$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: BAGVgtGvx4BsUaFFwDaATrJZoWv+gAGJF2iGgvth8eM= Subject key identifier: 17:8E:46:C4:3D:F0:AF:34:E5:BD:82:20:7A:31:0C:BB:F1:BB:72:A5 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 15DC9573B1398BC4B9D7A151286ED4CD9E240ACF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 023A Signing time: Sat 18 Oct 2025 12:11:16 +0000 Manifest this update: Sat 18 Oct 2025 12:06:16 +0000 Manifest next update: Tue 21 Oct 2025 12:44:16 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: 0vckSjhlKS75hrDgPGd5sI5a653FOSMgVgZ5Q+mv4to=) 2: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:dc:95:73:b1:39:8b:c4:b9:d7:a1:51:28:6e:d4:cd:9e:24:0a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Oct 18 12:06:16 2025 GMT Not After : Oct 21 12:44:16 2025 GMT Subject: CN=178E46C43DF0AF34E5BD82207A310CBBF1BB72A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:b6:1e:3c:e7:1e:b2:f3:e5:48:ed:50:92: e9:0c:86:09:9c:f0:2d:12:f1:31:56:e0:87:94:96: a1:4d:89:c6:6e:6e:6a:a2:27:ce:e7:81:3f:7e:e2: b4:dc:4b:f6:73:a8:f5:56:21:71:35:dc:7b:5e:dc: fe:fb:63:6e:41:3b:64:85:71:4f:02:97:3a:ac:fb: 33:ea:df:91:53:28:8a:01:3d:f8:cd:14:40:29:ee: 7e:a7:c7:4d:a1:58:b7:5c:03:62:79:db:fd:44:15: 85:41:5c:51:d8:57:2c:9c:85:f9:9f:7d:e8:61:bf: ae:5d:ae:76:be:76:4e:62:16:33:a8:e8:65:db:f0: 80:78:4a:ec:f2:d4:55:43:3a:52:ad:c1:a6:55:ed: b7:44:2c:1d:0e:ce:36:dc:ef:65:47:bf:19:64:4f: 20:4d:68:4e:e5:2b:43:31:d6:b7:ed:a4:59:ea:08: 32:da:4d:a7:2f:9d:14:2a:ef:fc:37:0b:aa:80:a3: 0f:4c:09:2f:38:0c:f0:aa:f8:12:1c:ea:f3:61:bb: 4f:ca:4c:38:28:d4:b3:eb:41:b1:dc:e8:88:02:bb: b8:5a:95:09:58:a4:e0:95:10:e2:7f:32:ab:18:ce: ca:8d:7e:d7:e2:1a:68:d8:80:80:12:68:ff:74:a3: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8E:46:C4:3D:F0:AF:34:E5:BD:82:20:7A:31:0C:BB:F1:BB:72:A5 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:43:af:89:8d:13:1a:ed:ff:2a:91:f0:2f:ca:18:35:f5:1c: e0:52:28:36:b5:5e:c0:c0:3d:57:46:6c:ac:cf:7d:92:e9:72: f8:7e:c8:9e:85:12:6a:5b:67:5e:aa:c4:26:7a:db:5e:17:90: f6:2e:d0:57:9e:f9:b7:a7:e5:a0:d5:88:9e:ff:a3:56:b3:3d: 18:9b:7f:b4:f6:15:c6:d4:0a:95:01:b8:6e:84:57:2d:3b:9e: 05:de:78:74:5b:80:77:ae:5b:0e:b7:57:fd:36:b0:c2:0e:86: 56:e7:55:02:4c:a9:d3:62:02:86:a3:08:ea:1b:cd:f4:61:f0: 64:b6:0b:a7:6a:a1:76:c9:f9:00:29:03:d6:43:40:45:00:a8: ef:af:18:08:c8:ee:c3:20:cd:f0:75:28:90:c2:30:20:80:85: 19:21:d7:35:cb:79:cb:6f:01:d8:df:4d:2a:76:88:0f:2f:0c: cb:9f:18:5b:3c:af:ae:d7:da:f1:95:a1:09:0e:ee:ba:ed:e9: 18:17:ad:4d:ef:5c:b1:d0:fc:1e:8f:bc:52:2a:cd:9d:6c:e6: b7:33:a1:d6:41:01:f2:0e:43:4b:64:b0:c6:98:56:64:fa:2a: 75:0b:cd:f4:30:2c:1f:1d:8a:36:63:88:f8:59:10:54:34:a0: b2:36:65:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdyVc7E5i8S516FRKG7UzZ4kCs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTEwMTgxMjA2MTZaFw0yNTEwMjExMjQ0MTZaMDMxMTAvBgNV BAMTKDE3OEU0NkM0M0RGMEFGMzRFNUJEODIyMDdBMzEwQ0JCRjFCQjcyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bbYePOcesvPlSO1QkukMhgmc 8C0S8TFW4IeUlqFNicZubmqiJ87ngT9+4rTcS/ZzqPVWIXE13Hte3P77Y25BO2SF cU8Clzqs+zPq35FTKIoBPfjNFEAp7n6nx02hWLdcA2J52/1EFYVBXFHYVyychfmf fehhv65drna+dk5iFjOo6GXb8IB4Suzy1FVDOlKtwaZV7bdELB0Ozjbc72VHvxlk TyBNaE7lK0Mx1rftpFnqCDLaTacvnRQq7/w3C6qAow9MCS84DPCq+BIc6vNhu0/K TDgo1LPrQbHc6IgCu7halQlYpOCVEOJ/MqsYzsqNftfiGmjYgIASaP90o8P7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF45GxD3wrzTlvYIgejEMu/G7cqUwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRDr4mNExrt/yqR8C/KGDX1HOBSKDa1XsDA PVdGbKzPfZLpcvh+yJ6FEmpbZ16qxCZ6214XkPYu0Fee+ben5aDViJ7/o1azPRib f7T2FcbUCpUBuG6EVy07ngXeeHRbgHeuWw63V/02sMIOhlbnVQJMqdNiAoajCOob zfRh8GS2C6dqoXbJ+QApA9ZDQEUAqO+vGAjI7sMgzfB1KJDCMCCAhRkh1zXLectv AdjfTSp2iA8vDMufGFs8r67X2vGVoQkO7rrt6RgXrU3vXLHQ/B6PvFIqzZ1s5rcz odZBAfIOQ0tksMaYVmT6KnULzfQwLB8dijZjiPhZEFQ0oLI2ZRs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:05:11 2025 by rpki-client