$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: 1jaOFzyWH7/SFEP6taITf6iloQ1o63doSLs9QoeaygY= Subject key identifier: EB:A7:49:C4:49:C2:A8:A5:29:DA:36:7D:C5:F7:0B:D0:7D:3D:F6:AB Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 643F3458A02F8A4FE4D120E1C3A3DC090373AA0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: AE Signing time: Sat 14 Jun 2025 07:31:23 +0000 Manifest this update: Sat 14 Jun 2025 07:26:23 +0000 Manifest next update: Tue 17 Jun 2025 14:52:23 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: +FFMmm+eOdJtWbF5os1g/I46ajNkf+WLt9KMz+8U9PQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 14:52:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3f:34:58:a0:2f:8a:4f:e4:d1:20:e1:c3:a3:dc:09:03:73:aa:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Jun 14 07:26:23 2025 GMT Not After : Jun 17 14:52:23 2025 GMT Subject: CN=EBA749C449C2A8A529DA367DC5F70BD07D3DF6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:57:9a:ac:01:85:b2:49:e6:31:82:24:c7: db:f8:79:9c:ba:02:a5:5d:ec:14:1a:c0:f5:9f:52: be:5b:e5:99:55:3f:7b:a3:b9:a0:85:69:e6:e6:38: 4d:53:8d:f5:43:ca:92:fd:67:4a:b9:44:f8:96:90: 3b:79:b9:7b:03:bf:d9:83:c4:23:2e:a9:07:10:7a: f4:a0:48:9c:e1:ea:5d:4d:cb:18:f9:a4:d1:df:1f: 3d:b9:fb:22:7c:07:65:b8:f0:1f:8c:4f:17:5f:53: 64:a2:1e:7c:f1:92:97:ee:cc:75:37:63:9e:bf:b1: 17:6b:45:d6:e7:04:03:6d:34:c9:04:8c:3e:84:9c: 97:aa:5c:17:c2:f1:2a:db:a6:c3:bf:e2:7d:48:98: 9f:70:c7:ad:5e:3b:e9:d4:d8:7f:5a:30:9f:b0:80: 65:d0:c2:d8:4d:ad:a0:5f:f2:24:e0:19:aa:e6:a9: 84:79:fc:4f:56:c3:0c:a7:5b:3f:cb:b8:05:0e:e7: ea:8d:84:a0:04:22:ec:cd:12:41:2f:9b:41:df:6c: e4:21:50:88:a6:a8:e6:e0:ed:f0:f5:3b:00:e2:a7: 2c:fa:7e:15:28:0c:e9:1c:90:01:13:47:6b:4a:38: a0:57:48:05:06:af:03:ac:a9:07:34:17:65:c6:ca: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A7:49:C4:49:C2:A8:A5:29:DA:36:7D:C5:F7:0B:D0:7D:3D:F6:AB X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:aa:f0:34:30:a7:3d:ff:06:c6:c6:20:8a:f1:27:d5:aa:a3: ed:48:f3:a9:4b:8f:38:a4:68:02:19:4c:36:4d:5a:bf:ec:d3: ab:fd:e0:dd:50:01:bd:1c:67:05:8c:90:38:f8:fd:85:e3:d4: b3:18:13:21:c1:06:65:89:50:2e:19:46:78:22:72:b1:47:c5: 97:5b:92:69:2c:1a:44:28:f7:66:47:63:2e:cb:c3:ef:c1:38: 7b:bd:11:45:3b:b3:12:21:8a:8f:1e:1d:be:ce:49:5c:84:2f: ad:0d:f5:22:81:f9:4a:e0:a9:6b:c2:6f:0e:3b:ef:9d:45:c4: 13:e6:47:66:9c:17:dc:7f:9d:b6:e9:01:0f:3c:44:b7:6f:b9: 24:a1:47:67:45:0e:cb:5e:24:1f:f8:3d:de:33:e4:69:0c:61: e0:d4:ba:7e:d6:83:d5:64:2e:90:ed:67:bd:e5:d4:2b:c4:58: 14:63:8f:ef:df:fe:db:61:66:e6:b4:0e:9a:c5:e2:e5:6c:f5: 82:2c:b4:61:ed:64:b8:ee:cc:b8:07:99:73:04:61:63:6c:7b: 7b:85:2c:d1:b4:7f:91:aa:f5:53:0a:4d:b1:3d:0a:49:17:7a: c4:7b:c1:fd:4a:fb:81:ba:9b:37:2a:6b:b2:2e:92:58:71:3d: 4e:34:11:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZD80WKAvik/k0SDhw6PcCQNzqgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNTA2MTQwNzI2MjNaFw0yNTA2MTcxNDUyMjNaMDMxMTAvBgNV BAMTKEVCQTc0OUM0NDlDMkE4QTUyOURBMzY3REM1RjcwQkQwN0QzREY2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxF1earAGFsknmMYIkx9v4eZy6 AqVd7BQawPWfUr5b5ZlVP3ujuaCFaebmOE1TjfVDypL9Z0q5RPiWkDt5uXsDv9mD xCMuqQcQevSgSJzh6l1Nyxj5pNHfHz25+yJ8B2W48B+MTxdfU2SiHnzxkpfuzHU3 Y56/sRdrRdbnBANtNMkEjD6EnJeqXBfC8SrbpsO/4n1ImJ9wx61eO+nU2H9aMJ+w gGXQwthNraBf8iTgGarmqYR5/E9WwwynWz/LuAUO5+qNhKAEIuzNEkEvm0HfbOQh UIimqObg7fD1OwDipyz6fhUoDOkckAETR2tKOKBXSAUGrwOsqQc0F2XGyvbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU66dJxEnCqKUp2jZ9xfcL0H099qswHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSq8DQwpz3/BsbGIIrxJ9Wqo+1I86lLjzik aAIZTDZNWr/s06v94N1QAb0cZwWMkDj4/YXj1LMYEyHBBmWJUC4ZRngicrFHxZdb kmksGkQo92ZHYy7Lw+/BOHu9EUU7sxIhio8eHb7OSVyEL60N9SKB+UrgqWvCbw47 751FxBPmR2acF9x/nbbpAQ88RLdvuSShR2dFDsteJB/4Pd4z5GkMYeDUun7Wg9Vk LpDtZ73l1CvEWBRjj+/f/tthZua0DprF4uVs9YIstGHtZLjuzLgHmXMEYWNse3uF LNG0f5Gq9VMKTbE9CkkXesR7wf1K+4G6mzcqa7IuklhxPU40EQg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:55:06 2025 by rpki-client