozk86/vmBg2Ni52zcrlKPJoMoJvmtZKFUYO+ol3Nv4CkwL0ku5PRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfE4xRjk4oOb+z9Ygn4r3tW0rL34wHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHH4E1+MsP4sblBcns00Is7A3FkbqIo/l7IE aqxS9ZrCBGxP+HUiK7K73wZHsui3R0lg/kkmL563qasrLUjZ5HBU3z6kXLxLkQfT 7XZ3nD4A9JCOES7oNP3dHG1SXTn1ETLEAL/njy1YmU0s2KOcVD+5vyruItBS8YW4 iz0Fa3uilz/dZaxWWUttRHwjSPmIT/xcbbbfTYGJdkWkCdjlZEbCkN0HCaJUimJX 7CI3YGfADObo+FNeFbQ/Nz2aMA5EqZHubI1V59eB8zVGA2pkqYzwl9XibYUgNHQu G653iZEPOJhf5nU6dnkEsvLBgXBUiDv2H/vS+/s7CUY+KEIHJmA= -----END CERTIFICATE-----Generated at Fri Apr 17 21:16:11 2026 by rpki-client