$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft File: 60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json) Hash identifier: GmnQel9M4Xp6sup4wzJfXEu4v5pfa6iZux4bFJsxhbI= Subject key identifier: 94:89:94:BA:5C:4A:5E:32:B4:23:B8:3E:80:15:1C:0A:59:E4:E0:5B Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3 Certificate issuer: /CN=60E799376F38EB181976A659060E6D998B4DB2D3 Certificate serial: 51BEF5EC424B1CFD933B01EECF07B66C454F36A1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft Manifest number: 0107 Signing time: Sat 14 Nov 2026 19:44:18 +0000 Manifest this update: Sat 14 Nov 2026 19:39:18 +0000 Manifest next update: Sun 15 Nov 2026 22:08:18 +0000 Files and hashes: 1: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: 7EMgcJTKW6+eugAjQ9xBMqyVsYUOK4i1/nvAWvu2fSU=) 2: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=) 3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 22:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:be:f5:ec:42:4b:1c:fd:93:3b:01:ee:cf:07:b6:6c:45:4f:36:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3 Validity Not Before: Nov 14 19:39:18 2026 GMT Not After : Nov 15 22:08:18 2026 GMT Subject: CN=948994BA5C4A5E32B423B83E80151C0A59E4E05B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:90:53:8b:3c:26:6d:56:bb:f2:27:8a:4e:c2: b7:ab:b6:44:3b:07:3d:e5:04:53:a6:4a:1c:e7:e4: 0f:c3:6d:c1:10:1b:d8:6a:7b:7a:27:0b:de:be:24: f0:47:71:96:51:3a:34:d9:8f:8e:38:bc:e8:11:12: f2:61:64:c9:81:f9:d0:50:6b:2d:5a:d8:24:56:40: 83:2a:cb:6b:14:6d:73:0f:15:fd:82:17:d3:d4:59: 10:1f:43:82:6c:cc:2e:8c:9f:71:a0:1c:dc:63:b5: 12:14:f7:8b:fd:2d:fe:26:6a:f5:df:36:a7:52:9a: 11:9f:4a:fb:56:2b:b9:b5:a5:55:67:5d:e0:79:6f: ee:2f:e5:7d:fb:2f:31:af:52:e2:24:32:d6:a5:8b: 2a:18:ec:e5:e0:d1:d5:25:b9:46:37:7d:00:58:34: 0c:73:c9:ac:e6:32:61:e6:aa:60:22:bd:be:e8:cb: 59:29:5a:35:48:ba:ab:de:b6:50:57:8c:d6:f1:ed: 6e:48:8a:45:4f:83:cf:08:78:74:69:99:29:bc:b5: 84:dd:6b:8e:d3:04:99:9a:8f:49:b3:66:2d:7c:70: 74:a7:97:ec:d6:4a:0b:dd:82:8a:a4:17:d6:92:f3: a8:33:26:b9:7a:4c:fe:67:29:f7:14:78:0b:03:c2: 71:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:89:94:BA:5C:4A:5E:32:B4:23:B8:3E:80:15:1C:0A:59:E4:E0:5B X509v3 Authority Key Identifier: keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f2:15:b1:66:30:02:e7:e1:15:7d:49:ac:8a:45:85:76:dd: bb:d8:fe:8c:55:5a:a1:cc:6e:53:30:cb:90:9a:35:aa:ee:23: ab:7a:ca:0d:b5:ad:40:03:1e:42:e7:0f:46:84:d0:08:a0:57: 7d:e9:d4:0e:50:e8:4d:63:26:5a:82:85:fb:61:71:6a:5a:7c: c2:db:e4:2f:98:e3:61:75:fa:4f:5a:28:97:5f:e8:16:b0:1b: bc:8a:4a:54:1a:82:8d:74:36:c9:10:db:20:29:6a:66:86:ee: 1d:a4:f9:59:4a:ce:ed:1e:29:71:55:4b:68:d1:76:a8:e6:5f: ec:61:5d:05:d6:18:5d:3f:18:ad:1d:ad:8c:23:fc:00:21:cf: b8:89:e5:c0:53:9e:51:cb:b7:50:21:66:64:fc:29:01:1d:1c: 85:9d:44:fb:ae:ef:81:4a:f6:56:c7:e0:55:15:6f:eb:39:7c: 83:a5:b7:93:91:97:a8:0c:3d:78:e1:94:c7:3e:79:21:a9:dd: a0:09:dd:28:11:a5:23:b5:7a:3a:ed:51:ac:b0:fd:19:f6:d8: 58:4d:9b:77:ad:72:fb:fd:c8:b5:4b:58:62:57:93:0f:26:cc: 5b:90:03:95:ae:ee:c7:ee:54:86:ca:31:44:16:47:44:00:92: 56:9b:a4:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUb717EJLHP2TOwHuzwe2bEVPNqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFNzk5Mzc2RjM4RUIxODE5NzZBNjU5MDYwRTZEOTk4 QjREQjJEMzAeFw0yNjExMTQxOTM5MThaFw0yNjExMTUyMjA4MThaMDMxMTAvBgNV BAMTKDk0ODk5NEJBNUM0QTVFMzJCNDIzQjgzRTgwMTUxQzBBNTlFNEUwNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkFOLPCZtVrvyJ4pOwrertkQ7 Bz3lBFOmShzn5A/DbcEQG9hqe3onC96+JPBHcZZROjTZj444vOgREvJhZMmB+dBQ ay1a2CRWQIMqy2sUbXMPFf2CF9PUWRAfQ4JszC6Mn3GgHNxjtRIU94v9Lf4mavXf NqdSmhGfSvtWK7m1pVVnXeB5b+4v5X37LzGvUuIkMtaliyoY7OXg0dUluUY3fQBY NAxzyazmMmHmqmAivb7oy1kpWjVIuqvetlBXjNbx7W5IikVPg88IeHRpmSm8tYTd a47TBJmaj0mzZi18cHSnl+zWSgvdgoqkF9aS86gzJrl6TP5nKfcUeAsDwnHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlImUulxKXjK0I7g+gBUcClnk4FswHwYDVR0j BBgwFoAUYOeZN2846xgZdqZZBg5tmYtNstMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTlmNTc1ZGItYzczOC00YjhlLWIzNmEtNmIwMjBjNjY4NDlkLzAvNjBFNzk5Mzc2 RjM4RUIxODE5NzZBNjU5MDYwRTZEOTk4QjREQjJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEU3OTkzNzZGMzhFQjE4MTk3NkE2NTkwNjBFNkQ5OThCNERC MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvNjBFNzk5Mzc2RjM4RUIxODE5NzZBNjU5MDYwRTZE OTk4QjREQjJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzyFbFmMALn4RV9SayKRYV23bvY/oxVWqHM blMwy5CaNaruI6t6yg21rUADHkLnD0aE0AigV33p1A5Q6E1jJlqChfthcWpafMLb 5C+Y42F1+k9aKJdf6BawG7yKSlQago10NskQ2yApamaG7h2k+VlKzu0eKXFVS2jR dqjmX+xhXQXWGF0/GK0drYwj/AAhz7iJ5cBTnlHLt1AhZmT8KQEdHIWdRPuu74FK 9lbH4FUVb+s5fIOlt5ORl6gMPXjhlMc+eSGp3aAJ3SgRpSO1ejrtUayw/Rn22FhN m3etcvv9yLVLWGJXkw8mzFuQA5Wu7sfuVIbKMUQWR0QAklabpP8= -----END CERTIFICATE-----Generated at Sun Nov 15 11:15:16 2026 by rpki-client