$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: p1JbiwuWUYT1Iyf4NxwN4GYaKcthB41+DY/IZfPQZ3g= Subject key identifier: 61:17:CB:8A:DF:28:04:4E:92:66:97:DB:4F:BE:FA:35:02:C9:08:F5 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 0EEE49B813180D16BE56415C5215C80103E564C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 0221 Signing time: Thu 21 Aug 2025 14:51:15 +0000 Manifest this update: Thu 21 Aug 2025 14:46:15 +0000 Manifest next update: Sun 24 Aug 2025 14:54:15 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: qQ43iglwlrOTQuUTv1JZxPyLRp0Sx1dl253OhiEv8B8=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ee:49:b8:13:18:0d:16:be:56:41:5c:52:15:c8:01:03:e5:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Aug 21 14:46:15 2025 GMT Not After : Aug 24 14:54:15 2025 GMT Subject: CN=6117CB8ADF28044E926697DB4FBEFA3502C908F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ec:e6:b8:0c:8a:fb:0c:b0:5e:28:40:7d:93: a9:06:1f:6b:21:af:7c:29:f0:7b:98:f5:8d:7b:53: 34:55:24:c9:b2:7a:0a:f7:35:50:83:b1:bd:54:7d: f8:30:80:73:f3:f5:b5:ef:e4:53:31:e1:c1:dd:19: 6e:92:a1:90:72:df:4b:c8:07:dc:10:68:6a:46:ec: 13:23:bc:71:d1:46:72:43:65:df:44:8f:24:82:b5: 8e:59:c1:8e:83:da:69:a9:d3:9a:4e:d4:6c:b9:2b: 5b:70:a3:61:ef:05:50:80:fe:d3:26:c9:5c:5e:2f: e2:e9:4c:0e:f3:1a:a5:bd:5a:55:f8:28:fb:02:a8: f1:36:d0:9d:bd:d6:e5:7f:d8:9c:0a:64:29:78:0d: f1:00:62:3a:08:f6:88:31:5b:32:c1:62:ec:8c:ab: d5:d7:12:fa:a8:c5:66:76:c6:40:e6:51:ab:d0:a8: d5:df:fb:76:e6:fe:f6:b9:6d:78:a4:0b:b0:38:ee: 7d:28:3a:70:5f:2b:25:53:01:c5:bc:50:16:65:16: a9:b1:4f:f9:d2:d5:e9:90:22:be:3a:5c:90:19:06: 42:fa:e8:bc:72:fc:47:1f:05:01:08:19:7a:c4:a5: 4b:6c:28:5d:9b:da:66:0a:3c:8b:c1:33:12:3e:cc: 3a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:17:CB:8A:DF:28:04:4E:92:66:97:DB:4F:BE:FA:35:02:C9:08:F5 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:72:c8:70:3e:7d:6e:7d:17:8e:51:dc:40:ce:d5:32:09:1b: a9:5f:13:3c:c3:a2:e4:2d:86:e7:38:62:df:60:cc:7f:00:71: b5:4e:af:4c:2f:ef:82:56:e7:85:be:2f:98:0e:8b:3b:13:f8: d0:ac:65:ec:58:1c:a6:47:2e:eb:1b:db:4a:28:54:8a:d6:d0: 7f:44:42:01:65:0b:43:69:02:82:26:8a:c3:eb:26:64:cc:21: ea:c6:fa:ff:2b:42:e3:19:e0:01:2e:68:e8:08:86:13:f1:86: 5a:3f:8d:36:77:1b:0b:73:90:f2:de:60:f4:f0:ab:e5:e2:19: 9d:19:04:3c:2c:57:e9:a3:c6:2b:7f:a0:7e:9e:86:eb:b6:75: 24:a2:5c:5c:93:a9:43:55:0f:38:f3:3a:3b:57:2e:29:9a:53: 12:b0:ff:34:3c:57:e9:cb:a1:0b:45:1b:5c:67:40:58:44:85: 75:14:a1:b2:02:ed:e6:30:5b:c7:3e:c9:2c:30:cf:3b:0a:d2: 81:a2:b7:4e:01:21:2e:3d:e6:58:de:28:3d:91:ae:ba:4c:5c: 39:3f:7e:8c:b5:66:a5:02:3f:d4:43:2d:25:55:ea:4f:ef:eb: 70:a0:b0:c1:5c:f0:77:cd:df:cf:22:f0:ba:10:65:80:4a:6b: 0d:07:00:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDu5JuBMYDRa+VkFcUhXIAQPlZMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA4MjExNDQ2MTVaFw0yNTA4MjQxNDU0MTVaMDMxMTAvBgNV BAMTKDYxMTdDQjhBREYyODA0NEU5MjY2OTdEQjRGQkVGQTM1MDJDOTA4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC27Oa4DIr7DLBeKEB9k6kGH2sh r3wp8HuY9Y17UzRVJMmyegr3NVCDsb1UffgwgHPz9bXv5FMx4cHdGW6SoZBy30vI B9wQaGpG7BMjvHHRRnJDZd9EjySCtY5ZwY6D2mmp05pO1Gy5K1two2HvBVCA/tMm yVxeL+LpTA7zGqW9WlX4KPsCqPE20J291uV/2JwKZCl4DfEAYjoI9ogxWzLBYuyM q9XXEvqoxWZ2xkDmUavQqNXf+3bm/va5bXikC7A47n0oOnBfKyVTAcW8UBZlFqmx T/nS1emQIr46XJAZBkL66Lxy/EcfBQEIGXrEpUtsKF2b2mYKPIvBMxI+zDrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYRfLit8oBE6SZpfbT776NQLJCPUwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJyyHA+fW59F45R3EDO1TIJG6lfEzzDouQt huc4Yt9gzH8AcbVOr0wv74JW54W+L5gOizsT+NCsZexYHKZHLusb20ooVIrW0H9E QgFlC0NpAoImisPrJmTMIerG+v8rQuMZ4AEuaOgIhhPxhlo/jTZ3GwtzkPLeYPTw q+XiGZ0ZBDwsV+mjxit/oH6ehuu2dSSiXFyTqUNVDzjzOjtXLimaUxKw/zQ8V+nL oQtFG1xnQFhEhXUUobIC7eYwW8c+ySwwzzsK0oGit04BIS495ljeKD2RrrpMXDk/ foy1ZqUCP9RDLSVV6k/v63CgsMFc8HfN388i8LoQZYBKaw0HAEY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:22 2025 by rpki-client