
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft
File: 607EB065616BF1A985E6E549EC540E1C94E94819.mft (raw, json)
Hash identifier: YX0w6Rt7CLIGSgAPEpcK+rKNVFngSLqWIaoaXUZPlBw=
Subject key identifier: 89:F1:FD:05:DA:73:43:D5:2D:53:17:AA:A5:32:2B:3C:CA:BE:A3:BE
Authority key identifier: 60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19
Certificate issuer: /CN=607EB065616BF1A985E6E549EC540E1C94E94819
Certificate serial: 61E12364042454193460C5B89ECB77581DF62FD9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft
Manifest number: 9D
Signing time: Thu 27 Aug 2026 16:20:46 +0000
Manifest this update: Thu 27 Aug 2026 16:15:46 +0000
Manifest next update: Fri 28 Aug 2026 19:48:46 +0000
Files and hashes: 1: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: 8jyMA8Gmhc97Vi1yoxS8QxZYiktn7eC0pGgFqwBSsy8=)
2: 607EB065616BF1A985E6E549EC540E1C94E94819.crl (hash: GCdNv87x6ayadqAeMANBl0mjCOjuk8Gs71JVe+M8UpI=)
3: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: jjNj0cEM+Wj64PDL2yAGNM6cCQQfvKyXt4I1SVLIB/E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl
rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Aug 2026 02:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e1:23:64:04:24:54:19:34:60:c5:b8:9e:cb:77:58:1d:f6:2f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607EB065616BF1A985E6E549EC540E1C94E94819
Validity
Not Before: Aug 27 16:15:46 2026 GMT
Not After : Aug 28 19:48:46 2026 GMT
Subject: CN=89F1FD05DA7343D52D5317AAA5322B3CCABEA3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a4:35:ed:8e:d8:c8:11:86:d7:f0:f2:9d:ec:
bd:1f:fc:82:5b:70:22:1c:9d:d7:78:20:63:0b:3f:
d4:65:ed:7a:ef:e2:1d:4b:d1:86:61:6c:6b:f6:65:
57:da:bd:c4:75:9b:72:c5:3f:98:1f:ae:d1:c7:1a:
d3:f6:59:1d:98:2d:4f:9f:83:bf:f5:9c:c4:36:17:
48:ec:09:72:b3:69:9e:02:87:e1:f4:c1:f6:7d:df:
ba:84:14:42:73:bd:82:c6:dd:71:86:97:0a:3e:bf:
ca:a8:09:6f:7e:ec:38:14:86:1a:bb:f0:24:ea:c9:
cc:af:af:b7:64:68:33:9d:3c:7c:e0:32:fb:70:8a:
6e:c5:89:93:26:6d:ac:b3:31:50:f5:51:cd:e8:e8:
99:16:28:4b:17:aa:7b:bc:87:aa:e9:0c:18:2d:77:
55:8f:76:6a:3a:f7:ec:cd:35:36:d7:46:c8:b6:17:
0b:2d:08:5c:1b:3a:ab:4d:4f:44:c8:b9:fe:2f:18:
9e:82:3a:35:ba:21:ca:c4:ad:f6:30:70:f9:0c:e4:
79:9a:90:14:f0:09:09:ac:4d:cb:8e:ab:48:34:df:
92:a3:67:0d:ab:d9:38:4b:3e:03:5d:99:b3:d2:89:
39:78:49:ed:6f:d7:f0:97:d2:95:83:85:e6:ba:1b:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F1:FD:05:DA:73:43:D5:2D:53:17:AA:A5:32:2B:3C:CA:BE:A3:BE
X509v3 Authority Key Identifier:
keyid:60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:73:80:bf:66:70:d9:6d:e0:4b:a1:84:ca:3b:2f:e5:ca:0f:
76:c2:e1:a3:c2:5f:e2:ba:30:85:5a:3a:d0:c2:81:4b:b5:14:
84:6e:e3:cf:81:18:21:48:12:81:b0:05:b6:2c:3b:0a:f8:c0:
96:1f:31:e0:4c:da:75:fc:b6:f2:10:91:59:45:fd:88:17:13:
67:69:4e:52:03:23:d8:9d:0b:5a:6e:15:48:12:77:b9:9f:4f:
05:5d:c7:51:e9:46:32:87:24:24:08:a3:2c:32:78:9c:3c:bc:
d5:15:b8:1e:7e:af:88:78:2d:d3:5c:30:34:c2:05:28:1a:32:
5d:6a:35:c6:8b:0a:fe:07:04:07:b9:58:91:c3:2e:e9:07:16:
b7:8c:ec:7e:e0:f7:32:6a:38:51:7e:e8:cd:0b:1b:68:58:07:
0f:95:11:c0:22:a3:dc:c0:1b:06:3f:58:ed:9c:33:52:f4:25:
df:78:10:dc:0d:99:67:c9:ee:25:e1:e7:5a:5f:e9:82:b9:3f:
41:f1:c3:0f:bd:fa:09:ea:a5:c7:f9:66:2e:14:43:c9:db:51:
8c:8e:d2:70:69:fd:de:a4:62:6b:e1:1a:e9:ee:ba:38:c7:c8:
0b:d5:b7:7b:a7:ae:02:05:70:28:d7:a0:24:40:7d:c1:a3:18:
b7:06:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:23:20 2026 by rpki-client