$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: fyOc/Szmnd5I9cW40789RXs/CW0ZJ2/pFoR1bscMWRA= Subject key identifier: 03:EE:CA:A1:81:C3:3E:C3:BD:7B:89:63:40:55:9B:C2:E1:04:D5:89 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 6605C0ED11CA2F8AD2E045FE465A26A616840FFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: E7 Signing time: Sun 19 Oct 2025 22:51:25 +0000 Manifest this update: Sun 19 Oct 2025 22:46:25 +0000 Manifest next update: Thu 23 Oct 2025 07:28:25 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: Iex1fdcMEzvvHeuyZ10gDAxvin3i5vcif/0i+D30VxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:05:c0:ed:11:ca:2f:8a:d2:e0:45:fe:46:5a:26:a6:16:84:0f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Oct 19 22:46:25 2025 GMT Not After : Oct 23 07:28:25 2025 GMT Subject: CN=03EECAA181C33EC3BD7B896340559BC2E104D589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:c6:0d:e7:1b:da:09:55:df:af:19:74:fa: d9:b0:52:38:59:85:0e:12:21:dd:90:ae:6f:88:e9: 1e:5d:ae:bf:1b:9a:38:ef:05:4a:65:a6:a1:c6:e7: 65:17:64:12:2d:88:78:13:2c:cc:4c:21:5f:cd:a1: 49:d8:d6:e6:72:65:0b:15:7b:e4:33:02:7a:da:d5: a9:e3:d0:1d:0e:04:42:07:76:8a:07:36:f2:4e:f5: ff:fd:18:da:6d:36:67:3f:47:16:92:cc:bd:76:a8: 45:ea:5c:bc:47:78:07:a7:58:41:84:40:92:86:20: bf:ee:1b:9a:33:b9:8a:5a:36:bc:38:e9:1d:69:85: 91:11:c0:fd:5b:33:ba:84:ed:a2:60:c4:3d:01:f4: c1:1f:f9:34:7f:75:3d:80:80:79:6e:51:db:8a:48: ad:b3:d1:dd:55:eb:cd:de:8e:8a:ae:4b:d1:c6:bb: e8:40:6a:16:9c:5a:f9:a7:e1:b0:a5:44:0e:5e:09: 7b:f5:a4:01:48:76:70:c8:e5:86:7c:43:10:e7:7d: db:01:0f:e7:c9:d9:ca:6f:bf:33:48:7e:0a:91:e8: 4b:e2:a3:8f:94:63:96:86:97:29:80:d4:e4:18:81: 04:45:77:b4:ba:28:bf:d8:3b:94:8b:0a:53:31:d6: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EE:CA:A1:81:C3:3E:C3:BD:7B:89:63:40:55:9B:C2:E1:04:D5:89 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c2:12:15:ae:56:68:05:72:02:d1:0e:b9:cf:2d:9b:dc:b0: a8:6d:44:39:38:40:a1:9c:6c:a7:9b:52:c2:92:14:40:d9:28: b5:81:0e:23:7c:8f:a6:cb:3f:6e:40:00:88:33:e7:fb:bb:db: f0:8f:b0:4f:e8:f9:5f:24:32:0b:80:39:06:05:22:c9:8a:bf: b8:02:63:82:83:03:c6:6b:4b:1f:e7:95:5d:9b:e2:3b:04:9b: dc:ae:2a:79:9c:df:1a:8d:14:34:37:fb:0d:fe:ac:eb:3a:87: 50:bd:94:93:cb:f7:21:82:7e:e0:85:6b:8d:a8:c7:1d:40:4e: 09:f1:ca:e1:21:8d:85:9d:a5:9e:f3:0c:b2:5f:36:e8:b2:b9: 8f:0c:b6:36:63:f9:0c:b9:b5:f2:3c:66:59:4e:5d:5e:a0:7c: b8:1a:52:d9:f6:d6:76:ee:c6:26:4a:bc:04:35:e0:b5:95:de: 96:3d:b7:36:0c:7c:ed:ae:54:99:02:87:84:95:5b:f8:88:7a: 8a:fb:7d:3a:c3:00:b3:80:60:0d:20:2a:90:bc:64:dc:8c:39: 41:68:9e:d9:36:c4:ae:d2:dc:68:b8:2b:0c:2e:45:b6:af:a2: ed:6b:c9:17:e6:46:65:5b:72:00:c3:03:a0:06:48:c3:11:ce: 9c:b9:a4:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgXA7RHKL4rS4EX+RlomphaED/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNTEwMTkyMjQ2MjVaFw0yNTEwMjMwNzI4MjVaMDMxMTAvBgNV BAMTKDAzRUVDQUExODFDMzNFQzNCRDdCODk2MzQwNTU5QkMyRTEwNEQ1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7y8YN5xvaCVXfrxl0+tmwUjhZ hQ4SId2Qrm+I6R5drr8bmjjvBUplpqHG52UXZBItiHgTLMxMIV/NoUnY1uZyZQsV e+QzAnra1anj0B0OBEIHdooHNvJO9f/9GNptNmc/RxaSzL12qEXqXLxHeAenWEGE QJKGIL/uG5ozuYpaNrw46R1phZERwP1bM7qE7aJgxD0B9MEf+TR/dT2AgHluUduK SK2z0d1V683ejoquS9HGu+hAahacWvmn4bClRA5eCXv1pAFIdnDI5YZ8QxDnfdsB D+fJ2cpvvzNIfgqR6Evio4+UY5aGlymA1OQYgQRFd7S6KL/YO5SLClMx1k69AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA+7KoYHDPsO9e4ljQFWbwuEE1YkwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnCEhWuVmgFcgLRDrnPLZvcsKhtRDk4QKGc bKebUsKSFEDZKLWBDiN8j6bLP25AAIgz5/u72/CPsE/o+V8kMguAOQYFIsmKv7gC Y4KDA8ZrSx/nlV2b4jsEm9yuKnmc3xqNFDQ3+w3+rOs6h1C9lJPL9yGCfuCFa42o xx1ATgnxyuEhjYWdpZ7zDLJfNuiyuY8MtjZj+Qy5tfI8ZllOXV6gfLgaUtn21nbu xiZKvAQ14LWV3pY9tzYMfO2uVJkCh4SVW/iIeor7fTrDALOAYA0gKpC8ZNyMOUFo ntk2xK7S3Gi4KwwuRbavou1ryRfmRmVbcgDDA6AGSMMRzpy5pNk= -----END CERTIFICATE-----Generated at Mon Oct 20 21:19:05 2025 by rpki-client