$ rpki-client -vvf rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft File: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft (raw, json) Hash identifier: SRgpDTzzV8g56MArVNMWwSO+X0Df+yPdrvjMfjbE+lc= Subject key identifier: 42:28:A2:56:6E:87:C6:B4:D3:00:9F:A7:E8:27:11:21:CC:14:97:6C Authority key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 Certificate issuer: /CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Certificate serial: 5CB9702A40FE4C7D965162092986976D10BCDB54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 01:32:43 +0000 Manifest this update: Tue 21 Jul 2026 01:27:43 +0000 Manifest next update: Wed 22 Jul 2026 02:34:43 +0000 Files and hashes: 1: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl (hash: lw02y/XgXh7IXfnQM2WkHlfTdDeeXydga65JfDRpd88=) 2: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: +HH+aPxPZPLQQ1zvNRP5gbXlwdQSzndcy7J0pXkGHPc=) 3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: JiRJdm1oFhxxxMsJqGXfYKhPIquMJhUAFsZ9oA78Y3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b9:70:2a:40:fe:4c:7d:96:51:62:09:29:86:97:6d:10:bc:db:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Validity Not Before: Jul 21 01:27:43 2026 GMT Not After : Jul 22 02:34:43 2026 GMT Subject: CN=4228A2566E87C6B4D3009FA7E8271121CC14976C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:99:c3:53:2b:68:49:6c:f0:92:8f:1a:63:b6: e1:44:37:3f:29:23:93:e1:2d:e8:bb:26:48:a8:48: 19:35:81:7a:11:7c:46:26:fb:56:5f:28:cc:07:44: 60:c7:9e:77:bd:d6:91:f7:09:78:23:0c:a2:68:7c: 17:04:1f:d2:70:88:67:be:20:28:08:c4:fe:1b:26: 2c:f4:1c:aa:d5:12:b3:9f:40:4f:17:e9:16:46:6d: c7:6d:93:6d:ad:8a:9c:d2:50:4b:80:a8:95:63:be: 19:7e:cb:fa:29:df:9d:49:3f:e8:12:64:ed:c6:0d: a5:59:8b:e9:a1:1d:d5:bb:97:56:1b:9b:c6:f5:80: 7b:5b:04:c6:76:98:3e:68:4d:66:e3:4a:e1:aa:83: cd:eb:15:e1:1f:c3:bf:15:50:fe:16:f1:7f:58:77: 3d:d5:74:bf:12:b8:dc:d0:ba:a4:de:7b:d9:75:52: 4a:3b:70:72:55:59:cc:71:10:e3:be:18:e7:c4:32: 1f:ff:9f:d9:ea:30:a8:c4:f2:5e:0e:47:28:1d:af: b6:92:b8:f2:c9:80:e3:1a:ac:93:9e:4c:78:65:35: e4:5c:90:ad:70:4c:12:da:28:61:18:c4:ea:a7:c6: b5:17:69:af:19:e2:39:1e:f7:07:3c:49:a7:21:e5: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:28:A2:56:6E:87:C6:B4:D3:00:9F:A7:E8:27:11:21:CC:14:97:6C X509v3 Authority Key Identifier: keyid:60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:da:98:39:20:34:37:65:d3:f2:01:aa:bb:37:b8:cb:c6:45: 67:5d:a1:2f:45:59:85:9c:a2:03:09:c5:45:86:8b:88:49:7b: ec:a6:a6:26:08:c8:a3:d9:16:f1:e7:76:00:7e:11:97:4a:3f: 16:ac:af:1e:c5:68:33:db:6a:35:51:88:95:43:0f:aa:64:ed: a4:07:e4:05:b1:c1:51:3e:d8:cf:d3:b3:07:e0:f0:04:43:f2: d4:03:9c:fd:86:58:ac:5d:ee:5d:a1:85:ff:b9:ee:b3:de:e3: 32:a5:ef:93:f2:20:0a:c9:6b:12:b2:ab:13:90:c5:5f:e4:1b: 33:ef:75:c3:ae:b9:26:ee:d2:24:91:44:c4:a8:9a:e6:84:eb: 27:3e:df:fb:42:7e:a8:c1:ad:a8:10:37:c5:76:4b:5f:ae:aa: 24:23:7b:9c:86:22:79:c1:a6:16:de:a2:6f:e5:19:72:52:d8: 89:0e:ea:18:1f:27:79:3d:b4:22:f4:54:7d:16:46:41:f0:fd: 82:5f:f5:bc:00:f2:52:59:dc:8f:b6:7c:3f:ce:27:03:06:48: 17:40:0b:84:ce:16:0d:b9:0d:92:fb:7d:ff:fa:9c:77:ee:5e: 6e:f3:0e:5a:85:56:44:96:c7:7b:99:50:06:b3:67:44:99:29: 46:ff:56:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLlwKkD+TH2WUWIJKYaXbRC821QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2 MzI5QkEwNzAeFw0yNjA3MjEwMTI3NDNaFw0yNjA3MjIwMjM0NDNaMDMxMTAvBgNV BAMTKDQyMjhBMjU2NkU4N0M2QjREMzAwOUZBN0U4MjcxMTIxQ0MxNDk3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmcNTK2hJbPCSjxpjtuFENz8p I5PhLei7JkioSBk1gXoRfEYm+1ZfKMwHRGDHnne91pH3CXgjDKJofBcEH9JwiGe+ ICgIxP4bJiz0HKrVErOfQE8X6RZGbcdtk22tipzSUEuAqJVjvhl+y/op351JP+gS ZO3GDaVZi+mhHdW7l1Ybm8b1gHtbBMZ2mD5oTWbjSuGqg83rFeEfw78VUP4W8X9Y dz3VdL8SuNzQuqTee9l1Uko7cHJVWcxxEOO+GOfEMh//n9nqMKjE8l4ORygdr7aS uPLJgOMarJOeTHhlNeRckK1wTBLaKGEYxOqnxrUXaa8Z4jke9wc8Sach5cg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQiiiVm6HxrTTAJ+n6CcRIcwUl2wwHwYDVR0j BBgwFoAUYMkcSM6/3vCBzO5EHYTswmMpugcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5NzFhZTktNWNkZC00ZDQxLWI2MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhD RUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2MzI5QkEwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEM5MUM0OENFQkZERUYwODFDQ0VFNDQxRDg0RUNDMjYzMjlC QTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVD QzI2MzI5QkEwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7amDkgNDdl0/IBqrs3uMvGRWddoS9FWYWc ogMJxUWGi4hJe+ympiYIyKPZFvHndgB+EZdKPxasrx7FaDPbajVRiJVDD6pk7aQH 5AWxwVE+2M/Tswfg8ARD8tQDnP2GWKxd7l2hhf+57rPe4zKl75PyIArJaxKyqxOQ xV/kGzPvdcOuuSbu0iSRRMSomuaE6yc+3/tCfqjBragQN8V2S1+uqiQje5yGInnB phbeom/lGXJS2IkO6hgfJ3k9tCL0VH0WRkHw/YJf9bwA8lJZ3I+2fD/OJwMGSBdA C4TOFg25DZL7ff/6nHfuXm7zDlqFVkSWx3uZUAazZ0SZKUb/VoY= -----END CERTIFICATE-----Generated at Tue Jul 21 06:52:22 2026 by rpki-client