$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft File: 60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json) Hash identifier: nw7TjSjCHMgd5dvnG/hOeE0qM+XfJaDFN5QhdGwYug4= Subject key identifier: D1:77:6C:72:12:C4:28:E7:87:DC:3A:BA:76:52:57:0D:B1:AC:4E:7C Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3 Certificate issuer: /CN=60E799376F38EB181976A659060E6D998B4DB2D3 Certificate serial: 1B1355D10F24C7F083E53FA9F5ADBB01DD2C1735 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 08:12:33 +0000 Manifest this update: Thu 03 Sep 2026 08:07:33 +0000 Manifest next update: Fri 04 Sep 2026 09:25:33 +0000 Files and hashes: 1: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: 3/KmSWZk4aDu6KYyHa83WsrjzpYfHif/kYhNQFM9KJU=) 2: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=) 3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 09:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:13:55:d1:0f:24:c7:f0:83:e5:3f:a9:f5:ad:bb:01:dd:2c:17:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3 Validity Not Before: Sep 3 08:07:33 2026 GMT Not After : Sep 4 09:25:33 2026 GMT Subject: CN=D1776C7212C428E787DC3ABA7652570DB1AC4E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:85:7d:2a:8b:70:66:ab:42:32:3b:80:28:39: 91:dd:88:7a:1e:90:a5:89:a7:1e:00:a3:47:6b:9e: 1f:11:b9:8c:07:82:4a:39:3c:ec:ba:45:21:f0:5d: 29:b2:1e:3f:15:eb:5b:a3:4f:3e:7c:0c:81:7c:01: a4:c3:a8:a7:d3:3d:af:3d:cc:9b:b1:28:1d:28:ee: 93:29:83:f0:d3:e6:1c:c2:ff:43:48:a3:65:3c:1d: 02:ca:4b:84:19:ea:48:a9:29:07:d2:bf:f3:b7:08: f7:b5:0f:47:8f:f3:ad:f5:8a:61:95:12:ab:a5:05: 35:20:dc:c5:db:27:83:55:10:52:cb:f0:f9:e7:cd: 63:b5:f1:6a:3d:c4:af:78:77:0b:8b:bf:d2:0c:b4: bf:ef:c4:e7:1b:73:91:4c:ba:bc:cc:3f:a3:0c:00: 27:11:b1:81:9b:ab:b5:e2:02:73:06:d6:2d:88:07: 5a:61:9f:af:48:f2:2e:c3:dd:e8:58:bc:e6:f2:01: c9:25:2e:ee:dd:2d:09:42:f2:8a:32:c2:ff:54:c7: d8:f9:c7:99:7f:2c:6d:32:83:27:e7:f9:1c:92:c5: 81:d9:93:71:25:7f:2b:3d:56:27:ba:0d:79:c2:2a: 4a:e4:0e:f9:6e:48:05:78:b6:99:ac:27:2a:da:04: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:77:6C:72:12:C4:28:E7:87:DC:3A:BA:76:52:57:0D:B1:AC:4E:7C X509v3 Authority Key Identifier: keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:d0:74:4c:ea:5a:db:0d:67:90:33:f2:e3:e7:3f:c6:20:b9: 89:2c:06:bd:fa:c7:19:11:11:b3:2a:6f:85:62:fc:9a:fa:62: 1d:0f:e9:f7:86:70:ae:d0:0d:7b:1f:2a:5d:8a:32:7f:18:f9: 68:26:0d:dc:07:32:f1:04:57:1a:ef:45:17:39:bc:e7:cb:16: 2c:97:12:b3:6e:e5:14:56:db:d3:01:8d:fc:3e:49:ea:4f:0b: cf:58:6c:73:b5:30:2f:f3:94:d3:2d:c2:e0:36:c4:e5:4a:aa: 1c:6f:1d:1c:e6:56:a1:43:7a:52:94:c7:3f:09:90:85:1d:99: fb:15:e2:a6:91:f5:b0:18:78:e1:a8:41:b9:04:d9:0c:56:d3: 6c:dc:7b:b4:f6:de:da:29:e0:3b:51:20:bd:2a:fd:54:6d:18: 62:6c:92:56:e5:2e:80:6f:06:90:52:35:21:7c:1e:fa:d0:79: 91:ab:9c:c4:00:aa:d5:21:4e:11:a8:94:24:8b:e2:da:d9:e8: 57:37:da:a5:2b:72:fa:4a:1c:d1:52:e8:67:9f:b1:a6:f0:75: c5:2f:69:bf:c0:ea:23:6e:84:bc:5a:6e:3a:c2:6d:bb:ed:d2: cc:e2:1e:4b:0f:95:fc:97:89:cb:04:3f:bd:71:0a:50:60:97: 22:0b:7b:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxNV0Q8kx/CD5T+p9a27Ad0sFzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFNzk5Mzc2RjM4RUIxODE5NzZBNjU5MDYwRTZEOTk4 QjREQjJEMzAeFw0yNjA5MDMwODA3MzNaFw0yNjA5MDQwOTI1MzNaMDMxMTAvBgNV BAMTKEQxNzc2QzcyMTJDNDI4RTc4N0RDM0FCQTc2NTI1NzBEQjFBQzRFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZhX0qi3Bmq0IyO4AoOZHdiHoe kKWJpx4Ao0drnh8RuYwHgko5POy6RSHwXSmyHj8V61ujTz58DIF8AaTDqKfTPa89 zJuxKB0o7pMpg/DT5hzC/0NIo2U8HQLKS4QZ6kipKQfSv/O3CPe1D0eP8631imGV EqulBTUg3MXbJ4NVEFLL8PnnzWO18Wo9xK94dwuLv9IMtL/vxOcbc5FMurzMP6MM ACcRsYGbq7XiAnMG1i2IB1phn69I8i7D3ehYvObyAcklLu7dLQlC8ooywv9Ux9j5 x5l/LG0ygyfn+RySxYHZk3Elfys9Vie6DXnCKkrkDvluSAV4tpmsJyraBAUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0XdschLEKOeH3Dq6dlJXDbGsTnwwHwYDVR0j BBgwFoAUYOeZN2846xgZdqZZBg5tmYtNstMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTlmNTc1ZGItYzczOC00YjhlLWIzNmEtNmIwMjBjNjY4NDlkLzAvNjBFNzk5Mzc2 RjM4RUIxODE5NzZBNjU5MDYwRTZEOTk4QjREQjJEMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEU3OTkzNzZGMzhFQjE4MTk3NkE2NTkwNjBFNkQ5OThCNERC MkQzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvNjBFNzk5Mzc2RjM4RUIxODE5NzZBNjU5MDYwRTZE OTk4QjREQjJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnQdEzqWtsNZ5Az8uPnP8YguYksBr36xxkR EbMqb4Vi/Jr6Yh0P6feGcK7QDXsfKl2KMn8Y+WgmDdwHMvEEVxrvRRc5vOfLFiyX ErNu5RRW29MBjfw+SepPC89YbHO1MC/zlNMtwuA2xOVKqhxvHRzmVqFDelKUxz8J kIUdmfsV4qaR9bAYeOGoQbkE2QxW02zce7T23top4DtRIL0q/VRtGGJsklblLoBv BpBSNSF8HvrQeZGrnMQAqtUhThGolCSL4trZ6Fc32qUrcvpKHNFS6GefsabwdcUv ab/A6iNuhLxabjrCbbvt0sziHksPlfyXicsEP71xClBglyILe04= -----END CERTIFICATE-----Generated at Thu Sep 3 12:59:39 2026 by rpki-client