
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
File: 60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json)
Hash identifier: ypPn4+LFa/wiqZSBJ4PZBOWUrt0lYczqN2Hb3d0wNys=
Subject key identifier: 7D:B7:59:87:E0:7D:C1:84:04:29:7E:B7:1A:54:3F:70:58:77:46:3E
Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
Certificate issuer: /CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Certificate serial: 52FF4169EAC7F2521ED9B042CB1AEE56C120CF79
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 04:24:11 +0000
Manifest this update: Tue 12 May 2026 04:19:11 +0000
Manifest next update: Wed 13 May 2026 06:15:11 +0000
Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=)
2: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: /nWrEu0y36fwzxZOJkIWo7TY9yLDMhRSmSoPkOroVMc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:15:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:ff:41:69:ea:c7:f2:52:1e:d9:b0:42:cb:1a:ee:56:c1:20:cf:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Validity
Not Before: May 12 04:19:11 2026 GMT
Not After : May 13 06:15:11 2026 GMT
Subject: CN=7DB75987E07DC18404297EB71A543F705877463E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:a6:4c:aa:5f:60:54:2e:b9:ac:b0:5e:18:
dd:48:aa:17:75:dc:c4:5f:70:de:2b:2d:da:a9:01:
e9:b6:28:2a:f0:7e:be:7b:bc:ea:51:33:bc:14:2a:
2a:e3:7a:99:c0:c1:60:24:d5:5d:44:ed:1b:43:e0:
57:33:85:6d:c2:54:a2:11:8e:07:1a:c3:9a:75:a4:
af:05:e4:5e:e3:f5:4d:94:f9:94:ed:a2:e2:ab:d8:
52:6b:91:e1:7c:62:8e:bb:36:16:39:88:a9:4b:38:
a3:e5:8e:70:d1:69:64:d2:02:cd:11:b1:df:c5:8e:
b3:f1:72:01:dc:f9:16:df:26:f7:cf:a6:7a:0c:84:
1b:0c:2c:67:39:64:68:fb:47:29:c4:5c:f7:e5:c9:
12:b8:cd:d6:51:ac:61:fc:a1:c8:4a:ae:54:8e:5d:
52:f5:2a:4f:0f:42:9a:9b:c9:c0:5b:22:36:98:7b:
bf:0c:39:fd:ab:e4:82:54:16:17:d2:16:68:4b:88:
6c:b4:6d:af:f2:14:94:99:61:ba:25:c4:ca:20:26:
90:5a:05:0c:3b:5f:29:a9:1d:31:00:80:3e:59:95:
30:a4:c2:6e:05:df:f0:22:99:fc:5e:4b:9f:fc:f3:
85:f2:b5:e2:3a:ea:82:f3:56:40:f2:52:f6:38:4f:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:59:87:E0:7D:C1:84:04:29:7E:B7:1A:54:3F:70:58:77:46:3E
X509v3 Authority Key Identifier:
keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f6:76:fa:c7:e8:e9:51:6c:5c:48:47:ad:89:2b:c7:37:9b:
c6:6e:c1:94:0d:13:9f:61:4d:ea:e9:2a:98:29:2b:c8:8d:9d:
96:4c:f0:54:5d:3e:9e:6f:f1:3e:59:8f:bf:e6:56:67:4d:47:
c6:de:b9:f6:03:f7:6c:75:15:82:b5:23:da:d9:de:18:cf:9e:
c9:f0:3a:6b:35:d2:5d:38:54:5a:a4:9f:0c:e8:0c:98:e7:cf:
94:ac:b5:33:64:55:9b:39:6c:70:61:ef:9f:9b:32:6f:1b:a6:
85:91:e3:09:a4:bc:1f:7b:60:51:34:5e:94:ca:d3:f3:81:7d:
2b:aa:51:87:ba:7e:ac:dd:99:7b:c9:56:73:5e:ea:c2:1c:d6:
0a:76:ca:4d:39:27:c9:30:63:dc:ad:bc:1b:ef:aa:74:be:1e:
89:08:11:f8:1b:dd:3b:75:24:8a:11:5d:d1:aa:fd:28:ad:73:
b8:46:d8:5b:26:5e:87:9d:4f:82:8c:5d:4d:72:d7:b5:5c:9b:
8f:2d:c7:0b:9f:84:53:92:4d:37:1a:66:f3:35:8f:de:03:8c:
89:78:e4:ea:77:90:3b:6d:e3:60:fc:bb:c8:e0:62:e6:0a:3b:
d1:1a:3d:e7:82:c2:9c:9a:50:97:ae:9a:8b:86:07:88:1b:7e:
36:bc:bd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:19:29 2026 by rpki-client