
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
File: 727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft (raw, json)
Hash identifier: ayFwfP5fyTnnZRK1aBIG88EWjK14sDF1CJijeyAkGwg=
Subject key identifier: 92:3B:DD:3F:C3:34:5B:50:1A:C2:8F:EE:B6:F8:1E:DC:46:1B:14:75
Authority key identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
Certificate issuer: /CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Certificate serial: 255C257D2811F074BCFCC094781142C7950CFA0C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
Manifest number: A6
Signing time: Mon 31 Aug 2026 12:19:17 +0000
Manifest this update: Mon 31 Aug 2026 12:14:17 +0000
Manifest next update: Tue 01 Sep 2026 15:59:17 +0000
Files and hashes: 1: 3130332e3138352e34382e302f32332d3233203d3e203538383230.roa (hash: 1dFZ1UZLQ08r66oHGo5F/N42hyizcVkx2fnb+8tr3wA=)
2: 3130332e3138352e34392e302f32342d3234203d3e20313335363336.roa (hash: iD6I0/Lv3XauBdlL2y8xmiSomVxxfLqCog8k/l0w9nY=)
3: 727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl (hash: 0Fa4kGIwoCeHYka5E182vuQ3u/0oX2y2z4LuT1urM/E=)
4: 3130332e3138352e34382e302f32342d3234203d3e20313335363336.roa (hash: nO6vvFUoZpIx1YqxVxBkUURiFla2iuDarcM3hUel6Tc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 15:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5c:25:7d:28:11:f0:74:bc:fc:c0:94:78:11:42:c7:95:0c:fa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Validity
Not Before: Aug 31 12:14:17 2026 GMT
Not After : Sep 1 15:59:17 2026 GMT
Subject: CN=923BDD3FC3345B501AC28FEEB6F81EDC461B1475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:ec:36:9d:8f:d8:f3:55:21:9b:fe:0c:ae:
5d:dc:03:df:d5:b6:6d:c5:4c:81:f4:76:ba:49:72:
88:dd:b6:80:a6:8b:76:8d:f1:9c:66:00:07:6e:fb:
8b:ea:1a:23:89:34:45:d2:8c:29:04:01:f5:43:d9:
dd:a9:57:9a:09:e6:3d:ac:94:67:18:3b:53:3a:f8:
a7:2c:82:59:b2:cb:89:5f:5b:5f:ef:a2:e5:a6:15:
59:26:0d:a3:c2:3b:b6:a6:6f:c1:32:5c:2c:64:7a:
48:78:ee:44:22:7c:7f:eb:78:63:65:08:c7:ef:2f:
b7:f7:cb:45:d3:1c:92:df:3c:f4:3e:65:be:2b:86:
95:39:9d:aa:66:c6:a4:b2:a6:8b:68:f1:27:d2:eb:
8e:21:ba:f5:14:a1:18:bc:b0:15:5b:52:81:50:f7:
30:af:cf:b1:71:f5:05:8c:a2:5b:96:ef:c5:c4:d2:
da:7f:f4:c9:31:ca:4b:13:66:5f:b3:33:53:da:66:
5e:7f:28:83:61:53:4d:43:db:51:f9:0b:31:23:82:
10:80:26:6d:8a:12:01:32:9e:8d:8b:f1:69:f0:f9:
d4:ad:54:4d:cd:dc:3c:3e:e7:40:a3:84:94:81:6c:
ab:2e:c3:db:43:f5:36:d3:10:c2:84:40:73:5c:15:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3B:DD:3F:C3:34:5B:50:1A:C2:8F:EE:B6:F8:1E:DC:46:1B:14:75
X509v3 Authority Key Identifier:
keyid:72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9f:5e:30:b3:9a:dc:ac:77:7b:e3:6c:d7:1c:6d:37:c8:ab:
9c:c1:be:f5:6e:1d:85:dc:e3:fc:c5:ae:63:6e:ea:7f:e2:e3:
44:de:49:8d:de:61:56:3d:63:95:13:cb:ec:22:60:d8:21:4b:
38:f1:8c:e8:56:1f:20:aa:eb:d1:70:1f:0c:fd:b2:61:54:24:
69:27:92:0c:73:dc:1e:20:1d:8e:d3:8f:e3:83:2f:e0:e4:a3:
dc:27:66:f1:79:58:bf:f6:69:9b:3a:be:02:ed:15:af:10:08:
2d:26:19:d9:69:b9:2f:7e:a1:2e:ac:b9:1e:35:49:02:59:67:
17:bb:f5:71:92:e9:4c:17:4c:8a:db:49:d9:c6:b7:6d:02:36:
e9:f8:db:be:a3:3b:5b:bf:dc:67:c7:52:8e:91:78:08:3e:a8:
22:7f:c1:e6:2c:1b:33:4a:01:55:bb:d1:31:05:b7:ec:85:b5:
c5:27:2e:3f:39:64:eb:14:e4:6f:b9:ec:98:98:bd:f4:c3:cd:
20:3b:0f:3a:a0:af:7d:d8:6c:de:bb:db:b0:cd:b9:b2:23:52:
cd:b6:05:e6:ff:0b:f8:0a:cc:a4:dd:fa:06:73:65:35:a2:09:
0d:fe:a1:e4:ce:e3:2b:a0:c8:92:3d:e7:cf:a1:ba:4d:7b:b6:
a7:3a:b6:61
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUJVwlfSgR8HS8/MCUeBFCx5UM+gwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3QUMwRjBDRUJDMTc1QjI0OTEzRkFCRjNFM0REQUU4
ODQwNEFBRjAeFw0yNjA4MzExMjE0MTdaFw0yNjA5MDExNTU5MTdaMDMxMTAvBgNV
BAMTKDkyM0JERDNGQzMzNDVCNTAxQUMyOEZFRUI2RjgxRURDNDYxQjE0NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgOw2nY/Y81Uhm/4Mrl3cA9/V
tm3FTIH0drpJcojdtoCmi3aN8ZxmAAdu+4vqGiOJNEXSjCkEAfVD2d2pV5oJ5j2s
lGcYO1M6+Kcsglmyy4lfW1/vouWmFVkmDaPCO7amb8EyXCxkekh47kQifH/reGNl
CMfvL7f3y0XTHJLfPPQ+Zb4rhpU5napmxqSypoto8SfS644huvUUoRi8sBVbUoFQ
9zCvz7Fx9QWMoluW78XE0tp/9MkxyksTZl+zM1PaZl5/KINhU01D21H5CzEjghCA
Jm2KEgEyno2L8Wnw+dStVE3N3Dw+50CjhJSBbKsuw9tD9TbTEMKEQHNcFUwnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUkjvdP8M0W1Aawo/utvge3EYbFHUwHwYDVR0j
BBgwFoAUcnrA8M68F1skkT+r8+PdrohASq8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTk5Njg4YTktZTc4ZC00YWJhLTgzYmMtNTE3ODY3OTEyMGFkLzAvNzI3QUMwRjBD
RUJDMTc1QjI0OTEzRkFCRjNFM0REQUU4ODQwNEFBRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MjdBQzBGMENFQkMxNzVCMjQ5MTNGQUJGM0UzRERBRTg4NDA0
QUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTk5Njg4YTktZTc4ZC00YWJhLTgz
YmMtNTE3ODY3OTEyMGFkLzAvNzI3QUMwRjBDRUJDMTc1QjI0OTEzRkFCRjNFM0RE
QUU4ODQwNEFBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHSfXjCzmtysd3vjbNccbTfIq5zBvvVuHYXc
4/zFrmNu6n/i40TeSY3eYVY9Y5UTy+wiYNghSzjxjOhWHyCq69FwHwz9smFUJGkn
kgxz3B4gHY7Tj+ODL+Dko9wnZvF5WL/2aZs6vgLtFa8QCC0mGdlpuS9+oS6suR41
SQJZZxe79XGS6UwXTIrbSdnGt20CNun4276jO1u/3GfHUo6ReAg+qCJ/weYsGzNK
AVW70TEFt+yFtcUnLj85ZOsU5G+57JiYvfTDzSA7Dzqgr33YbN6727DNubIjUs22
Beb/C/gKzKTd+gZzZTWiCQ3+oeTO4yugyJI958+huk17tqc6tmE=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:29:55 2026 by rpki-client