$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: L+sBvW0wUuaDxMToPqe4gdVz2fzswBel9lybbLOqMIY= Subject key identifier: DF:A8:05:2E:68:1A:F3:2A:25:27:07:19:89:D7:6E:BD:6F:33:09:7E Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 032EBA1B6A85CF46BA730BDED6920D4DF80A1BF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 0241 Signing time: Mon 03 Nov 2025 11:21:16 +0000 Manifest this update: Mon 03 Nov 2025 11:16:16 +0000 Manifest next update: Thu 06 Nov 2025 17:06:16 +0000 Files and hashes: 1: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) 2: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: Inw6fEZLsHpRupKVMxIYR5x/O1vVDMLq9x1ZDhkFsag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 17:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2e:ba:1b:6a:85:cf:46:ba:73:0b:de:d6:92:0d:4d:f8:0a:1b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Nov 3 11:16:16 2025 GMT Not After : Nov 6 17:06:16 2025 GMT Subject: CN=DFA8052E681AF32A2527071989D76EBD6F33097E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:33:77:51:6c:8c:83:9b:96:96:d9:ac:e3: 8c:ca:08:dd:e9:49:c8:0b:06:50:c9:23:82:e6:d8: a2:55:20:96:10:e9:03:d4:d5:60:ea:fd:49:69:f0: 7f:b3:39:de:c0:8b:69:bf:4b:c7:a6:23:53:3f:f4: 48:a2:bb:c3:e9:5f:c8:40:22:24:77:09:9f:b6:3d: bf:e9:d8:f4:e5:60:7a:5d:c6:a3:2c:93:f7:c2:e3: 45:a1:d0:26:e4:a8:3e:9e:33:46:40:5a:a3:17:06: 8f:e7:b0:7a:e4:2b:07:5d:52:72:f2:c2:e4:c5:36: b9:91:bb:f3:7e:37:8a:92:14:c7:32:b2:59:64:35: a5:61:d2:28:13:1b:c0:77:86:5c:b4:3d:b1:25:d2: 8a:43:d3:40:03:1a:1d:c1:f3:21:bb:bb:7a:af:d8: 11:3d:5b:32:2d:e8:8a:f0:b9:c7:82:f3:00:2f:84: 98:93:60:d0:22:82:56:23:85:18:ac:a3:85:66:22: 42:8c:27:9b:e9:42:d8:43:7c:2f:31:70:b3:4c:22: 6b:6f:5b:13:7a:6a:8b:d6:8f:09:c3:c9:43:59:5d: fe:00:e0:7c:be:8b:cd:2c:94:74:fd:94:b3:ad:4f: 39:cc:67:f7:36:00:3b:24:c4:fb:24:34:59:5d:15: 4e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A8:05:2E:68:1A:F3:2A:25:27:07:19:89:D7:6E:BD:6F:33:09:7E X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:46:82:30:64:9b:0d:55:f3:dc:66:c9:0c:2e:e5:60:bc:90: 80:5a:ae:65:dc:cd:33:25:1b:a3:e9:b5:12:08:ea:c4:41:26: 56:ab:d7:b0:7f:ec:2c:d5:5a:3a:bd:b6:af:4a:6a:ac:fd:0b: 06:67:fa:b7:ea:ec:98:10:13:39:05:f1:17:3c:46:a0:f1:0b: 1f:73:30:4e:8c:55:2c:bb:0b:87:83:78:6d:b4:0a:8a:cf:dc: 38:54:dd:14:87:eb:9a:ba:8f:d9:5b:ba:cb:d2:60:c5:3a:9f: 89:4c:d3:63:b6:2b:2a:aa:b7:09:2a:dd:ee:84:c9:eb:33:82: f4:88:08:c1:df:d2:06:71:a7:78:a2:81:ad:94:4b:f1:48:53: 29:49:b8:ec:76:fb:61:62:6a:81:e4:fa:27:31:a9:07:9f:eb: 2f:51:45:a6:7f:d4:9b:7f:ce:d2:6e:5e:e1:5e:f0:cb:bf:d7: 4d:a3:5c:5d:51:8d:01:14:f5:6e:c2:27:43:bb:53:7d:5a:f8: d2:5a:bb:a8:06:4f:e3:b9:8d:15:a0:89:cc:8b:a7:fd:47:10: 3e:28:60:4c:8a:1d:2f:06:f9:2a:da:08:53:5a:03:23:fe:73: 64:a0:69:fa:65:34:68:b0:0d:ed:23:76:90:4e:95:77:82:94: 1d:64:27:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAy66G2qFz0a6cwve1pINTfgKG/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNTExMDMxMTE2MTZaFw0yNTExMDYxNzA2MTZaMDMxMTAvBgNV BAMTKERGQTgwNTJFNjgxQUYzMkEyNTI3MDcxOTg5RDc2RUJENkYzMzA5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd3DN3UWyMg5uWltms44zKCN3p ScgLBlDJI4Lm2KJVIJYQ6QPU1WDq/Ulp8H+zOd7Ai2m/S8emI1M/9Eiiu8PpX8hA IiR3CZ+2Pb/p2PTlYHpdxqMsk/fC40Wh0CbkqD6eM0ZAWqMXBo/nsHrkKwddUnLy wuTFNrmRu/N+N4qSFMcysllkNaVh0igTG8B3hly0PbEl0opD00ADGh3B8yG7u3qv 2BE9WzIt6IrwuceC8wAvhJiTYNAiglYjhRiso4VmIkKMJ5vpQthDfC8xcLNMImtv WxN6aovWjwnDyUNZXf4A4Hy+i80slHT9lLOtTznMZ/c2ADskxPskNFldFU6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU36gFLmga8yolJwcZidduvW8zCX4wHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpGgjBkmw1V89xmyQwu5WC8kIBarmXczTMl G6PptRII6sRBJlar17B/7CzVWjq9tq9Kaqz9CwZn+rfq7JgQEzkF8Rc8RqDxCx9z ME6MVSy7C4eDeG20CorP3DhU3RSH65q6j9lbusvSYMU6n4lM02O2Kyqqtwkq3e6E yeszgvSICMHf0gZxp3iiga2US/FIUylJuOx2+2FiaoHk+icxqQef6y9RRaZ/1Jt/ ztJuXuFe8Mu/102jXF1RjQEU9W7CJ0O7U31a+NJau6gGT+O5jRWgicyLp/1HED4o YEyKHS8G+SraCFNaAyP+c2SgafplNGiwDe0jdpBOlXeClB1kJ6Q= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:06 2025 by rpki-client