$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: zc/6c4qpD913cZL0jYHJw4DbICVzEyzWk9+vXynmZWg= Subject key identifier: 7B:DF:FA:27:CB:B3:E9:DC:FD:13:23:9E:31:92:B5:B4:2A:1C:6A:7F Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 4188D826867D04278BF2A1849CE95F4FF028DC35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: C5 Signing time: Tue 05 Aug 2025 19:51:32 +0000 Manifest this update: Tue 05 Aug 2025 19:46:32 +0000 Manifest next update: Fri 08 Aug 2025 23:45:32 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: jiCjzw8oI1kkU875PTxSAXx/2wU7Ei/41NEG2UbRQQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:45:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:88:d8:26:86:7d:04:27:8b:f2:a1:84:9c:e9:5f:4f:f0:28:dc:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Aug 5 19:46:32 2025 GMT Not After : Aug 8 23:45:32 2025 GMT Subject: CN=7BDFFA27CBB3E9DCFD13239E3192B5B42A1C6A7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:c9:46:0c:21:0c:fe:57:5e:a4:87:75:e5: b5:a2:2d:43:13:79:0a:8e:8f:a5:84:03:1b:0a:40: d6:04:78:75:02:79:17:cb:9c:62:e6:d5:09:c4:ff: 53:75:6c:23:1f:cb:eb:04:97:1d:63:d0:44:ff:0e: d8:25:67:c8:4c:d4:0e:e0:d9:d5:78:8f:7e:2f:b5: 92:cd:2f:87:25:cc:3d:f5:c5:d1:40:4f:bf:74:84: e7:b3:af:98:e4:9c:0a:14:8e:35:72:3d:48:b5:5a: 25:60:b0:ea:6c:8e:45:a3:93:f4:16:1f:6e:6c:68: 8d:3a:67:4b:93:9f:21:2b:63:b3:f7:81:31:42:38: 1f:94:f1:42:c0:80:f1:18:8d:aa:2b:96:50:1a:e6: 52:be:11:08:7a:6b:ce:26:2f:e1:46:e8:66:0e:fe: ca:3a:c1:f2:bc:29:d2:21:e7:46:85:a7:fe:5c:e1: b3:c3:89:74:79:c4:9c:8a:f4:fa:84:8b:cf:6b:8b: 54:81:20:06:7c:49:11:0d:db:74:3c:d4:0c:eb:6a: 74:33:1d:10:11:f6:4e:ac:4d:38:4b:62:0b:e9:1b: 7a:57:c5:e3:fd:54:fb:51:f3:9d:c4:16:bd:8c:ce: 47:8f:2b:b8:00:e0:62:2e:aa:66:04:33:ad:24:f6: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DF:FA:27:CB:B3:E9:DC:FD:13:23:9E:31:92:B5:B4:2A:1C:6A:7F X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fe:45:46:04:eb:92:e3:fa:9e:54:af:60:d0:96:44:3c:cb: 41:60:f1:ed:ed:e1:8d:33:29:3f:a5:bd:8c:d3:5b:fe:16:73: 52:9d:3d:aa:6e:71:81:10:55:d1:1b:89:df:b2:26:6e:b2:99: c7:1a:3d:10:45:b9:fa:f1:13:92:73:0d:02:1b:ae:98:ca:b0: 7b:8c:a3:fe:8d:09:2a:bd:51:8c:65:ac:ee:df:12:56:d1:87: c2:57:41:ce:67:5f:6a:2b:f7:72:3a:f3:64:c6:f8:23:52:1b: 22:0a:f0:90:aa:85:93:f5:46:a2:2d:be:e2:8e:80:6e:13:16: 98:aa:a3:34:1f:82:4f:cc:34:c2:06:8b:72:26:e0:8a:3a:b2: 0e:4d:a2:dd:87:8a:5b:8e:1d:e9:0d:45:ea:ca:85:a8:00:b0: c8:53:a4:a2:4b:3c:a2:e3:23:c5:36:58:cf:cf:67:76:fc:3d: 16:6e:2a:b3:30:61:6e:98:c9:91:34:3b:85:c9:23:cc:da:45: ef:39:e5:d4:3f:d3:67:cf:36:0f:3f:a2:ea:23:1e:7a:50:dd: e1:01:90:9d:88:80:a9:77:3a:85:f0:6b:f4:ca:8e:f5:0a:87: 37:df:fb:a2:23:f1:0e:ef:f4:21:65:f6:11:e1:2f:3e:7d:6c: da:05:3e:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQYjYJoZ9BCeL8qGEnOlfT/Ao3DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNTA4MDUxOTQ2MzJaFw0yNTA4MDgyMzQ1MzJaMDMxMTAvBgNV BAMTKDdCREZGQTI3Q0JCM0U5RENGRDEzMjM5RTMxOTJCNUI0MkExQzZBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/h8lGDCEM/ldepId15bWiLUMT eQqOj6WEAxsKQNYEeHUCeRfLnGLm1QnE/1N1bCMfy+sElx1j0ET/DtglZ8hM1A7g 2dV4j34vtZLNL4clzD31xdFAT790hOezr5jknAoUjjVyPUi1WiVgsOpsjkWjk/QW H25saI06Z0uTnyErY7P3gTFCOB+U8ULAgPEYjaorllAa5lK+EQh6a84mL+FG6GYO /so6wfK8KdIh50aFp/5c4bPDiXR5xJyK9PqEi89ri1SBIAZ8SREN23Q81AzranQz HRAR9k6sTThLYgvpG3pXxeP9VPtR853EFr2MzkePK7gA4GIuqmYEM60k9s9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe9/6J8uz6dz9EyOeMZK1tCocan8wHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT+RUYE65Lj+p5Ur2DQlkQ8y0Fg8e3t4Y0z KT+lvYzTW/4Wc1KdPapucYEQVdEbid+yJm6ymccaPRBFufrxE5JzDQIbrpjKsHuM o/6NCSq9UYxlrO7fElbRh8JXQc5nX2or93I682TG+CNSGyIK8JCqhZP1RqItvuKO gG4TFpiqozQfgk/MNMIGi3Im4Io6sg5Not2HiluOHekNRerKhagAsMhTpKJLPKLj I8U2WM/PZ3b8PRZuKrMwYW6YyZE0O4XJI8zaRe855dQ/02fPNg8/ouojHnpQ3eEB kJ2IgKl3OoXwa/TKjvUKhzff+6Ij8Q7v9CFl9hHhLz59bNoFPkg= -----END CERTIFICATE-----Generated at Thu Aug 7 11:12:46 2025 by rpki-client