$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: DmSkoerWEzeYzX3PuOO7yQYCFhf0NdEKmBO9T1nwotc= Subject key identifier: 10:45:17:12:A4:CD:65:F2:A5:C0:A8:7A:E1:96:FB:A6:16:F5:45:9C Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 4C8AA6B40F93AD4C396193F333CC9F92FB9C7CE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: 0125 Signing time: Thu 05 Mar 2026 20:11:41 +0000 Manifest this update: Thu 05 Mar 2026 20:06:41 +0000 Manifest next update: Mon 09 Mar 2026 01:11:41 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: kl2r4sPpvCo/PKlawUowv5jQRiTXpxo7lHFREAOF6t0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:8a:a6:b4:0f:93:ad:4c:39:61:93:f3:33:cc:9f:92:fb:9c:7c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Mar 5 20:06:41 2026 GMT Not After : Mar 9 01:11:41 2026 GMT Subject: CN=10451712A4CD65F2A5C0A87AE196FBA616F5459C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:24:e4:f1:f9:2f:57:78:cc:7f:fb:73:b6: 1e:0e:83:43:86:e1:f0:1f:1f:9d:d1:68:cf:b3:19: 6d:19:39:9b:9b:68:99:a6:93:e7:9e:a8:c8:dc:75: d4:31:52:90:5e:08:2d:1d:96:ff:e2:e6:39:4f:e3: fb:28:6e:92:b9:8f:3d:88:4b:9f:9d:e2:89:d6:0d: 72:62:be:9e:95:42:6e:7a:56:3c:aa:52:2d:b3:d2: 9a:78:6d:80:71:ec:da:10:e7:27:7c:db:47:11:1c: 6b:13:ad:0f:9c:fc:e9:17:b0:14:28:df:8c:09:62: 69:1f:ad:15:0c:de:bb:57:d4:68:a6:b9:d5:aa:79: 3d:71:a3:c0:07:95:65:c6:51:81:a3:e8:76:ce:f4: 48:76:bf:07:27:a0:72:f6:5f:15:de:f1:94:6f:51: 85:c4:74:a3:a9:d6:a0:95:c2:e3:98:fe:34:c5:de: e0:67:b2:f6:41:b4:fe:b8:c1:bc:29:c3:3e:df:d7: 96:4e:ab:9b:77:f7:47:b0:15:4e:4d:e8:58:4f:49: 88:07:de:ac:d9:e7:10:76:7e:67:0e:52:0b:18:4c: 07:1f:ac:a1:b6:ee:89:e7:ea:9d:66:37:c4:8f:e6: e5:6a:53:5d:d1:22:5b:80:64:f2:ca:62:35:eb:1b: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:45:17:12:A4:CD:65:F2:A5:C0:A8:7A:E1:96:FB:A6:16:F5:45:9C X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:91:f8:ed:0f:3a:0b:5e:83:04:a9:12:12:97:4c:54:e4:ff: 87:9d:7b:b2:a7:90:6c:a5:d6:a7:cb:8b:18:cb:85:8a:a0:f8: d3:05:2f:b8:1c:1e:01:f9:70:ce:8d:1e:d9:c6:75:7e:23:e1: ef:45:80:32:43:1c:04:75:1b:9b:ce:fc:a3:89:97:4f:42:9d: 1b:9b:d7:d4:8d:36:07:d8:6c:aa:f0:a0:91:32:16:2d:38:15: b7:a7:df:e8:18:4c:ce:c3:89:1c:fc:63:8e:6e:83:2c:f6:b4: 23:6d:de:e8:3d:fc:23:08:df:28:e4:c2:47:2b:62:2b:8e:46: 8b:7b:05:33:24:a8:67:b7:6c:2e:0d:7c:49:15:3a:42:6f:3b: 2d:d5:22:ef:ef:09:b1:9e:e0:60:f1:63:0a:1b:7e:e1:ac:54: 65:6b:44:b0:11:88:e7:e1:1b:40:1d:a5:27:24:74:0b:41:e9: 59:e2:8a:3d:45:0e:a1:c2:da:45:3e:68:b8:68:49:aa:27:dd: 91:97:9c:fc:91:f9:69:9d:33:26:0c:83:33:51:73:95:96:2f: e0:ac:f9:0d:90:ce:16:5b:cc:4f:45:bd:a3:30:fb:10:ec:fa: b1:d5:de:bd:8e:37:f8:35:af:b5:d8:5e:60:e8:a8:77:39:1a: 95:b0:d3:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIqmtA+TrUw5YZPzM8yfkvucfOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNjAzMDUyMDA2NDFaFw0yNjAzMDkwMTExNDFaMDMxMTAvBgNV BAMTKDEwNDUxNzEyQTRDRDY1RjJBNUMwQTg3QUUxOTZGQkE2MTZGNTQ1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNTCTk8fkvV3jMf/tzth4Og0OG 4fAfH53RaM+zGW0ZOZubaJmmk+eeqMjcddQxUpBeCC0dlv/i5jlP4/sobpK5jz2I S5+d4onWDXJivp6VQm56VjyqUi2z0pp4bYBx7NoQ5yd820cRHGsTrQ+c/OkXsBQo 34wJYmkfrRUM3rtX1GimudWqeT1xo8AHlWXGUYGj6HbO9Eh2vwcnoHL2XxXe8ZRv UYXEdKOp1qCVwuOY/jTF3uBnsvZBtP64wbwpwz7f15ZOq5t390ewFU5N6FhPSYgH 3qzZ5xB2fmcOUgsYTAcfrKG27onn6p1mN8SP5uVqU13RIluAZPLKYjXrG3YfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEUXEqTNZfKlwKh64Zb7phb1RZwwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOR+O0POgtegwSpEhKXTFTk/4ede7KnkGyl 1qfLixjLhYqg+NMFL7gcHgH5cM6NHtnGdX4j4e9FgDJDHAR1G5vO/KOJl09CnRub 19SNNgfYbKrwoJEyFi04Fben3+gYTM7DiRz8Y45ugyz2tCNt3ug9/CMI3yjkwkcr YiuORot7BTMkqGe3bC4NfEkVOkJvOy3VIu/vCbGe4GDxYwobfuGsVGVrRLARiOfh G0AdpSckdAtB6Vniij1FDqHC2kU+aLhoSaon3ZGXnPyR+WmdMyYMgzNRc5WWL+Cs +Q2QzhZbzE9FvaMw+xDs+rHV3r2ON/g1r7XYXmDoqHc5GpWw04M= -----END CERTIFICATE-----Generated at Sat Mar 7 17:59:05 2026 by rpki-client