
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft
File: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft (raw, json)
Hash identifier: 36X2X4m+jKRnzR1EoyUnf0FfyMpyZNnCplr2QMY2Yn8=
Subject key identifier: 2D:91:87:99:81:DB:73:A0:1D:4D:47:4B:DD:3B:FB:5A:56:A3:D4:94
Authority key identifier: 72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D
Certificate issuer: /CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D
Certificate serial: 67293C99145647A0F99AE3315BEC49134E904AA9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 05:23:49 +0000
Manifest this update: Sun 20 Sep 2026 05:18:49 +0000
Manifest next update: Mon 21 Sep 2026 08:27:49 +0000
Files and hashes: 1: 728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl (hash: itL9qh+JJxZkv/u1fMtiIOdVcm/jqjd18PKLhOgSRvg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl
rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 08:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:29:3c:99:14:56:47:a0:f9:9a:e3:31:5b:ec:49:13:4e:90:4a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728AD171D3C31EB205223FFC3E2C081D1B586C9D
Validity
Not Before: Sep 20 05:18:49 2026 GMT
Not After : Sep 21 08:27:49 2026 GMT
Subject: CN=2D91879981DB73A01D4D474BDD3BFB5A56A3D494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:d5:2a:06:2d:99:df:ee:8d:5a:5f:90:e4:
73:a5:99:95:0b:98:3f:8b:4a:bf:b2:fb:3e:f5:e0:
90:fe:80:80:0f:a7:20:0b:fd:34:6f:a6:d4:6a:e7:
ba:0d:73:5b:f1:39:16:8e:57:04:02:37:54:d1:8e:
db:a5:ee:38:6c:df:75:0d:9e:4a:76:1b:a7:bf:ea:
93:7c:81:00:4d:75:bb:f3:f6:86:81:6b:e2:9e:3c:
c3:99:5c:0e:2b:bb:5c:98:16:23:94:fb:45:b3:76:
59:6d:7a:a6:84:e5:92:6c:82:7a:70:fe:58:56:90:
a2:7d:4b:be:23:9c:75:30:8d:30:fd:52:1e:3d:81:
49:15:89:f0:e1:50:c4:75:e3:54:e1:cf:9c:ba:27:
66:5e:5a:1d:4e:99:48:d0:24:fb:e7:63:5d:81:58:
1c:27:e8:53:e3:3e:81:ed:78:63:d5:96:58:f3:23:
d5:56:9e:f1:b1:e9:e2:ba:e9:88:d6:2f:5e:75:7c:
a2:93:f7:35:6f:ac:52:0c:e3:54:73:5e:1e:01:4a:
a3:55:0c:cc:39:03:5a:53:bc:7d:fc:fb:57:9f:6f:
c4:ed:4b:5a:67:23:a3:f9:36:e0:2e:28:a6:ee:6c:
50:c7:70:b7:96:10:ea:24:65:dd:3b:db:04:a9:2f:
8d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:91:87:99:81:DB:73:A0:1D:4D:47:4B:DD:3B:FB:5A:56:A3:D4:94
X509v3 Authority Key Identifier:
keyid:72:8A:D1:71:D3:C3:1E:B2:05:22:3F:FC:3E:2C:08:1D:1B:58:6C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/728AD171D3C31EB205223FFC3E2C081D1B586C9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/728AD171D3C31EB205223FFC3E2C081D1B586C9D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:44:8c:04:8c:88:c5:ed:cb:ca:58:f4:af:8c:d4:ad:d8:c9:
6a:38:6b:61:38:f0:9e:d2:99:24:d0:6f:7e:7b:2d:d8:2f:0a:
45:4c:f0:e0:b7:c2:63:39:a0:7e:fa:9b:88:ea:aa:6f:bb:7b:
85:5d:53:26:ea:e3:12:f8:1b:85:dc:95:c6:31:20:46:9b:c0:
19:76:90:c3:1a:87:28:26:99:6f:e2:e8:62:c8:6b:e5:4c:95:
06:50:fd:70:65:73:cf:62:22:10:4c:9a:d2:f9:a2:92:50:13:
33:6f:7d:78:7e:63:e8:8b:a2:9c:08:d4:60:8c:68:81:dc:dc:
fb:34:51:3d:48:28:e0:4e:9b:9e:e4:00:55:a1:4e:a0:66:dd:
f8:ed:89:29:95:63:8a:45:26:18:d1:10:af:55:33:85:6e:e2:
9a:55:10:52:3d:51:cd:48:6b:04:38:50:5c:62:3b:3b:ef:e0:
fa:77:bf:7e:b3:71:c7:9f:5f:08:8b:e0:81:57:26:48:1d:15:
47:77:33:e0:9e:9b:fc:a7:88:dc:28:3f:e5:4f:c7:36:44:5a:
56:f6:9a:df:23:e6:77:75:20:3a:c9:73:d4:33:0b:8d:33:01:
da:f0:c7:6a:a9:34:ea:c8:04:90:47:4e:c9:1c:b7:de:42:d4:
23:92:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:12:13 2026 by rpki-client