$ rpki-client -vvf rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft File: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft (raw, json) Hash identifier: BljGB8U5hX0nf0k5yZHNNo6ffLrSL0cnuja2qzz8+lU= Subject key identifier: 6E:DB:6E:17:0F:10:03:E3:DC:0E:84:82:08:2D:CF:AC:03:F2:BE:D1 Authority key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 Certificate issuer: /CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Certificate serial: 70B7A756A883D71903B8C579BEB7962E23C584F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 16:44:27 +0000 Manifest this update: Tue 16 Jun 2026 16:39:27 +0000 Manifest next update: Wed 17 Jun 2026 19:50:27 +0000 Files and hashes: 1: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl (hash: XF+FBoIcRhgywicNqrde9ST2jbc1+hJ7va+y6q2slCM=) 2: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: +HH+aPxPZPLQQ1zvNRP5gbXlwdQSzndcy7J0pXkGHPc=) 3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: JiRJdm1oFhxxxMsJqGXfYKhPIquMJhUAFsZ9oA78Y3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b7:a7:56:a8:83:d7:19:03:b8:c5:79:be:b7:96:2e:23:c5:84:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Validity Not Before: Jun 16 16:39:27 2026 GMT Not After : Jun 17 19:50:27 2026 GMT Subject: CN=6EDB6E170F1003E3DC0E8482082DCFAC03F2BED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:3e:90:53:da:35:40:fa:0d:88:ce:fe:6b: 32:f8:b9:94:60:9e:be:af:f9:ef:15:70:3f:8a:6e: 7b:e5:39:5d:49:b9:87:b0:40:d3:e8:f9:cb:a5:68: 7e:f9:2c:88:55:21:53:ce:7c:b3:2d:3d:38:ce:4b: ce:13:49:d7:46:95:3a:16:14:1c:d0:8b:2f:62:65: c8:2d:81:e0:d4:3c:fc:c9:78:f3:0a:96:be:2c:91: e5:65:14:3a:3c:a0:a1:11:75:f2:d4:84:a1:42:01: 34:2f:ec:e6:d6:22:31:7b:8b:00:1f:d4:3c:a6:47: b0:e5:2f:61:25:ee:7b:06:b1:e0:c8:f0:ee:66:d3: 0f:82:c6:36:1e:2c:96:e6:46:62:6d:46:eb:48:16: ac:05:c5:b3:81:3c:a6:1d:f9:e8:40:e8:5d:07:19: 63:52:03:44:ee:24:f8:67:0b:c2:d5:82:ea:6b:0a: 94:a9:a5:b7:0c:ad:d8:4c:bd:c3:84:68:be:e0:d2: cc:c9:a7:58:f4:76:3d:08:1c:c5:07:d1:d9:81:d4: 70:33:18:42:6b:b4:b4:0a:bc:a7:80:5a:23:50:fd: 1c:f8:73:2d:50:4a:b9:2e:4f:9e:d5:70:27:10:c9: 34:de:cb:42:99:02:6d:b0:71:3a:11:53:53:0b:20: e6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DB:6E:17:0F:10:03:E3:DC:0E:84:82:08:2D:CF:AC:03:F2:BE:D1 X509v3 Authority Key Identifier: keyid:60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bf:12:7e:cd:e4:c1:35:5d:5d:1a:c1:d4:b9:17:cf:38:7c: 02:6c:21:17:4f:0e:85:5d:cd:d7:8b:fe:7e:35:74:e1:f3:27: 23:69:7e:24:70:7e:29:a5:08:75:fc:4f:96:35:83:63:f2:c2: a7:5f:f5:73:0c:86:0f:da:71:3f:52:96:80:54:7b:bf:e7:6f: 42:66:d1:9b:99:45:cd:43:4e:29:1e:fd:51:40:5f:b7:77:52: 3b:9c:da:cc:35:96:70:e5:dc:88:28:63:f2:64:fc:7a:0c:c8: 34:0b:89:38:41:44:b7:6a:c1:5c:32:15:3b:2a:d4:f5:2a:de: e4:72:5f:84:7f:dd:52:7e:06:30:81:b4:44:aa:0f:49:61:0f: 48:09:ff:ce:96:51:f7:08:d0:b4:18:52:79:af:8d:8d:8c:68: 60:9f:ab:85:47:0a:c2:e9:dd:b5:21:55:6e:d2:c6:82:0f:07: 8e:bc:50:5f:1d:d2:5d:c0:80:2f:b4:6b:bc:98:d9:2b:32:07: af:b8:1d:00:32:1c:aa:6a:12:48:67:f1:a5:0b:4d:74:fb:24: 70:b8:1b:1a:24:40:fa:bf:35:ac:d7:0a:5a:2b:c5:1f:92:e6: 0a:84:00:d7:a0:75:1f:aa:79:c7:d4:47:23:2f:d8:22:b6:e3: f5:f1:3c:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLenVqiD1xkDuMV5vreWLiPFhPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2 MzI5QkEwNzAeFw0yNjA2MTYxNjM5MjdaFw0yNjA2MTcxOTUwMjdaMDMxMTAvBgNV BAMTKDZFREI2RTE3MEYxMDAzRTNEQzBFODQ4MjA4MkRDRkFDMDNGMkJFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFz6QU9o1QPoNiM7+azL4uZRg nr6v+e8VcD+KbnvlOV1JuYewQNPo+culaH75LIhVIVPOfLMtPTjOS84TSddGlToW FBzQiy9iZcgtgeDUPPzJePMKlr4skeVlFDo8oKERdfLUhKFCATQv7ObWIjF7iwAf 1DymR7DlL2El7nsGseDI8O5m0w+CxjYeLJbmRmJtRutIFqwFxbOBPKYd+ehA6F0H GWNSA0TuJPhnC8LVguprCpSppbcMrdhMvcOEaL7g0szJp1j0dj0IHMUH0dmB1HAz GEJrtLQKvKeAWiNQ/Rz4cy1QSrkuT57VcCcQyTTey0KZAm2wcToRU1MLIOaPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbttuFw8QA+PcDoSCCC3PrAPyvtEwHwYDVR0j BBgwFoAUYMkcSM6/3vCBzO5EHYTswmMpugcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5NzFhZTktNWNkZC00ZDQxLWI2MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhD RUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2MzI5QkEwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEM5MUM0OENFQkZERUYwODFDQ0VFNDQxRDg0RUNDMjYzMjlC QTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVD QzI2MzI5QkEwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq/En7N5ME1XV0awdS5F884fAJsIRdPDoVd zdeL/n41dOHzJyNpfiRwfimlCHX8T5Y1g2Pywqdf9XMMhg/acT9SloBUe7/nb0Jm 0ZuZRc1DTike/VFAX7d3Ujuc2sw1lnDl3IgoY/Jk/HoMyDQLiThBRLdqwVwyFTsq 1PUq3uRyX4R/3VJ+BjCBtESqD0lhD0gJ/86WUfcI0LQYUnmvjY2MaGCfq4VHCsLp 3bUhVW7SxoIPB468UF8d0l3AgC+0a7yY2SsyB6+4HQAyHKpqEkhn8aULTXT7JHC4 GxokQPq/NazXClorxR+S5gqEANegdR+qecfURyMv2CK24/XxPHE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:03:07 2026 by rpki-client