
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
File: 60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json)
Hash identifier: k8BloAQE+gRK0+11t24b4pHIaCGtq9CYfjqRSTjiOaA=
Subject key identifier: A3:8F:5D:8E:FF:7E:47:B3:07:0B:BA:68:0B:AB:36:C9:17:AA:1E:7A
Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
Certificate issuer: /CN=60E799376F38EB181976A659060E6D998B4DB2D3
Certificate serial: 194870F2E3753B77E3793A6649BF794E769AD67B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 05:56:40 +0000
Manifest this update: Fri 24 Jul 2026 05:51:40 +0000
Manifest next update: Sat 25 Jul 2026 06:30:40 +0000
Files and hashes: 1: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: tOu56qnwyqea4rAQSsxVgm5nRK1Nvs9c0X8uyisFamk=)
2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=)
3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=)
4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 06:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:48:70:f2:e3:75:3b:77:e3:79:3a:66:49:bf:79:4e:76:9a:d6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3
Validity
Not Before: Jul 24 05:51:40 2026 GMT
Not After : Jul 25 06:30:40 2026 GMT
Subject: CN=A38F5D8EFF7E47B3070BBA680BAB36C917AA1E7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:4d:15:96:24:87:0d:ce:e4:79:72:a4:30:
5b:bd:99:52:ed:5b:23:7f:d9:cc:0a:75:cc:fc:c5:
b1:2b:7a:7f:34:bf:bf:ac:c2:1e:af:9b:3a:3b:fe:
ee:cc:68:cf:70:50:ff:28:ba:f3:56:f8:74:5d:62:
03:8b:ea:6c:0d:0a:cd:cb:c7:2d:91:36:3e:88:7b:
38:a6:8a:de:d1:51:d5:41:62:ad:d8:fb:87:3e:ec:
3a:d6:3e:e3:9d:de:96:93:58:69:c1:ed:72:66:b6:
c0:fc:3e:fd:58:0d:69:57:e3:40:be:58:3d:43:c3:
be:17:8c:ba:b8:4e:53:e4:c0:be:0c:f3:32:80:3d:
00:99:9a:46:44:13:6c:35:40:d8:de:7b:06:ae:70:
83:f0:df:05:d1:e8:f9:85:64:c5:b7:22:6e:0f:a9:
d2:5b:8d:d5:83:c0:6c:ff:b1:ae:de:8c:fa:73:22:
ed:ff:97:af:13:d4:3a:4c:cf:6f:db:f7:31:f8:78:
3e:ee:51:58:8a:c5:19:31:54:a8:21:b6:fb:8f:93:
ff:86:5b:bf:8f:77:7f:7e:f4:d1:85:a9:c3:e6:5c:
d3:88:2e:5e:ad:74:ae:9b:8f:aa:2e:d2:a5:5b:b7:
2e:4b:1b:1e:b0:e0:01:18:96:55:7d:4d:cc:96:fc:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:5D:8E:FF:7E:47:B3:07:0B:BA:68:0B:AB:36:C9:17:AA:1E:7A
X509v3 Authority Key Identifier:
keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d3:42:58:97:32:7f:1f:57:43:cf:c2:15:17:28:17:1d:f7:
31:f7:c7:d0:da:e1:a0:a6:05:fc:b0:a4:32:e9:d9:f7:dd:87:
1d:b7:e8:4e:1e:22:c1:17:d9:ba:f4:c3:8a:22:16:b8:b7:30:
8a:eb:55:d1:39:1d:00:e4:d4:a1:ba:8e:9f:cb:65:63:b9:39:
4a:0c:67:74:10:b5:f9:1d:e6:67:8c:55:54:6e:2b:ea:01:6a:
a2:fb:4a:68:61:06:42:78:88:19:e4:f2:dd:9a:c7:ec:68:77:
2c:1f:94:48:09:ab:93:43:31:bb:ba:e0:f2:06:df:fb:95:8c:
b8:da:b9:7d:5b:3e:fe:ab:fb:4d:11:7c:76:4c:3d:93:6b:f1:
e8:7b:12:3f:9a:ab:e6:21:dd:af:39:ac:d0:60:b5:7a:0d:12:
92:67:9f:5d:38:8b:cd:31:d2:6c:df:52:cb:99:40:04:3a:1f:
9f:6e:7d:5e:13:55:da:06:b8:df:c6:98:e3:66:14:dc:d8:e7:
0c:26:3b:67:fe:0a:d7:07:54:f9:ef:d7:4e:03:54:92:b5:57:
8a:bb:8b:69:b3:4d:4d:64:86:35:17:c0:2d:9a:13:42:5e:a5:
93:47:b1:fe:05:2a:55:d8:a7:54:ba:ed:f7:d3:34:9b:42:7e:
0b:d0:75:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:00 2026 by rpki-client