
$ rpki-client -vvf repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
File: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft (raw, json)
Hash identifier: 5rn3rP2CMk58+ElTR2tO2uhcUc+9h+4SHApO6gxGQO0=
Subject key identifier: 29:3E:D2:D6:DB:BE:2F:02:59:BB:0B:56:28:80:5D:9F:75:D7:2E:9B
Authority key identifier: 60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE
Certificate issuer: /CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
Certificate serial: 7ED9D6F9B0AD1B7432836AB285D490C9E2A09C58
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
Manifest number: 055F
Signing time: Sat 28 Feb 2026 16:41:57 +0000
Manifest this update: Sat 28 Feb 2026 16:36:57 +0000
Manifest next update: Tue 03 Mar 2026 23:38:57 +0000
Files and hashes: 1: 3130332e3132302e3230372e302f32342d3234203d3e20313333323130.roa (hash: TnfoT+AdKSGr7UXr4YqTiMXEcQTr1SeRV0kGsqmqNns=)
2: 3130332e3132302e3230352e302f32342d3234203d3e203633303233.roa (hash: 3UhAUC3uhAHVZjnYI8IVUdEocez7q1emJValGc61TOM=)
3: 3130332e3132302e3230342e302f32342d3234203d3e20313937353337.roa (hash: xUdwfWhj/DTW37oHxA2M7SzJ+NkmDLXU1C60QSD07Pk=)
4: 3130332e3132302e3230362e302f32342d3234203d3e203633393330.roa (hash: 85hVM7OWzsW2IWi1L1cP9n78qkkPX/THHIrPs4N+UMQ=)
5: 60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl (hash: RwGn/4WtEFxYRKQr7bWFT2nIdHz9ZOy/tl9zhGOxSCE=)
6: 3130332e3132302e3230342e302f32342d3234203d3e20323032373336.roa (hash: LxSVJV070gN5FjdUX054wO7XGmRkz6K/WxRCNonXpkA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl
rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 23:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d9:d6:f9:b0:ad:1b:74:32:83:6a:b2:85:d4:90:c9:e2:a0:9c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE
Validity
Not Before: Feb 28 16:36:57 2026 GMT
Not After : Mar 3 23:38:57 2026 GMT
Subject: CN=293ED2D6DBBE2F0259BB0B5628805D9F75D72E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:8b:74:54:a8:0b:5e:57:1e:a8:b4:4f:9f:
3a:40:9c:7d:1d:2f:3d:60:75:04:e8:e3:81:80:c5:
13:97:b1:15:ff:9d:eb:ce:4e:78:59:6c:c4:4f:66:
a0:33:c6:94:47:a7:5a:3e:18:e4:8c:d4:26:16:58:
e2:08:de:f8:a8:13:88:ec:9f:da:d3:f8:a7:32:a4:
af:a6:38:c7:fb:47:35:d4:2a:41:19:92:f9:a4:71:
6c:5e:05:34:09:ff:95:79:85:e4:ec:24:f9:49:13:
b8:4f:2f:35:41:82:68:a6:25:32:6a:ae:60:eb:8b:
8f:f6:6e:84:a3:ed:b3:c7:79:ec:a9:b1:c7:14:b0:
38:73:c1:34:32:fe:de:6e:d9:bf:0f:89:7c:e7:e4:
4f:97:a9:8c:77:e9:c6:91:d6:e6:00:d4:b0:b2:90:
dc:a1:92:fe:e9:33:c2:f5:1e:58:c8:7d:9d:51:f5:
19:e3:17:a9:29:f0:7f:53:3a:f7:a8:ad:f8:cc:89:
36:15:fb:b2:d0:c4:f1:55:3b:11:f8:0f:f7:7f:ce:
d0:56:c7:16:a2:8b:07:b3:1c:4d:66:6d:e1:a5:5b:
8b:f4:ce:be:31:61:2c:8f:6f:f6:17:d5:a8:09:8a:
66:a3:35:60:98:8e:ba:e5:b7:67:d2:dc:78:f8:53:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3E:D2:D6:DB:BE:2F:02:59:BB:0B:56:28:80:5D:9F:75:D7:2E:9B
X509v3 Authority Key Identifier:
keyid:60:EB:C7:6B:67:AB:68:E5:A9:85:28:7D:E1:EB:DB:DB:28:96:E6:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140f37c0-380c-4053-b3ba-b32ef035c28f/0/60EBC76B67AB68E5A985287DE1EBDBDB2896E6DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c2:5a:14:53:64:b1:80:8c:08:ea:0c:18:8d:e2:69:78:72:
59:04:63:b9:fc:41:59:4e:ef:60:e1:9a:ef:c4:74:29:d8:fe:
62:14:d6:00:65:7b:f0:dc:81:2a:a4:27:e9:10:a4:1b:89:6d:
92:9a:1d:8d:39:23:41:17:5b:ae:96:22:82:0e:0a:8d:ed:d9:
13:bb:c1:c2:97:4d:1b:4a:72:23:93:d1:7b:34:9a:33:c8:5e:
be:82:5d:d2:68:ff:d0:65:1e:13:c5:f9:91:1d:43:ea:66:09:
c5:13:c4:d4:d5:c3:7e:fa:00:95:a3:f2:6d:82:b7:3e:ee:90:
3b:4c:a0:be:f7:ae:0c:6a:8c:44:6c:25:07:dd:13:2d:03:55:
7a:16:29:87:18:12:56:29:1c:4b:68:e8:4a:51:7c:a2:3d:6d:
4e:b8:ea:22:bb:c6:8f:62:68:1a:72:53:1c:81:68:47:82:be:
8d:0c:b9:ec:4e:1a:27:6b:5e:be:a7:5f:49:11:39:9e:01:43:
82:cf:93:05:5c:dd:79:b1:a8:79:0e:f1:17:65:e4:f7:b5:9e:
39:ab:29:3e:b5:54:42:3f:04:8c:ec:1c:cb:b2:f5:7a:6b:bb:
a1:73:52:c1:c4:31:6d:20:1b:90:e1:bd:e6:34:f8:e5:79:5b:
c5:ad:d7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:00 2026 by rpki-client