$ rpki-client -vvf rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft File: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft (raw, json) Hash identifier: lzRlT/utnersHzAuxGble0GqUaKzj+ukDUjx4ls0Hwo= Subject key identifier: BC:DA:CB:C5:1B:D3:E8:B7:82:AD:6C:A6:D0:D5:E0:C4:E6:3A:0A:6C Authority key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 Certificate issuer: /CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Certificate serial: 3B660F38CB6C60302686B10B0E01E9FE7514AC9C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:48:06 +0000 Manifest this update: Tue 02 Jun 2026 14:43:06 +0000 Manifest next update: Wed 03 Jun 2026 16:14:06 +0000 Files and hashes: 1: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: +HH+aPxPZPLQQ1zvNRP5gbXlwdQSzndcy7J0pXkGHPc=) 2: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl (hash: b1YhtYlmP4KRs+14zC8CtfWQm+6q84eZY3wU8ydA70I=) 3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: JiRJdm1oFhxxxMsJqGXfYKhPIquMJhUAFsZ9oA78Y3M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:66:0f:38:cb:6c:60:30:26:86:b1:0b:0e:01:e9:fe:75:14:ac:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Validity Not Before: Jun 2 14:43:06 2026 GMT Not After : Jun 3 16:14:06 2026 GMT Subject: CN=BCDACBC51BD3E8B782AD6CA6D0D5E0C4E63A0A6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:67:b5:ab:7c:00:88:a2:aa:82:d3:a9:c4:60: 30:5d:04:17:4e:82:58:2e:f9:98:90:17:60:df:56: 82:17:fb:d7:5a:cb:ff:af:41:41:ea:3c:e7:87:1a: f9:9f:7f:44:4e:fb:1f:0f:f0:9b:c1:29:01:b3:bb: bc:6c:f2:ff:3b:4e:42:92:06:af:6b:2e:e3:c1:b9: ac:44:7b:48:7e:38:1a:28:ec:f5:72:e5:7d:a3:4b: 79:82:93:2c:e3:c4:e2:ad:f9:f3:72:1d:33:86:fd: 53:4e:82:16:c8:73:8b:20:c8:18:c5:76:73:3e:bf: 9a:dd:0b:28:86:a2:10:5c:45:af:72:35:98:68:d4: 3e:06:b7:2a:cd:ef:bc:88:5e:96:e3:1d:62:f2:94: c3:3c:60:5a:ef:1c:dd:6d:df:0c:87:95:61:df:1d: d8:e6:e8:aa:3e:9a:f7:68:2b:f0:72:ed:9d:fe:8d: 22:ef:b9:8c:c8:14:c7:a7:10:48:ba:cf:f9:8f:f4: 8a:53:11:c0:2d:ba:89:57:6a:0c:3c:9a:e9:1b:7e: e9:94:56:36:67:9d:25:9e:79:dd:ae:08:14:5f:f1: dc:40:50:72:4a:d6:d6:3a:ce:17:38:59:9b:28:3d: 3d:02:df:66:85:83:12:16:57:20:d1:b2:53:07:a9: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DA:CB:C5:1B:D3:E8:B7:82:AD:6C:A6:D0:D5:E0:C4:E6:3A:0A:6C X509v3 Authority Key Identifier: keyid:60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a0:3c:88:bc:1f:9b:7f:ed:71:80:20:14:64:97:5b:a1:82: 86:2f:5d:0f:3d:ac:55:69:d5:38:78:db:9f:47:ce:ec:24:0d: 38:3d:ba:46:54:cb:33:1e:c8:d6:f9:8d:65:5c:fa:73:c5:b7: 2a:59:01:b8:03:42:2f:e9:d4:5b:9e:4c:78:47:9c:2f:d8:67: c4:58:12:88:b5:b2:6e:b7:0b:13:6b:73:90:e1:c2:93:fe:42: a1:6d:d5:23:51:4d:c4:40:1a:b1:7b:62:57:8f:1d:bf:72:b6: d6:d0:86:ba:97:f1:20:a8:cb:45:f9:eb:6d:de:b7:a3:70:af: 65:40:cf:7e:e0:18:0e:54:20:63:f2:14:dc:76:77:46:3b:46: ba:ba:4f:7d:eb:dd:45:81:8d:9e:3b:5e:ea:3c:f1:6c:10:3c: ea:ad:4e:7a:dc:f0:6f:07:25:1d:4b:76:6c:b5:c7:4b:8d:bd: f5:13:66:1e:de:5b:ca:7a:84:b0:9b:cc:f6:ef:9c:b7:df:e6: 63:84:76:02:aa:9d:12:a3:6a:8d:63:51:f5:39:0f:24:07:aa: 7a:0e:35:5a:d2:49:e8:56:a1:31:98:18:c2:e1:de:fc:1d:36: ff:02:15:f8:3a:9c:9e:39:ab:1b:4e:b5:43:93:52:3a:d9:f3: db:1e:96:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO2YPOMtsYDAmhrELDgHp/nUUrJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2 MzI5QkEwNzAeFw0yNjA2MDIxNDQzMDZaFw0yNjA2MDMxNjE0MDZaMDMxMTAvBgNV BAMTKEJDREFDQkM1MUJEM0U4Qjc4MkFENkNBNkQwRDVFMEM0RTYzQTBBNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZ7WrfACIoqqC06nEYDBdBBdO glgu+ZiQF2DfVoIX+9day/+vQUHqPOeHGvmff0RO+x8P8JvBKQGzu7xs8v87TkKS Bq9rLuPBuaxEe0h+OBoo7PVy5X2jS3mCkyzjxOKt+fNyHTOG/VNOghbIc4sgyBjF dnM+v5rdCyiGohBcRa9yNZho1D4GtyrN77yIXpbjHWLylMM8YFrvHN1t3wyHlWHf Hdjm6Ko+mvdoK/By7Z3+jSLvuYzIFMenEEi6z/mP9IpTEcAtuolXagw8mukbfumU VjZnnSWeed2uCBRf8dxAUHJK1tY6zhc4WZsoPT0C32aFgxIWVyDRslMHqboFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvNrLxRvT6LeCrWym0NXgxOY6CmwwHwYDVR0j BBgwFoAUYMkcSM6/3vCBzO5EHYTswmMpugcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5NzFhZTktNWNkZC00ZDQxLWI2MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhD RUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2MzI5QkEwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEM5MUM0OENFQkZERUYwODFDQ0VFNDQxRDg0RUNDMjYzMjlC QTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVD QzI2MzI5QkEwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqgPIi8H5t/7XGAIBRkl1uhgoYvXQ89rFVp 1Th4259HzuwkDTg9ukZUyzMeyNb5jWVc+nPFtypZAbgDQi/p1FueTHhHnC/YZ8RY Eoi1sm63CxNrc5DhwpP+QqFt1SNRTcRAGrF7YlePHb9yttbQhrqX8SCoy0X5623e t6Nwr2VAz37gGA5UIGPyFNx2d0Y7Rrq6T33r3UWBjZ47Xuo88WwQPOqtTnrc8G8H JR1Ldmy1x0uNvfUTZh7eW8p6hLCbzPbvnLff5mOEdgKqnRKjao1jUfU5DyQHqnoO NVrSSehWoTGYGMLh3vwdNv8CFfg6nJ45qxtOtUOTUjrZ89selk4= -----END CERTIFICATE-----Generated at Wed Jun 3 04:08:19 2026 by rpki-client