$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: 5f7NPCME3RgmXnrZ99b4jybZ8uFUHxXcDZ+tYidT7M4= Subject key identifier: 38:BD:2A:1D:23:88:D8:58:96:45:C1:17:38:71:58:68:D1:85:4D:C3 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 5C4AD7E51CB320F6502B8BC15E1FAAE54E789AF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: 012D Signing time: Mon 23 Mar 2026 23:51:36 +0000 Manifest this update: Mon 23 Mar 2026 23:46:36 +0000 Manifest next update: Fri 27 Mar 2026 11:37:36 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: qaGgNYgxbdISQ1A19nBZHHqIKj44fc9PSVZfdae1zNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4a:d7:e5:1c:b3:20:f6:50:2b:8b:c1:5e:1f:aa:e5:4e:78:9a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Mar 23 23:46:36 2026 GMT Not After : Mar 27 11:37:36 2026 GMT Subject: CN=38BD2A1D2388D8589645C11738715868D1854DC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:3b:b2:16:8a:00:84:27:63:e4:2d:70:2a: 7e:52:c2:d8:6a:b9:9a:7d:5c:2d:36:1e:21:b3:62: a4:a1:93:e2:57:72:f6:5c:74:3c:e7:37:5f:4b:65: f2:23:6c:e9:0d:72:0b:c2:e6:fb:97:1c:1f:70:db: 2e:10:f5:df:17:c4:b6:85:74:53:5d:2d:7e:5e:f9: 47:58:1d:84:b3:24:67:e2:7b:22:df:17:d5:e2:ee: 04:92:65:73:7b:d6:ca:3a:65:d5:51:74:03:7c:2c: 84:e1:d4:a7:c0:87:fc:fd:8e:f9:cc:ee:37:44:63: 47:65:c5:2d:78:dc:7e:e6:56:a3:e2:d7:10:99:73: d7:9e:41:71:6e:fc:30:eb:46:76:ca:36:b1:a8:f6: 47:58:23:0d:ed:48:aa:04:95:51:6c:df:e7:9c:2f: b1:53:ac:8a:1a:78:03:95:3e:99:54:a0:15:89:22: 58:da:fc:dc:fd:b0:61:52:2b:71:ae:3d:84:37:df: f6:f4:ff:b9:2d:12:86:93:93:43:6d:95:6c:b7:04: fa:19:13:fc:b3:fc:e2:25:44:b4:b3:08:dc:64:00: 62:1f:72:7b:53:57:58:41:0b:e7:61:b1:c0:58:a1: 8b:b0:ac:f6:7f:57:aa:c9:b6:b5:0f:1c:d0:b5:ff: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BD:2A:1D:23:88:D8:58:96:45:C1:17:38:71:58:68:D1:85:4D:C3 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:99:8f:bf:27:f2:1d:be:e7:19:82:06:ba:ce:62:f5:e5:3f: 83:2e:aa:79:2b:ad:16:7d:7e:d9:03:6a:33:ff:35:00:f4:1a: 0e:1d:a3:46:76:11:9e:39:d0:b9:3e:3d:c0:1d:c2:57:4b:d4: ef:3a:c2:2e:5e:b8:7e:d8:c8:f3:12:2b:63:da:6d:ea:c2:d5: b2:09:04:88:86:03:32:df:7a:44:b8:e1:a0:8f:3e:6e:14:1b: 5f:b9:eb:28:2e:a6:e1:8e:cc:63:db:80:53:09:39:e9:d2:aa: 8c:77:52:6f:22:a9:35:dd:8e:3f:da:83:c9:cc:9d:17:e1:fa: b6:99:a4:9f:eb:d1:1f:49:d9:f2:60:b1:ee:d7:a0:55:4b:d3: f1:ef:66:91:3a:af:6a:93:a0:67:be:df:67:9a:42:d6:58:bb: 60:29:9c:7f:82:87:65:5e:b4:ba:8b:63:af:93:77:19:2b:4b: ab:c6:ad:02:37:52:82:e5:68:50:b9:b3:41:d3:1a:1a:62:00: 37:eb:2d:19:46:3d:66:f8:dc:84:02:77:3e:13:58:66:c1:ce: 1a:f9:54:33:cf:c5:89:36:a3:3d:57:6e:fe:b2:77:8e:57:53: c5:56:92:87:75:da:67:5a:5e:2f:4f:4c:14:12:fe:20:35:ca: 49:0d:4e:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXErX5RyzIPZQK4vBXh+q5U54mvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNjAzMjMyMzQ2MzZaFw0yNjAzMjcxMTM3MzZaMDMxMTAvBgNV BAMTKDM4QkQyQTFEMjM4OEQ4NTg5NjQ1QzExNzM4NzE1ODY4RDE4NTREQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhTuyFooAhCdj5C1wKn5Swthq uZp9XC02HiGzYqShk+JXcvZcdDznN19LZfIjbOkNcgvC5vuXHB9w2y4Q9d8XxLaF dFNdLX5e+UdYHYSzJGfieyLfF9Xi7gSSZXN71so6ZdVRdAN8LITh1KfAh/z9jvnM 7jdEY0dlxS143H7mVqPi1xCZc9eeQXFu/DDrRnbKNrGo9kdYIw3tSKoElVFs3+ec L7FTrIoaeAOVPplUoBWJIlja/Nz9sGFSK3GuPYQ33/b0/7ktEoaTk0NtlWy3BPoZ E/yz/OIlRLSzCNxkAGIfcntTV1hBC+dhscBYoYuwrPZ/V6rJtrUPHNC1//KNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOL0qHSOI2FiWRcEXOHFYaNGFTcMwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2Zj78n8h2+5xmCBrrOYvXlP4MuqnkrrRZ9 ftkDajP/NQD0Gg4do0Z2EZ450Lk+PcAdwldL1O86wi5euH7YyPMSK2PaberC1bIJ BIiGAzLfekS44aCPPm4UG1+56ygupuGOzGPbgFMJOenSqox3Um8iqTXdjj/ag8nM nRfh+raZpJ/r0R9J2fJgse7XoFVL0/HvZpE6r2qToGe+32eaQtZYu2ApnH+Ch2Ve tLqLY6+TdxkrS6vGrQI3UoLlaFC5s0HTGhpiADfrLRlGPWb43IQCdz4TWGbBzhr5 VDPPxYk2oz1Xbv6yd45XU8VWkod12mdaXi9PTBQS/iA1ykkNTsU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:00 2026 by rpki-client