
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
File: 60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json)
Hash identifier: wG2OtS7CuX1j0Hvb83Ym0GsdxwzOsvTDlTif5sa47Rw=
Subject key identifier: 54:1D:AF:29:61:BE:14:8F:E3:63:72:72:CA:A6:38:2B:71:B6:6A:C3
Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
Certificate issuer: /CN=60E799376F38EB181976A659060E6D998B4DB2D3
Certificate serial: 50FA46AF6458E985C01AC741B8CA1407F7024961
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 13:11:06 +0000
Manifest this update: Thu 23 Jul 2026 13:06:06 +0000
Manifest next update: Fri 24 Jul 2026 13:55:06 +0000
Files and hashes: 1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=)
2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=)
3: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: oBMV8301GWjNOUEr9FmZ4kVWHmg5+CRCyIb9wywgaFE=)
4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:fa:46:af:64:58:e9:85:c0:1a:c7:41:b8:ca:14:07:f7:02:49:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3
Validity
Not Before: Jul 23 13:06:06 2026 GMT
Not After : Jul 24 13:55:06 2026 GMT
Subject: CN=541DAF2961BE148FE3637272CAA6382B71B66AC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:f3:88:51:26:a8:32:41:45:d4:92:26:9f:
ef:9a:7e:e5:d2:f4:fb:d7:de:e9:21:93:10:bb:6a:
81:fb:09:27:19:d8:a4:12:2c:3b:c4:ca:29:ed:e9:
4d:e6:ef:d8:e4:91:d0:87:53:2a:30:dd:30:c9:3e:
7c:8e:ec:39:84:12:fa:10:de:84:31:12:5e:ca:25:
3b:e9:3f:5b:c1:20:47:05:2e:3b:d8:cb:37:a7:b0:
4e:77:73:b4:9e:50:8c:74:4e:e3:e9:11:a2:ff:23:
7e:6a:1d:e0:a0:c5:1c:dc:e9:e8:70:41:95:58:a5:
43:99:78:e1:1e:bf:c1:b9:17:cc:06:9d:48:cf:66:
c4:84:f0:c9:6a:60:7e:b0:43:3a:57:cb:7a:fd:ad:
f3:23:8d:40:a9:6f:45:02:dc:80:8f:ac:72:2d:04:
3d:fb:6d:5b:d8:f5:55:12:e6:f4:3c:49:4c:99:29:
4e:b0:a6:4f:3c:d3:78:fc:96:54:cc:e5:08:68:3a:
90:95:47:a7:d5:72:89:5e:be:3d:ea:3b:75:a1:d7:
d0:17:d0:33:ae:3d:67:76:f9:97:04:4b:02:41:bb:
26:02:01:21:10:26:e7:2c:ca:f7:56:17:a3:eb:5e:
19:ad:50:51:02:ca:13:51:b8:ff:45:6f:13:e1:7d:
39:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1D:AF:29:61:BE:14:8F:E3:63:72:72:CA:A6:38:2B:71:B6:6A:C3
X509v3 Authority Key Identifier:
keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:be:95:5e:f5:d0:d8:d5:6e:6f:f1:18:06:8e:69:e1:ac:23:
a1:56:08:13:56:9e:50:40:1a:96:a6:1a:f7:cb:1a:97:27:81:
1b:26:d5:97:ae:6b:99:67:31:3e:eb:28:9d:02:02:60:4d:b3:
a6:30:0f:7a:7e:44:50:3e:9b:6b:80:08:eb:0f:d7:f6:f6:f8:
1e:93:29:5e:3e:6b:99:8c:f8:dc:b2:59:97:29:a6:74:95:f3:
a4:ca:56:bb:e3:39:69:37:9e:f9:33:c4:a0:34:7b:31:36:ab:
56:a5:64:6d:60:aa:25:50:1d:f8:36:5d:98:40:fe:d2:66:5d:
70:e2:52:cc:e6:e5:b6:ce:0d:c0:19:d3:51:97:9a:b0:bb:f5:
3f:0a:1b:a0:40:11:bc:ce:ac:d4:e3:1b:f7:72:e8:8f:24:c4:
d9:a1:bf:81:28:be:47:b9:0b:d8:37:e5:da:e0:0f:0d:cd:c0:
b5:57:5b:b9:80:34:dc:01:5b:08:8c:56:11:e6:89:d3:8f:c5:
ec:43:1a:26:89:b2:0a:49:ec:ba:4a:db:9b:f0:ed:76:b0:d3:
75:e3:6b:27:4e:2b:55:4a:fa:43:41:b1:98:b4:c8:db:e7:71:
25:74:ab:e7:65:6e:05:00:2f:53:f8:7f:dc:62:c8:a7:d3:b8:
f7:bf:39:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:23 2026 by rpki-client