
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
File: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft (raw, json)
Hash identifier: Pg6v4HVZqpzF51PDvhSrrpWsSqLDgf7bE7OaZb5fv+0=
Subject key identifier: 5D:B5:53:E7:83:B9:B5:CD:65:83:D0:A5:A6:F2:84:F6:49:3A:17:23
Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D
Certificate issuer: /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
Certificate serial: 64EC06826572B686425EFAAD115DC7A3686BF8A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
Manifest number: 43
Signing time: Fri 19 Jun 2026 18:38:24 +0000
Manifest this update: Fri 19 Jun 2026 18:33:24 +0000
Manifest next update: Sat 20 Jun 2026 21:32:24 +0000
Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: 0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=)
2: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl (hash: qeJ3l3UyklqKVzZCfVZ/70zc63T4nD5Riv/8htfetpg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl
rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 21:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ec:06:82:65:72:b6:86:42:5e:fa:ad:11:5d:c7:a3:68:6b:f8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
Validity
Not Before: Jun 19 18:33:24 2026 GMT
Not After : Jun 20 21:32:24 2026 GMT
Subject: CN=5DB553E783B9B5CD6583D0A5A6F284F6493A1723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:9a:33:d2:08:58:da:56:d2:5f:99:b5:3b:
20:09:65:f8:2a:3d:fa:b5:59:48:5c:ae:f4:90:12:
a3:3e:ed:c2:15:50:94:4e:c7:6d:31:84:06:e2:e3:
3b:0d:a7:9d:b4:f6:8d:d4:a9:9d:a3:5b:07:15:61:
e8:4d:31:56:3c:54:8d:f3:52:dd:cc:41:ea:0c:c0:
f7:a2:23:d5:ca:11:92:3e:0f:8e:69:08:fd:c7:54:
27:5d:89:14:69:c1:0c:a9:15:0c:f2:38:33:2b:88:
a7:85:9f:f7:d2:1e:de:67:9e:29:ee:b6:b8:91:5a:
c2:4e:77:f6:64:36:c9:3b:c9:b7:3b:27:bc:7a:6b:
10:6b:68:95:a3:60:26:b4:79:f0:04:0c:d2:8c:20:
88:c8:a2:b7:46:4d:09:c1:3f:6f:46:0d:79:fb:02:
76:73:2c:e5:45:da:af:51:cc:54:71:80:e1:0f:73:
45:b6:c1:07:81:55:05:74:2b:38:0d:05:2e:35:55:
57:08:8b:c8:00:97:b5:bd:da:6e:86:78:f6:d5:03:
8c:8b:c6:3f:e3:2b:dc:bc:98:68:cc:70:ab:b3:b3:
b1:c1:14:56:b9:3e:64:69:89:77:f6:52:6b:f3:9d:
7e:f0:bb:5b:30:32:52:43:37:20:b7:b1:ec:83:f9:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:53:E7:83:B9:B5:CD:65:83:D0:A5:A6:F2:84:F6:49:3A:17:23
X509v3 Authority Key Identifier:
keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:16:92:27:43:ac:17:27:9d:6a:b8:85:e9:5d:13:ba:94:95:
d5:a7:38:e1:68:e2:8a:11:8f:5e:2e:04:30:ea:16:92:73:ad:
f3:30:d9:d2:dc:f1:f8:f2:b6:c8:8d:af:96:5f:67:06:87:53:
74:21:23:4b:3a:27:6c:e0:f8:94:98:a0:84:30:d7:0b:b5:ea:
13:69:3f:d4:ea:b1:97:a9:f6:31:5e:91:d7:85:c9:78:a8:fe:
2b:2a:53:8c:54:36:30:c2:17:91:d4:ac:db:b6:7a:a2:b0:b8:
67:84:15:77:32:b1:3f:f0:b0:0a:a6:ef:88:4b:f9:80:5c:30:
61:9c:88:0c:a3:b7:8e:52:ab:cf:9b:0e:8c:fe:49:ed:8a:9e:
6b:2e:5e:f2:73:c7:ca:63:91:62:c5:f2:a6:5f:ac:7a:52:03:
cf:59:d9:64:6b:e3:f1:ec:e2:a2:f5:00:86:60:aa:2c:94:49:
4e:5c:98:03:05:85:46:2b:c9:4a:ec:26:5a:35:4d:1f:f8:e3:
61:67:e8:4f:3b:f7:f1:3a:8c:fe:95:3e:cb:94:d1:36:44:c9:
82:b0:ae:6e:cb:6f:d8:38:f1:6d:46:5c:37:ca:26:52:28:40:
4a:58:b8:87:96:a9:39:34:cd:0b:33:83:51:27:64:1a:0d:75:
59:3a:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:37:21 2026 by rpki-client