$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: qGGpPI7P2nCpGRfoAqzE7hnj+tY7JSLcjMEDBlhszMc= Subject key identifier: 58:6F:FB:DB:5D:DD:E1:70:39:00:96:53:68:EE:66:4B:F4:4C:22:2C Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 37796A2BE9D79A1032FC8B79DB6B1884A41D1FDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: AA Signing time: Wed 04 Jun 2025 23:21:27 +0000 Manifest this update: Wed 04 Jun 2025 23:16:27 +0000 Manifest next update: Sun 08 Jun 2025 08:18:27 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: Z8qFz1A3Eb3V1rI8dH4GwJcBtIGNNaPxQDAVgMa1Nj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 08:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:79:6a:2b:e9:d7:9a:10:32:fc:8b:79:db:6b:18:84:a4:1d:1f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Jun 4 23:16:27 2025 GMT Not After : Jun 8 08:18:27 2025 GMT Subject: CN=586FFBDB5DDDE1703900965368EE664BF44C222C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:f0:5a:b6:66:c6:92:d6:08:38:4d:bc:27: 75:31:fe:67:d1:b2:c7:0a:15:b2:67:f4:0d:78:ca: b2:27:9a:7f:80:75:5e:92:94:7c:b1:28:ba:b2:d2: ac:ab:4e:47:df:71:42:73:72:dc:86:85:0d:fa:39: a1:70:52:af:a4:9a:fa:65:20:38:bd:69:20:81:f1: b6:33:89:c9:6d:7a:1d:6f:79:a0:53:a8:e3:64:1a: d9:49:84:22:60:6b:7f:a4:13:fc:fe:2d:d2:4e:fc: 8c:1d:40:60:25:d0:1d:f7:6c:2f:25:4f:78:42:74: ad:30:26:bc:be:bb:dc:af:7a:46:e2:90:84:54:d8: 84:49:d3:86:87:12:54:dc:aa:80:5f:c5:88:01:a1: 17:58:dd:78:51:94:b7:45:0e:13:f7:b1:76:bd:0d: ed:47:31:c8:d2:7e:d6:87:bc:bf:14:08:27:9b:94: 1d:9e:32:fb:03:a7:13:f4:2e:f1:c6:4a:3f:30:53: 58:b2:39:4e:f3:2b:6f:b3:c8:82:13:40:9d:f7:ea: 87:b7:e5:9b:f9:7f:e3:a2:c9:ec:2e:64:49:29:63: fa:29:49:1a:cc:2f:f4:b5:d4:0e:f6:d4:c3:07:df: 62:47:c1:cc:19:e4:8a:5c:34:b2:d1:c5:ad:8d:30: cc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6F:FB:DB:5D:DD:E1:70:39:00:96:53:68:EE:66:4B:F4:4C:22:2C X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:3c:53:dd:30:cc:d9:99:e3:80:f9:1d:7b:24:2b:64:5e:e0: 05:1c:ce:7d:fb:b4:76:32:6c:f0:72:48:8c:e5:8f:63:ea:6b: 18:86:31:64:6a:45:cd:cd:c3:bc:ad:15:93:9a:ae:f1:61:df: 90:10:ba:03:53:42:f5:bb:23:fe:30:6e:56:fc:c7:04:18:ca: 71:d4:ec:61:d5:0c:dd:00:ad:1f:03:18:8b:23:cf:65:e6:cc: 49:4e:18:ce:d2:d3:08:95:31:2c:fc:07:17:45:e9:d5:ff:7a: 49:df:0c:b3:a8:7d:3b:e1:4c:2f:aa:82:4f:50:8f:85:2c:56: 81:be:9b:8d:f1:fd:52:6b:29:d4:c4:6f:6f:54:25:44:7e:15: 12:58:a4:61:0a:85:c7:b0:1c:86:30:8b:d5:4c:b5:ec:69:11: 18:8d:47:58:81:68:25:c0:f9:94:44:aa:64:23:e3:31:0c:51: 37:70:d8:c2:ff:1b:2d:c2:06:18:d4:b8:16:2c:5a:a4:d2:2a: e8:e8:fc:b9:59:c5:e3:36:54:60:af:84:4b:26:7f:a0:af:7c: ad:d3:42:c7:6b:92:8f:53:22:fe:23:15:3a:8b:5e:8d:13:6d: 9d:22:0b:12:a6:59:dc:b8:a5:5c:42:77:75:73:3d:be:8f:2f: 9b:32:b5:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN3lqK+nXmhAy/It522sYhKQdH9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNTA2MDQyMzE2MjdaFw0yNTA2MDgwODE4MjdaMDMxMTAvBgNV BAMTKDU4NkZGQkRCNUREREUxNzAzOTAwOTY1MzY4RUU2NjRCRjQ0QzIyMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClLPBatmbGktYIOE28J3Ux/mfR sscKFbJn9A14yrInmn+AdV6SlHyxKLqy0qyrTkffcUJzctyGhQ36OaFwUq+kmvpl IDi9aSCB8bYziclteh1veaBTqONkGtlJhCJga3+kE/z+LdJO/IwdQGAl0B33bC8l T3hCdK0wJry+u9yvekbikIRU2IRJ04aHElTcqoBfxYgBoRdY3XhRlLdFDhP3sXa9 De1HMcjSftaHvL8UCCeblB2eMvsDpxP0LvHGSj8wU1iyOU7zK2+zyIITQJ336oe3 5Zv5f+OiyewuZEkpY/opSRrML/S11A721MMH32JHwcwZ5IpcNLLRxa2NMMz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWG/7213d4XA5AJZTaO5mS/RMIiwwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJU8U90wzNmZ44D5HXskK2Re4AUczn37tHYy bPBySIzlj2PqaxiGMWRqRc3Nw7ytFZOarvFh35AQugNTQvW7I/4wblb8xwQYynHU 7GHVDN0ArR8DGIsjz2XmzElOGM7S0wiVMSz8BxdF6dX/eknfDLOofTvhTC+qgk9Q j4UsVoG+m43x/VJrKdTEb29UJUR+FRJYpGEKhcewHIYwi9VMtexpERiNR1iBaCXA +ZREqmQj4zEMUTdw2ML/Gy3CBhjUuBYsWqTSKujo/LlZxeM2VGCvhEsmf6CvfK3T Qsdrko9TIv4jFTqLXo0TbZ0iCxKmWdy4pVxCd3VzPb6PL5sytbU= -----END CERTIFICATE-----Generated at Fri Jun 6 17:56:09 2025 by rpki-client