$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: 4nk5dP9DZ3YK0S/pl0goqynf+vBYkb8A6PKd02z8KDs= Subject key identifier: CD:CE:03:CE:DA:51:83:D7:7C:77:67:76:4D:1E:D3:D8:48:8F:5E:E0 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 7ADF0C5B1E99E83A92B6FD7591E0326C8C0858F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: 0123 Signing time: Sun 01 Mar 2026 04:11:37 +0000 Manifest this update: Sun 01 Mar 2026 04:06:37 +0000 Manifest next update: Wed 04 Mar 2026 10:33:37 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: VUI2rL0449jct5al4MBNdkjkOqnkDFr+B6yhQzBrdV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:df:0c:5b:1e:99:e8:3a:92:b6:fd:75:91:e0:32:6c:8c:08:58:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Mar 1 04:06:37 2026 GMT Not After : Mar 4 10:33:37 2026 GMT Subject: CN=CDCE03CEDA5183D77C7767764D1ED3D8488F5EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:a5:65:93:ac:c1:3b:0f:0b:d6:56:5c:49: 58:80:30:a5:06:10:e5:62:7f:a3:aa:6f:43:5f:d7: 39:97:a0:3a:3d:69:17:df:98:e3:32:b1:3f:7c:64: 36:1c:e0:ef:b1:5f:90:33:02:f6:43:10:6a:2a:92: c7:76:0a:d2:29:ab:17:f3:d5:28:7e:13:e8:7b:f5: e4:85:e7:27:e2:0c:5a:a3:79:40:a8:92:64:07:b5: 52:05:70:60:64:e2:dd:fa:4e:86:54:00:9a:1a:ba: 33:fc:1a:27:65:be:fa:06:02:74:aa:c5:ba:d9:08: 3c:18:19:15:21:0e:e3:93:f1:79:84:f2:09:d7:89: 0a:93:9b:1c:d4:ae:eb:9a:d8:43:7e:57:a0:93:48: 85:fb:bd:d1:8f:0c:cd:30:59:08:e0:30:a8:4b:0c: 62:c2:41:d5:37:80:d0:30:9f:7d:7b:f2:50:2c:6b: e8:b8:a6:22:ba:de:d6:b3:fe:3c:07:e4:db:5e:40: ca:a8:a1:a2:57:70:c4:df:a0:ad:25:79:29:c5:ae: 64:97:22:51:af:00:1a:72:28:c2:d7:72:5d:31:1c: 58:8a:52:71:ea:e4:26:78:fe:f4:3f:81:86:2e:f8: 2c:5b:e8:0f:f8:96:fb:a9:34:c4:97:38:dc:46:d1: cd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CE:03:CE:DA:51:83:D7:7C:77:67:76:4D:1E:D3:D8:48:8F:5E:E0 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:17:9d:21:3f:59:87:cf:70:7e:a7:47:4a:de:17:96:53:e7: aa:a9:f1:2d:1f:74:6e:47:e6:20:fb:d2:6a:9e:b4:8a:2e:2a: ce:58:dd:a5:98:86:cb:c0:31:53:8e:ae:95:c7:f6:02:0b:98: c1:01:2a:72:f4:6f:64:7e:b9:07:1a:75:a7:d2:2e:97:1c:b4: 99:e5:70:b9:af:ac:a6:dd:11:c2:c0:74:2f:88:37:60:8e:1c: 30:09:59:6d:e0:37:ae:38:22:c9:49:b9:24:a4:98:02:2f:76: d1:43:79:bb:da:80:df:07:c2:5d:6b:00:a1:87:84:c7:62:ae: 7a:cd:3c:9e:9f:4c:d8:3c:c0:9d:b9:c8:68:25:c7:65:1b:ea: 3c:43:ba:75:70:e5:17:32:88:6c:e3:3e:07:c0:2c:0a:d3:2e: a0:3f:fa:eb:80:3b:89:1d:b9:b3:54:27:ad:3a:ee:fc:78:67: 0a:e7:ef:17:50:7b:20:62:ab:08:28:b5:df:64:3d:70:4a:30: 42:3b:39:ec:1b:d6:ea:03:a5:2c:03:71:a8:26:ee:56:37:4c: 8c:9c:1e:c4:87:fe:35:6d:69:56:33:6e:4f:b7:37:09:b6:32: ef:90:57:7e:6e:d3:dc:62:fe:7a:b3:0b:51:58:2b:fe:0f:88: 76:9a:48:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUet8MWx6Z6DqStv11keAybIwIWPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNjAzMDEwNDA2MzdaFw0yNjAzMDQxMDMzMzdaMDMxMTAvBgNV BAMTKENEQ0UwM0NFREE1MTgzRDc3Qzc3Njc3NjREMUVEM0Q4NDg4RjVFRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDffaVlk6zBOw8L1lZcSViAMKUG EOVif6Oqb0Nf1zmXoDo9aRffmOMysT98ZDYc4O+xX5AzAvZDEGoqksd2CtIpqxfz 1Sh+E+h79eSF5yfiDFqjeUCokmQHtVIFcGBk4t36ToZUAJoaujP8GidlvvoGAnSq xbrZCDwYGRUhDuOT8XmE8gnXiQqTmxzUruua2EN+V6CTSIX7vdGPDM0wWQjgMKhL DGLCQdU3gNAwn3178lAsa+i4piK63taz/jwH5NteQMqooaJXcMTfoK0leSnFrmSX IlGvABpyKMLXcl0xHFiKUnHq5CZ4/vQ/gYYu+Cxb6A/4lvupNMSXONxG0c1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzc4DztpRg9d8d2d2TR7T2EiPXuAwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8XnSE/WYfPcH6nR0reF5ZT56qp8S0fdG5H 5iD70mqetIouKs5Y3aWYhsvAMVOOrpXH9gILmMEBKnL0b2R+uQcadafSLpcctJnl cLmvrKbdEcLAdC+IN2COHDAJWW3gN644IslJuSSkmAIvdtFDebvagN8Hwl1rAKGH hMdirnrNPJ6fTNg8wJ25yGglx2Ub6jxDunVw5RcyiGzjPgfALArTLqA/+uuAO4kd ubNUJ6067vx4Zwrn7xdQeyBiqwgotd9kPXBKMEI7Oewb1uoDpSwDcagm7lY3TIyc HsSH/jVtaVYzbk+3Nwm2Mu+QV35u09xi/nqzC1FYK/4PiHaaSOo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:58:24 2026 by rpki-client