$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft File: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft (raw, json) Hash identifier: 40/04iM8+XcNzv5IISKKxc+lnxyqpysPg0ind7GhjMU= Subject key identifier: CE:10:34:9A:CC:09:0A:8D:C3:B7:17:2C:F8:62:3F:F0:0D:1D:16:15 Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C Certificate issuer: /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Certificate serial: 4E5AE5E793823B0214F4685A3539D51226A1999A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft Manifest number: 0127 Signing time: Wed 15 Apr 2026 15:20:54 +0000 Manifest this update: Wed 15 Apr 2026 15:15:54 +0000 Manifest next update: Sat 18 Apr 2026 20:06:54 +0000 Files and hashes: 1: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: VQEEEXuPlisinrBwT/1FJcAfMTnGRscgl2dxnDWnkuY=) 2: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl (hash: 7Vv3wTp22fF+FY4zXSjWHgtFukVqWkCc7YFUzJLVsGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5a:e5:e7:93:82:3b:02:14:f4:68:5a:35:39:d5:12:26:a1:99:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Validity Not Before: Apr 15 15:15:54 2026 GMT Not After : Apr 18 20:06:54 2026 GMT Subject: CN=CE10349ACC090A8DC3B7172CF8623FF00D1D1615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:ba:ee:8d:40:e0:80:56:29:17:f2:90:02: 91:d4:f0:96:aa:3d:5d:29:e2:e0:52:ba:f7:c6:6e: 02:25:4a:10:8d:57:84:2c:e7:70:5f:70:e3:8f:8c: 19:bf:a8:c5:a3:3e:56:9a:50:f4:68:04:e9:42:29: 2a:18:f4:00:0e:11:e8:65:80:65:ab:38:25:6f:60: b8:4f:71:2d:97:20:d7:db:09:3f:4a:e3:43:f6:be: dd:aa:3e:08:b9:f4:73:c5:5d:5a:a7:7d:ef:ff:2e: 4c:fe:9e:0a:f2:74:b3:4a:01:70:13:49:3e:fb:56: ff:fb:4f:a0:11:cc:9d:dc:8a:23:c8:90:bc:8a:fa: f1:ec:0a:13:3c:f9:b2:fb:24:85:99:be:61:cb:59: ab:9b:8a:74:53:3e:20:51:59:61:67:2a:15:bc:03: 28:1d:7d:3c:e7:b6:b5:3c:9d:d9:e0:b5:81:f0:d2: ba:d5:e2:19:79:b1:e8:02:bb:e7:a6:11:f3:9b:71: 37:75:da:10:6e:d6:48:05:96:0a:b2:71:d5:bd:e1: c7:06:8f:26:b8:ca:b1:75:12:49:7b:1d:71:1c:f8: e5:e9:90:ac:50:2d:f4:af:17:64:8b:00:5c:ab:67: 78:2c:a9:3c:6e:62:a1:ac:27:ba:d2:03:5d:6b:a3: f0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:10:34:9A:CC:09:0A:8D:C3:B7:17:2C:F8:62:3F:F0:0D:1D:16:15 X509v3 Authority Key Identifier: keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ab:7a:87:87:f4:1f:05:5b:e5:b6:47:37:44:ed:0e:d7:7d: 82:38:7b:85:f3:44:58:b8:67:e1:51:c7:86:fb:0e:42:90:26: 7e:b9:f4:71:8b:8b:93:cd:e2:14:c8:fe:b4:38:a4:30:10:98: db:49:55:76:e6:d3:5f:69:e9:ed:78:e6:b9:5e:0f:22:32:66: f7:d5:17:a2:08:cf:79:cf:6b:6b:78:ee:e7:23:76:16:b2:7e: 83:0e:81:33:50:0e:1f:83:e6:b1:c8:a3:e5:17:83:95:cc:08: 70:05:49:47:ec:aa:f2:f2:3f:19:12:28:09:4c:db:ef:5b:72: 43:e5:28:53:46:d9:19:11:86:f1:f1:cb:48:f8:bd:70:50:ff: b1:73:58:ea:c3:ee:5f:46:5c:fb:a9:1c:3d:98:a8:52:52:6e: b0:ea:f1:3f:08:9e:df:a8:e0:1e:1c:b4:67:a8:7a:26:50:f9: 5a:19:62:7e:e7:04:f6:f0:f5:90:eb:60:ca:56:8a:40:97:71: 64:15:6d:57:c9:44:79:4f:c8:ae:7f:ba:b7:d3:b3:6b:af:4b: 3d:d5:53:54:f5:ef:4d:92:0a:81:bf:04:8f:88:ec:7c:d8:7b: d2:63:0d:a4:f1:7d:f2:b4:d4:2b:4f:c5:9f:95:5d:1d:74:3d: ed:d1:57:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlrl55OCOwIU9GhaNTnVEiahmZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2 NEJCOTM1QzAeFw0yNjA0MTUxNTE1NTRaFw0yNjA0MTgyMDA2NTRaMDMxMTAvBgNV BAMTKENFMTAzNDlBQ0MwOTBBOERDM0I3MTcyQ0Y4NjIzRkYwMEQxRDE2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCttbrujUDggFYpF/KQApHU8Jaq PV0p4uBSuvfGbgIlShCNV4Qs53BfcOOPjBm/qMWjPlaaUPRoBOlCKSoY9AAOEehl gGWrOCVvYLhPcS2XINfbCT9K40P2vt2qPgi59HPFXVqnfe//Lkz+ngrydLNKAXAT ST77Vv/7T6ARzJ3ciiPIkLyK+vHsChM8+bL7JIWZvmHLWaubinRTPiBRWWFnKhW8 AygdfTzntrU8ndngtYHw0rrV4hl5segCu+emEfObcTd12hBu1kgFlgqycdW94ccG jya4yrF1Ekl7HXEc+OXpkKxQLfSvF2SLAFyrZ3gsqTxuYqGsJ7rSA11ro/AJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzhA0mswJCo3Dtxcs+GI/8A0dFhUwHwYDVR0j BBgwFoAUYLwwfOHdHI7Z2ch9heTYAGS7k1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGRlNmM4Mi1kOTJiLTQwODUtODg5My1kNjQ3NzkxYzI3N2YvMC82MEJDMzA3Q0Ux REQxQzhFRDlEOUM4N0Q4NUU0RDgwMDY0QkI5MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2NEJC OTM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4 MDA2NEJCOTM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACireoeH9B8FW+W2RzdE7Q7XfYI4e4XzRFi4 Z+FRx4b7DkKQJn659HGLi5PN4hTI/rQ4pDAQmNtJVXbm019p6e145rleDyIyZvfV F6IIz3nPa2t47ucjdhayfoMOgTNQDh+D5rHIo+UXg5XMCHAFSUfsqvLyPxkSKAlM 2+9bckPlKFNG2RkRhvHxy0j4vXBQ/7FzWOrD7l9GXPupHD2YqFJSbrDq8T8Int+o 4B4ctGeoeiZQ+VoZYn7nBPbw9ZDrYMpWikCXcWQVbVfJRHlPyK5/urfTs2uvSz3V U1T1702SCoG/BI+I7HzYe9JjDaTxffK01CtPxZ+VXR10Pe3RVxY= -----END CERTIFICATE-----Generated at Fri Apr 17 17:00:57 2026 by rpki-client