$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: LSIDiM9fNeDNh08SzRrbWXpW0MT2c5Yl3++18nZACYA= Subject key identifier: 4B:29:C2:52:07:CB:8C:2E:BC:87:62:5B:BC:A5:D3:99:C0:6C:B3:43 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 2816E28BA9CC914F849B9D8BE2811A1887BB0CD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: D0 Signing time: Sat 30 Aug 2025 15:11:27 +0000 Manifest this update: Sat 30 Aug 2025 15:06:27 +0000 Manifest next update: Tue 02 Sep 2025 20:55:27 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: GqkUPLlkoItjYPStlR/xwzjWtrB/vSjELJyzBFPyEps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:16:e2:8b:a9:cc:91:4f:84:9b:9d:8b:e2:81:1a:18:87:bb:0c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Aug 30 15:06:27 2025 GMT Not After : Sep 2 20:55:27 2025 GMT Subject: CN=4B29C25207CB8C2EBC87625BBCA5D399C06CB343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:49:65:37:09:40:4b:83:c7:81:9e:52:0e: 2d:5c:cd:55:b5:97:b8:16:79:8f:4d:c4:1c:9d:11: 7b:23:a7:93:7e:6f:f5:42:39:9b:f3:de:6a:9a:e8: 03:e3:a1:fb:29:a7:7a:72:4b:26:ba:f4:ef:98:ae: 18:83:0a:16:77:cc:d6:9c:71:f7:43:2c:8a:dc:bf: 0b:20:67:c2:83:5d:bf:73:9d:16:d6:62:95:f9:ca: 04:a7:39:26:67:40:81:03:6b:25:9f:c6:1f:9c:7b: 75:1c:6f:11:c0:e3:ff:e3:bf:e3:58:6a:3e:89:a4: a8:e9:cc:93:95:ce:35:e1:33:dc:48:4a:c7:b5:da: 3e:db:c4:a8:3e:de:ab:cb:0d:03:30:22:46:b5:0f: cd:6d:3e:28:b6:82:ef:28:af:30:ea:36:85:37:e7: 3e:4b:ba:8a:aa:69:7b:6a:ae:02:60:7b:28:05:66: 48:15:ba:d5:61:0d:86:4e:6b:46:8f:bb:c1:8b:bb: 72:cb:ee:54:b6:a0:a1:55:79:ed:1d:09:51:7f:77: 4f:a0:7a:a3:a4:9e:f0:82:86:a3:9a:56:f7:e7:54: 27:84:2a:c1:81:a2:36:58:6a:fb:fd:ae:87:6e:4d: 4f:e5:d0:16:15:61:54:e0:e7:f8:f5:66:32:49:a9: 75:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:29:C2:52:07:CB:8C:2E:BC:87:62:5B:BC:A5:D3:99:C0:6C:B3:43 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e3:9b:f1:22:07:59:0c:79:99:f7:e4:d1:b7:27:f5:20:58: 80:dc:90:09:81:13:ec:ce:eb:48:d7:6d:a0:31:cc:9b:8a:1c: eb:7a:6c:f0:c5:c1:6a:87:8b:94:04:da:f4:7d:0c:87:ab:9b: 5d:4d:37:8d:ac:b3:00:2f:85:03:cc:15:a5:b6:27:f2:bb:68: 91:56:04:e3:1b:ee:2c:91:cd:e6:f8:b3:c5:f1:8e:76:47:f8: 24:8f:e7:0f:3a:45:70:41:72:91:25:a7:75:f0:be:8c:b3:8f: 2a:eb:d2:d2:a1:ba:e2:02:0d:c3:94:db:c8:86:57:27:dc:7e: b2:a3:10:b9:2d:01:6d:19:95:a4:08:12:93:8c:f3:e5:1c:56: 85:d1:42:7d:2d:1b:78:c0:6b:45:70:97:f8:7e:ba:9e:e7:f0: 4b:e3:ca:1b:03:f7:23:f1:a1:f5:e6:54:55:c6:60:1d:ce:ee: 7a:37:dc:67:3f:d0:84:28:f7:51:33:3e:05:51:f1:0b:14:0a: 2a:f9:d1:c5:65:fb:e1:ff:4f:31:15:00:c2:7f:1f:da:72:df: 12:24:dc:3c:a1:b8:1f:57:ad:9b:a8:ad:63:3f:cd:8d:e2:e6: bb:f5:5e:db:41:79:68:7b:a2:66:2b:fb:fd:7e:c6:15:d5:02: e1:c4:48:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBbii6nMkU+Em52L4oEaGIe7DNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNTA4MzAxNTA2MjdaFw0yNTA5MDIyMDU1MjdaMDMxMTAvBgNV BAMTKDRCMjlDMjUyMDdDQjhDMkVCQzg3NjI1QkJDQTVEMzk5QzA2Q0IzNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFUllNwlAS4PHgZ5SDi1czVW1 l7gWeY9NxBydEXsjp5N+b/VCOZvz3mqa6APjofspp3pySya69O+YrhiDChZ3zNac cfdDLIrcvwsgZ8KDXb9znRbWYpX5ygSnOSZnQIEDayWfxh+ce3UcbxHA4//jv+NY aj6JpKjpzJOVzjXhM9xISse12j7bxKg+3qvLDQMwIka1D81tPii2gu8orzDqNoU3 5z5LuoqqaXtqrgJgeygFZkgVutVhDYZOa0aPu8GLu3LL7lS2oKFVee0dCVF/d0+g eqOknvCChqOaVvfnVCeEKsGBojZYavv9roduTU/l0BYVYVTg5/j1ZjJJqXV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSynCUgfLjC68h2JbvKXTmcBss0MwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjjm/EiB1kMeZn35NG3J/UgWIDckAmBE+zO 60jXbaAxzJuKHOt6bPDFwWqHi5QE2vR9DIerm11NN42sswAvhQPMFaW2J/K7aJFW BOMb7iyRzeb4s8XxjnZH+CSP5w86RXBBcpElp3Xwvoyzjyrr0tKhuuICDcOU28iG VyfcfrKjELktAW0ZlaQIEpOM8+UcVoXRQn0tG3jAa0Vwl/h+up7n8EvjyhsD9yPx ofXmVFXGYB3O7no33Gc/0IQo91EzPgVR8QsUCir50cVl++H/TzEVAMJ/H9py3xIk 3DyhuB9XrZuorWM/zY3i5rv1XttBeWh7omYr+/1+xhXVAuHESJ4= -----END CERTIFICATE-----Generated at Sun Aug 31 23:32:32 2025 by rpki-client