$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: hJbcrRVawJaOVJtZKAJyg9STXmssS37IuHnaGL8bnLA= Subject key identifier: 8A:D0:BD:08:39:D5:26:18:B4:7F:C8:4F:05:CC:D2:B0:64:8E:35:33 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 28E1CAFC13AAC5E6A904A895EAED83C6814C1F15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: B5 Signing time: Mon 30 Jun 2025 09:51:23 +0000 Manifest this update: Mon 30 Jun 2025 09:46:23 +0000 Manifest next update: Thu 03 Jul 2025 21:28:23 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: LmQ+3AKE6AlUTTGx6Y8k5XA816UJZQswQya8bVwdvVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e1:ca:fc:13:aa:c5:e6:a9:04:a8:95:ea:ed:83:c6:81:4c:1f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Jun 30 09:46:23 2025 GMT Not After : Jul 3 21:28:23 2025 GMT Subject: CN=8AD0BD0839D52618B47FC84F05CCD2B0648E3533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:e2:51:ce:2f:61:e4:4a:ec:f9:16:bf:f8: 34:50:87:d0:49:39:68:d3:a0:f6:7c:b6:3a:24:e1: 4c:27:55:09:4a:9b:80:de:c5:1c:d6:17:9c:20:b3: 92:26:06:4a:6b:df:5c:46:ef:f4:06:8c:cd:70:95: 76:8d:5a:3b:29:42:a4:7c:20:2c:82:50:c9:f3:62: ea:f7:ab:5e:78:ca:25:13:b8:d6:81:23:7e:e9:da: 8a:0a:f9:ac:f3:71:c6:fb:66:7f:12:a6:6a:26:c1: 1c:4f:da:be:37:88:50:d9:c2:40:01:f9:51:21:e2: 26:89:08:be:b3:1d:32:4c:16:41:c9:f7:fb:c5:e7: f6:2a:53:ab:64:0e:4c:01:cd:34:79:f0:b3:8a:4f: 9f:e5:38:2e:6b:e8:9f:95:5d:84:ba:78:18:12:56: 62:a5:98:4d:41:d7:d0:83:f8:e0:f6:77:a1:5d:a1: 48:ce:88:f4:e2:b0:9e:30:26:72:62:4e:0e:3c:6d: 4b:ce:8c:71:12:57:04:82:e4:0e:56:53:8b:82:d6: 00:38:f4:cc:69:b2:08:ce:5a:f4:63:4a:be:24:11: 43:13:81:63:db:74:3f:e4:e4:e0:81:47:ea:01:d2: c9:8b:3c:7f:39:8e:7f:42:0b:d4:31:e2:91:df:6c: 7c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D0:BD:08:39:D5:26:18:B4:7F:C8:4F:05:CC:D2:B0:64:8E:35:33 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:fa:d6:2b:48:36:94:c3:b4:6b:0d:57:7b:5c:17:8e:9c:a0: dc:92:07:72:4a:28:2c:f1:c9:81:9e:55:11:5e:6c:81:92:ea: f7:5e:f6:92:84:08:3c:38:cf:0e:a2:33:dc:51:c7:f7:d6:c0: 78:f3:d4:5d:88:7f:cd:55:da:19:c5:5d:f6:c9:a1:22:75:1d: 23:87:0a:9b:ef:90:15:6d:b7:cd:c5:77:5b:80:d1:cf:ed:41: 5b:50:3b:54:f8:58:4b:b5:38:a5:2e:a3:cb:bd:c0:93:ea:b3: 55:05:87:56:70:2f:f8:95:4e:c3:f9:19:9e:14:28:6a:56:7d: 9a:21:bb:97:b6:45:56:72:09:7e:30:b8:00:50:23:86:8b:b4: 5e:7e:c5:04:38:48:fb:d8:64:11:06:cb:85:f6:ec:d3:26:6c: 70:f7:a4:6b:56:2d:37:c6:66:93:83:ce:c5:b8:82:05:17:02: fd:5d:db:aa:1f:ad:e9:3d:32:a3:64:e9:14:fa:39:58:c0:4a: f8:e1:f3:b0:ec:55:b1:e9:b5:4e:1a:53:af:67:f0:9c:66:2c: 90:9b:23:02:e8:7d:9b:49:3e:cb:12:12:1b:7d:d4:88:d5:37: 54:44:00:a7:32:58:37:2b:69:9e:90:17:41:f0:36:06:48:e5: 37:5a:8b:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOHK/BOqxeapBKiV6u2DxoFMHxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNTA2MzAwOTQ2MjNaFw0yNTA3MDMyMTI4MjNaMDMxMTAvBgNV BAMTKDhBRDBCRDA4MzlENTI2MThCNDdGQzg0RjA1Q0NEMkIwNjQ4RTM1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxL+JRzi9h5Ers+Ra/+DRQh9BJ OWjToPZ8tjok4UwnVQlKm4DexRzWF5wgs5ImBkpr31xG7/QGjM1wlXaNWjspQqR8 ICyCUMnzYur3q154yiUTuNaBI37p2ooK+azzccb7Zn8SpmomwRxP2r43iFDZwkAB +VEh4iaJCL6zHTJMFkHJ9/vF5/YqU6tkDkwBzTR58LOKT5/lOC5r6J+VXYS6eBgS VmKlmE1B19CD+OD2d6FdoUjOiPTisJ4wJnJiTg48bUvOjHESVwSC5A5WU4uC1gA4 9MxpsgjOWvRjSr4kEUMTgWPbdD/k5OCBR+oB0smLPH85jn9CC9Qx4pHfbHwfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUitC9CDnVJhi0f8hPBczSsGSONTMwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHb61itINpTDtGsNV3tcF46coNySB3JKKCzx yYGeVRFebIGS6vde9pKECDw4zw6iM9xRx/fWwHjz1F2If81V2hnFXfbJoSJ1HSOH CpvvkBVtt83Fd1uA0c/tQVtQO1T4WEu1OKUuo8u9wJPqs1UFh1ZwL/iVTsP5GZ4U KGpWfZohu5e2RVZyCX4wuABQI4aLtF5+xQQ4SPvYZBEGy4X27NMmbHD3pGtWLTfG ZpODzsW4ggUXAv1d26ofrek9MqNk6RT6OVjASvjh87DsVbHptU4aU69n8JxmLJCb IwLofZtJPssSEht91IjVN1REAKcyWDcraZ6QF0HwNgZI5Tdai8Q= -----END CERTIFICATE-----Generated at Tue Jul 1 23:25:59 2025 by rpki-client