
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
File: 60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json)
Hash identifier: n/N1I0+fhcgn9Qx2+7KfJR/xONsTTIP79Ez99xCaIQo=
Subject key identifier: B7:CF:B0:0C:37:3F:2F:93:F0:2C:F7:C5:1D:ED:75:79:24:CF:AF:A7
Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
Certificate issuer: /CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Certificate serial: 5518BF436B537461DFE6FE23D262D22B55EA3E0F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 16:34:35 +0000
Manifest this update: Wed 16 Sep 2026 16:29:35 +0000
Manifest next update: Thu 17 Sep 2026 18:44:35 +0000
Files and hashes: 1: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: jJk5AOC9UMtsycdaZ6uNtWHp81XJ0rTaRws46XyoW40=)
2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:44:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:18:bf:43:6b:53:74:61:df:e6:fe:23:d2:62:d2:2b:55:ea:3e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Validity
Not Before: Sep 16 16:29:35 2026 GMT
Not After : Sep 17 18:44:35 2026 GMT
Subject: CN=B7CFB00C373F2F93F02CF7C51DED757924CFAFA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5a:71:13:f4:2e:8d:d1:d9:df:44:1d:9c:7f:
38:da:39:42:30:9f:1b:a0:37:0c:cd:bf:76:9a:f5:
f9:67:09:5d:d5:e5:2b:98:88:de:c8:52:dd:d4:c7:
be:e8:93:cc:91:11:18:1a:ba:97:8c:42:08:ea:81:
3f:07:ae:2f:35:07:8b:4d:b4:8d:93:2a:ff:b3:c5:
3d:d4:37:58:2e:08:e7:6a:4b:32:ad:3f:9c:b5:08:
77:ad:37:f6:87:e7:7b:bd:99:c6:5f:71:10:9f:d0:
16:13:03:af:fd:28:24:39:5f:52:52:9d:ff:82:fc:
0e:9d:c1:08:68:1b:4a:0e:03:45:1d:df:8f:51:65:
55:05:7e:12:35:dc:00:83:5a:28:11:93:8a:22:6f:
7f:d8:bc:20:22:06:91:f0:7f:39:80:3f:91:45:d4:
38:c0:08:38:5a:3b:89:10:56:d9:c9:c2:31:8f:53:
5b:29:1b:0a:79:31:ab:50:ab:c5:f6:10:08:3d:4d:
47:67:52:32:6e:26:4e:c3:1d:3f:79:42:78:1d:84:
a2:35:02:0b:ce:c1:60:40:0b:81:60:d2:c5:50:54:
29:38:52:05:ef:5d:cd:da:58:55:61:d2:c9:83:98:
b0:b0:ff:f0:31:70:43:a0:3d:09:1e:3f:d2:5c:36:
f3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CF:B0:0C:37:3F:2F:93:F0:2C:F7:C5:1D:ED:75:79:24:CF:AF:A7
X509v3 Authority Key Identifier:
keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a3:e3:b7:be:ce:12:e4:07:a7:81:4e:2d:87:41:b2:db:16:
bd:fd:25:0a:8c:e5:62:e1:43:82:b2:38:69:cd:2d:7e:f2:42:
cf:e7:df:cc:d5:66:be:d7:c4:b7:a6:4b:65:ce:ca:9e:25:e0:
e4:02:00:e9:a2:16:cd:3f:13:c3:1b:f1:ca:9b:69:bc:f3:1c:
09:95:54:d2:f3:88:ee:96:9e:b1:28:48:8d:cd:eb:0d:77:7d:
4d:33:ae:b7:f0:e1:f4:b3:87:09:4d:2b:ac:7f:76:c9:7e:94:
61:bf:03:66:7d:2a:04:a9:86:8f:d3:75:fc:91:33:56:8f:36:
f6:9e:34:ed:c1:4f:1d:0a:bd:34:21:f5:c7:32:91:f1:e6:a8:
64:81:3d:bf:f3:59:e8:2a:a3:01:e7:9a:4c:32:d8:17:c4:7d:
77:ee:18:d5:aa:c0:4b:dc:23:09:f1:30:11:0c:d0:06:6b:ce:
e3:82:43:1a:f9:79:9a:da:f2:91:f4:5c:7b:89:52:82:1a:98:
aa:46:dd:af:66:3e:dd:83:14:fb:a3:67:49:a2:56:72:65:a5:
06:30:a1:4e:31:cf:39:79:7a:97:98:5d:fe:57:83:71:14:39:
e1:01:f8:ae:53:fb:64:05:d5:32:42:3d:2b:c6:64:2c:6b:fd:
bb:e5:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:04:41 2026 by rpki-client