$ rpki-client -vvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft File: 60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json) Hash identifier: 5KjTA59cMALPlQBlvTxIIVOIDJkIf6XldmZYzOk+iJM= Subject key identifier: A2:1A:9B:4D:AE:1F:58:81:59:45:C8:80:4E:57:C9:11:F7:C0:A8:43 Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05 Certificate issuer: /CN=60B7F65507671C158E1D599CEE8EC29532B62A05 Certificate serial: 3350F27FFFEED0C29B3A26D7F26CD7FE3AB05BF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 03:25:59 +0000 Manifest this update: Thu 18 Jun 2026 03:20:59 +0000 Manifest next update: Fri 19 Jun 2026 05:29:59 +0000 Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=) 2: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: Z4WTlnbguP2wlS9cWZ1BE1fLX5PwWn53iL07nThFt/I=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 05:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:50:f2:7f:ff:ee:d0:c2:9b:3a:26:d7:f2:6c:d7:fe:3a:b0:5b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05 Validity Not Before: Jun 18 03:20:59 2026 GMT Not After : Jun 19 05:29:59 2026 GMT Subject: CN=A21A9B4DAE1F58815945C8804E57C911F7C0A843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3c:8e:89:60:01:70:2a:a6:e8:58:73:1f:34: cc:a0:93:33:8f:95:a2:cd:d1:d7:a3:7c:97:95:63: 37:35:f4:4c:6f:10:a3:2e:1d:41:07:9e:e3:05:11: 0b:e7:3a:8d:95:2d:39:1e:84:18:e1:9c:d1:62:76: a6:98:29:8d:c1:75:71:13:a7:81:35:45:b4:74:fd: 12:68:6a:18:d2:3d:d6:52:e6:96:3c:1e:12:d8:09: cf:ad:77:84:e8:92:4e:73:4d:7c:71:d4:13:e3:cd: 79:f9:4e:47:fa:4b:19:f1:05:13:ce:b8:b6:0c:8d: b9:9d:86:66:35:28:fb:0a:e3:e8:ce:2d:6c:2f:66: 64:de:1e:fa:5f:f6:9b:ca:43:4b:13:b3:30:ff:be: 5a:11:5b:3b:12:28:f8:7c:53:61:7c:92:a0:27:4b: 0c:dd:32:72:f1:0a:d8:19:b0:f0:58:ce:23:a0:9b: 8f:0f:59:13:0b:e3:c1:17:b0:38:24:b3:66:ae:e0: 21:ad:93:d9:e9:1d:0b:89:cd:9b:9a:a0:4d:fc:1d: a0:82:71:3d:fd:1a:49:b4:bf:71:fd:61:d5:f1:5d: 99:a7:c4:ac:35:70:f5:e7:81:dc:01:f5:95:ec:e6: 58:dd:ab:11:6a:b6:d7:a6:50:2e:71:00:ce:9c:db: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1A:9B:4D:AE:1F:58:81:59:45:C8:80:4E:57:C9:11:F7:C0:A8:43 X509v3 Authority Key Identifier: keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fa:91:ef:f8:cf:99:b2:25:70:95:65:ad:f2:78:77:ce:f9: 14:ff:6e:e2:fb:29:f1:11:4d:49:86:06:1e:25:d0:4b:a8:5a: b0:60:58:8d:39:43:7c:95:cb:b7:c9:89:44:28:e6:e1:b5:17: 4c:92:2d:81:74:57:74:a5:0b:45:79:6d:b6:b4:ce:aa:1c:e1: 22:f1:51:56:e9:c4:03:6b:b8:70:5c:ad:2f:46:04:87:4d:17: e0:f7:b0:e2:2c:e6:bd:72:9b:28:c5:b0:3a:1b:17:62:d0:c7: 8f:fe:2b:ee:4b:2e:94:79:e6:07:68:0e:ff:2c:2b:88:e4:a8: 75:47:84:b8:fe:28:7c:4a:e4:a8:6c:f3:52:62:ba:c4:f0:e0: 3e:73:95:57:76:40:14:aa:4c:b5:df:4d:e7:e8:20:23:ef:d2: ab:f7:25:72:87:b2:66:30:4f:66:1d:d3:c0:33:8c:cf:f0:c0: ea:b2:6c:7d:a1:f6:26:a2:53:82:92:f3:51:9e:46:1f:d0:c2: dd:a2:68:e7:94:f6:cf:f1:5c:d5:d9:f3:b1:02:13:f2:d9:ca: 23:99:21:81:42:de:6e:88:50:12:2b:2c:9c:3b:cb:98:05:49: d7:6f:0b:49:40:1f:6b:41:93:d4:27:d0:f9:e9:89:f3:34:9e: 73:05:f5:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1Dyf//u0MKbOibX8mzX/jqwW/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUz MkI2MkEwNTAeFw0yNjA2MTgwMzIwNTlaFw0yNjA2MTkwNTI5NTlaMDMxMTAvBgNV BAMTKEEyMUE5QjREQUUxRjU4ODE1OTQ1Qzg4MDRFNTdDOTExRjdDMEE4NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlPI6JYAFwKqboWHMfNMygkzOP laLN0dejfJeVYzc19ExvEKMuHUEHnuMFEQvnOo2VLTkehBjhnNFidqaYKY3BdXET p4E1RbR0/RJoahjSPdZS5pY8HhLYCc+td4Tokk5zTXxx1BPjzXn5Tkf6SxnxBRPO uLYMjbmdhmY1KPsK4+jOLWwvZmTeHvpf9pvKQ0sTszD/vloRWzsSKPh8U2F8kqAn SwzdMnLxCtgZsPBYziOgm48PWRML48EXsDgks2au4CGtk9npHQuJzZuaoE38HaCC cT39Gkm0v3H9YdXxXZmnxKw1cPXngdwB9ZXs5ljdqxFqttemUC5xAM6c2+jtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUohqbTa4fWIFZRciATlfJEffAqEMwHwYDVR0j BBgwFoAUYLf2VQdnHBWOHVmc7o7ClTK2KgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGFlMTNiYWMtOTFjMS00NjNiLTgzMzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUw NzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUzMkI2MkEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC82MEI3RjY1NTA3NjcxQzE1OEUxRDU5OUNFRThFQzI5NTMyQjYy QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMy OTUzMkI2MkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADb6ke/4z5myJXCVZa3yeHfO+RT/buL7KfER TUmGBh4l0EuoWrBgWI05Q3yVy7fJiUQo5uG1F0ySLYF0V3SlC0V5bba0zqoc4SLx UVbpxANruHBcrS9GBIdNF+D3sOIs5r1ymyjFsDobF2LQx4/+K+5LLpR55gdoDv8s K4jkqHVHhLj+KHxK5Khs81JiusTw4D5zlVd2QBSqTLXfTefoICPv0qv3JXKHsmYw T2Yd08AzjM/wwOqybH2h9iaiU4KS81GeRh/Qwt2iaOeU9s/xXNXZ87ECE/LZyiOZ IYFC3m6IUBIrLJw7y5gFSddvC0lAH2tBk9Qn0PnpifM0nnMF9fI= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:55 2026 by rpki-client