$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json) Hash identifier: hOJdQ7RovPCiNgExzz6zK8LGeRhH5nLTU+i0yKXXn8I= Subject key identifier: 74:D6:D9:3B:37:13:FF:DD:DF:C0:F7:B3:99:54:A5:D0:9D:E3:9B:AD Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Certificate serial: 077B07B4647EA18504240CE1DFE83B6BC8E42D9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft Manifest number: 0572 Signing time: Sun 12 Apr 2026 04:32:04 +0000 Manifest this update: Sun 12 Apr 2026 04:27:04 +0000 Manifest next update: Wed 15 Apr 2026 10:54:04 +0000 Files and hashes: 1: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: LxSVJV070gN5FjdUX054wO7XGmRkz6K/WxRCNonXpkA=) 2: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: xUdwfWhj/DTW37oHxA2M7SzJ+NkmDLXU1C60QSD07Pk=) 3: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: jnlG8sp0Dvlso+LT370ZjfyOe1x7q7mPJD4J3aO4R3k=) 4: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=) 5: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=) 6: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Apr 2026 10:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:7b:07:b4:64:7e:a1:85:04:24:0c:e1:df:e8:3b:6b:c8:e4:2d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE Validity Not Before: Apr 12 04:27:04 2026 GMT Not After : Apr 15 10:54:04 2026 GMT Subject: CN=74D6D93B3713FFDDDFC0F7B39954A5D09DE39BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:94:40:78:73:bb:2d:58:92:a0:21:2f:9d:c0: 34:45:a7:26:ca:51:a7:f0:0b:fd:9d:9f:22:8b:64: 07:c8:35:a0:25:43:81:91:0d:70:2d:ca:f7:3c:09: 0a:0a:c1:ed:b7:96:87:78:99:01:1b:4f:61:b0:27: bc:d9:91:d6:c2:1e:41:2f:74:97:65:16:a7:e9:f9: 92:57:51:ef:00:24:70:7a:ec:fa:1b:61:f4:93:0e: fb:ee:c5:3c:ba:e3:ac:00:fc:56:d5:29:95:30:d5: 09:d2:e8:b2:64:c8:04:81:bd:a2:f2:3b:26:5c:b9: dd:b1:fb:ce:b0:bd:34:0d:fd:f4:0f:e3:8f:da:c5: 59:4a:99:af:28:77:1c:2a:ba:5c:a7:3f:cc:cf:79: bf:6d:75:08:d3:27:52:96:24:df:60:a4:27:ac:b0: b7:92:56:4e:66:3b:fa:b0:9c:b5:97:30:07:7d:f5: 3f:15:90:4d:e1:5f:5b:7f:a6:10:cf:6b:23:cf:cf: f8:41:4b:ee:d5:0b:7f:92:f3:1e:b2:82:f1:b0:cb: 37:95:9d:95:53:bc:3b:80:9a:a1:83:47:9f:80:37: 5e:89:17:6b:ac:0f:24:d9:0f:5f:bd:15:5d:a8:30: 6f:f3:eb:4d:1a:60:ca:e7:91:22:f9:ae:d9:a1:bd: b0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D6:D9:3B:37:13:FF:DD:DF:C0:F7:B3:99:54:A5:D0:9D:E3:9B:AD X509v3 Authority Key Identifier: keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:00:3b:b4:cc:56:a2:bf:15:8a:76:d9:b6:e8:c2:e4:07:2b: cf:eb:4f:ec:d4:ad:b5:1c:9f:20:1b:b2:08:df:1e:ca:ae:cd: 4c:2a:ae:2b:6c:73:38:23:7c:7e:39:42:30:7d:d5:b3:66:56: f0:4b:98:e3:6b:71:3c:67:4f:e8:68:55:ec:68:6b:44:c0:f3: 59:14:3f:39:d1:5c:99:75:f9:83:5a:ae:f7:88:5f:13:d4:33: 6f:75:7c:33:ad:c1:f2:f9:30:ba:ae:4a:5b:37:aa:1c:50:50: 98:4d:e0:34:dc:21:d6:c9:50:97:ab:07:65:92:aa:64:14:b6: 58:fd:6e:5f:8e:19:47:e3:64:38:ef:4c:05:e6:b7:99:2f:17: 37:a5:1d:81:2b:6b:20:57:44:ff:42:67:0f:48:41:53:24:8c: 7b:c8:78:bd:da:0c:38:af:f3:40:78:c1:38:10:33:8b:5b:3b: db:46:e5:c7:5a:b4:10:72:35:e4:4f:fb:bb:67:1d:4a:d8:03: 77:8b:99:2f:55:38:3b:ad:21:ff:cd:1b:14:86:d6:51:7a:ac: b7:e1:4d:72:4b:4f:29:3e:63:ad:1f:b3:ac:0d:3d:5b:12:06: 6d:35:a2:31:c3:5d:3c:5c:84:55:32:89:56:f2:54:69:3e:82: 55:05:5f:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB3sHtGR+oYUEJAzh3+g7a8jkLZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIy ODk2RTZERTAeFw0yNjA0MTIwNDI3MDRaFw0yNjA0MTUxMDU0MDRaMDMxMTAvBgNV BAMTKDc0RDZEOTNCMzcxM0ZGRERERkMwRjdCMzk5NTRBNUQwOURFMzlCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlEB4c7stWJKgIS+dwDRFpybK UafwC/2dnyKLZAfINaAlQ4GRDXAtyvc8CQoKwe23lod4mQEbT2GwJ7zZkdbCHkEv dJdlFqfp+ZJXUe8AJHB67PobYfSTDvvuxTy646wA/FbVKZUw1QnS6LJkyASBvaLy OyZcud2x+86wvTQN/fQP44/axVlKma8odxwqulynP8zPeb9tdQjTJ1KWJN9gpCes sLeSVk5mO/qwnLWXMAd99T8VkE3hX1t/phDPayPPz/hBS+7VC3+S8x6ygvGwyzeV nZVTvDuAmqGDR5+AN16JF2usDyTZD1+9FV2oMG/z600aYMrnkSL5rtmhvbDLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdNbZOzcT/93fwPezmVSl0J3jm60wHwYDVR0j BBgwFoAUYOvHa2eraOWphSh94evb2yiW5t4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDBmMzdjMC0zODBjLTQwNTMtYjNiYS1iMzJlZjAzNWMyOGYvMC82MEVCQzc2QjY3 QUI2OEU1QTk4NTI4N0RFMUVCREJEQjI4OTZFNkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRCREIyODk2 RTZERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQwZjM3YzAtMzgwYy00MDUzLWIz YmEtYjMyZWYwMzVjMjhmLzAvNjBFQkM3NkI2N0FCNjhFNUE5ODUyODdERTFFQkRC REIyODk2RTZERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEAO7TMVqK/FYp22bbowuQHK8/rT+zUrbUc nyAbsgjfHsquzUwqritsczgjfH45QjB91bNmVvBLmONrcTxnT+hoVexoa0TA81kU PznRXJl1+YNarveIXxPUM291fDOtwfL5MLquSls3qhxQUJhN4DTcIdbJUJerB2WS qmQUtlj9bl+OGUfjZDjvTAXmt5kvFzelHYErayBXRP9CZw9IQVMkjHvIeL3aDDiv 80B4wTgQM4tbO9tG5cdatBByNeRP+7tnHUrYA3eLmS9VODutIf/NGxSG1lF6rLfh TXJLTyk+Y60fs6wNPVsSBm01ojHDXTxchFUyiVbyVGk+glUFX00= -----END CERTIFICATE-----Generated at Mon Apr 13 02:38:26 2026 by rpki-client