$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: c2/gDppgCqcoX2jzQlth68ucDkxZKmJm/FcpFWjcSJQ= Subject key identifier: A8:F6:FA:C1:B4:A4:4C:57:05:30:2C:25:08:99:1B:AD:2D:3E:9F:44 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 20A4FC165ECA5A3CDD5D6F66A223EEF5928FC501 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: 0137 Signing time: Thu 16 Apr 2026 07:41:39 +0000 Manifest this update: Thu 16 Apr 2026 07:36:39 +0000 Manifest next update: Sun 19 Apr 2026 14:47:39 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: owee+HvN6/N8kJGo/mZx6fULvN+owjiPdWuHbD3cM4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a4:fc:16:5e:ca:5a:3c:dd:5d:6f:66:a2:23:ee:f5:92:8f:c5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Apr 16 07:36:39 2026 GMT Not After : Apr 19 14:47:39 2026 GMT Subject: CN=A8F6FAC1B4A44C5705302C2508991BAD2D3E9F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:ba:9c:b4:0e:a4:59:71:7e:25:1d:3f:51: 98:cd:41:e3:89:31:06:9d:a5:fd:8e:2a:46:c0:63: 6e:e5:6c:31:cb:9f:92:6b:e6:d9:24:3f:9c:cf:d6: cb:10:d2:c3:7a:17:b9:8d:68:6a:af:c9:1e:76:32: c2:89:2f:ee:f2:f1:45:c1:5a:ba:4b:9e:a2:72:f0: 74:8f:a2:e5:61:d6:c8:11:fe:3c:b9:35:c7:1a:39: 93:8a:95:31:63:d5:e2:86:70:70:80:ac:1f:0c:77: 8a:94:5e:1d:42:c2:06:c1:9e:d5:88:b2:b5:b3:f3: 97:a5:98:50:bc:02:9b:a0:c8:8e:a5:89:e3:a9:e4: 32:15:29:2f:0b:ca:64:b6:7b:44:0d:b0:8b:5c:dc: 5c:0d:88:70:9d:b0:ad:7e:f5:b6:ff:76:10:f3:8a: 19:c3:b2:f3:3a:f3:cc:f6:cb:d5:bb:c6:6e:86:e1: cb:dd:61:bb:83:cf:de:21:3a:8b:72:8e:96:71:50: fc:97:64:a5:6b:86:bf:df:55:21:f3:e7:75:26:7e: f1:76:43:f4:4b:17:9b:e5:0f:5a:97:57:df:b5:ea: 9b:a9:0e:76:c6:da:c7:3d:23:af:8f:fc:22:00:12: f8:9d:1a:96:43:02:9a:38:e4:ad:ac:8d:f9:dc:f2: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F6:FA:C1:B4:A4:4C:57:05:30:2C:25:08:99:1B:AD:2D:3E:9F:44 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8f:41:1c:95:bb:77:a7:9f:fc:e6:52:54:5d:7c:05:d4:47: 30:13:3d:f5:a0:1c:ff:4b:16:c1:53:1f:e5:05:d6:6f:58:5f: 78:93:e7:ff:4f:99:20:1a:e1:df:0f:30:60:e6:23:56:ee:93: ff:97:90:1d:3d:ef:ea:a8:6e:b4:a4:08:91:0d:4e:c1:97:85: 9a:31:4e:ff:4c:c8:3f:d7:dc:5e:e8:f2:ea:65:cf:d8:94:c1: a0:20:ee:a4:75:41:77:ba:39:f5:8b:76:5e:88:68:79:e8:be: 4c:fd:14:8b:f2:a0:f3:2b:d4:eb:93:8e:0a:fc:08:86:26:c8: aa:1e:4f:7b:2d:68:c4:51:34:0f:9e:6d:56:e7:04:40:0f:18: 7a:85:47:90:e9:d4:2f:5c:93:e7:fd:f0:33:66:5a:e8:61:28: e7:29:38:4c:99:b9:cd:d4:56:da:00:a2:47:49:f7:e1:4d:d0: 57:4b:78:39:b2:07:98:99:f6:fd:fd:10:6d:a0:21:f9:7a:69: b7:e6:db:d0:92:4c:f0:7f:cd:d6:89:71:2f:0e:52:e5:aa:48: 94:3c:69:e9:f7:f4:9f:97:13:5d:7e:92:ec:77:92:27:92:5e: 2d:e5:5e:8e:12:05:4a:9e:04:a6:0b:a0:9a:d6:b2:a7:1a:12: 23:52:61:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKT8Fl7KWjzdXW9moiPu9ZKPxQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNjA0MTYwNzM2MzlaFw0yNjA0MTkxNDQ3MzlaMDMxMTAvBgNV BAMTKEE4RjZGQUMxQjRBNDRDNTcwNTMwMkMyNTA4OTkxQkFEMkQzRTlGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdurqctA6kWXF+JR0/UZjNQeOJ MQadpf2OKkbAY27lbDHLn5Jr5tkkP5zP1ssQ0sN6F7mNaGqvyR52MsKJL+7y8UXB WrpLnqJy8HSPouVh1sgR/jy5NccaOZOKlTFj1eKGcHCArB8Md4qUXh1CwgbBntWI srWz85elmFC8ApugyI6lieOp5DIVKS8LymS2e0QNsItc3FwNiHCdsK1+9bb/dhDz ihnDsvM688z2y9W7xm6G4cvdYbuDz94hOotyjpZxUPyXZKVrhr/fVSHz53UmfvF2 Q/RLF5vlD1qXV9+16pupDnbG2sc9I6+P/CIAEvidGpZDApo45K2sjfnc8s13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqPb6wbSkTFcFMCwlCJkbrS0+n0QwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOPQRyVu3enn/zmUlRdfAXURzATPfWgHP9L FsFTH+UF1m9YX3iT5/9PmSAa4d8PMGDmI1buk/+XkB097+qobrSkCJENTsGXhZox Tv9MyD/X3F7o8uplz9iUwaAg7qR1QXe6OfWLdl6IaHnovkz9FIvyoPMr1OuTjgr8 CIYmyKoeT3staMRRNA+ebVbnBEAPGHqFR5Dp1C9ck+f98DNmWuhhKOcpOEyZuc3U VtoAokdJ9+FN0FdLeDmyB5iZ9v39EG2gIfl6abfm29CSTPB/zdaJcS8OUuWqSJQ8 aen39J+XE11+kux3kieSXi3lXo4SBUqeBKYLoJrWsqcaEiNSYTA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:36:51 2026 by rpki-client