$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: ALCfT1EJzbS4JQA7MfiXg7GLlmkCQzFtgRYB5PmCPPI= Subject key identifier: D9:C5:0F:BD:9C:FC:47:5C:BD:69:E5:3B:A1:74:C3:77:E1:5E:75:4A Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 6C65478BE467B636D5522B5D3EF648AD4C290606 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 0214 Signing time: Wed 23 Jul 2025 22:41:14 +0000 Manifest this update: Wed 23 Jul 2025 22:36:14 +0000 Manifest next update: Sat 26 Jul 2025 23:58:14 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: Ik45hK9BViRHlLI04rAqMDnUHgxUq87rSfX4fbUrkog=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 23:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:65:47:8b:e4:67:b6:36:d5:52:2b:5d:3e:f6:48:ad:4c:29:06:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Jul 23 22:36:14 2025 GMT Not After : Jul 26 23:58:14 2025 GMT Subject: CN=D9C50FBD9CFC475CBD69E53BA174C377E15E754A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:59:a9:a2:83:3c:84:b2:21:f0:2f:5e:f8:e6: eb:4c:bb:c3:7a:ec:7c:68:13:72:18:c6:2a:be:22: 2e:f8:c4:f2:1c:e1:3f:98:63:13:0b:18:91:33:6f: 50:7a:ef:b1:bb:d7:b4:c8:59:78:0e:75:e4:5d:4a: bb:5b:28:51:72:bf:07:cc:fa:7d:5e:a8:a4:91:1b: 27:9c:61:25:cb:c4:76:9e:4c:61:b3:4e:d1:ae:02: f3:90:7e:6f:c8:75:48:5e:15:7e:92:48:f2:98:70: 75:68:4b:aa:72:8a:33:2a:50:4c:dd:37:28:91:fa: 2f:c9:53:e0:21:18:51:5b:af:ee:b4:2a:16:30:64: 8c:05:03:85:0a:c3:94:15:2f:d8:c6:28:b2:ca:78: 07:24:cd:b9:f1:2a:f3:c9:06:d4:70:37:98:9e:d9: 3a:91:fb:be:9d:fe:af:bf:d1:a6:d3:31:d9:d8:9a: 1e:47:17:de:f5:d2:a7:60:36:c8:c5:de:dd:64:b1: e1:5d:c2:b4:6e:8d:c6:23:7c:9f:35:c7:4e:13:00: 39:4e:a7:c7:74:de:72:d2:ce:f6:87:14:97:90:7e: b7:f4:d1:94:89:45:99:a2:a0:37:59:57:d1:9d:df: 47:4c:14:24:2d:19:6a:dc:3b:f3:2f:08:65:02:48: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C5:0F:BD:9C:FC:47:5C:BD:69:E5:3B:A1:74:C3:77:E1:5E:75:4A X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:44:f5:f7:a3:b7:30:3e:91:30:00:69:f6:89:6f:48:8b:1a: 90:25:19:75:a6:e4:f8:66:3d:fb:33:7c:7b:25:3f:90:a9:e2: 62:c5:2a:9c:c9:9b:0e:46:1c:cb:2e:41:8b:21:ff:28:49:22: 34:78:ca:d5:f6:55:44:21:14:78:13:e8:1e:a9:3d:66:7a:52: 41:a7:87:80:5d:12:e3:30:e3:dc:78:e3:0c:a2:1f:da:03:44: 51:a0:f1:77:ea:8b:84:6b:6f:bc:f6:18:d2:5a:5a:a8:a3:0e: af:4c:72:0e:9a:01:ee:f1:c8:da:42:49:6b:69:80:bc:fd:4f: 15:a8:9b:97:4c:28:0a:e5:2a:9f:dc:04:ec:43:6d:e0:a1:8d: a4:44:ad:a8:17:36:05:0a:d4:80:10:8c:60:b8:7e:e6:e6:ac: 2d:b4:74:4c:68:ec:7f:55:21:8d:4e:54:96:21:c9:d7:4c:01: e9:fe:09:04:6d:48:6b:9f:75:c2:05:96:ee:31:b2:3f:54:a6: 29:04:f7:ac:9f:3f:0f:25:72:7e:e9:56:ad:e7:b2:0c:ff:a9: a3:4b:b7:d4:8a:68:b8:1c:3f:5e:42:f6:e7:bb:51:0f:29:05: 5b:81:15:76:81:ad:62:7a:83:61:60:62:a9:3d:81:ae:b4:77: f7:82:b1:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGVHi+RntjbVUitdPvZIrUwpBgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA3MjMyMjM2MTRaFw0yNTA3MjYyMzU4MTRaMDMxMTAvBgNV BAMTKEQ5QzUwRkJEOUNGQzQ3NUNCRDY5RTUzQkExNzRDMzc3RTE1RTc1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcWamigzyEsiHwL1745utMu8N6 7HxoE3IYxiq+Ii74xPIc4T+YYxMLGJEzb1B677G717TIWXgOdeRdSrtbKFFyvwfM +n1eqKSRGyecYSXLxHaeTGGzTtGuAvOQfm/IdUheFX6SSPKYcHVoS6pyijMqUEzd NyiR+i/JU+AhGFFbr+60KhYwZIwFA4UKw5QVL9jGKLLKeAckzbnxKvPJBtRwN5ie 2TqR+76d/q+/0abTMdnYmh5HF9710qdgNsjF3t1kseFdwrRujcYjfJ81x04TADlO p8d03nLSzvaHFJeQfrf00ZSJRZmioDdZV9Gd30dMFCQtGWrcO/MvCGUCSDWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2cUPvZz8R1y9aeU7oXTDd+FedUowHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFE9fejtzA+kTAAafaJb0iLGpAlGXWm5Phm PfszfHslP5Cp4mLFKpzJmw5GHMsuQYsh/yhJIjR4ytX2VUQhFHgT6B6pPWZ6UkGn h4BdEuMw49x44wyiH9oDRFGg8Xfqi4Rrb7z2GNJaWqijDq9Mcg6aAe7xyNpCSWtp gLz9TxWom5dMKArlKp/cBOxDbeChjaREragXNgUK1IAQjGC4fubmrC20dExo7H9V IY1OVJYhyddMAen+CQRtSGufdcIFlu4xsj9UpikE96yfPw8lcn7pVq3nsgz/qaNL t9SKaLgcP15C9ue7UQ8pBVuBFXaBrWJ6g2FgYqk9ga60d/eCsRc= -----END CERTIFICATE-----Generated at Fri Jul 25 04:40:30 2025 by rpki-client