$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: 1x+toAB5UfRZLyAEWhp1qAWVv0Pu+kkhA82O6GYiynk= Subject key identifier: 40:FB:2E:27:6E:70:C6:D5:99:46:E1:C9:7A:92:9C:F8:DA:00:6B:32 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 7885F60CDF1512FD359738268EEAD3A07C7A72EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: EE Signing time: Tue 04 Nov 2025 15:01:27 +0000 Manifest this update: Tue 04 Nov 2025 14:56:27 +0000 Manifest next update: Fri 07 Nov 2025 18:03:27 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: Lv2LaFVAf5ceYU1WrD49yLFLgyidW6vp7lHn4EjZylY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:85:f6:0c:df:15:12:fd:35:97:38:26:8e:ea:d3:a0:7c:7a:72:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Nov 4 14:56:27 2025 GMT Not After : Nov 7 18:03:27 2025 GMT Subject: CN=40FB2E276E70C6D59946E1C97A929CF8DA006B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:23:d0:c5:92:ea:70:b6:d8:46:71:38:e6: 50:56:12:6e:bb:63:ab:72:ac:cd:89:6a:df:15:fc: 21:87:35:0d:35:3d:4d:95:e9:e9:46:6d:8d:27:a6: a9:07:2e:8c:a4:c1:30:fa:bd:d9:26:5d:ef:38:f6: 4c:3d:9b:e3:07:7d:c6:bb:99:22:01:62:c2:a4:ec: 79:6f:09:5b:18:8d:8b:a7:fc:da:ff:8e:d9:aa:db: d1:60:ba:f4:70:b8:3c:41:ad:ed:f1:07:06:99:d9: 14:d0:d3:08:a6:15:da:32:c6:8b:af:be:47:61:81: 2f:e2:b2:34:7d:1f:9d:f9:b2:2c:fb:60:a9:66:a7: ce:ed:bd:b9:07:2c:a1:11:47:82:80:a3:b8:01:e6: 15:46:c4:6c:06:43:19:b2:88:4b:bd:27:28:97:27: d2:e7:21:1d:0a:e4:ce:2d:1e:00:c5:32:27:b4:56: df:18:3e:cc:5a:15:7d:10:40:ba:a9:c6:94:fc:74: ee:7a:5d:b2:dc:5b:b5:49:e5:24:0b:b9:59:cc:91: 43:d3:0e:e5:b2:55:f5:a2:3c:08:61:9e:ee:c9:eb: b8:6e:3d:51:69:5d:e2:46:48:cb:97:da:6d:17:a6: 3c:2a:2b:25:35:dc:9c:80:c3:dd:a8:9f:c4:b8:54: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FB:2E:27:6E:70:C6:D5:99:46:E1:C9:7A:92:9C:F8:DA:00:6B:32 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6b:a9:43:bd:e2:c0:6b:cf:65:90:a3:b9:2c:38:c2:57:86: 99:60:9c:13:dd:00:7d:b7:bc:b4:c9:ae:53:48:b9:1f:c0:49: 06:55:98:89:ee:73:fd:16:0b:63:f3:61:e3:54:f0:ad:cd:4b: 87:99:18:eb:ae:a4:1d:f7:33:13:92:c3:c7:81:61:a5:d1:d4: 47:ac:f3:67:56:58:7c:30:1c:d2:09:78:d9:cb:97:a8:87:88: f3:b6:a9:4e:15:eb:32:11:c5:49:32:6f:b9:7f:13:74:7e:8c: 7d:dc:fe:bb:6f:e6:c2:1f:a4:70:8b:57:94:49:31:8f:5a:f2: 99:c5:9d:c5:dc:a1:d8:17:91:b9:17:82:2c:0e:46:f1:02:19: ac:4a:ec:29:cd:f1:03:9c:e4:48:9e:b6:5b:96:6f:4d:1e:33: ba:0d:e3:fc:a1:d0:a4:b6:a5:01:fa:09:a7:1e:b4:8c:7e:3b: 44:a7:30:4b:ad:11:92:1a:b0:c6:c4:74:f1:69:09:af:8d:f5: d8:f8:a6:e0:ea:3d:c2:2e:1c:c8:79:bb:d8:3d:8e:da:fe:47: 29:b6:4d:0b:8b:14:92:06:17:9a:76:e2:19:cf:3a:9a:1f:5a: d0:08:e6:cb:b9:a4:40:c2:5b:be:6e:04:a0:18:d5:cd:cf:0e: 98:12:9a:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIX2DN8VEv01lzgmjurToHx6cuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNTExMDQxNDU2MjdaFw0yNTExMDcxODAzMjdaMDMxMTAvBgNV BAMTKDQwRkIyRTI3NkU3MEM2RDU5OTQ2RTFDOTdBOTI5Q0Y4REEwMDZCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsiPQxZLqcLbYRnE45lBWEm67 Y6tyrM2Jat8V/CGHNQ01PU2V6elGbY0npqkHLoykwTD6vdkmXe849kw9m+MHfca7 mSIBYsKk7HlvCVsYjYun/Nr/jtmq29FguvRwuDxBre3xBwaZ2RTQ0wimFdoyxouv vkdhgS/isjR9H535siz7YKlmp87tvbkHLKERR4KAo7gB5hVGxGwGQxmyiEu9JyiX J9LnIR0K5M4tHgDFMie0Vt8YPsxaFX0QQLqpxpT8dO56XbLcW7VJ5SQLuVnMkUPT DuWyVfWiPAhhnu7J67huPVFpXeJGSMuX2m0XpjwqKyU13JyAw92on8S4VJ2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQPsuJ25wxtWZRuHJepKc+NoAazIwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlrqUO94sBrz2WQo7ksOMJXhplgnBPdAH23 vLTJrlNIuR/ASQZVmInuc/0WC2PzYeNU8K3NS4eZGOuupB33MxOSw8eBYaXR1Ees 82dWWHwwHNIJeNnLl6iHiPO2qU4V6zIRxUkyb7l/E3R+jH3c/rtv5sIfpHCLV5RJ MY9a8pnFncXcodgXkbkXgiwORvECGaxK7CnN8QOc5EietluWb00eM7oN4/yh0KS2 pQH6CacetIx+O0SnMEutEZIasMbEdPFpCa+N9dj4puDqPcIuHMh5u9g9jtr+Rym2 TQuLFJIGF5p24hnPOpofWtAI5su5pEDCW75uBKAY1c3PDpgSmsY= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:46 2025 by rpki-client