$ rpki-client -vvf repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft File: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft (raw, json) Hash identifier: jsb5QUFs7uyo9egaZejNARUTZqnwmN17TElQu2paSS0= Subject key identifier: D4:C3:6F:7F:E2:A1:50:E3:70:63:78:29:18:0E:29:B8:84:1B:D2:BA Authority key identifier: 60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C Certificate issuer: /CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Certificate serial: 1B39D6ED08FCD22D919C57B54A370DF260EECA57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft Manifest number: 0113 Signing time: Sun 01 Mar 2026 14:00:54 +0000 Manifest this update: Sun 01 Mar 2026 13:55:54 +0000 Manifest next update: Wed 04 Mar 2026 18:24:54 +0000 Files and hashes: 1: 3130332e3138302e3234362e302f32332d3234203d3e20313439333731.roa (hash: VQEEEXuPlisinrBwT/1FJcAfMTnGRscgl2dxnDWnkuY=) 2: 60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl (hash: qrQF00Mk15q9choytonLpqyOR/KFWG70zwSqeBYZ6iU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:39:d6:ed:08:fc:d2:2d:91:9c:57:b5:4a:37:0d:f2:60:ee:ca:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C Validity Not Before: Mar 1 13:55:54 2026 GMT Not After : Mar 4 18:24:54 2026 GMT Subject: CN=D4C36F7FE2A150E370637829180E29B8841BD2BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:d9:81:5a:c8:d8:db:fe:03:ad:76:1f:ef: 80:bb:a9:63:37:49:bc:19:a7:75:8b:2c:f5:a5:29: 94:3f:9a:f7:4d:5d:a6:f2:aa:0b:7d:c3:b9:77:4c: d4:82:2b:f3:4a:ca:d7:30:6d:51:58:51:4f:7f:86: 15:79:f9:00:d7:7f:e5:4b:f9:92:73:e7:fa:96:ea: a1:bd:0d:04:0d:e0:0b:43:9f:fb:03:fe:2b:44:f9: 70:2f:23:3e:38:24:29:c9:0f:dc:a0:e6:ed:4d:60: ed:8d:db:ef:f8:9a:46:49:90:25:bf:6b:37:df:22: 84:e5:90:99:00:3a:00:df:f6:4d:39:80:12:50:a5: 2c:1e:ae:1c:4a:a0:99:81:85:b3:10:3a:00:b0:88: 8f:78:45:cb:72:f0:bb:e0:c1:41:e7:5d:49:e7:c1: aa:ef:16:e7:eb:f7:69:69:05:1b:50:e3:46:b8:4c: 4a:22:39:09:a9:51:03:8b:1e:6f:9c:86:69:d1:63: ed:54:2f:5f:31:2e:fc:37:16:dc:81:7a:c2:1b:ed: 50:a9:fb:ce:c7:0e:e1:a4:79:51:03:87:9d:bb:8b: ab:1c:46:07:0f:cb:7b:82:c4:00:48:10:7b:3c:af: 1f:ab:87:be:57:3f:45:e2:46:24:67:fe:f8:50:e2: f7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:6F:7F:E2:A1:50:E3:70:63:78:29:18:0E:29:B8:84:1B:D2:BA X509v3 Authority Key Identifier: keyid:60:BC:30:7C:E1:DD:1C:8E:D9:D9:C8:7D:85:E4:D8:00:64:BB:93:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/60BC307CE1DD1C8ED9D9C87D85E4D80064BB935C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:1b:0f:d7:47:c6:e8:4f:ae:2a:00:35:57:95:47:62:96:9f: c3:13:c2:82:8f:06:a0:55:6b:3c:54:78:66:0a:65:a4:6a:9d: 9b:04:82:5c:c7:56:46:c3:9e:d0:5d:16:2a:86:39:7f:e5:e5: 8b:99:ef:5d:4e:d2:2d:0c:6b:b8:f6:06:d3:20:1d:47:15:e1: a1:ed:01:41:30:be:44:3f:56:6c:55:77:9c:6e:ee:c2:25:35: 8d:f2:59:43:51:d3:bf:fa:56:2b:9d:60:3f:85:0a:b3:b0:55: 41:c3:a0:b5:12:cc:d5:5c:3f:b4:3d:65:74:b2:4e:21:36:63: 59:5f:30:be:5a:5b:07:af:41:0b:c9:3c:eb:57:35:4f:1b:92: 67:d2:43:72:ff:0b:a9:b0:58:69:3d:7a:92:d3:cd:15:5a:92: 69:52:ae:5b:29:1b:18:96:05:17:e9:98:9e:41:ad:8c:98:41: c2:3a:72:48:b1:d9:62:4c:9f:1d:1b:d3:80:db:cb:63:67:f2: ad:f7:f4:ed:3e:21:42:ef:72:bc:91:7a:2f:70:a8:11:0a:5c: e5:f3:2c:4a:7b:72:73:f3:b0:cc:08:22:77:5d:ab:33:9a:08: c7:75:7c:3a:23:8c:91:8d:fd:74:ac:a2:26:e1:7b:50:7b:74: ab:4e:8d:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGznW7Qj80i2RnFe1SjcN8mDuylcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2 NEJCOTM1QzAeFw0yNjAzMDExMzU1NTRaFw0yNjAzMDQxODI0NTRaMDMxMTAvBgNV BAMTKEQ0QzM2RjdGRTJBMTUwRTM3MDYzNzgyOTE4MEUyOUI4ODQxQkQyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxOdmBWsjY2/4DrXYf74C7qWM3 SbwZp3WLLPWlKZQ/mvdNXabyqgt9w7l3TNSCK/NKytcwbVFYUU9/hhV5+QDXf+VL +ZJz5/qW6qG9DQQN4AtDn/sD/itE+XAvIz44JCnJD9yg5u1NYO2N2+/4mkZJkCW/ azffIoTlkJkAOgDf9k05gBJQpSwerhxKoJmBhbMQOgCwiI94Rcty8LvgwUHnXUnn warvFufr92lpBRtQ40a4TEoiOQmpUQOLHm+chmnRY+1UL18xLvw3FtyBesIb7VCp +87HDuGkeVEDh527i6scRgcPy3uCxABIEHs8rx+rh75XP0XiRiRn/vhQ4vfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MNvf+KhUONwY3gpGA4puIQb0rowHwYDVR0j BBgwFoAUYLwwfOHdHI7Z2ch9heTYAGS7k1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MGRlNmM4Mi1kOTJiLTQwODUtODg5My1kNjQ3NzkxYzI3N2YvMC82MEJDMzA3Q0Ux REQxQzhFRDlEOUM4N0Q4NUU0RDgwMDY0QkI5MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4MDA2NEJC OTM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzBkZTZjODItZDkyYi00MDg1LTg4 OTMtZDY0Nzc5MWMyNzdmLzAvNjBCQzMwN0NFMUREMUM4RUQ5RDlDODdEODVFNEQ4 MDA2NEJCOTM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGobD9dHxuhPrioANVeVR2KWn8MTwoKPBqBV azxUeGYKZaRqnZsEglzHVkbDntBdFiqGOX/l5YuZ711O0i0Ma7j2BtMgHUcV4aHt AUEwvkQ/VmxVd5xu7sIlNY3yWUNR07/6ViudYD+FCrOwVUHDoLUSzNVcP7Q9ZXSy TiE2Y1lfML5aWwevQQvJPOtXNU8bkmfSQ3L/C6mwWGk9epLTzRVakmlSrlspGxiW BRfpmJ5BrYyYQcI6ckix2WJMnx0b04Dby2Nn8q339O0+IULvcryRei9wqBEKXOXz LEp7cnPzsMwIInddqzOaCMd1fDojjJGN/XSsoibhe1B7dKtOjSk= -----END CERTIFICATE-----Generated at Mon Mar 2 06:41:55 2026 by rpki-client