$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: URBrFAHdB7B7AGWwM+04VWCBBgn/Fn5l3mnnrv5w3KI= Subject key identifier: 9B:8A:76:6D:DF:F1:E2:33:3A:AD:2A:17:AA:EB:45:E0:DC:2C:5E:9D Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 6A5B6EAA9DE3D22B3D36917922737599C275C15A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 04E3 Signing time: Sun 15 Jun 2025 05:40:45 +0000 Manifest this update: Sun 15 Jun 2025 05:35:45 +0000 Manifest next update: Wed 18 Jun 2025 11:28:45 +0000 Files and hashes: 1: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=) 2: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=) 3: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=) 4: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AX4Jn83p+r0+t8Humc/TBfXoxrYw8H5KgdJEdvTF/+E=) 5: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: Tiup9HsOS1vxK1x41Mv7ND3sGi9A2dsoCdOVi++D0+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:28:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5b:6e:aa:9d:e3:d2:2b:3d:36:91:79:22:73:75:99:c2:75:c1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Jun 15 05:35:45 2025 GMT Not After : Jun 18 11:28:45 2025 GMT Subject: CN=9B8A766DDFF1E2333AAD2A17AAEB45E0DC2C5E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:d4:69:17:4f:58:0c:ce:12:a7:15:f5:a2: b6:cb:17:a2:9e:10:a4:95:83:97:38:76:d4:9c:86: ce:1c:48:ba:6c:df:c6:5a:16:2e:69:f1:48:22:4a: 1d:1c:2d:1b:59:1a:69:1a:da:10:fa:4d:68:88:0e: ad:8b:3a:59:6a:9b:17:6a:a9:55:2d:43:af:3f:ba: 24:3c:dc:f7:c6:b2:33:00:88:98:50:9d:6f:60:e3: 25:e6:91:30:ce:fd:b2:30:80:dc:24:f5:4a:23:31: 63:e4:6c:15:36:6c:2a:67:6b:94:86:69:54:bd:29: 7a:19:09:a1:a4:6f:a5:64:de:89:5d:42:10:18:76: b3:6f:43:39:45:5a:90:f8:30:74:5a:74:e3:78:0e: d4:a4:45:e1:f8:25:91:04:5b:8c:8b:61:d0:40:d7: 5f:96:39:ef:36:1e:d5:ca:bc:03:e0:73:1c:6a:97: c2:7c:cf:a6:21:7c:85:c6:c2:fc:ce:57:f9:6e:aa: fe:e1:3d:a3:35:d7:bb:f3:f3:cf:94:f8:e4:61:31: 54:5e:d4:a2:1e:ca:ad:13:f8:13:82:a2:21:72:28: df:3c:c7:67:f7:e0:09:5d:b0:90:43:51:d6:56:48: 54:9a:60:c7:4e:c5:bd:ec:81:60:fd:5b:0a:d9:be: 25:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8A:76:6D:DF:F1:E2:33:3A:AD:2A:17:AA:EB:45:E0:DC:2C:5E:9D X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:74:ae:8c:47:1d:2f:f4:c1:52:fd:91:45:c7:2e:aa:f1:e6: ae:fb:85:0f:fa:4b:bf:7f:48:ee:4e:78:b4:53:a1:af:8a:d3: 93:b0:fc:ef:07:36:66:b2:89:97:33:91:2d:78:95:0b:ba:4a: ae:28:7e:2f:a6:39:aa:e3:ad:66:03:d5:b3:39:12:98:d9:87: e8:c3:5a:ed:dc:70:9e:0c:16:86:f8:d0:9d:c2:cc:c3:ab:c3: 76:ea:cb:99:d3:38:13:ef:fb:37:93:14:39:ff:e8:b7:d7:08: 8f:c3:a1:bc:d4:ed:54:10:b9:07:72:0b:ca:ca:e3:cf:7f:7e: ad:d5:89:5f:3a:45:37:bf:c5:07:ee:fd:f5:f7:02:a8:47:20: 6f:80:b2:54:58:52:db:dd:c1:91:14:c8:4d:6d:c7:a3:57:06: 36:0a:df:82:25:3c:6f:b3:71:62:1b:52:4a:aa:5a:98:c1:5d: 98:c6:b5:23:98:d1:9f:93:03:a5:80:1a:fe:e3:20:b3:a6:07: 03:f7:d3:ae:6a:cd:d5:d3:fa:f1:d4:a3:b1:63:a6:f1:22:ab: 2f:b3:bc:d3:f3:4b:b0:60:98:97:c8:63:e3:7f:84:3a:ba:ad: 4a:43:29:c5:00:64:68:2f:45:2d:dd:08:6c:18:c5:cc:24:4e: bc:04:fd:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaltuqp3j0is9NpF5InN1mcJ1wVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTA2MTUwNTM1NDVaFw0yNTA2MTgxMTI4NDVaMDMxMTAvBgNV BAMTKDlCOEE3NjZEREZGMUUyMzMzQUFEMkExN0FBRUI0NUUwREMyQzVFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81NRpF09YDM4SpxX1orbLF6Ke EKSVg5c4dtSchs4cSLps38ZaFi5p8UgiSh0cLRtZGmka2hD6TWiIDq2LOllqmxdq qVUtQ68/uiQ83PfGsjMAiJhQnW9g4yXmkTDO/bIwgNwk9UojMWPkbBU2bCpna5SG aVS9KXoZCaGkb6Vk3oldQhAYdrNvQzlFWpD4MHRadON4DtSkReH4JZEEW4yLYdBA 11+WOe82HtXKvAPgcxxql8J8z6YhfIXGwvzOV/luqv7hPaM117vz88+U+ORhMVRe 1KIeyq0T+BOCoiFyKN88x2f34AldsJBDUdZWSFSaYMdOxb3sgWD9WwrZviWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm4p2bd/x4jM6rSoXqutF4NwsXp0wHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB0roxHHS/0wVL9kUXHLqrx5q77hQ/6S79/ SO5OeLRToa+K05Ow/O8HNmayiZczkS14lQu6Sq4ofi+mOarjrWYD1bM5EpjZh+jD Wu3ccJ4MFob40J3CzMOrw3bqy5nTOBPv+zeTFDn/6LfXCI/DobzU7VQQuQdyC8rK 489/fq3ViV86RTe/xQfu/fX3AqhHIG+AslRYUtvdwZEUyE1tx6NXBjYK34IlPG+z cWIbUkqqWpjBXZjGtSOY0Z+TA6WAGv7jILOmBwP3065qzdXT+vHUo7FjpvEiqy+z vNPzS7BgmJfIY+N/hDq6rUpDKcUAZGgvRS3dCGwYxcwkTrwE/Yw= -----END CERTIFICATE-----Generated at Mon Jun 16 17:27:03 2025 by rpki-client