$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: o6MBS2zd0PbIJY/QqJs9JJjGfVi5UusE4TwbpAGG/nQ= Subject key identifier: 78:31:F7:3B:38:1C:82:E4:8F:2F:48:0C:1F:AC:1C:0A:0B:72:83:8E Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 5600477D73C438215488DDDACC1498496FD2C73A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 0213 Signing time: Mon 21 Jul 2025 18:11:13 +0000 Manifest this update: Mon 21 Jul 2025 18:06:13 +0000 Manifest next update: Thu 24 Jul 2025 22:32:13 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: VU8D+DlzgJdJs+plNuHzVb1XRYb321d2WKIgKOm/A90=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:00:47:7d:73:c4:38:21:54:88:dd:da:cc:14:98:49:6f:d2:c7:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Jul 21 18:06:13 2025 GMT Not After : Jul 24 22:32:13 2025 GMT Subject: CN=7831F73B381C82E48F2F480C1FAC1C0A0B72838E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:32:07:40:bb:66:43:b0:0e:80:c8:6d:fd: 39:5e:ab:8c:99:59:21:53:49:75:15:39:e1:2a:23: 1a:a9:1b:ac:89:78:b0:39:8f:00:bd:06:1e:1e:14: 84:2d:08:84:3f:5d:8b:06:1f:cf:6b:9b:75:09:d1: 83:d1:06:77:51:c6:bb:e0:55:7c:d6:4a:fb:c6:93: ad:9e:a0:7a:69:63:34:76:e9:d0:ad:8e:46:b4:0e: 23:2c:30:17:e9:c3:20:ce:2a:5e:05:ec:2b:e7:13: 4d:9d:94:ce:bc:88:dc:6b:e4:99:12:54:e2:e1:e0: 61:45:b6:6d:5b:99:d9:b2:c6:7e:45:32:56:b0:2b: 1b:a9:34:ea:8c:fe:1d:22:83:a9:90:8d:38:62:73: 1e:9c:c0:a6:fd:34:22:ab:c1:aa:92:69:5a:f3:9e: 49:58:98:bd:6a:dd:35:fe:7c:54:2c:a9:ad:c4:d3: f3:26:10:c1:4a:69:d8:d6:ba:5e:05:4b:1f:d4:4b: 4d:83:33:4f:05:30:5e:ef:4d:8b:fe:bf:2f:bb:43: 75:29:b2:4f:0e:f3:d3:14:51:5a:9a:ea:e8:f7:35: 48:be:a4:0b:19:0b:14:35:12:3b:82:24:be:0f:56: 86:c1:4c:cf:ba:1e:ac:77:de:93:b0:d9:aa:f2:5e: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:31:F7:3B:38:1C:82:E4:8F:2F:48:0C:1F:AC:1C:0A:0B:72:83:8E X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:02:6c:0d:fc:49:1d:60:bd:7f:1d:e8:67:17:06:0d:07:2a: 72:0b:6d:d6:28:fd:d4:3b:b7:45:50:80:89:01:5f:db:e7:87: 3b:e3:98:7e:8f:27:d1:43:29:22:7b:a4:cd:d1:89:48:23:0f: 56:63:bb:cc:75:53:94:14:56:3b:e4:d4:19:77:09:ad:9a:d4: de:40:44:52:68:a0:0c:bf:af:bb:8f:6d:29:4c:5b:bc:5b:12: 78:08:86:0a:fd:39:bb:d1:b0:18:59:f0:1e:e6:f4:1c:8d:44: c7:03:ff:25:46:dd:ed:85:14:8c:1c:13:92:c2:0a:36:14:87: bd:7e:5d:18:57:af:9e:6c:7d:61:f2:66:e1:8d:58:d8:38:bb: 94:2a:b6:67:94:25:78:93:dd:b0:28:d0:1a:df:17:d2:b5:a3: 9e:5d:fe:e8:aa:f0:bf:ee:99:db:7c:27:0c:ff:2e:a8:e7:81: 0d:ed:4d:2b:66:cf:1b:1f:7d:ef:94:89:0f:93:05:7e:bb:c6: 4e:92:51:71:fa:f2:c6:df:b8:d2:c7:48:b0:4e:fb:fa:cd:12: ca:d2:5b:b4:75:91:7c:c5:53:c1:33:e9:34:a2:d8:85:cf:40: a4:7a:17:a0:2e:7d:37:42:ce:3b:b6:b1:fb:b1:c9:af:a2:cc: 90:b4:18:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgBHfXPEOCFUiN3azBSYSW/SxzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA3MjExODA2MTNaFw0yNTA3MjQyMjMyMTNaMDMxMTAvBgNV BAMTKDc4MzFGNzNCMzgxQzgyRTQ4RjJGNDgwQzFGQUMxQzBBMEI3MjgzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAiDIHQLtmQ7AOgMht/Tleq4yZ WSFTSXUVOeEqIxqpG6yJeLA5jwC9Bh4eFIQtCIQ/XYsGH89rm3UJ0YPRBndRxrvg VXzWSvvGk62eoHppYzR26dCtjka0DiMsMBfpwyDOKl4F7CvnE02dlM68iNxr5JkS VOLh4GFFtm1bmdmyxn5FMlawKxupNOqM/h0ig6mQjThicx6cwKb9NCKrwaqSaVrz nklYmL1q3TX+fFQsqa3E0/MmEMFKadjWul4FSx/US02DM08FMF7vTYv+vy+7Q3Up sk8O89MUUVqa6uj3NUi+pAsZCxQ1EjuCJL4PVobBTM+6Hqx33pOw2aryXl2HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDH3OzgcguSPL0gMH6wcCgtyg44wHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoCbA38SR1gvX8d6GcXBg0HKnILbdYo/dQ7 t0VQgIkBX9vnhzvjmH6PJ9FDKSJ7pM3RiUgjD1Zju8x1U5QUVjvk1Bl3Ca2a1N5A RFJooAy/r7uPbSlMW7xbEngIhgr9ObvRsBhZ8B7m9ByNRMcD/yVG3e2FFIwcE5LC CjYUh71+XRhXr55sfWHyZuGNWNg4u5QqtmeUJXiT3bAo0BrfF9K1o55d/uiq8L/u mdt8Jwz/LqjngQ3tTStmzxsffe+UiQ+TBX67xk6SUXH68sbfuNLHSLBO+/rNEsrS W7R1kXzFU8Ez6TSi2IXPQKR6F6AufTdCzju2sfuxya+izJC0GHQ= -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:15 2025 by rpki-client