$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: gCItJF6K3caEsjddZYKJXcuip9q8SZrzIYaOUIhvT68= Subject key identifier: FA:FA:CE:82:DA:BB:1E:1D:A0:D3:32:7D:3A:43:4C:A8:6B:E5:B3:07 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 178AEBE66C1EB7C4BD86F6553F9AAAD3EE4956BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 01FB Signing time: Mon 02 Jun 2025 12:01:13 +0000 Manifest this update: Mon 02 Jun 2025 11:56:13 +0000 Manifest next update: Thu 05 Jun 2025 21:23:13 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: bK6TGPEg0siYWLdPGf0aasilXm7/CgQBMQewSls91AU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8a:eb:e6:6c:1e:b7:c4:bd:86:f6:55:3f:9a:aa:d3:ee:49:56:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Jun 2 11:56:13 2025 GMT Not After : Jun 5 21:23:13 2025 GMT Subject: CN=FAFACE82DABB1E1DA0D3327D3A434CA86BE5B307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:16:df:2c:39:57:ce:db:32:34:0a:15:94: 51:00:3f:0a:f3:c8:c0:38:59:dd:5c:6f:46:64:6e: 6e:ba:b2:d0:a9:20:4f:f2:d8:e9:1e:ba:da:05:ca: a5:af:c5:b6:52:83:a0:19:57:03:20:7e:bd:e3:9d: 2b:00:20:eb:d0:07:9d:90:8a:1a:89:e7:fa:cb:79: c4:a6:51:9b:40:5b:79:bc:36:c8:27:34:9a:12:e0: cf:d3:52:6a:cb:53:b9:44:bb:db:31:3a:5b:92:a5: 8f:ab:34:09:7d:08:88:bc:34:65:2f:b1:43:0b:1f: e9:58:47:b9:c5:fc:ce:a7:40:e3:a8:ce:5e:d1:9b: cf:7d:c3:1c:f6:80:39:e5:10:e8:f9:60:d6:be:8a: bf:3b:15:b9:c0:89:8c:fb:f3:db:35:7c:e1:53:e5: 16:b0:16:3b:22:e0:fb:8d:d4:05:60:46:8e:98:04: 36:3b:64:b0:32:ca:18:ed:d3:30:8e:8c:a4:a4:30: 11:b0:57:46:8a:bd:dc:ef:16:5f:20:0b:a2:eb:9f: 03:5a:a9:eb:d9:65:84:c9:f4:2a:8b:4f:e5:5a:c9: b5:af:b4:3e:a7:86:e7:3b:51:f7:af:bc:0b:8d:ac: 1c:d4:e2:a1:97:56:ec:69:86:0d:ab:f1:d9:14:51: 1e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FA:CE:82:DA:BB:1E:1D:A0:D3:32:7D:3A:43:4C:A8:6B:E5:B3:07 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:10:55:59:27:13:df:bb:29:a8:82:e0:84:a9:a1:5c:ed:74: ea:8f:8f:d1:0b:d1:2b:80:f6:d3:1c:06:e6:2d:88:67:90:05: 6a:ad:77:3d:30:50:6f:54:24:54:e2:f7:11:f3:90:34:f3:31: f8:30:6e:af:e7:85:db:34:85:94:bb:fd:4c:cb:c2:93:1d:6c: 59:29:58:ea:53:44:48:c2:42:a9:94:2d:99:5f:1f:1c:02:d2: 81:ca:56:f7:bb:90:13:fc:a5:05:59:e2:0f:b6:9f:60:4e:09: 9e:7d:1a:71:9f:67:1f:d6:89:3e:0a:13:01:ff:5d:b6:13:2a: 5b:65:9a:5c:83:db:ee:c3:06:cd:9c:fa:2d:65:37:8c:ce:00: 19:b5:f1:8d:25:fb:06:a7:ab:2a:02:e2:15:7e:db:3a:7a:7e: fc:21:f6:bc:d7:f9:d0:ba:48:65:c6:22:a7:bd:44:d5:92:46: a4:3b:9b:98:3d:0c:16:93:c2:92:11:f4:ff:94:9a:b7:cd:03: de:4f:30:78:2f:62:d8:52:c6:cc:ba:48:e8:97:18:e3:ec:61: 24:47:39:ae:bf:c1:a5:1c:19:83:01:e9:78:4a:a2:d3:85:9d: d5:04:bd:51:53:2a:25:a9:fd:ed:de:4b:d1:c7:ea:50:e5:e2: c0:41:70:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4rr5mwet8S9hvZVP5qq0+5JVrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA2MDIxMTU2MTNaFw0yNTA2MDUyMTIzMTNaMDMxMTAvBgNV BAMTKEZBRkFDRTgyREFCQjFFMURBMEQzMzI3RDNBNDM0Q0E4NkJFNUIzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9hbfLDlXztsyNAoVlFEAPwrz yMA4Wd1cb0Zkbm66stCpIE/y2OkeutoFyqWvxbZSg6AZVwMgfr3jnSsAIOvQB52Q ihqJ5/rLecSmUZtAW3m8NsgnNJoS4M/TUmrLU7lEu9sxOluSpY+rNAl9CIi8NGUv sUMLH+lYR7nF/M6nQOOozl7Rm899wxz2gDnlEOj5YNa+ir87FbnAiYz789s1fOFT 5RawFjsi4PuN1AVgRo6YBDY7ZLAyyhjt0zCOjKSkMBGwV0aKvdzvFl8gC6LrnwNa qevZZYTJ9CqLT+VaybWvtD6nhuc7UfevvAuNrBzU4qGXVuxphg2r8dkUUR67AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+vrOgtq7Hh2g0zJ9OkNMqGvlswcwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8QVVknE9+7KaiC4ISpoVztdOqPj9EL0SuA 9tMcBuYtiGeQBWqtdz0wUG9UJFTi9xHzkDTzMfgwbq/nhds0hZS7/UzLwpMdbFkp WOpTREjCQqmULZlfHxwC0oHKVve7kBP8pQVZ4g+2n2BOCZ59GnGfZx/WiT4KEwH/ XbYTKltlmlyD2+7DBs2c+i1lN4zOABm18Y0l+wanqyoC4hV+2zp6fvwh9rzX+dC6 SGXGIqe9RNWSRqQ7m5g9DBaTwpIR9P+UmrfNA95PMHgvYthSxsy6SOiXGOPsYSRH Oa6/waUcGYMB6XhKotOFndUEvVFTKiWp/e3eS9HH6lDl4sBBcPY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:41 2025 by rpki-client