$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: W+tNDTNDJ6Jte+lTm/WF4sjKxwFYBwKe24ScNNqJ5Wc= Subject key identifier: 46:EA:93:B7:7A:DE:BE:AE:D8:41:F0:61:3F:77:89:36:65:32:32:86 Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 4015C1DDFF808260D246F9AAAA52BDE882CBCFD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 04FA Signing time: Tue 05 Aug 2025 11:20:44 +0000 Manifest this update: Tue 05 Aug 2025 11:15:44 +0000 Manifest next update: Fri 08 Aug 2025 23:15:44 +0000 Files and hashes: 1: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=) 2: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=) 3: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: uz8F07WB0Zf1tNhXBEqKUbn/LXJCSQehue/fojYHYO8=) 4: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AX4Jn83p+r0+t8Humc/TBfXoxrYw8H5KgdJEdvTF/+E=) 5: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:15:c1:dd:ff:80:82:60:d2:46:f9:aa:aa:52:bd:e8:82:cb:cf:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Aug 5 11:15:44 2025 GMT Not After : Aug 8 23:15:44 2025 GMT Subject: CN=46EA93B77ADEBEAED841F0613F77893665323286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9d:10:38:dd:f2:36:ef:ef:c2:61:25:b5:4b: 6d:aa:6c:5e:42:b8:da:2c:c1:d9:ab:70:29:84:39: 16:39:3b:40:99:cc:25:c1:d1:68:2e:14:87:69:9b: 84:51:02:bf:36:f7:99:9d:ab:d1:a9:4f:0f:65:0d: 0c:53:70:a1:66:3e:32:6d:03:8d:f4:7c:46:0f:83: 2c:9a:77:12:21:78:a6:93:e6:9c:7c:81:5f:ed:f7: 6d:99:be:66:65:b9:79:19:b2:ea:56:db:97:b5:12: 7a:07:f4:34:4c:1c:8f:3a:8b:b5:f5:c5:0c:cb:dd: 4f:59:4a:be:67:d6:e9:5e:4d:08:01:1f:c5:26:8a: 53:c9:f4:4b:3b:20:5c:2d:2c:cc:83:59:8c:45:c8: 0e:4f:53:ef:86:45:81:30:54:c0:b7:e5:84:0c:0c: 9c:62:ad:31:10:1b:0c:22:5a:87:57:26:a1:cf:ee: bc:5f:20:ed:ca:c2:3e:ad:34:b0:8c:b4:3e:4d:c1: 73:d0:ae:9c:d4:06:64:c7:6b:9d:2b:4b:e0:5b:0f: b5:44:9f:8c:2a:f4:b3:07:ed:9a:19:60:8f:03:93: bd:55:e1:37:08:95:cf:da:6b:9a:1e:a6:cd:b4:18: 6c:08:35:aa:34:62:d4:8a:76:05:7a:1b:5c:cf:86: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EA:93:B7:7A:DE:BE:AE:D8:41:F0:61:3F:77:89:36:65:32:32:86 X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0b:c6:cd:9c:7a:66:51:75:5b:e6:9c:80:b8:f1:af:ec:b1: ca:b7:c9:8c:81:71:89:3d:4d:c8:eb:82:70:74:be:75:2e:5b: 49:e5:a8:95:db:2d:36:66:55:77:2c:93:bb:6c:a7:e1:e1:ae: 0f:d2:4c:98:0b:89:5b:89:fe:1c:cc:cb:d7:44:58:76:eb:e0: d0:dd:f0:4b:39:db:41:00:2d:98:34:f8:69:4f:0e:fb:00:f1: 74:e0:2e:f9:e9:ab:ef:59:5f:1a:72:6f:b2:47:5c:29:13:45: e2:7d:b4:f1:d3:4e:85:f8:0e:16:47:78:6b:07:f1:b8:c4:a1: e5:83:82:b7:f0:ee:97:55:c6:77:69:e9:85:50:f4:c2:a0:58: ce:09:d1:fe:de:88:5e:61:a1:09:ec:55:d6:a1:5d:77:58:84: 1b:33:2f:5e:cc:63:00:ca:10:55:6f:25:0b:29:80:87:cf:a8: e7:9b:17:c5:c8:0f:d5:e6:fe:14:8b:b4:16:5c:cf:9e:9a:ab: 90:a6:9c:b6:61:d9:39:9e:6f:15:d0:a9:34:d5:f2:55:ee:e4: 7b:78:f9:c1:7a:d5:c8:53:29:57:99:3a:84:88:26:d6:47:00: cf:ce:dc:24:cb:32:08:21:94:15:68:9c:5e:1d:f5:13:53:47: df:9f:14:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBXB3f+AgmDSRvmqqlK96ILLz9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTA4MDUxMTE1NDRaFw0yNTA4MDgyMzE1NDRaMDMxMTAvBgNV BAMTKDQ2RUE5M0I3N0FERUJFQUVEODQxRjA2MTNGNzc4OTM2NjUzMjMyODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDanRA43fI27+/CYSW1S22qbF5C uNoswdmrcCmEORY5O0CZzCXB0WguFIdpm4RRAr8295mdq9GpTw9lDQxTcKFmPjJt A430fEYPgyyadxIheKaT5px8gV/t922ZvmZluXkZsupW25e1EnoH9DRMHI86i7X1 xQzL3U9ZSr5n1uleTQgBH8UmilPJ9Es7IFwtLMyDWYxFyA5PU++GRYEwVMC35YQM DJxirTEQGwwiWodXJqHP7rxfIO3Kwj6tNLCMtD5NwXPQrpzUBmTHa50rS+BbD7VE n4wq9LMH7ZoZYI8Dk71V4TcIlc/aa5oeps20GGwINao0YtSKdgV6G1zPhqqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURuqTt3revq7YQfBhP3eJNmUyMoYwHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsLxs2cemZRdVvmnIC48a/sscq3yYyBcYk9 TcjrgnB0vnUuW0nlqJXbLTZmVXcsk7tsp+Hhrg/STJgLiVuJ/hzMy9dEWHbr4NDd 8Es520EALZg0+GlPDvsA8XTgLvnpq+9ZXxpyb7JHXCkTReJ9tPHTToX4DhZHeGsH 8bjEoeWDgrfw7pdVxndp6YVQ9MKgWM4J0f7eiF5hoQnsVdahXXdYhBszL17MYwDK EFVvJQspgIfPqOebF8XID9Xm/hSLtBZcz56aq5CmnLZh2TmebxXQqTTV8lXu5Ht4 +cF61chTKVeZOoSIJtZHAM/O3CTLMgghlBVonF4d9RNTR9+fFKU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:36 2025 by rpki-client