
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
File: 60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json)
Hash identifier: TyFPrdD5Q9Nj5BoTvg4xvqYi5Kz2/aijlH80ndVeH3o=
Subject key identifier: AB:2C:3F:7A:4C:43:61:86:09:EB:D8:A9:10:87:DD:A0:FD:A6:D7:14
Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
Certificate issuer: /CN=60E799376F38EB181976A659060E6D998B4DB2D3
Certificate serial: 6E4FB9B70FB45A89837D918ECEAB12B9CE46C05C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
Manifest number: 42
Signing time: Fri 19 Jun 2026 16:40:53 +0000
Manifest this update: Fri 19 Jun 2026 16:35:53 +0000
Manifest next update: Sat 20 Jun 2026 17:20:53 +0000
Files and hashes: 1: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: qSMHPromJ6vqW6nPaYVHRVExYm7KtXmN2zqC8c6K9MA=)
2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=)
3: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=)
4: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 17:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4f:b9:b7:0f:b4:5a:89:83:7d:91:8e:ce:ab:12:b9:ce:46:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3
Validity
Not Before: Jun 19 16:35:53 2026 GMT
Not After : Jun 20 17:20:53 2026 GMT
Subject: CN=AB2C3F7A4C43618609EBD8A91087DDA0FDA6D714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:74:45:b3:b5:5e:c8:91:24:c4:c9:e8:60:
af:9a:bc:d3:e0:03:dd:a6:a1:f4:be:1e:94:82:9e:
60:8f:84:11:2f:e9:fa:22:61:ab:99:af:84:c0:93:
1e:dd:34:64:a7:2b:f7:c8:c4:f4:b3:7e:87:f3:35:
a4:57:a9:51:2c:eb:73:8b:46:14:5f:c7:49:e1:52:
b1:bf:21:12:14:45:34:09:9d:26:51:be:43:7e:5d:
95:eb:64:64:92:ee:50:28:3b:34:1a:c3:77:4e:ce:
a9:cb:1d:a1:09:e2:e3:aa:06:1d:52:08:c3:5a:b0:
f8:21:0f:8a:21:10:de:e3:75:86:80:dd:de:a5:65:
b8:84:ff:bc:fe:fe:f5:e5:14:5f:9c:d3:8e:37:02:
87:75:fb:a6:47:6a:ee:a1:b5:69:cf:e1:7a:01:d7:
fe:41:a8:f3:7f:26:ce:3f:72:dc:ee:b1:02:5e:af:
ce:c8:e5:c8:fb:9d:32:16:33:a5:52:e9:d1:af:36:
61:8e:60:fb:a5:0e:19:ef:8f:41:b2:9c:4b:6a:cf:
f7:7b:15:3c:53:b4:21:8e:af:20:9b:f2:36:d1:bc:
80:f0:25:d1:6f:f2:34:73:58:9c:1c:3f:12:78:61:
27:2a:27:c3:b7:3e:b5:09:de:13:f1:ec:a4:9c:44:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2C:3F:7A:4C:43:61:86:09:EB:D8:A9:10:87:DD:A0:FD:A6:D7:14
X509v3 Authority Key Identifier:
keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:21:55:8d:86:61:97:1d:59:da:9b:33:90:a6:47:ba:ae:ab:
3c:aa:49:63:14:4a:64:a7:2f:75:d0:b0:8a:de:83:74:6a:72:
6c:44:b1:82:38:32:80:33:9c:f6:8d:e5:3f:73:e8:fa:a5:2f:
e5:f1:2f:2b:f8:74:83:80:7c:d4:52:4e:3d:81:c0:d7:1c:bc:
6f:5e:9b:31:ce:32:4a:79:37:32:08:e1:2a:df:9b:d6:2d:8f:
9f:82:ec:21:96:65:e3:20:05:38:fa:21:3d:d0:40:7b:a0:e2:
40:aa:05:26:ea:ea:49:b7:72:4b:ad:c3:7b:ee:c3:11:b6:0c:
29:14:bc:b2:35:09:3f:de:f8:0c:d2:06:35:00:92:bd:d1:32:
14:d9:dc:f6:4b:b1:cb:ea:38:84:b3:27:ec:29:37:11:3e:e3:
54:51:12:ce:ea:a7:64:22:39:cf:a8:99:86:91:b1:c4:47:b3:
5b:a3:8e:f0:f3:8d:b7:05:9f:9b:27:38:f3:6f:87:fe:b8:2e:
d2:62:24:91:31:30:1f:2a:9e:0a:68:33:23:ba:59:12:f5:6a:
1e:74:4d:49:26:57:ee:7b:4d:5e:66:93:62:7f:21:6c:39:df:
6a:40:a4:c7:2c:8c:32:aa:34:a2:3f:b3:5e:6a:82:4f:b1:a1:
72:82:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:50:15 2026 by rpki-client