$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft (raw, json) Hash identifier: jbuhqb9xa8PkBoKgHcEtVYsGxcizDrnMN0c7ZQvrhp0= Subject key identifier: 95:01:DB:86:1B:FD:BC:6C:B3:00:D2:29:98:A0:BF:D6:3C:65:F8:34 Authority key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Certificate issuer: /CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Certificate serial: 34987F7B5A47413E447A84D7E67B29348D903EC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft Manifest number: 99 Signing time: Sun 27 Apr 2025 03:21:22 +0000 Manifest this update: Sun 27 Apr 2025 03:16:22 +0000 Manifest next update: Wed 30 Apr 2025 13:15:22 +0000 Files and hashes: 1: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl (hash: cOM65ppJtQiN44TL4+gUOaTQItKamBF2au3Y/W5bQr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 13:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:98:7f:7b:5a:47:41:3e:44:7a:84:d7:e6:7b:29:34:8d:90:3e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Validity Not Before: Apr 27 03:16:22 2025 GMT Not After : Apr 30 13:15:22 2025 GMT Subject: CN=9501DB861BFDBC6CB300D22998A0BFD63C65F834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5c:46:fc:e2:c4:9c:f9:97:6d:7d:0a:f0:02: 23:4b:91:65:71:71:f5:a8:ec:62:b1:fe:ad:b7:c4: 55:d0:4c:96:5c:9f:36:09:c5:d3:fe:a7:5f:0d:fa: 20:44:dd:e0:2e:1b:0d:a6:92:63:62:ee:a7:c1:54: 0c:fe:04:39:83:1f:05:6c:21:d9:9f:2d:ce:37:9a: 08:0f:e1:40:76:18:8e:6d:ef:aa:7d:30:d2:40:ba: 3d:a9:a4:48:6b:80:b4:af:72:78:60:e7:40:62:47: 94:6b:82:c9:31:db:1d:2c:d6:1c:ba:19:09:45:5b: 09:db:23:78:13:1a:80:c5:64:ab:4d:42:40:1b:1e: d6:85:e6:e3:7d:8e:4b:00:ca:ce:6f:78:c2:51:00: cb:00:f8:f1:bc:a1:04:dc:90:00:bd:81:ef:0f:62: 28:ac:55:45:74:15:1e:1d:17:8a:51:65:ea:15:aa: f6:86:4e:1b:53:b0:aa:fb:c3:db:f7:cb:fa:6f:bc: 2e:30:fa:84:2f:ae:d7:22:85:1c:82:4e:56:4c:0d: 7d:83:13:f3:04:c8:17:c3:a8:c5:2d:11:e5:2e:81: 82:c4:cd:e2:6b:36:a7:e5:68:b9:bd:bc:8b:c1:6e: b7:ba:87:b9:a1:75:d9:9c:cf:28:ea:1f:be:77:55: 8e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:01:DB:86:1B:FD:BC:6C:B3:00:D2:29:98:A0:BF:D6:3C:65:F8:34 X509v3 Authority Key Identifier: keyid:17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:01:25:41:73:22:4e:86:12:3d:e4:05:ca:a9:66:74:95:72: 16:07:16:ef:2e:1e:2c:6a:af:5b:18:df:ba:62:f1:9d:d0:ed: 97:b8:3c:49:79:79:11:c2:93:b4:07:83:e3:2e:00:ac:0b:6a: ba:74:bb:c4:ec:5c:c8:89:95:ec:19:3d:d2:5e:1d:06:a6:36: 55:47:9b:df:fa:d3:6c:f9:18:95:ab:84:ae:62:1e:b0:3c:db: e2:b0:e9:c1:ad:01:b4:38:28:88:12:1a:6d:0b:55:c0:43:44: ed:5d:c9:91:0e:43:36:69:ba:69:d7:87:09:e1:39:1f:ea:9d: c5:10:43:17:0f:37:82:e3:05:28:89:83:0c:6a:c3:6d:1f:ca: da:7a:54:34:44:7b:41:f2:7a:ef:7f:91:fa:a9:02:32:e6:97: d6:e1:7b:b0:c1:e5:d1:c1:0f:89:3a:6e:eb:9f:02:7f:fe:85: 2c:3d:39:13:87:e2:f1:94:d7:ac:8c:99:f0:d4:55:97:bb:2d: f5:2d:fb:90:6d:d5:9c:07:2c:3c:d2:92:10:25:6f:9d:4b:6d: 1d:26:c1:ab:aa:b8:2c:41:ac:a7:10:e8:c3:15:aa:0a:a2:b4: 12:66:fe:22:a0:ae:54:0e:5b:3e:6b:89:64:b5:8a:09:b7:72: 5e:ca:66:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNJh/e1pHQT5EeoTX5nspNI2QPsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJD OTI3QzNGNTAeFw0yNTA0MjcwMzE2MjJaFw0yNTA0MzAxMzE1MjJaMDMxMTAvBgNV BAMTKDk1MDFEQjg2MUJGREJDNkNCMzAwRDIyOTk4QTBCRkQ2M0M2NUY4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XEb84sSc+ZdtfQrwAiNLkWVx cfWo7GKx/q23xFXQTJZcnzYJxdP+p18N+iBE3eAuGw2mkmNi7qfBVAz+BDmDHwVs IdmfLc43mggP4UB2GI5t76p9MNJAuj2ppEhrgLSvcnhg50BiR5Rrgskx2x0s1hy6 GQlFWwnbI3gTGoDFZKtNQkAbHtaF5uN9jksAys5veMJRAMsA+PG8oQTckAC9ge8P YiisVUV0FR4dF4pRZeoVqvaGThtTsKr7w9v3y/pvvC4w+oQvrtcihRyCTlZMDX2D E/MEyBfDqMUtEeUugYLEzeJrNqflaLm9vIvBbre6h7mhddmczyjqH753VY7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlQHbhhv9vGyzANIpmKC/1jxl+DQwHwYDVR0j BBgwFoAUFy7ya0YzLIQtbdViyCyM28knw/UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMC8xNzJFRjI2QjQ2 MzMyQzg0MkQ2REQ1NjJDODJDOENEQkM5MjdDM0Y1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhDREJDOTI3 QzNGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzAvMTcyRUYyNkI0NjMzMkM4NDJENkRENTYyQzgyQzhD REJDOTI3QzNGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0BJUFzIk6GEj3kBcqpZnSVchYHFu8uHixq r1sY37pi8Z3Q7Ze4PEl5eRHCk7QHg+MuAKwLarp0u8TsXMiJlewZPdJeHQamNlVH m9/602z5GJWrhK5iHrA82+Kw6cGtAbQ4KIgSGm0LVcBDRO1dyZEOQzZpumnXhwnh OR/qncUQQxcPN4LjBSiJgwxqw20fytp6VDREe0Hyeu9/kfqpAjLml9bhe7DB5dHB D4k6buufAn/+hSw9OROH4vGU16yMmfDUVZe7LfUt+5Bt1ZwHLDzSkhAlb51LbR0m wauquCxBrKcQ6MMVqgqitBJm/iKgrlQOWz5riWS1igm3cl7KZpg= -----END CERTIFICATE-----Generated at Tue Apr 29 09:28:26 2025 by rpki-client