$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: K3n84vz9VxmHQH1FhEjrkdNXk1DGt+24Fkb1XI09cPE= Subject key identifier: 09:F6:AA:7E:1E:1E:91:98:20:16:08:4D:9F:8F:52:42:F9:86:1C:14 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 065BBCA1A08C53C24E3E39B3C5BE34CC19B87478 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 01EB Signing time: Mon 28 Apr 2025 08:21:12 +0000 Manifest this update: Mon 28 Apr 2025 08:16:12 +0000 Manifest next update: Thu 01 May 2025 16:38:12 +0000 Files and hashes: 1: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: joZMmF0LTSZqt6mDbiY1HTUqu5i05aaFhK3dEYCTMqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5b:bc:a1:a0:8c:53:c2:4e:3e:39:b3:c5:be:34:cc:19:b8:74:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Apr 28 08:16:12 2025 GMT Not After : May 1 16:38:12 2025 GMT Subject: CN=09F6AA7E1E1E91982016084D9F8F5242F9861C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:94:01:0a:2b:a2:d7:81:b5:03:c4:88:c3: f9:d8:3e:fe:ff:f6:f1:16:3a:d6:60:df:85:05:5d: 39:dc:eb:32:cb:8c:99:cc:2f:73:b5:e0:8f:44:46: 36:90:df:de:cd:11:73:e2:30:0f:3d:b1:0c:97:20: 36:5c:51:67:58:98:b7:5b:1a:15:e7:0a:d6:e6:e6: 15:a7:2c:60:e6:0a:27:9f:6f:41:9f:33:b1:8a:64: e0:ad:55:b7:6d:05:26:86:b9:68:65:fd:af:77:04: e6:ac:f5:e2:a7:f9:96:17:bf:16:c3:23:6d:10:5e: 1c:9f:22:ea:34:e7:d7:fd:af:f3:fe:29:94:96:80: 91:a2:c1:f2:40:4c:cd:18:e7:c1:fd:84:75:ff:74: 7d:84:8c:0e:db:8a:5c:89:93:9b:c7:f8:8d:07:ee: 48:96:51:c5:b5:8a:15:cd:a5:8d:a5:b7:5e:79:c6: 1b:9c:04:aa:a7:1d:c4:2d:b8:5d:34:10:2e:e9:7c: 06:de:40:bf:80:ce:d8:99:e3:65:b1:e7:7c:64:3d: d0:51:14:fd:65:94:34:a4:68:1b:07:9f:4b:76:88: 71:bc:9b:2d:a6:5b:e4:11:95:17:7a:04:b4:bc:a7: 1e:7b:45:2b:1c:ca:09:d5:a3:e4:a8:32:f4:75:d9: d2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F6:AA:7E:1E:1E:91:98:20:16:08:4D:9F:8F:52:42:F9:86:1C:14 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:30:89:0b:cf:c5:14:31:3a:37:7a:79:24:41:c8:f1:f6:92: 38:e6:69:e7:71:2d:1f:6c:6e:9c:a6:28:c6:8e:c0:5e:a2:89: 0c:f8:e5:aa:db:21:29:4f:56:b5:cd:17:a1:82:a0:4c:7a:fc: 73:20:90:36:7e:ef:e6:98:73:e2:55:f6:5b:dd:e0:38:aa:e4: 76:c0:6f:4f:9f:72:5d:e2:17:2e:0f:7f:14:a0:41:95:10:e9: 1f:4c:f6:59:1d:14:37:06:2f:ed:e9:26:1e:12:74:34:73:d1: 77:cb:55:ec:c5:7e:7e:20:87:cc:6f:79:36:93:f7:77:e4:6f: aa:7a:b0:19:40:19:55:4a:ed:1b:71:86:45:84:0f:71:0a:9d: 96:54:9b:8a:3f:62:b3:29:4a:26:3a:11:60:97:db:5a:8c:04: 90:cc:f7:88:9c:16:ba:2a:a0:a9:98:21:fe:ee:63:fc:c2:04: 6b:80:d6:45:7d:39:5f:b6:7f:43:c0:e6:32:b4:1e:7d:73:82: 91:25:fb:ab:b2:56:85:5a:40:c0:5a:73:95:9f:c2:aa:53:9a: fe:37:c5:f0:ee:f9:76:f2:51:83:f9:35:a2:04:96:d0:bb:dc: d0:56:3b:02:2c:09:09:d5:63:2c:4c:76:45:47:4e:a7:47:81: 20:69:97:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBlu8oaCMU8JOPjmzxb40zBm4dHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTA0MjgwODE2MTJaFw0yNTA1MDExNjM4MTJaMDMxMTAvBgNV BAMTKDA5RjZBQTdFMUUxRTkxOTgyMDE2MDg0RDlGOEY1MjQyRjk4NjFDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqHZQBCiui14G1A8SIw/nYPv7/ 9vEWOtZg34UFXTnc6zLLjJnML3O14I9ERjaQ397NEXPiMA89sQyXIDZcUWdYmLdb GhXnCtbm5hWnLGDmCiefb0GfM7GKZOCtVbdtBSaGuWhl/a93BOas9eKn+ZYXvxbD I20QXhyfIuo059f9r/P+KZSWgJGiwfJATM0Y58H9hHX/dH2EjA7bilyJk5vH+I0H 7kiWUcW1ihXNpY2lt155xhucBKqnHcQtuF00EC7pfAbeQL+AztiZ42Wx53xkPdBR FP1llDSkaBsHn0t2iHG8my2mW+QRlRd6BLS8px57RSscygnVo+SoMvR12dKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCfaqfh4ekZggFghNn49SQvmGHBQwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkwiQvPxRQxOjd6eSRByPH2kjjmaedxLR9s bpymKMaOwF6iiQz45arbISlPVrXNF6GCoEx6/HMgkDZ+7+aYc+JV9lvd4Diq5HbA b0+fcl3iFy4PfxSgQZUQ6R9M9lkdFDcGL+3pJh4SdDRz0XfLVezFfn4gh8xveTaT 93fkb6p6sBlAGVVK7RtxhkWED3EKnZZUm4o/YrMpSiY6EWCX21qMBJDM94icFroq oKmYIf7uY/zCBGuA1kV9OV+2f0PA5jK0Hn1zgpEl+6uyVoVaQMBac5WfwqpTmv43 xfDu+XbyUYP5NaIEltC73NBWOwIsCQnVYyxMdkVHTqdHgSBplzY= -----END CERTIFICATE-----Generated at Wed Apr 30 06:06:09 2025 by rpki-client