$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft File: 60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json) Hash identifier: /azv0/hvckJ5bynRkkMWztzi+kQvAna2qWm0HuxxWiQ= Subject key identifier: D0:60:CF:A6:3A:62:CD:E9:F5:DE:20:30:2F:69:89:A9:60:9E:69:58 Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05 Certificate issuer: /CN=60B7F65507671C158E1D599CEE8EC29532B62A05 Certificate serial: 18CE67DD66D7D097F29EE173F071093F9280BFA0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 10:00:43 +0000 Manifest this update: Tue 03 Nov 2026 09:55:43 +0000 Manifest next update: Wed 04 Nov 2026 10:37:43 +0000 Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=) 2: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: lsOJRwszRUfMxA8mTkojFr59rCOUNvgXiIG9DzCVkPA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ce:67:dd:66:d7:d0:97:f2:9e:e1:73:f0:71:09:3f:92:80:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05 Validity Not Before: Nov 3 09:55:43 2026 GMT Not After : Nov 4 10:37:43 2026 GMT Subject: CN=D060CFA63A62CDE9F5DE20302F6989A9609E6958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:b8:61:63:0c:ba:bc:2d:39:c2:7a:f4:99: 23:3a:3e:99:50:d6:0d:28:af:b4:76:0e:47:b5:e3: 1c:83:bb:63:b3:17:30:66:ec:50:d1:94:9e:5f:67: 41:b8:08:88:51:ad:71:a3:32:af:fa:c6:90:f8:db: e9:fb:a0:0d:b4:20:fe:ec:a5:7a:b6:01:53:6f:0b: 87:fe:ae:3e:70:74:d2:2e:da:d4:8b:b7:03:9c:2c: 96:01:97:c6:64:13:b0:a6:55:0a:8c:31:ff:21:35: ff:b9:78:3d:72:bd:21:4f:78:2c:6a:f2:a8:0b:f7: 66:ee:8f:a2:4e:b7:8a:57:51:2a:6a:1b:9c:42:c1: 19:72:b5:4b:09:ea:c8:fa:2b:98:c1:ca:eb:0a:af: 60:cf:de:5d:51:26:88:48:31:43:d8:23:f9:79:a9: 9d:8c:5a:3d:52:c2:db:f1:79:4c:3e:c7:b6:33:6a: 0f:a7:6a:78:96:be:23:01:a9:d1:9c:e2:8b:10:d1: ce:57:df:da:a2:fa:7f:21:ff:57:5b:c2:b3:72:86: 5b:88:7e:84:0f:eb:ac:b5:3f:5b:73:f0:9a:64:52: a4:9d:ce:3e:87:74:37:34:30:8f:4d:34:15:99:ce: 2b:e2:23:5f:42:86:83:2a:15:99:1f:75:35:71:f1: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:60:CF:A6:3A:62:CD:E9:F5:DE:20:30:2F:69:89:A9:60:9E:69:58 X509v3 Authority Key Identifier: keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:21:fc:1d:78:eb:59:fd:fc:57:93:a0:f0:20:8d:79:00:59: ac:bf:bc:e9:de:6b:be:2b:96:0d:90:f8:59:e6:ea:25:11:4a: 80:34:c5:ed:ee:67:ed:6c:97:42:54:a8:29:50:a9:ba:4e:2e: 28:7d:ed:a9:34:7f:5f:0e:73:25:a7:48:9d:e3:a9:f4:78:7e: b2:ad:7f:85:e6:41:4c:5c:a0:eb:40:a0:0b:1e:fa:1e:95:f9: 21:69:e5:05:b7:18:2a:3d:4a:7e:f3:81:52:5f:ed:3a:0a:ec: 20:ea:f8:2a:94:68:30:0b:74:ba:48:41:0e:d8:77:00:01:6c: 02:b6:67:26:25:c5:76:fc:77:13:ee:a7:6e:98:1e:8b:dc:a0: e7:ce:bf:76:38:ed:e0:66:3c:f7:bb:07:5b:e9:4d:ff:4c:3e: a0:e9:4f:36:5e:28:3e:a6:95:96:6f:66:c7:52:72:b0:2c:b3: df:8e:97:82:b0:90:51:a4:8a:e1:88:52:39:26:70:25:e6:c8: d2:41:6c:d9:05:a0:35:43:66:8b:55:fe:42:29:a0:11:7d:6b: 18:36:fe:c6:ce:74:d2:02:84:1c:63:0f:9d:77:97:4d:23:73: ce:06:bb:cf:af:4c:b5:c9:a5:1f:a1:da:bc:d5:d3:21:e1:95: 0f:45:b3:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGM5n3WbX0JfynuFz8HEJP5KAv6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUz MkI2MkEwNTAeFw0yNjExMDMwOTU1NDNaFw0yNjExMDQxMDM3NDNaMDMxMTAvBgNV BAMTKEQwNjBDRkE2M0E2MkNERTlGNURFMjAzMDJGNjk4OUE5NjA5RTY5NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMbhhYwy6vC05wnr0mSM6PplQ 1g0or7R2Dke14xyDu2OzFzBm7FDRlJ5fZ0G4CIhRrXGjMq/6xpD42+n7oA20IP7s pXq2AVNvC4f+rj5wdNIu2tSLtwOcLJYBl8ZkE7CmVQqMMf8hNf+5eD1yvSFPeCxq 8qgL92buj6JOt4pXUSpqG5xCwRlytUsJ6sj6K5jByusKr2DP3l1RJohIMUPYI/l5 qZ2MWj1SwtvxeUw+x7Yzag+naniWviMBqdGc4osQ0c5X39qi+n8h/1dbwrNyhluI foQP66y1P1tz8JpkUqSdzj6HdDc0MI9NNBWZziviI19ChoMqFZkfdTVx8au7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0GDPpjpizen13iAwL2mJqWCeaVgwHwYDVR0j BBgwFoAUYLf2VQdnHBWOHVmc7o7ClTK2KgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFlMTNiYWMtOTFjMS00NjNiLTgzMzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUw NzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUzMkI2MkEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MEI3RjY1NTA3NjcxQzE1OEUxRDU5OUNFRThFQzI5NTMyQjYy QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMy OTUzMkI2MkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIh/B1461n9/FeToPAgjXkAWay/vOnea74r lg2Q+Fnm6iURSoA0xe3uZ+1sl0JUqClQqbpOLih97ak0f18OcyWnSJ3jqfR4frKt f4XmQUxcoOtAoAse+h6V+SFp5QW3GCo9Sn7zgVJf7ToK7CDq+CqUaDALdLpIQQ7Y dwABbAK2ZyYlxXb8dxPup26YHovcoOfOv3Y47eBmPPe7B1vpTf9MPqDpTzZeKD6m lZZvZsdScrAss9+Ol4KwkFGkiuGIUjkmcCXmyNJBbNkFoDVDZotV/kIpoBF9axg2 /sbOdNIChBxjD513l00jc84Gu8+vTLXJpR+h2rzV0yHhlQ9Fs98= -----END CERTIFICATE-----Generated at Wed Nov 4 05:29:17 2026 by rpki-client