
$ rpki-client -vvf rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
File: 60E799376F38EB181976A659060E6D998B4DB2D3.mft (raw, json)
Hash identifier: 8hC+eJWv9MPE+V9P+qGzIkX++iTelB+tCyNvx6Grmhk=
Subject key identifier: 91:3C:88:E8:17:84:40:A2:EF:99:3F:BD:BB:C8:9D:C6:61:6A:68:9A
Authority key identifier: 60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
Certificate issuer: /CN=60E799376F38EB181976A659060E6D998B4DB2D3
Certificate serial: 47E87BB2229C447A03EA49772B78ADDE98492997
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 20:34:00 +0000
Manifest this update: Tue 16 Jun 2026 20:29:00 +0000
Manifest next update: Wed 17 Jun 2026 20:38:00 +0000
Files and hashes: 1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: ZYifUKjH94Dko/MP7TOQWZfgSi/l267Z88RKIBOtyz0=)
2: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: WSOqldHw6bAM8vohER29rNXje/9f81sgCJJvwaaB1Xs=)
3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: UL9jvnf8J0HlyCPY48gXToQDpmnOabKqFh0VygObLAg=)
4: 60E799376F38EB181976A659060E6D998B4DB2D3.crl (hash: ObJGvUhCGLI9ciyZ7ICTaN1tqk4E9Py2zGneSmd5OtE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e8:7b:b2:22:9c:44:7a:03:ea:49:77:2b:78:ad:de:98:49:29:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60E799376F38EB181976A659060E6D998B4DB2D3
Validity
Not Before: Jun 16 20:29:00 2026 GMT
Not After : Jun 17 20:38:00 2026 GMT
Subject: CN=913C88E8178440A2EF993FBDBBC89DC6616A689A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:60:d7:7d:6a:e7:6e:0e:19:1e:ff:0a:95:
7b:ef:cb:4c:b3:3e:09:96:d7:b0:77:ef:42:74:83:
16:4c:6a:e4:d2:95:c7:0d:3e:20:56:19:31:b8:bc:
97:fb:6d:2b:d4:12:2b:4e:6d:f7:49:9a:5f:80:20:
15:58:b1:9c:7b:92:ab:86:4e:b8:bc:77:a3:35:9d:
ba:4f:69:fe:bd:ed:6d:61:f4:27:18:36:b6:ec:99:
31:b3:20:e4:0a:db:20:4a:40:cf:4b:71:ad:10:86:
f6:28:2f:f4:09:98:0f:09:ff:0e:f3:62:41:ff:42:
08:52:7f:9f:fa:3f:ca:a9:f8:09:35:74:54:37:34:
31:03:f8:55:4b:45:8a:c6:10:59:99:71:e1:ce:2a:
6b:81:4e:ee:f0:94:df:82:5c:78:24:cf:c1:65:7a:
ff:b0:1c:47:3d:a4:dc:84:08:8a:05:6f:e4:45:87:
17:51:14:04:86:28:93:90:eb:50:df:b9:fc:cf:c0:
b3:4b:bc:21:45:bd:0d:10:75:0e:d7:3f:12:3d:04:
51:7f:4d:ff:cb:10:24:4b:24:c1:1e:ad:57:ba:25:
b5:c0:5c:82:99:a4:07:a9:04:1f:ff:fe:26:65:26:
30:d4:b5:8e:12:42:57:8a:cc:e0:df:eb:55:40:4a:
75:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:88:E8:17:84:40:A2:EF:99:3F:BD:BB:C8:9D:C6:61:6A:68:9A
X509v3 Authority Key Identifier:
keyid:60:E7:99:37:6F:38:EB:18:19:76:A6:59:06:0E:6D:99:8B:4D:B2:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/60E799376F38EB181976A659060E6D998B4DB2D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/60E799376F38EB181976A659060E6D998B4DB2D3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d1:5f:db:06:cb:d4:1a:f8:e4:35:67:c0:21:5f:f1:b4:c6:
80:94:ed:5f:c7:85:cd:0c:e8:0d:d1:4c:a6:69:09:b9:57:33:
5c:bb:d7:2f:6c:7c:57:29:eb:03:8e:1c:06:64:f1:db:80:45:
82:2f:19:50:4b:9a:00:d1:b1:32:f9:09:74:a3:ed:2a:a0:f4:
6e:6c:9a:2a:b3:aa:c4:76:23:34:97:c0:42:07:f1:e9:98:18:
5d:de:02:bb:61:a5:c2:a2:a0:15:01:0b:74:c4:ff:aa:1b:c5:
53:08:00:a3:bc:3f:30:ec:cd:8b:26:71:9c:fb:a4:86:4a:28:
d9:09:42:cb:59:cd:c4:65:46:1a:76:b5:96:76:bc:49:2a:67:
f6:a5:85:cc:2a:16:4a:74:82:ca:c3:ef:d3:37:b4:1f:f7:d0:
da:af:b1:93:32:f6:95:87:9a:86:29:bd:85:39:d3:63:9e:89:
12:b0:11:9f:7d:80:95:c9:7d:b0:a6:50:39:14:7d:c2:ee:c9:
fb:d5:dc:67:ce:24:f5:e5:18:69:f4:6f:8c:02:2d:a3:76:60:
41:69:30:59:bf:c7:fd:f6:31:86:1b:73:0d:78:63:2c:eb:3b:
e7:8c:73:18:7e:95:e5:6c:08:5a:75:f8:8c:ce:64:55:1c:95:
3a:02:ab:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:24 2026 by rpki-client