$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: +ezjlNHj+VJo3sH1+5pTwVbWErT7QdP/T0dqS+UBoqE= Subject key identifier: A9:27:71:05:5F:06:9E:51:9D:5C:5C:76:4A:C1:4A:87:5C:57:6E:27 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 074461FDAAD82F52ECD5103FA48A079B525D61DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 021A Signing time: Wed 06 Aug 2025 00:31:14 +0000 Manifest this update: Wed 06 Aug 2025 00:26:14 +0000 Manifest next update: Sat 09 Aug 2025 06:34:14 +0000 Files and hashes: 1: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) 2: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: uWQVGmADu38RLtlRZBrbgo/dUjL+l94x8+0SJbe/aGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 06:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:44:61:fd:aa:d8:2f:52:ec:d5:10:3f:a4:8a:07:9b:52:5d:61:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Aug 6 00:26:14 2025 GMT Not After : Aug 9 06:34:14 2025 GMT Subject: CN=A92771055F069E519D5C5C764AC14A875C576E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:30:0c:d0:40:d4:b5:80:ce:b0:f9:7c:63: 62:fe:a6:de:d6:91:cf:88:b2:2e:50:2b:31:9d:16: 6d:e2:be:14:a7:0b:f2:32:6d:42:62:45:90:70:c8: 0f:8d:8c:af:aa:9f:22:f3:03:0c:42:69:a7:af:23: 70:b8:97:08:cb:a6:82:bc:8a:10:4f:9b:1e:0a:28: 0f:8d:93:54:77:b9:4c:53:2e:6b:34:7d:13:ff:c2: 04:6c:8d:bd:bc:af:7b:1d:0b:79:bc:d1:1b:82:13: f8:45:68:9c:51:be:8f:8b:3a:ad:ae:89:94:1e:92: 9f:3e:8e:82:ff:3f:bb:01:31:43:3e:a9:ef:59:2f: 6b:a8:88:b9:f0:cb:a0:13:de:28:72:52:67:34:5c: 04:1a:c9:20:66:18:41:43:79:3f:74:e1:a4:63:de: 94:53:20:f2:93:c8:b1:d1:d9:c8:d8:4e:85:d6:97: 38:9f:b0:94:e7:f1:71:b9:80:c2:77:a4:88:c2:45: 04:b6:ac:6d:33:d5:88:9f:04:3d:35:bd:c3:f7:77: b2:1a:20:41:56:2e:81:91:21:be:01:49:61:36:54: 57:82:bc:36:0b:82:c2:75:a1:3b:1f:02:b5:aa:85: 2b:e6:f1:a1:0d:a3:03:96:9e:61:15:c9:49:97:d7: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:27:71:05:5F:06:9E:51:9D:5C:5C:76:4A:C1:4A:87:5C:57:6E:27 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c1:f7:77:2f:ee:ad:00:79:2d:49:f1:3f:60:91:b1:7d:0a: a9:f7:c0:92:e8:28:94:72:59:1f:91:3a:38:9b:8e:7f:3b:9a: 7b:3c:15:f2:0b:b3:75:be:2c:e2:0e:6e:a7:54:d0:75:bf:80: 5e:c5:15:8a:e9:6c:07:4a:92:d6:db:69:51:c1:4d:e8:a0:07: fd:ad:e5:d5:59:9d:8b:c6:34:c7:4e:e7:65:88:8c:9a:d1:28: 03:c7:03:15:55:e3:18:d6:8f:3b:e3:31:d5:79:4c:25:2e:9b: 79:06:bd:d4:70:10:f0:08:37:f6:c2:c1:6c:61:d8:81:a5:81: 8a:e6:5a:15:5c:e7:14:ff:b8:6c:7b:6c:df:d5:82:0f:32:df: 8d:dc:24:0a:03:74:4a:83:ec:eb:6a:99:2d:09:22:36:90:39: 98:9c:54:df:04:c8:be:f7:3b:0b:cb:26:e1:f1:89:cd:f3:30: da:08:73:b0:d4:d0:db:99:e9:db:1d:3a:01:b0:20:a7:da:8c: 56:e0:e8:e8:f9:64:e1:fa:02:6a:e0:a5:8e:37:2f:0f:bf:fa: 24:f8:79:47:27:5e:64:4a:b1:c6:fa:28:91:69:24:11:7a:c0: b1:a2:cb:db:ac:50:70:75:84:5e:51:9c:01:af:97:29:46:18: 91:82:38:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB0Rh/arYL1Ls1RA/pIoHm1JdYdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA4MDYwMDI2MTRaFw0yNTA4MDkwNjM0MTRaMDMxMTAvBgNV BAMTKEE5Mjc3MTA1NUYwNjlFNTE5RDVDNUM3NjRBQzE0QTg3NUM1NzZFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzTzAM0EDUtYDOsPl8Y2L+pt7W kc+Isi5QKzGdFm3ivhSnC/IybUJiRZBwyA+NjK+qnyLzAwxCaaevI3C4lwjLpoK8 ihBPmx4KKA+Nk1R3uUxTLms0fRP/wgRsjb28r3sdC3m80RuCE/hFaJxRvo+LOq2u iZQekp8+joL/P7sBMUM+qe9ZL2uoiLnwy6AT3ihyUmc0XAQaySBmGEFDeT904aRj 3pRTIPKTyLHR2cjYToXWlzifsJTn8XG5gMJ3pIjCRQS2rG0z1YifBD01vcP3d7Ia IEFWLoGRIb4BSWE2VFeCvDYLgsJ1oTsfArWqhSvm8aENowOWnmEVyUmX10JzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqSdxBV8GnlGdXFx2SsFKh1xXbicwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzB93cv7q0AeS1J8T9gkbF9Cqn3wJLoKJRy WR+ROjibjn87mns8FfILs3W+LOIObqdU0HW/gF7FFYrpbAdKktbbaVHBTeigB/2t 5dVZnYvGNMdO52WIjJrRKAPHAxVV4xjWjzvjMdV5TCUum3kGvdRwEPAIN/bCwWxh 2IGlgYrmWhVc5xT/uGx7bN/Vgg8y343cJAoDdEqD7OtqmS0JIjaQOZicVN8EyL73 OwvLJuHxic3zMNoIc7DU0NuZ6dsdOgGwIKfajFbg6Oj5ZOH6AmrgpY43Lw+/+iT4 eUcnXmRKscb6KJFpJBF6wLGiy9usUHB1hF5RnAGvlylGGJGCOCw= -----END CERTIFICATE-----Generated at Thu Aug 7 03:55:29 2025 by rpki-client