
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft
File: 607EB065616BF1A985E6E549EC540E1C94E94819.mft (raw, json)
Hash identifier: sWyRPIRqcHHjcjG/8p4LJyvx6w8fMFM4xQijNmHC//w=
Subject key identifier: 59:8D:0F:A3:F4:E2:35:E4:AD:EC:65:5A:09:3F:D8:39:14:22:5E:45
Authority key identifier: 60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19
Certificate issuer: /CN=607EB065616BF1A985E6E549EC540E1C94E94819
Certificate serial: 3A8491CD824AB462B336E583906310CA8CDE25DB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft
Manifest number: 38
Signing time: Fri 12 Jun 2026 23:18:35 +0000
Manifest this update: Fri 12 Jun 2026 23:13:35 +0000
Manifest next update: Sun 14 Jun 2026 01:57:35 +0000
Files and hashes: 1: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: 8jyMA8Gmhc97Vi1yoxS8QxZYiktn7eC0pGgFqwBSsy8=)
2: 607EB065616BF1A985E6E549EC540E1C94E94819.crl (hash: TJcK56ont95WIY9gl5aOqxXFb1DxchF1YDF2QZCNELQ=)
3: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: jjNj0cEM+Wj64PDL2yAGNM6cCQQfvKyXt4I1SVLIB/E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl
rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 01:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:84:91:cd:82:4a:b4:62:b3:36:e5:83:90:63:10:ca:8c:de:25:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607EB065616BF1A985E6E549EC540E1C94E94819
Validity
Not Before: Jun 12 23:13:35 2026 GMT
Not After : Jun 14 01:57:35 2026 GMT
Subject: CN=598D0FA3F4E235E4ADEC655A093FD83914225E45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:1a:a8:71:2f:82:53:c3:5a:a7:79:e7:96:
0c:39:6d:5a:c6:2f:ed:f6:9a:0a:c8:13:8c:68:7a:
75:e3:e9:4a:2f:96:ed:de:3f:f3:76:41:95:2e:b7:
d5:83:af:6d:88:cb:81:f6:09:cc:e4:1f:88:11:ea:
f0:7c:49:71:b1:0c:6f:64:70:7a:1f:0b:ca:1a:bf:
ad:30:a5:4d:bc:95:81:7c:4f:0e:e4:c2:ae:61:b4:
e3:63:4b:ce:40:01:b7:ae:43:3c:bf:3a:eb:3b:2a:
62:3c:22:65:20:a2:ab:d5:76:4d:52:85:24:1a:7a:
61:99:cc:ea:c1:be:a4:dd:3d:a7:e9:8c:6e:c9:4b:
45:2b:db:17:85:89:e1:b1:2b:4b:ae:fd:21:bc:d7:
5c:dc:27:e7:d2:72:9a:f7:3a:3c:53:60:d6:b4:9c:
9e:45:d9:51:16:67:68:74:68:05:5b:16:ba:e3:26:
92:22:15:5b:f3:8f:77:b7:5e:b3:4c:f1:8d:36:95:
08:b0:61:19:37:e3:72:70:02:dc:1f:4d:51:7d:98:
95:78:cb:d6:c7:9f:15:6d:40:38:65:20:71:d0:bc:
4c:75:6d:89:35:fb:d5:b9:21:50:41:b3:1c:8d:f5:
02:57:6a:27:82:c4:8a:c1:01:83:6a:69:98:0f:3a:
e6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:0F:A3:F4:E2:35:E4:AD:EC:65:5A:09:3F:D8:39:14:22:5E:45
X509v3 Authority Key Identifier:
keyid:60:7E:B0:65:61:6B:F1:A9:85:E6:E5:49:EC:54:0E:1C:94:E9:48:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/607EB065616BF1A985E6E549EC540E1C94E94819.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/607EB065616BF1A985E6E549EC540E1C94E94819.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:65:5b:43:ec:d1:c3:0c:29:51:e8:8f:b5:41:b2:28:e0:4e:
60:d6:cb:06:18:ea:2b:bb:91:fa:95:ae:5e:1c:7a:97:6c:03:
02:a7:f5:e4:1a:67:64:b8:86:de:45:50:f5:f8:9d:66:03:49:
85:86:1e:0b:65:f6:48:3f:de:5c:c3:02:aa:df:86:c6:11:74:
77:4e:41:0a:46:fd:c9:b7:64:13:67:16:48:8b:d2:b0:1e:fd:
fd:4f:10:d3:42:59:ac:40:6e:b8:d6:da:57:f6:a3:6f:d1:24:
43:c0:67:49:24:86:fc:e5:bc:5a:93:77:ce:5f:fe:a9:98:a8:
79:0d:4b:ca:97:97:36:e2:dd:72:cf:37:64:bb:64:7d:da:9a:
8c:7a:49:1c:84:5a:82:a1:bf:b3:95:ce:2c:3c:7a:d7:e3:b0:
55:ae:55:d1:98:a0:4b:3e:73:6b:87:0d:2c:60:13:22:03:63:
97:2a:dc:e2:f8:52:6d:74:e6:f8:89:7f:2f:d4:5a:d7:45:c4:
16:c6:bf:1e:b0:67:96:1a:f7:4d:d8:ad:4e:e5:a0:3f:8a:7a:
98:24:9c:70:8a:46:2c:fe:3a:f5:ee:2c:f2:32:2f:e9:a5:7c:
b8:51:57:52:e7:43:bf:06:a3:aa:29:13:58:16:16:8f:ce:6f:
77:39:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:30 2026 by rpki-client