$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: aX5AlisAldlqC0o+hWPlsLHL1T8jRYY4uCK4gYAPbWI= Subject key identifier: 1A:6B:95:89:E1:30:13:70:91:2D:79:DA:AF:D0:BA:69:06:D7:24:41 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 1BFF701BCC75028D4D33910E06649F71EDFF9B2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 0201 Signing time: Mon 16 Jun 2025 08:51:13 +0000 Manifest this update: Mon 16 Jun 2025 08:46:13 +0000 Manifest next update: Thu 19 Jun 2025 15:36:13 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: n4cPw6u5WA9YMSwVcbsmHU07Q0pxnageDOjBGAGy7rk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 15:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ff:70:1b:cc:75:02:8d:4d:33:91:0e:06:64:9f:71:ed:ff:9b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Jun 16 08:46:13 2025 GMT Not After : Jun 19 15:36:13 2025 GMT Subject: CN=1A6B9589E1301370912D79DAAFD0BA6906D72441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:60:59:e7:a5:2f:c4:d2:a8:d4:d5:57:69: e6:30:4d:b3:10:88:8e:d1:63:98:09:28:b0:8d:87: 45:c9:07:fc:18:c0:b7:24:5c:2e:65:84:d2:e1:be: ef:8c:39:a9:03:fe:15:e9:32:1e:37:0a:6c:ff:0d: 46:25:0e:dd:9d:1e:99:a8:89:03:e9:b8:66:8b:37: 35:69:7b:7f:68:bc:c9:8d:59:6d:35:35:5d:1c:8b: 32:84:8c:ba:f3:25:13:42:9a:23:0a:48:b7:ca:bc: 4b:28:70:db:b0:32:f8:18:91:22:15:28:04:3a:50: fb:4e:6b:63:1c:0c:c3:32:f3:50:7a:fd:27:74:44: d7:b1:eb:82:83:e7:63:29:28:fb:dd:be:bc:9e:21: 8a:8a:62:f4:0e:40:9b:74:4d:66:83:de:dc:ec:63: 30:32:ca:2f:1a:83:7a:65:4b:a6:ce:e0:a9:e9:5f: 23:80:1b:1f:69:62:7f:d4:59:77:2f:c0:eb:92:c8: 23:cd:da:b1:99:f7:5b:d5:df:1f:6e:13:8e:8a:f5: 43:1b:d0:31:7d:d5:ce:22:01:9c:7a:cf:9e:c0:ce: 06:f2:18:c8:c3:c1:62:ea:ca:e0:2e:b8:68:88:f5: 3b:5d:c2:fa:64:7c:22:c1:85:57:bf:c4:f4:c4:ce: 31:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6B:95:89:E1:30:13:70:91:2D:79:DA:AF:D0:BA:69:06:D7:24:41 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c1:ac:20:16:47:eb:5f:fc:5d:61:07:46:0e:c1:5a:3b:58: 00:96:bc:78:53:6a:be:ea:ad:c6:79:75:26:67:9f:01:e6:75: b0:74:5b:ca:e6:60:f2:e0:d3:4e:3f:d4:46:e0:3a:45:31:d1: 9b:8e:60:65:48:86:60:a0:4c:ab:4c:02:60:13:59:8e:06:22: b1:5f:ba:1c:a0:2f:fc:fb:85:1c:bb:bf:09:65:6b:b0:22:05: c2:55:5c:53:8d:3f:e1:5e:38:f0:dd:38:c1:a8:20:fb:43:37: 84:49:9f:ff:74:a8:56:39:44:e4:39:8a:ba:38:6f:45:d2:89: d8:30:8d:a5:35:5f:06:fd:cd:b3:b0:7e:d6:89:cb:ac:9b:70: da:07:31:10:79:4c:3f:dd:2c:8e:25:f6:e5:cf:61:e0:dd:a1: a7:a1:8c:a9:2d:a8:56:25:58:92:63:8a:cc:ce:dc:e0:8f:55: fb:cd:ac:ff:c1:98:22:44:92:0c:7f:fa:b8:cb:4e:8c:49:9d: 28:39:d2:2c:5f:36:04:af:11:60:71:62:24:d7:67:f2:77:36: ee:fc:f5:67:11:5a:8b:fb:83:e9:01:52:3a:f2:39:4d:1e:db: 98:1e:7c:3f:4b:ed:4f:ef:b6:19:09:0e:69:6f:08:3c:4b:38: 1b:53:59:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/9wG8x1Ao1NM5EOBmSfce3/my4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA2MTYwODQ2MTNaFw0yNTA2MTkxNTM2MTNaMDMxMTAvBgNV BAMTKDFBNkI5NTg5RTEzMDEzNzA5MTJENzlEQUFGRDBCQTY5MDZENzI0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfmBZ56UvxNKo1NVXaeYwTbMQ iI7RY5gJKLCNh0XJB/wYwLckXC5lhNLhvu+MOakD/hXpMh43Cmz/DUYlDt2dHpmo iQPpuGaLNzVpe39ovMmNWW01NV0cizKEjLrzJRNCmiMKSLfKvEsocNuwMvgYkSIV KAQ6UPtOa2McDMMy81B6/Sd0RNex64KD52MpKPvdvryeIYqKYvQOQJt0TWaD3tzs YzAyyi8ag3plS6bO4KnpXyOAGx9pYn/UWXcvwOuSyCPN2rGZ91vV3x9uE46K9UMb 0DF91c4iAZx6z57AzgbyGMjDwWLqyuAuuGiI9TtdwvpkfCLBhVe/xPTEzjGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmuVieEwE3CRLXnar9C6aQbXJEEwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALBrCAWR+tf/F1hB0YOwVo7WACWvHhTar7q rcZ5dSZnnwHmdbB0W8rmYPLg004/1EbgOkUx0ZuOYGVIhmCgTKtMAmATWY4GIrFf uhygL/z7hRy7vwlla7AiBcJVXFONP+FeOPDdOMGoIPtDN4RJn/90qFY5ROQ5iro4 b0XSidgwjaU1Xwb9zbOwftaJy6ybcNoHMRB5TD/dLI4l9uXPYeDdoaehjKktqFYl WJJjiszO3OCPVfvNrP/BmCJEkgx/+rjLToxJnSg50ixfNgSvEWBxYiTXZ/J3Nu78 9WcRWov7g+kBUjryOU0e25gefD9L7U/vthkJDmlvCDxLOBtTWVM= -----END CERTIFICATE-----Generated at Tue Jun 17 21:22:01 2025 by rpki-client