
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
File: 727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft (raw, json)
Hash identifier: HA4P40w5d5IPdVB38ASMKgkDdtN5yJLEilBfDiH215I=
Subject key identifier: 9A:A7:76:79:DD:1C:15:2E:DF:11:1B:D3:DE:01:BD:8B:A7:FB:DB:8A
Authority key identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
Certificate issuer: /CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Certificate serial: 191C1072CDA67B39DC59DB6EA88E2455A966FC6C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
Manifest number: C3
Signing time: Mon 21 Sep 2026 02:24:30 +0000
Manifest this update: Mon 21 Sep 2026 02:19:30 +0000
Manifest next update: Tue 22 Sep 2026 05:10:30 +0000
Files and hashes: 1: 727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl (hash: VgMNDnJKPpb3v58JSOgbUCu6Ulg8I+czDTEiqrazQ9Y=)
2: 3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa (hash: Rc6cjSRalLs+jHagmKOEHXqRw1y1spFca3Cq6N+VYR8=)
3: 3130332e3138352e34382e302f32342d3234203d3e20313335363336.roa (hash: nO6vvFUoZpIx1YqxVxBkUURiFla2iuDarcM3hUel6Tc=)
4: 3130332e3138352e34382e302f32332d3233203d3e203538383230.roa (hash: 1dFZ1UZLQ08r66oHGo5F/N42hyizcVkx2fnb+8tr3wA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:10:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1c:10:72:cd:a6:7b:39:dc:59:db:6e:a8:8e:24:55:a9:66:fc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Validity
Not Before: Sep 21 02:19:30 2026 GMT
Not After : Sep 22 05:10:30 2026 GMT
Subject: CN=9AA77679DD1C152EDF111BD3DE01BD8BA7FBDB8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:19:52:20:84:35:4e:7e:2d:2a:d1:4e:5d:dd:
4e:ae:81:ed:3c:74:c0:3b:85:a4:b4:9c:ef:50:54:
2a:d9:04:51:83:8d:51:54:fc:70:bf:b7:90:49:80:
63:0c:c3:ae:4a:ae:12:e5:63:81:c6:b3:cb:35:33:
8f:4f:5e:3a:c1:86:a6:d3:33:57:df:53:d6:f1:1e:
a9:b6:67:50:8c:9b:e0:80:b0:84:0f:2b:c4:2a:95:
e6:26:1a:ec:34:f2:73:ba:47:ec:e0:32:c6:44:09:
b2:2f:ee:f9:a2:69:5a:89:a5:46:ef:e3:f9:ba:66:
55:47:13:94:74:cc:13:8a:8f:1d:72:fe:73:e5:ec:
b7:c8:ca:e2:e6:23:9f:35:46:7b:ad:f7:70:e5:6f:
47:7d:dd:e8:e6:ba:be:92:17:3f:35:51:38:d0:77:
59:5f:82:73:a2:e7:f5:6b:2c:95:e8:17:c2:c8:f4:
73:1c:f3:bb:07:6d:85:ea:35:23:cd:30:10:82:21:
bd:6e:6a:09:93:64:c7:28:53:fe:7c:fe:52:b4:84:
8c:0e:c7:43:b2:55:dd:e6:09:0a:5e:16:e2:a3:d3:
86:ef:0c:ee:ef:fa:1e:7c:dd:48:a5:43:ba:bc:ce:
5e:b6:87:e6:7d:cc:01:70:4c:58:37:4d:b8:a3:42:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A7:76:79:DD:1C:15:2E:DF:11:1B:D3:DE:01:BD:8B:A7:FB:DB:8A
X509v3 Authority Key Identifier:
keyid:72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:01:5b:04:5b:a6:d3:01:af:67:b7:73:21:c5:3c:63:02:79:
84:d0:65:51:44:34:63:56:00:f0:93:3a:bd:e5:1e:8c:c3:93:
f6:d8:c8:8e:15:7c:c0:7c:8f:6a:97:3b:4c:e9:43:dd:78:4e:
f6:83:5b:ff:b6:91:b1:3e:ef:13:62:c7:5d:90:98:7f:00:dc:
79:b0:ce:fa:e0:d3:56:e5:d6:f6:e6:b3:8c:53:c5:b9:12:53:
aa:8a:b6:ec:90:0b:e5:8f:e8:8d:2f:3d:53:b1:b9:51:1e:60:
83:62:5d:78:4f:0a:76:72:38:12:58:9f:92:09:aa:99:e7:aa:
cd:1d:b0:b7:d5:30:34:8b:4b:1f:0f:8a:d8:05:8a:7f:3f:ad:
b0:83:e6:52:8a:1c:dc:58:6f:bc:12:a5:75:92:08:52:31:d6:
40:fd:3d:3a:bd:90:19:07:a5:61:f0:81:7d:8f:69:2c:4c:02:
e9:c2:8c:bc:2f:3d:5c:e8:ff:86:5a:d5:3e:48:5a:70:39:06:
43:cd:ff:45:dc:7b:92:5c:f7:14:ab:ec:8c:de:20:7b:fb:a6:
20:17:7c:f9:26:eb:b0:75:3b:99:70:dc:f9:54:0e:69:9c:9a:
ac:2b:2a:74:ed:cd:b4:e0:17:86:69:5b:0a:5c:31:ab:ac:24:
c8:01:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:12:05 2026 by rpki-client