
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
File: 727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft (raw, json)
Hash identifier: UjsgPJen9gK21P/tgIFqVUNbO0gmJShrt1nkSv+SAyU=
Subject key identifier: 4D:87:CF:AC:1D:49:C7:62:D0:67:5C:D8:AD:DA:38:7A:FD:C4:3F:D3
Authority key identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
Certificate issuer: /CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Certificate serial: 759002D7174CE4D10398695A43BD5C0DB6073E69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
Manifest number: F0
Signing time: Fri 23 Oct 2026 20:14:19 +0000
Manifest this update: Fri 23 Oct 2026 20:09:19 +0000
Manifest next update: Sat 24 Oct 2026 21:29:19 +0000
Files and hashes: 1: 3130332e3138352e34382e302f32342d3234203d3e20313531303039.roa (hash: 4zfQTG40Dz5bbiZkBR8XS9kMZtGbTqv2m2MHzfmz0YE=)
2: 727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl (hash: LFCTFNIymFMS5+k7ZetHR/+dYnZwQroAFLqhtHxSKMc=)
3: 3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa (hash: Rc6cjSRalLs+jHagmKOEHXqRw1y1spFca3Cq6N+VYR8=)
4: 3130332e3138352e34382e302f32332d3233203d3e203538383230.roa (hash: 1dFZ1UZLQ08r66oHGo5F/N42hyizcVkx2fnb+8tr3wA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 21:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:90:02:d7:17:4c:e4:d1:03:98:69:5a:43:bd:5c:0d:b6:07:3e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Validity
Not Before: Oct 23 20:09:19 2026 GMT
Not After : Oct 24 21:29:19 2026 GMT
Subject: CN=4D87CFAC1D49C762D0675CD8ADDA387AFDC43FD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e6:cb:1e:49:ba:4c:6b:be:f2:10:93:55:bf:
1e:d0:5e:b4:eb:8a:59:1a:f3:48:98:ea:42:a2:da:
3b:c4:01:a0:63:d3:ea:b5:e9:8f:96:2b:96:56:4a:
bb:69:ea:7c:8a:ae:51:af:d7:b0:86:8e:c9:97:b9:
63:86:3b:54:7f:bf:9b:81:f4:e2:6b:76:4d:90:73:
6e:11:3b:4b:d0:76:ba:e9:42:d7:9b:56:0b:4c:c3:
40:f2:19:9a:14:fd:ff:7c:5a:30:56:8f:cc:71:e1:
6f:2c:83:f9:9c:7b:0a:1a:63:af:55:ec:d1:b5:c1:
06:7b:f1:e0:b0:80:4e:68:65:e6:8b:17:b3:45:76:
84:5a:e7:b8:2e:81:60:6a:50:f2:b9:92:88:7a:de:
ef:dc:b1:be:0d:9d:35:6e:f5:54:81:90:ca:4c:a2:
99:ca:b0:91:13:7f:cc:e3:37:99:09:0c:4b:3b:b9:
75:62:5b:93:54:37:12:c9:a3:c9:5d:02:35:e8:9f:
21:1d:5e:f7:ca:73:8d:44:67:a9:c8:27:b1:d4:ec:
0b:73:97:7c:3b:d1:9b:d6:a4:7b:13:0a:09:ea:05:
5f:b5:0d:d0:ba:d8:fc:c7:7f:6c:d1:8d:0d:16:da:
8e:1b:64:1b:41:a8:ac:16:c3:fd:a1:1d:2c:48:4b:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:87:CF:AC:1D:49:C7:62:D0:67:5C:D8:AD:DA:38:7A:FD:C4:3F:D3
X509v3 Authority Key Identifier:
keyid:72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:36:71:c7:26:67:1a:eb:e7:12:20:b3:9a:0f:e7:98:03:21:
e1:82:22:ab:aa:23:11:d7:eb:6a:ab:c2:12:e5:8b:c5:89:d2:
db:d0:61:2b:a6:1b:da:d0:b6:d1:76:52:1b:12:a5:7f:4e:41:
05:3d:38:26:02:2a:39:aa:af:fb:e8:08:4e:b3:71:f9:4b:a3:
5a:e2:a6:c8:ef:fb:40:67:ab:df:77:65:f8:b7:51:68:1d:88:
cf:d2:63:fc:a5:ef:1b:25:50:cf:15:3a:bf:67:9d:c4:ba:50:
83:86:ad:97:4d:b2:04:f3:63:a9:a4:4b:84:a0:78:a7:8d:bb:
60:34:ec:eb:32:8b:d0:c4:a2:35:3a:a8:b0:04:45:27:60:89:
b8:c8:46:31:4b:e7:7b:84:82:67:69:2d:bc:97:dd:c7:9e:71:
b0:dd:27:98:62:4f:59:3b:e2:d9:44:42:1c:ae:3f:2e:b9:51:
47:b8:e8:7f:0d:a6:08:f1:22:25:df:20:1a:2e:1a:a8:67:79:
7d:e3:0b:05:01:1d:d4:53:90:3d:85:1a:f9:11:8d:07:00:7e:
4b:05:0a:8f:de:44:45:a4:9f:1e:e4:fa:d0:cd:94:17:f5:34:
3b:68:04:80:7c:f3:75:a9:1a:19:7e:73:ae:69:2b:21:38:30:
68:22:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:13:14 2026 by rpki-client