$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft File: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft (raw, json) Hash identifier: RHMr3L0l+S+ktl4H61wX7kaW+c+08Um1KeHkjHKjaW8= Subject key identifier: 13:67:0A:53:BB:B4:71:28:EF:23:8F:F1:4C:F1:51:DE:F8:4F:E1:38 Authority key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 Certificate issuer: /CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Certificate serial: 7BCED3D55217D3CB0A18983A8FF552C1D9147FC9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft Manifest number: BE Signing time: Sun 20 Sep 2026 19:51:25 +0000 Manifest this update: Sun 20 Sep 2026 19:46:25 +0000 Manifest next update: Mon 21 Sep 2026 23:32:25 +0000 Files and hashes: 1: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl (hash: xgsFcbKhqnKBLVuvFUrghUT7PR6Qx3IaxQ1CQ/tepnI=) 2: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: JiRJdm1oFhxxxMsJqGXfYKhPIquMJhUAFsZ9oA78Y3M=) 3: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: +HH+aPxPZPLQQ1zvNRP5gbXlwdQSzndcy7J0pXkGHPc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ce:d3:d5:52:17:d3:cb:0a:18:98:3a:8f:f5:52:c1:d9:14:7f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Validity Not Before: Sep 20 19:46:25 2026 GMT Not After : Sep 21 23:32:25 2026 GMT Subject: CN=13670A53BBB47128EF238FF14CF151DEF84FE138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:ae:d4:74:c8:89:ad:4e:9f:57:de:14:b8: 47:98:30:6a:0f:b4:61:bd:06:37:b3:d4:3b:fd:9c: af:a5:8d:ae:97:cd:9c:10:c4:ff:1e:f6:26:2f:69: 5c:90:5c:bc:19:9d:27:c3:e7:1a:27:54:0d:34:3e: e6:75:0f:17:a4:8d:d5:16:6d:26:d0:e2:a3:51:bc: a7:99:ed:6b:29:82:53:b5:5e:4c:47:47:a0:b9:d7: 96:cf:10:1f:c1:0c:6c:0a:57:7d:86:f6:f1:31:e1: 55:9b:98:54:28:82:6e:c1:56:75:47:35:69:ce:59: fc:28:a1:0c:06:8e:f8:09:33:4e:89:a7:07:ad:48: 92:e9:2b:1e:0d:0b:48:43:a0:de:00:da:76:7e:3a: 43:58:95:b5:d5:d4:f4:2a:fe:56:27:16:20:6f:82: 24:9d:9e:dd:d8:9d:2b:b0:80:3f:2e:43:5c:41:55: 5e:0f:6a:79:05:59:e1:04:63:fa:e7:51:69:e4:3b: 46:c6:f5:c0:0d:d4:57:c8:7d:18:a7:32:65:a9:05: f1:5e:8b:24:44:d7:aa:6d:56:0d:cd:27:e8:43:ad: 72:46:a8:03:9a:d2:0d:ed:39:ae:f0:e5:60:d3:6a: 79:17:70:90:94:2c:1f:4f:db:4e:3f:9a:1a:7d:2e: 08:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:67:0A:53:BB:B4:71:28:EF:23:8F:F1:4C:F1:51:DE:F8:4F:E1:38 X509v3 Authority Key Identifier: keyid:60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:31:b9:78:f8:dd:f1:8f:74:37:5c:73:ae:54:62:96:61:69: 9c:eb:a8:dc:78:84:6a:dd:d4:fb:b2:5f:95:90:1e:4d:09:da: 04:29:df:a1:7e:fb:c7:5e:2c:da:47:79:51:da:07:5b:10:f2: a1:22:eb:45:62:e2:0d:47:4d:0e:0b:0a:b1:2e:79:90:e3:62: ac:e0:90:c3:3e:51:58:68:0b:2a:98:78:a7:59:72:10:27:0d: 07:97:84:0b:6b:28:3b:f5:db:cf:91:cb:fd:15:90:a8:77:d4: fc:48:44:26:94:50:82:b5:c2:96:4e:30:e3:10:aa:a1:9f:02: 53:12:29:74:04:d6:12:b0:64:03:b6:ae:ed:b7:71:4a:5d:81: f5:9b:69:75:a9:9b:d3:7f:c2:65:57:b5:fd:2a:f4:6e:af:f5: 22:57:e6:68:7f:b5:9e:77:c4:30:fb:3e:77:c5:4a:c5:32:a8: 2d:c6:26:aa:6f:d6:c3:67:1a:93:f8:cb:c2:da:33:a3:01:38: c6:b3:fc:d9:b9:97:58:40:fa:39:8c:16:c9:40:9d:b5:aa:39: 51:c9:94:95:dc:a2:e3:de:da:bf:3d:fb:ce:13:ee:c1:ec:2c: 1d:38:78:b9:42:c9:65:4d:74:bd:41:54:28:48:18:29:68:ab: b4:57:8d:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe87T1VIX08sKGJg6j/VSwdkUf8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2 MzI5QkEwNzAeFw0yNjA5MjAxOTQ2MjVaFw0yNjA5MjEyMzMyMjVaMDMxMTAvBgNV BAMTKDEzNjcwQTUzQkJCNDcxMjhFRjIzOEZGMTRDRjE1MURFRjg0RkUxMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFK7UdMiJrU6fV94UuEeYMGoP tGG9Bjez1Dv9nK+lja6XzZwQxP8e9iYvaVyQXLwZnSfD5xonVA00PuZ1DxekjdUW bSbQ4qNRvKeZ7WspglO1XkxHR6C515bPEB/BDGwKV32G9vEx4VWbmFQogm7BVnVH NWnOWfwooQwGjvgJM06JpwetSJLpKx4NC0hDoN4A2nZ+OkNYlbXV1PQq/lYnFiBv giSdnt3YnSuwgD8uQ1xBVV4PankFWeEEY/rnUWnkO0bG9cAN1FfIfRinMmWpBfFe iyRE16ptVg3NJ+hDrXJGqAOa0g3tOa7w5WDTankXcJCULB9P204/mhp9LgiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2cKU7u0cSjvI4/xTPFR3vhP4TgwHwYDVR0j BBgwFoAUYMkcSM6/3vCBzO5EHYTswmMpugcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5NzFhZTktNWNkZC00ZDQxLWI2MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhD RUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2MzI5QkEwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEM5MUM0OENFQkZERUYwODFDQ0VFNDQxRDg0RUNDMjYzMjlC QTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVD QzI2MzI5QkEwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQxuXj43fGPdDdcc65UYpZhaZzrqNx4hGrd 1PuyX5WQHk0J2gQp36F++8deLNpHeVHaB1sQ8qEi60Vi4g1HTQ4LCrEueZDjYqzg kMM+UVhoCyqYeKdZchAnDQeXhAtrKDv128+Ry/0VkKh31PxIRCaUUIK1wpZOMOMQ qqGfAlMSKXQE1hKwZAO2ru23cUpdgfWbaXWpm9N/wmVXtf0q9G6v9SJX5mh/tZ53 xDD7PnfFSsUyqC3GJqpv1sNnGpP4y8LaM6MBOMaz/Nm5l1hA+jmMFslAnbWqOVHJ lJXcouPe2r89+84T7sHsLB04eLlCyWVNdL1BVChIGCloq7RXjQY= -----END CERTIFICATE-----Generated at Mon Sep 21 06:52:03 2026 by rpki-client