$ rpki-client -vvvf rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft File: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft (raw, json) Hash identifier: NSbBc7TxOnmHBiXpjHz4aFHc+epK+LRkVAOuu3rEZuA= Subject key identifier: 69:7A:B9:8A:EC:CA:DC:C1:E8:F0:B0:9E:08:C4:FF:68:DE:8D:56:96 Authority key identifier: 60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 Certificate issuer: /CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Certificate serial: 7C8AD4C5741C9E7313AA70A6BA693E4755774462 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 22:42:00 +0000 Manifest this update: Wed 16 Sep 2026 22:37:00 +0000 Manifest next update: Fri 18 Sep 2026 01:43:00 +0000 Files and hashes: 1: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: JiRJdm1oFhxxxMsJqGXfYKhPIquMJhUAFsZ9oA78Y3M=) 2: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: +HH+aPxPZPLQQ1zvNRP5gbXlwdQSzndcy7J0pXkGHPc=) 3: 60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl (hash: kMPZjCS/unwi6KrIJ26JUUT8ydToDbJDrYWsAd9BTHE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8a:d4:c5:74:1c:9e:73:13:aa:70:a6:ba:69:3e:47:55:77:44:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60C91C48CEBFDEF081CCEE441D84ECC26329BA07 Validity Not Before: Sep 16 22:37:00 2026 GMT Not After : Sep 18 01:43:00 2026 GMT Subject: CN=697AB98AECCADCC1E8F0B09E08C4FF68DE8D5696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a9:0c:38:93:59:24:2a:42:4b:33:14:0e:5f: 0e:15:c3:01:d9:c7:c7:51:93:06:56:15:ad:7d:b5: e7:50:1a:99:e7:24:22:1c:33:ee:b0:0e:5c:60:e5: cb:93:e2:dd:cf:15:d0:fa:be:3c:2c:02:87:1a:6d: 5d:a0:7c:d7:37:6d:8b:a6:1a:11:61:79:88:8b:26: 89:8f:35:b1:90:a7:d7:69:3d:44:61:34:57:8f:da: fe:c0:3d:b0:c2:6b:c3:6f:57:91:bf:6f:14:04:aa: 1c:53:4c:3a:6b:1c:94:11:11:1a:d0:46:5d:f7:20: 6f:b1:85:17:0f:50:1c:ff:66:ac:b8:35:ee:e0:12: e5:7a:1b:3a:46:9b:ff:09:b7:24:32:7f:25:4c:10: 64:2a:b4:2c:65:b0:b6:a1:fd:bb:ab:22:63:0b:8a: 87:21:6a:a6:ba:b8:12:41:91:73:d9:0d:ca:45:fd: b7:82:bc:21:37:d3:c3:a1:e7:62:c1:15:a7:cd:e2: 4f:72:d1:c4:02:42:dd:2b:06:8a:86:7e:85:c9:8b: d6:54:50:1d:1b:d5:20:ef:0a:17:d7:9b:0a:08:8b: 9b:16:fe:4d:f9:0f:99:c2:fe:41:db:d4:5c:ed:4a: 30:76:be:8f:6e:7d:04:b9:19:00:2a:de:96:c9:7f: d4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7A:B9:8A:EC:CA:DC:C1:E8:F0:B0:9E:08:C4:FF:68:DE:8D:56:96 X509v3 Authority Key Identifier: keyid:60:C9:1C:48:CE:BF:DE:F0:81:CC:EE:44:1D:84:EC:C2:63:29:BA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/60C91C48CEBFDEF081CCEE441D84ECC26329BA07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:47:a8:72:04:36:19:5d:84:c1:82:00:c4:b8:b4:ac:c3:ba: be:1e:54:29:b3:a8:15:30:1e:59:28:e3:79:aa:05:02:45:8d: 3d:ec:f6:2e:0a:dd:a3:4f:84:e9:12:ca:10:1b:2c:0d:8f:dc: 6f:78:89:21:da:50:60:bf:86:f7:03:64:27:62:1b:75:55:ea: fb:8c:7b:bc:99:ea:48:44:12:84:2e:2b:68:33:5e:e6:05:fb: f6:d5:17:a1:c0:fc:f7:43:84:24:eb:93:dc:2c:39:75:ed:4d: 47:7d:8e:2c:f8:61:dd:7e:a1:ac:39:9e:27:dd:5e:6b:4c:1c: 65:02:4e:c8:c6:5e:b4:fa:73:6a:11:6a:30:5f:0a:f0:4a:77: 14:0f:85:04:10:19:ed:1f:48:82:35:e0:d1:3b:a0:01:78:3d: d9:c9:19:c3:73:9c:2d:0d:2e:49:1b:20:a0:7a:75:0f:a6:d6: a2:ed:35:31:71:6c:fc:e8:12:68:9d:b8:7a:57:ee:df:7f:5f: 94:38:c2:b8:a3:8d:e2:94:1b:3e:e5:77:de:7c:97:79:e4:97: 8a:e6:85:5b:03:05:d2:e4:fd:ba:4b:ac:4d:42:43:4c:17:37: 03:cb:f7:ec:9f:b7:d8:08:5b:7a:b4:81:69:f4:3b:a2:8d:dd: 9d:30:99:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIrUxXQcnnMTqnCmumk+R1V3RGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2 MzI5QkEwNzAeFw0yNjA5MTYyMjM3MDBaFw0yNjA5MTgwMTQzMDBaMDMxMTAvBgNV BAMTKDY5N0FCOThBRUNDQURDQzFFOEYwQjA5RTA4QzRGRjY4REU4RDU2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qQw4k1kkKkJLMxQOXw4VwwHZ x8dRkwZWFa19tedQGpnnJCIcM+6wDlxg5cuT4t3PFdD6vjwsAocabV2gfNc3bYum GhFheYiLJomPNbGQp9dpPURhNFeP2v7APbDCa8NvV5G/bxQEqhxTTDprHJQRERrQ Rl33IG+xhRcPUBz/Zqy4Ne7gEuV6GzpGm/8JtyQyfyVMEGQqtCxlsLah/burImML iochaqa6uBJBkXPZDcpF/beCvCE308Oh52LBFafN4k9y0cQCQt0rBoqGfoXJi9ZU UB0b1SDvChfXmwoIi5sW/k35D5nC/kHb1FztSjB2vo9ufQS5GQAq3pbJf9RhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaXq5iuzK3MHo8LCeCMT/aN6NVpYwHwYDVR0j BBgwFoAUYMkcSM6/3vCBzO5EHYTswmMpugcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODU5NzFhZTktNWNkZC00ZDQxLWI2MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhD RUJGREVGMDgxQ0NFRTQ0MUQ4NEVDQzI2MzI5QkEwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82MEM5MUM0OENFQkZERUYwODFDQ0VFNDQxRDg0RUNDMjYzMjlC QTA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNjBDOTFDNDhDRUJGREVGMDgxQ0NFRTQ0MUQ4NEVD QzI2MzI5QkEwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFHqHIENhldhMGCAMS4tKzDur4eVCmzqBUw Hlko43mqBQJFjT3s9i4K3aNPhOkSyhAbLA2P3G94iSHaUGC/hvcDZCdiG3VV6vuM e7yZ6khEEoQuK2gzXuYF+/bVF6HA/PdDhCTrk9wsOXXtTUd9jiz4Yd1+oaw5nifd XmtMHGUCTsjGXrT6c2oRajBfCvBKdxQPhQQQGe0fSII14NE7oAF4PdnJGcNznC0N LkkbIKB6dQ+m1qLtNTFxbPzoEmiduHpX7t9/X5Q4wrijjeKUGz7ld958l3nkl4rm hVsDBdLk/bpLrE1CQ0wXNwPL9+yft9gIW3q0gWn0O6KN3Z0wmcI= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:17 2026 by rpki-client