$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: LOb4Y+q9knpkzAq8yfnW2AxImNVmdrBn/tMoala9Zz0= Subject key identifier: 7A:B5:8F:2C:18:A6:B3:48:D7:8A:3C:AC:F4:9F:36:72:FA:7F:D2:97 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 224F0A2291789314094EA0BCDB65541441425ACF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: CC Signing time: Fri 22 Aug 2025 00:31:33 +0000 Manifest this update: Fri 22 Aug 2025 00:26:33 +0000 Manifest next update: Mon 25 Aug 2025 05:06:33 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: eZIW5YRB2vCG94Qy4BP6AToWU66HV2XC2rlLq7x5lrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4f:0a:22:91:78:93:14:09:4e:a0:bc:db:65:54:14:41:42:5a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Aug 22 00:26:33 2025 GMT Not After : Aug 25 05:06:33 2025 GMT Subject: CN=7AB58F2C18A6B348D78A3CACF49F3672FA7FD297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:aa:bb:3a:ae:23:a5:68:d3:1d:20:14:91:e4: 62:ca:8e:49:24:cf:9d:9b:d9:35:f0:68:3d:2b:a7: 9e:75:b5:86:fa:f4:a5:7c:d5:ac:7e:be:67:72:95: 4d:80:b3:c3:1b:4f:04:8d:e6:2c:d1:4f:a3:59:5e: b2:60:79:35:1a:7b:23:6e:71:3d:78:79:96:0e:4d: 5e:38:c9:d4:46:8a:74:46:54:8e:f2:a5:4f:7d:a7: c2:68:e1:85:5d:60:1b:b0:15:1d:52:e8:02:fa:96: 7a:06:6a:13:c7:d7:08:7c:41:cd:61:2a:d4:e4:12: 45:ec:f8:19:2b:09:34:36:b6:e6:4b:eb:ad:a3:76: d8:f1:f2:5b:cf:6e:15:98:08:c0:2b:fc:9b:91:16: 65:7a:27:6b:99:60:81:7f:43:b1:23:48:cd:b0:1e: 01:50:2a:f4:57:6a:12:a4:1d:c4:5c:56:47:b3:ac: 69:de:90:80:a8:57:92:98:fe:64:aa:10:e2:d6:bc: 75:12:f7:99:3f:35:e4:d1:1a:8d:5d:c6:30:69:88: c9:1a:f6:8d:7f:e6:7b:e1:d2:6e:68:ae:6a:37:3c: a2:f6:e0:f2:75:dd:93:d3:cd:08:ec:39:21:d1:54: 94:e5:6d:90:56:4c:90:15:ec:a4:2c:5e:25:80:de: 07:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B5:8F:2C:18:A6:B3:48:D7:8A:3C:AC:F4:9F:36:72:FA:7F:D2:97 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:40:df:dd:f5:0b:36:83:49:fd:b6:7d:9f:f4:29:05:5f:53: 44:0c:85:70:c8:e8:7c:8d:81:5b:11:d7:f0:db:c4:9f:51:2d: 48:18:95:c0:ef:e9:6b:23:cc:e9:16:01:58:22:46:ed:f1:dc: 2b:7c:1e:24:e9:00:f5:f9:34:f6:c0:df:26:be:54:e1:59:18: d2:9a:91:b7:9a:53:c1:a5:fb:05:e8:57:ed:a7:cb:42:de:49: b4:02:c3:71:bf:73:4a:ac:7b:e6:bd:71:2d:87:0d:a6:8c:13: 7c:d9:03:fc:6e:8e:ca:09:ee:8b:67:9c:6b:24:a2:db:ad:06: fe:b0:95:f5:12:b5:7c:54:76:55:24:f9:20:4f:97:3c:d0:13: 58:75:72:be:ab:01:d1:01:d8:80:c9:0c:1e:31:ad:8d:77:01: eb:c6:c8:f1:99:05:38:ef:08:47:25:24:a2:8f:20:59:c0:54: 75:bb:45:82:8f:15:29:d9:3c:c6:31:8d:89:55:23:7a:87:b9: c3:59:a8:8c:6f:7f:82:c2:99:cc:0a:8f:bb:6a:8e:46:f8:5a: c7:e0:de:7a:fc:57:6d:b1:f5:f3:bf:c5:87:53:ca:39:a6:7f: ec:a7:43:60:02:6a:b8:2a:53:26:d4:01:f5:31:78:ea:13:c4: 47:45:05:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIk8KIpF4kxQJTqC822VUFEFCWs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNTA4MjIwMDI2MzNaFw0yNTA4MjUwNTA2MzNaMDMxMTAvBgNV BAMTKDdBQjU4RjJDMThBNkIzNDhENzhBM0NBQ0Y0OUYzNjcyRkE3RkQyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqrs6riOlaNMdIBSR5GLKjkkk z52b2TXwaD0rp551tYb69KV81ax+vmdylU2As8MbTwSN5izRT6NZXrJgeTUaeyNu cT14eZYOTV44ydRGinRGVI7ypU99p8Jo4YVdYBuwFR1S6AL6lnoGahPH1wh8Qc1h KtTkEkXs+BkrCTQ2tuZL662jdtjx8lvPbhWYCMAr/JuRFmV6J2uZYIF/Q7EjSM2w HgFQKvRXahKkHcRcVkezrGnekICoV5KY/mSqEOLWvHUS95k/NeTRGo1dxjBpiMka 9o1/5nvh0m5ormo3PKL24PJ13ZPTzQjsOSHRVJTlbZBWTJAV7KQsXiWA3gf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUerWPLBims0jXijys9J82cvp/0pcwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlA3931CzaDSf22fZ/0KQVfU0QMhXDI6HyN gVsR1/DbxJ9RLUgYlcDv6WsjzOkWAVgiRu3x3Ct8HiTpAPX5NPbA3ya+VOFZGNKa kbeaU8Gl+wXoV+2ny0LeSbQCw3G/c0qse+a9cS2HDaaME3zZA/xujsoJ7otnnGsk otutBv6wlfUStXxUdlUk+SBPlzzQE1h1cr6rAdEB2IDJDB4xrY13AevGyPGZBTjv CEclJKKPIFnAVHW7RYKPFSnZPMYxjYlVI3qHucNZqIxvf4LCmcwKj7tqjkb4Wsfg 3nr8V22x9fO/xYdTyjmmf+ynQ2ACargqUybUAfUxeOoTxEdFBRk= -----END CERTIFICATE-----Generated at Sat Aug 23 22:59:46 2025 by rpki-client