
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
File: 60B7F65507671C158E1D599CEE8EC29532B62A05.mft (raw, json)
Hash identifier: G7s2dhAgIgqqr+ELs1KeJ9YqLmwne7xHPY7mOfajIMw=
Subject key identifier: 18:E2:DE:06:E3:D5:87:A3:F6:69:81:AA:3E:95:AC:50:DB:13:BE:05
Authority key identifier: 60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
Certificate issuer: /CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Certificate serial: 248CF2C3056D50120F3BCE062411B58716A0348E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
Manifest number: 7D
Signing time: Sun 02 Aug 2026 13:03:30 +0000
Manifest this update: Sun 02 Aug 2026 12:58:30 +0000
Manifest next update: Mon 03 Aug 2026 15:52:30 +0000
Files and hashes: 1: 60B7F65507671C158E1D599CEE8EC29532B62A05.crl (hash: Xib0SQDiLiqF5Aa8fyIXYJCcUEwwPYJ3BOHbm5vR+Uc=)
2: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: uA8fdhhgRgay+nwR5lgokvA0Y41clLqd0FjSgZQaSws=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 15:52:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8c:f2:c3:05:6d:50:12:0f:3b:ce:06:24:11:b5:87:16:a0:34:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60B7F65507671C158E1D599CEE8EC29532B62A05
Validity
Not Before: Aug 2 12:58:30 2026 GMT
Not After : Aug 3 15:52:30 2026 GMT
Subject: CN=18E2DE06E3D587A3F66981AA3E95AC50DB13BE05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:46:9d:32:20:9c:3f:90:7b:dc:03:7d:f3:c4:
d8:1b:cf:30:44:36:ec:11:29:f8:76:6a:93:16:22:
4c:eb:c6:14:c3:1a:f6:b7:d9:bd:cb:d5:25:3f:8b:
3e:d0:2a:f1:d7:37:ad:e4:9e:9d:1d:ea:36:41:e9:
39:2c:6b:fb:6a:f9:50:8d:51:a8:12:cd:7d:ff:d5:
de:49:81:1c:08:70:8c:12:b1:5d:11:6f:96:64:a7:
f8:03:d2:b8:6f:ab:6e:f6:45:4e:f9:f7:8e:64:ae:
75:19:78:3a:9f:61:71:3e:2e:74:22:ee:d8:19:46:
05:38:ca:b5:82:bf:04:0a:d0:e2:a5:40:1c:5e:cb:
9c:cc:4c:0f:9b:ac:b3:23:50:0c:b0:f3:bf:6b:4b:
20:65:29:be:3f:c6:cc:7e:9b:c7:78:29:d3:4a:39:
cb:fd:5a:3e:d4:5e:cf:a9:85:6d:f0:ac:41:58:7f:
d7:5c:79:ba:99:55:fa:97:1f:24:87:6e:17:17:17:
31:1e:dc:eb:77:bf:d0:c9:9f:ad:49:8e:e1:0f:70:
04:dc:4b:fe:24:4c:89:81:4e:1f:fa:90:98:29:40:
3b:f8:3a:68:c2:8e:3b:7d:10:4f:60:14:03:7f:49:
5e:d1:ab:a5:bd:f6:ba:bf:fa:8e:ec:a7:89:54:71:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E2:DE:06:E3:D5:87:A3:F6:69:81:AA:3E:95:AC:50:DB:13:BE:05
X509v3 Authority Key Identifier:
keyid:60:B7:F6:55:07:67:1C:15:8E:1D:59:9C:EE:8E:C2:95:32:B6:2A:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/60B7F65507671C158E1D599CEE8EC29532B62A05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/60B7F65507671C158E1D599CEE8EC29532B62A05.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4e:c4:7b:3f:33:32:3d:70:b9:03:97:87:dd:e5:61:b3:c4:
71:12:7f:a4:ab:69:1c:cd:29:78:76:47:27:4a:da:fe:32:02:
0f:68:15:cc:ee:1b:54:70:c4:fe:b8:c4:2b:60:14:53:f5:f6:
a8:16:11:4c:d5:91:db:b4:ce:10:7f:ed:0d:bc:75:2a:dc:67:
6c:97:5e:9b:37:bb:b9:58:22:ec:27:7c:5b:77:3a:3b:18:b6:
e6:81:5a:ea:c6:ee:a9:35:27:55:c6:cb:24:9c:84:20:f9:30:
9e:ee:a1:14:09:b9:73:83:10:10:e2:a5:e7:53:9b:0b:01:22:
3c:a2:34:48:84:db:14:db:c2:c8:36:24:2f:6f:d9:5b:c9:c8:
8a:64:50:d3:85:83:a9:f8:01:f7:55:4e:89:62:02:c2:26:e0:
f5:32:46:f1:ae:81:62:35:70:26:3e:cb:63:d4:87:00:8d:66:
a2:77:ab:6e:61:96:bf:d5:4b:6b:5e:1f:fc:85:c4:bc:1d:f2:
ff:36:37:c4:44:f0:48:2d:a1:e2:3a:32:fd:08:dc:92:aa:25:
f1:1c:ed:58:ec:34:9c:26:65:c5:46:b9:7a:20:de:fd:68:e1:
67:e3:56:ac:64:c2:1b:88:c9:10:93:bb:43:84:71:25:56:f4:
ec:21:d6:78
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJIzywwVtUBIPO84GJBG1hxagNI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUz
MkI2MkEwNTAeFw0yNjA4MDIxMjU4MzBaFw0yNjA4MDMxNTUyMzBaMDMxMTAvBgNV
BAMTKDE4RTJERTA2RTNENTg3QTNGNjY5ODFBQTNFOTVBQzUwREIxM0JFMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJRp0yIJw/kHvcA33zxNgbzzBE
NuwRKfh2apMWIkzrxhTDGva32b3L1SU/iz7QKvHXN63knp0d6jZB6Tksa/tq+VCN
UagSzX3/1d5JgRwIcIwSsV0Rb5Zkp/gD0rhvq272RU75945krnUZeDqfYXE+LnQi
7tgZRgU4yrWCvwQK0OKlQBxey5zMTA+brLMjUAyw879rSyBlKb4/xsx+m8d4KdNK
Ocv9Wj7UXs+phW3wrEFYf9dcebqZVfqXHySHbhcXFzEe3Ot3v9DJn61JjuEPcATc
S/4kTImBTh/6kJgpQDv4OmjCjjt9EE9gFAN/SV7Rq6W99rq/+o7sp4lUcZ1fAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGOLeBuPVh6P2aYGqPpWsUNsTvgUwHwYDVR0j
BBgwFoAUYLf2VQdnHBWOHVmc7o7ClTK2KgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGFlMTNiYWMtOTFjMS00NjNiLTgzMzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUw
NzY3MUMxNThFMUQ1OTlDRUU4RUMyOTUzMkI2MkEwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC82MEI3RjY1NTA3NjcxQzE1OEUxRDU5OUNFRThFQzI5NTMyQjYy
QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz
MzMtNjRlZWM2ZDI3OTdlLzAvNjBCN0Y2NTUwNzY3MUMxNThFMUQ1OTlDRUU4RUMy
OTUzMkI2MkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAG5OxHs/MzI9cLkDl4fd5WGzxHESf6SraRzN
KXh2RydK2v4yAg9oFczuG1RwxP64xCtgFFP19qgWEUzVkdu0zhB/7Q28dSrcZ2yX
Xps3u7lYIuwnfFt3OjsYtuaBWurG7qk1J1XGyySchCD5MJ7uoRQJuXODEBDipedT
mwsBIjyiNEiE2xTbwsg2JC9v2VvJyIpkUNOFg6n4AfdVToliAsIm4PUyRvGugWI1
cCY+y2PUhwCNZqJ3q25hlr/VS2teH/yFxLwd8v82N8RE8EgtoeI6Mv0I3JKqJfEc
7VjsNJwmZcVGuXog3v1o4WfjVqxkwhuIyRCTu0OEcSVW9Owh1ng=
-----END CERTIFICATE-----
Generated at Sun Aug 2 20:34:56 2026 by rpki-client