$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: aJfcqspXk1/B6SmYSlBm68GqR06aFX76SUlz9fzrbqk= Subject key identifier: DF:82:B8:50:76:87:96:82:7A:92:86:27:35:FB:1B:0A:0C:F4:D6:AB Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 6483100BB88289625DA41C7AB04E1D8159DD31AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 01E0 Signing time: Fri 04 Apr 2025 03:31:14 +0000 Manifest this update: Fri 04 Apr 2025 03:26:14 +0000 Manifest next update: Mon 07 Apr 2025 11:57:14 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: fz1LyF0zG+DePkhb0N+/7AjeSK7Pf4/DCrqQuR9njeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:83:10:0b:b8:82:89:62:5d:a4:1c:7a:b0:4e:1d:81:59:dd:31:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Apr 4 03:26:14 2025 GMT Not After : Apr 7 11:57:14 2025 GMT Subject: CN=DF82B850768796827A92862735FB1B0A0CF4D6AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:fd:46:83:a0:4b:bd:79:d5:21:a8:16:5d: d2:de:af:19:da:d2:40:87:04:92:44:c8:49:b3:3b: 31:af:05:bb:02:63:41:ce:d5:ad:ce:48:83:83:1e: 26:e5:f4:60:d9:3e:94:2a:53:ca:0c:1c:e0:24:b5: 28:8a:03:f4:a3:da:d1:82:1d:1a:7d:17:73:4c:d1: 6b:3a:a7:5c:7e:43:f2:39:bb:3b:c4:b6:fd:89:c1: 5e:f1:07:66:a7:58:56:37:67:54:e8:5e:82:e5:b7: 12:ec:03:49:73:bb:b6:7b:3d:e8:2a:28:4b:44:24: e0:3a:0b:38:21:db:34:1f:cc:66:fd:05:6f:59:83: db:72:05:bd:2e:0f:3f:47:a5:32:fb:80:d9:dc:93: cb:74:aa:53:8e:88:60:1c:99:0a:0a:d3:45:7d:67: 5d:36:67:d6:ca:d8:f0:f5:87:a4:17:1b:7b:1a:10: 8e:97:89:13:48:a4:d1:61:6c:25:64:8a:23:97:21: 60:23:dd:bd:14:c0:d2:48:3f:12:37:74:87:6c:56: ad:e5:14:33:7a:0e:11:32:98:ac:d8:87:d7:3b:a4: f1:2c:0a:3a:26:09:1c:b4:6b:03:36:5f:3c:95:b3: b9:f3:82:5f:77:5a:6e:29:5e:ec:9c:4d:78:b2:f3: 68:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:82:B8:50:76:87:96:82:7A:92:86:27:35:FB:1B:0A:0C:F4:D6:AB X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:43:b0:64:e8:a6:8e:f4:c1:47:b8:28:37:17:e9:11:56:93: 09:97:49:6d:0f:5b:75:77:42:e6:5a:6e:a4:b0:df:e0:37:1c: 93:81:98:d2:05:82:06:da:0e:e4:92:84:0d:b6:b3:16:61:13: 36:23:63:32:f3:0c:28:4f:3d:df:18:f0:cc:37:5c:57:6b:a4: 84:dd:60:9f:94:8a:bc:15:8d:5c:0c:e8:a1:4f:af:e3:88:6c: 0d:0d:46:e6:fe:4d:b7:bb:51:cf:0d:da:39:cf:19:a7:0c:27: fc:64:b0:79:f8:21:f1:65:a8:fc:08:c9:4f:80:a4:06:5b:bb: 3a:28:a6:ff:a9:03:88:bf:d5:1f:33:cd:dd:51:54:b2:32:c8: fb:4f:f1:b7:07:cb:6e:a1:38:c0:17:99:80:5a:2e:e8:c8:4e: 22:6c:2a:b2:1f:e2:52:e5:93:74:9c:bc:cf:2d:6d:e1:2c:85: 6e:10:a1:e2:32:22:2e:89:47:c2:50:cf:4b:e7:76:23:67:a5: e2:25:47:8c:9d:82:b9:4d:6a:2b:3c:c9:1e:4e:b5:f1:31:be: 2c:43:12:02:d5:ed:f4:9c:9c:87:3d:36:d3:ef:f2:e7:a1:f7: 7b:0f:01:9e:44:a3:c6:ac:18:5a:d2:82:cf:19:90:03:76:54: c4:e1:bc:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIMQC7iCiWJdpBx6sE4dgVndMaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA0MDQwMzI2MTRaFw0yNTA0MDcxMTU3MTRaMDMxMTAvBgNV BAMTKERGODJCODUwNzY4Nzk2ODI3QTkyODYyNzM1RkIxQjBBMENGNEQ2QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbv1Gg6BLvXnVIagWXdLerxna 0kCHBJJEyEmzOzGvBbsCY0HO1a3OSIODHibl9GDZPpQqU8oMHOAktSiKA/Sj2tGC HRp9F3NM0Ws6p1x+Q/I5uzvEtv2JwV7xB2anWFY3Z1ToXoLltxLsA0lzu7Z7Pegq KEtEJOA6Czgh2zQfzGb9BW9Zg9tyBb0uDz9HpTL7gNnck8t0qlOOiGAcmQoK00V9 Z102Z9bK2PD1h6QXG3saEI6XiRNIpNFhbCVkiiOXIWAj3b0UwNJIPxI3dIdsVq3l FDN6DhEymKzYh9c7pPEsCjomCRy0awM2XzyVs7nzgl93Wm4pXuycTXiy82jbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU34K4UHaHloJ6koYnNfsbCgz01qswHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZDsGTopo70wUe4KDcX6RFWkwmXSW0PW3V3 QuZabqSw3+A3HJOBmNIFggbaDuSShA22sxZhEzYjYzLzDChPPd8Y8Mw3XFdrpITd YJ+UirwVjVwM6KFPr+OIbA0NRub+Tbe7Uc8N2jnPGacMJ/xksHn4IfFlqPwIyU+A pAZbuzoopv+pA4i/1R8zzd1RVLIyyPtP8bcHy26hOMAXmYBaLujITiJsKrIf4lLl k3ScvM8tbeEshW4QoeIyIi6JR8JQz0vndiNnpeIlR4ydgrlNais8yR5OtfExvixD EgLV7fScnIc9NtPv8ueh93sPAZ5Eo8asGFrSgs8ZkAN2VMThvKE= -----END CERTIFICATE-----Generated at Sun Apr 6 05:19:38 2025 by rpki-client