$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: bf1RIpFvA+e85w2n2Gb9r3SXQJeJ0i6iJqspPUu/Vrw= Subject key identifier: DB:45:6C:49:20:4E:A1:22:79:57:DE:94:52:39:50:35:D6:7D:4F:67 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 3488036F95D3876F450556DCAA684BA4495407BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 0209 Signing time: Sun 29 Jun 2025 18:21:15 +0000 Manifest this update: Sun 29 Jun 2025 18:16:15 +0000 Manifest next update: Wed 02 Jul 2025 21:24:15 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: ukBGP7sP8bDtqKI7rIPtN6+UeNWhEyELUfHKxIDFeJs=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:88:03:6f:95:d3:87:6f:45:05:56:dc:aa:68:4b:a4:49:54:07:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Jun 29 18:16:15 2025 GMT Not After : Jul 2 21:24:15 2025 GMT Subject: CN=DB456C49204EA1227957DE9452395035D67D4F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:09:6b:e6:fc:bf:10:a7:58:08:9f:9e:1a: 3a:c2:15:37:b1:b5:39:35:88:bf:9d:07:91:a4:85: 1e:fe:5b:61:87:21:c7:e2:2c:cc:78:ac:3d:09:5e: da:1f:f8:7a:02:a4:8f:69:4c:56:6a:29:9f:63:c2: 23:67:a6:1a:1a:c6:03:cc:cb:be:33:19:e0:fc:89: 45:b9:bb:67:16:22:ce:de:ae:37:7c:a3:16:1a:af: 45:4b:32:33:59:a8:89:2a:fb:7e:38:58:a3:09:83: 0d:c4:03:fa:40:ea:51:04:71:09:a2:07:c1:b4:bd: a8:b2:9c:93:e9:89:fc:27:42:9d:81:2f:e2:2a:db: ed:af:83:3f:32:8d:cc:08:8e:a6:77:be:73:6f:33: b6:72:df:0d:32:a9:59:d7:ea:8e:4e:16:bc:13:e6: a6:32:91:ee:6a:c7:e7:5f:06:5d:93:de:be:5d:b0: d8:e7:2d:44:4a:e1:10:27:1c:0a:a0:d7:05:c1:d3: 9f:4f:8a:26:14:e0:08:a4:01:05:bc:7d:a9:40:b3: bb:21:69:86:6f:92:31:0f:ce:34:a0:9d:0d:de:3b: 57:5f:13:cc:d7:ba:06:96:09:1f:72:f7:a8:54:1f: bf:18:6e:28:cc:df:cb:d7:a9:23:e9:1a:d4:82:fc: ca:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:45:6C:49:20:4E:A1:22:79:57:DE:94:52:39:50:35:D6:7D:4F:67 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:03:fd:e6:29:bc:51:8d:30:74:6d:41:78:b3:f7:a8:d4:f5: 56:50:f8:bd:71:4f:16:1b:58:9c:f5:ec:95:22:62:77:6d:8e: 2e:0c:ea:e5:a8:8a:e9:e1:e8:cf:cc:ad:3e:ae:7d:66:7c:08: 6a:9e:4f:2c:63:32:51:2d:2d:a1:9b:46:e3:38:89:ee:56:8a: 5a:53:a9:92:8a:2e:09:a9:2e:ef:9d:e8:94:4a:bc:7d:44:5a: 18:25:d5:6c:50:f2:9e:4d:fc:4f:ad:92:17:2b:9b:bd:f3:d1: 74:65:87:21:35:7e:3f:5a:c8:25:b3:9f:cd:6e:5b:33:60:54: 97:12:89:6c:2f:9c:a6:7b:2b:e8:aa:a5:87:2b:ea:ef:2b:02: 91:36:a0:16:9b:7e:8f:11:44:5b:97:92:54:4d:27:39:da:bc: ca:e6:17:73:8e:83:eb:49:02:80:41:ca:f9:1c:5d:cd:aa:77: 7c:c7:1c:f4:27:00:77:d8:99:bb:3c:58:de:15:7e:c7:01:1e: e9:bd:de:08:08:da:da:e3:7c:e1:c1:f2:27:ac:5e:9f:51:e8: 23:9b:40:0c:5c:9b:3c:96:11:0f:33:75:46:4f:80:52:6d:b8: b0:b8:ca:fd:8e:aa:6e:d4:f7:73:3c:48:ba:30:e1:b1:bf:96: 31:20:c0:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIgDb5XTh29FBVbcqmhLpElUB78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA2MjkxODE2MTVaFw0yNTA3MDIyMTI0MTVaMDMxMTAvBgNV BAMTKERCNDU2QzQ5MjA0RUExMjI3OTU3REU5NDUyMzk1MDM1RDY3RDRGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlAlr5vy/EKdYCJ+eGjrCFTex tTk1iL+dB5GkhR7+W2GHIcfiLMx4rD0JXtof+HoCpI9pTFZqKZ9jwiNnphoaxgPM y74zGeD8iUW5u2cWIs7erjd8oxYar0VLMjNZqIkq+344WKMJgw3EA/pA6lEEcQmi B8G0vaiynJPpifwnQp2BL+Iq2+2vgz8yjcwIjqZ3vnNvM7Zy3w0yqVnX6o5OFrwT 5qYyke5qx+dfBl2T3r5dsNjnLURK4RAnHAqg1wXB059PiiYU4AikAQW8falAs7sh aYZvkjEPzjSgnQ3eO1dfE8zXugaWCR9y96hUH78YbijM38vXqSPpGtSC/MpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU20VsSSBOoSJ5V96UUjlQNdZ9T2cwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMD/eYpvFGNMHRtQXiz96jU9VZQ+L1xTxYb WJz17JUiYndtji4M6uWoiunh6M/MrT6ufWZ8CGqeTyxjMlEtLaGbRuM4ie5WilpT qZKKLgmpLu+d6JRKvH1EWhgl1WxQ8p5N/E+tkhcrm73z0XRlhyE1fj9ayCWzn81u WzNgVJcSiWwvnKZ7K+iqpYcr6u8rApE2oBabfo8RRFuXklRNJznavMrmF3OOg+tJ AoBByvkcXc2qd3zHHPQnAHfYmbs8WN4VfscBHum93ggI2trjfOHB8iesXp9R6COb QAxcmzyWEQ8zdUZPgFJtuLC4yv2Oqm7U93M8SLow4bG/ljEgwBI= -----END CERTIFICATE-----Generated at Tue Jul 1 06:32:04 2025 by rpki-client