$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: NobCE9+jHaWJVU/XREqt4miywkHDtylLZ/EXwmET2Sc= Subject key identifier: 58:9B:FB:31:15:77:11:FC:D3:A2:6E:CC:9A:CE:69:7A:9B:40:E5:0F Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 1FBF591A88199146EF5A54BF55DFEF84B55CD872 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 01F0 Signing time: Fri 09 May 2025 04:01:16 +0000 Manifest this update: Fri 09 May 2025 03:56:16 +0000 Manifest next update: Mon 12 May 2025 12:03:16 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: ZPYESkPm4sRR0Sht8Frbnm/sAM2cyYSP0HupExvbFHc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 12:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bf:59:1a:88:19:91:46:ef:5a:54:bf:55:df:ef:84:b5:5c:d8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: May 9 03:56:16 2025 GMT Not After : May 12 12:03:16 2025 GMT Subject: CN=589BFB31157711FCD3A26ECC9ACE697A9B40E50F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:46:fb:d1:55:da:ae:8b:0a:c4:d4:c6:02: 15:57:b2:81:e8:d0:26:eb:2d:0a:03:52:4c:d7:2a: f3:cc:f7:d6:b6:10:5d:2a:cc:f9:9b:91:de:d5:04: 55:d6:b3:64:7a:be:f4:2d:fe:c0:83:f8:93:db:d7: 7a:c4:41:a1:b6:db:53:bc:a0:7f:59:92:90:ff:a6: 4c:3e:fb:b0:7c:3e:e0:69:d9:68:bc:9c:89:db:7e: 7f:e3:53:f6:a7:ef:95:15:6a:3f:81:bd:c0:86:8f: c9:ba:38:97:38:96:89:25:10:1e:63:09:af:bd:7e: 99:a6:9a:ae:65:52:8e:d3:28:25:a3:80:51:cc:a5: 0a:a2:7e:38:88:10:65:90:96:71:cb:b2:a8:70:8c: 5f:36:f5:f2:6a:a3:d8:76:5b:8c:fb:7c:b2:a2:92: bc:b3:69:1f:ef:02:e5:69:6e:49:82:8a:88:48:84: 20:5b:84:41:aa:cc:06:7a:bd:a5:8e:a2:14:e7:5a: fc:14:94:56:de:b1:40:ea:86:25:10:91:3d:27:f5: e1:c6:a4:9a:d6:b5:33:85:a6:7d:14:ad:23:37:6c: a8:40:92:4c:29:fc:7f:c5:a1:46:64:a1:84:44:a4: 95:fa:38:99:8f:50:70:66:74:ee:23:1c:3d:6f:7b: 4c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9B:FB:31:15:77:11:FC:D3:A2:6E:CC:9A:CE:69:7A:9B:40:E5:0F X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f1:97:cd:60:fc:9f:1f:09:71:62:e5:24:c4:69:c7:79:93: 68:52:c8:20:e8:f9:fb:a3:94:1d:45:27:06:17:35:06:37:ac: b4:f7:76:8e:d2:a5:62:b8:b2:e8:31:e8:cd:38:9a:98:32:f2: 61:cc:6f:c0:9f:2a:78:db:fb:df:a0:08:e8:87:b7:13:08:f1: 81:40:18:c7:b8:34:75:7c:16:2d:76:e1:71:96:a0:20:86:7f: 79:e5:4b:8b:a4:77:32:88:cd:1e:16:ab:31:c8:a0:25:b6:80: 87:b9:43:aa:f6:d3:ae:15:e7:04:b0:65:3c:09:79:24:4e:80: 29:73:82:22:53:2b:1f:b2:10:77:37:2b:a3:d3:d8:d7:a8:b5: 04:a1:c3:9f:98:30:0f:0a:e2:fa:a2:c9:80:5b:40:a9:32:eb: cc:9d:4a:e8:0f:10:09:88:08:7d:31:d4:95:cb:be:84:00:5a: aa:38:aa:0c:f5:5e:f8:dc:64:6b:04:85:8c:d5:d6:c6:38:4e: 4c:37:5d:fd:0a:5d:17:02:3c:7b:ea:b6:e9:91:c9:b6:5b:10: d8:cb:69:b7:99:44:ce:0e:d3:46:ba:2b:21:ea:79:f2:8e:a2: 12:b5:2e:33:a3:b3:16:d2:a0:43:39:ac:fc:88:1b:af:65:ad: 2c:94:a2:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH79ZGogZkUbvWlS/Vd/vhLVc2HIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA1MDkwMzU2MTZaFw0yNTA1MTIxMjAzMTZaMDMxMTAvBgNV BAMTKDU4OUJGQjMxMTU3NzExRkNEM0EyNkVDQzlBQ0U2OTdBOUI0MEU1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwEb70VXarosKxNTGAhVXsoHo 0CbrLQoDUkzXKvPM99a2EF0qzPmbkd7VBFXWs2R6vvQt/sCD+JPb13rEQaG221O8 oH9ZkpD/pkw++7B8PuBp2Wi8nInbfn/jU/an75UVaj+BvcCGj8m6OJc4loklEB5j Ca+9fpmmmq5lUo7TKCWjgFHMpQqifjiIEGWQlnHLsqhwjF829fJqo9h2W4z7fLKi kryzaR/vAuVpbkmCiohIhCBbhEGqzAZ6vaWOohTnWvwUlFbesUDqhiUQkT0n9eHG pJrWtTOFpn0UrSM3bKhAkkwp/H/FoUZkoYREpJX6OJmPUHBmdO4jHD1ve0wJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWJv7MRV3EfzTom7Mms5peptA5Q8wHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDxl81g/J8fCXFi5STEacd5k2hSyCDo+fuj lB1FJwYXNQY3rLT3do7SpWK4sugx6M04mpgy8mHMb8CfKnjb+9+gCOiHtxMI8YFA GMe4NHV8Fi124XGWoCCGf3nlS4ukdzKIzR4WqzHIoCW2gIe5Q6r2064V5wSwZTwJ eSROgClzgiJTKx+yEHc3K6PT2NeotQShw5+YMA8K4vqiyYBbQKky68ydSugPEAmI CH0x1JXLvoQAWqo4qgz1XvjcZGsEhYzV1sY4Tkw3Xf0KXRcCPHvqtumRybZbENjL abeZRM4O00a6KyHqefKOohK1LjOjsxbSoEM5rPyIG69lrSyUooU= -----END CERTIFICATE-----Generated at Sun May 11 01:43:29 2025 by rpki-client