$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: bnN/L353ZqnY+mLOFc4F5+Evt4uUxxLTVIYVpAK+Z+Q= Subject key identifier: 97:11:E4:DE:12:A5:53:6D:E5:EA:32:D5:AC:AC:96:50:38:C3:BC:23 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 368A652DF35FBDAFE25D8F751B24C5EC7C70B61A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: 0139 Signing time: Mon 20 Apr 2026 19:33:59 +0000 Manifest this update: Mon 20 Apr 2026 19:28:59 +0000 Manifest next update: Fri 24 Apr 2026 04:38:59 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: WKzNQhuMJ2vm17cTw2SfG6peVDOyW3LgT5a972AfszA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8a:65:2d:f3:5f:bd:af:e2:5d:8f:75:1b:24:c5:ec:7c:70:b6:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Apr 20 19:28:59 2026 GMT Not After : Apr 24 04:38:59 2026 GMT Subject: CN=9711E4DE12A5536DE5EA32D5ACAC965038C3BC23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:ca:84:d6:ed:69:2c:6c:17:a7:49:00:0f: 13:3e:d7:41:cc:da:b0:0b:b2:41:9f:ba:54:17:f9: df:72:8d:ef:a3:5c:80:78:5c:86:29:4e:a5:5f:77: d5:03:83:88:45:22:eb:9a:96:3a:33:2a:28:41:5b: 97:6c:7c:46:4f:f4:3a:84:ad:9f:3b:25:3e:54:72: e5:ae:d5:26:35:9e:c6:60:7f:eb:2a:a0:a8:42:68: 7d:ae:bc:87:78:2e:c3:c6:41:63:fe:64:2a:dc:a5: 3e:cb:dd:de:fd:35:c4:e6:ee:ae:5f:20:55:b2:d7: a6:75:5e:a4:ab:f0:4f:e0:fd:70:57:15:ec:ea:15: d0:96:37:8c:67:82:3e:83:e0:7a:5a:81:85:d5:ca: 99:3b:74:8c:f9:7c:d4:3c:28:76:73:71:d9:dc:32: b6:80:e2:fe:fd:00:60:5d:b9:96:fa:60:01:47:3b: 3b:b0:b0:c1:9e:ae:d6:59:87:a9:9f:de:c9:66:84: 6f:ec:bb:f8:4d:a6:c1:cc:76:3f:e2:16:bf:03:39: e5:7b:37:be:3b:44:ac:85:02:ce:6f:50:9a:cc:d6: 8c:bc:e4:b7:c1:d1:13:ef:73:81:c6:0c:99:97:77: 0e:ff:39:35:bb:6d:e8:da:3e:1d:77:4d:51:53:87: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:11:E4:DE:12:A5:53:6D:E5:EA:32:D5:AC:AC:96:50:38:C3:BC:23 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8c:94:26:c2:22:98:3b:bd:88:72:78:b1:75:f2:f5:72:62: 61:3b:6b:a2:2f:d6:e8:01:9f:2b:7b:e3:c8:e8:ae:57:52:7c: 53:65:39:b0:5e:5b:bc:69:a1:6a:e1:55:8a:cc:70:25:fb:62: 8d:39:02:54:69:7d:ca:db:0b:e9:2a:b9:43:e7:66:e6:83:e2: 5f:81:ee:bb:78:34:71:42:f9:0c:2e:fd:cb:7b:2e:d4:d7:1c: 61:0b:13:de:a5:d3:3c:59:6f:2d:af:25:4d:80:26:17:6d:0d: 1b:b6:05:82:84:39:04:f9:00:3b:6c:1a:e2:65:b3:aa:4a:9e: 8b:0a:91:15:24:f2:76:57:cc:81:29:d0:96:32:fe:1f:f5:2d: 83:7c:1c:86:09:32:e0:b3:c7:bd:42:b8:55:3d:1e:b0:ee:e7: ea:1f:31:c1:11:02:1e:e3:18:e0:e5:09:7d:39:a1:df:44:56: 8e:b0:a9:a6:74:d7:4d:b2:c8:28:ea:3c:e7:37:c2:0d:4a:c3: d6:48:be:40:57:0d:0c:0b:3a:4f:02:66:4e:4e:f8:ce:7c:4a: 39:e3:b8:15:76:c7:e8:b9:40:c7:3a:bd:a0:d4:08:5d:b0:3f: cc:c0:84:45:91:b8:6c:07:46:30:16:21:1b:a9:4a:d7:f8:1a: 93:4d:44:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoplLfNfva/iXY91GyTF7HxwthowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNjA0MjAxOTI4NTlaFw0yNjA0MjQwNDM4NTlaMDMxMTAvBgNV BAMTKDk3MTFFNERFMTJBNTUzNkRFNUVBMzJENUFDQUM5NjUwMzhDM0JDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGsqE1u1pLGwXp0kADxM+10HM 2rALskGfulQX+d9yje+jXIB4XIYpTqVfd9UDg4hFIuualjozKihBW5dsfEZP9DqE rZ87JT5UcuWu1SY1nsZgf+sqoKhCaH2uvId4LsPGQWP+ZCrcpT7L3d79NcTm7q5f IFWy16Z1XqSr8E/g/XBXFezqFdCWN4xngj6D4HpagYXVypk7dIz5fNQ8KHZzcdnc MraA4v79AGBduZb6YAFHOzuwsMGertZZh6mf3slmhG/su/hNpsHMdj/iFr8DOeV7 N747RKyFAs5vUJrM1oy85LfB0RPvc4HGDJmXdw7/OTW7bejaPh13TVFTh+iLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlxHk3hKlU23l6jLVrKyWUDjDvCMwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKMlCbCIpg7vYhyeLF18vVyYmE7a6Iv1ugB nyt748jorldSfFNlObBeW7xpoWrhVYrMcCX7Yo05AlRpfcrbC+kquUPnZuaD4l+B 7rt4NHFC+Qwu/ct7LtTXHGELE96l0zxZby2vJU2AJhdtDRu2BYKEOQT5ADtsGuJl s6pKnosKkRUk8nZXzIEp0JYy/h/1LYN8HIYJMuCzx71CuFU9HrDu5+ofMcERAh7j GODlCX05od9EVo6wqaZ0102yyCjqPOc3wg1Kw9ZIvkBXDQwLOk8CZk5O+M58Sjnj uBV2x+i5QMc6vaDUCF2wP8zAhEWRuGwHRjAWIRupStf4GpNNRLI= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:36 2026 by rpki-client