$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: hAgBcKXOiqp6TQJAPqu454LD6gyQvci3ec0Ci/F8jHw= Subject key identifier: BF:F3:F0:51:62:7C:35:E2:14:BC:08:22:1C:DD:3B:00:B6:26:0E:8F Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 3A8968EE8BAD831B141651DC8A29257D303AE15F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 04F3 Signing time: Sun 20 Jul 2025 16:50:43 +0000 Manifest this update: Sun 20 Jul 2025 16:45:43 +0000 Manifest next update: Thu 24 Jul 2025 04:35:43 +0000 Files and hashes: 1: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AX4Jn83p+r0+t8Humc/TBfXoxrYw8H5KgdJEdvTF/+E=) 2: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=) 3: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=) 4: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: b3myOkJDy2iYTwxLtQL0p2MHcMYw6j8rPM7Rpcnk2jU=) 5: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:89:68:ee:8b:ad:83:1b:14:16:51:dc:8a:29:25:7d:30:3a:e1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Jul 20 16:45:43 2025 GMT Not After : Jul 24 04:35:43 2025 GMT Subject: CN=BFF3F051627C35E214BC08221CDD3B00B6260E8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:79:e1:3f:b7:b0:4f:9d:02:a3:3e:ac:4f:d9: a7:80:99:81:58:3a:57:85:d1:d7:df:28:8e:e6:74: ac:07:58:d4:79:d6:d0:b4:81:88:e4:07:a6:16:ea: 16:24:17:2f:08:3b:85:79:20:bf:36:88:eb:40:0c: 52:8c:5f:94:ff:76:d4:76:b3:2c:39:82:a8:e3:fb: f2:29:e7:74:76:28:32:62:20:72:7a:4d:7f:7a:28: 35:9f:a4:d5:4f:64:bf:e5:c3:8f:78:f5:31:96:25: 02:19:b2:b4:51:6b:b1:b7:f2:9d:30:dd:07:31:31: 51:72:58:1c:ae:ad:0c:df:6e:38:28:7d:ea:91:95: 6a:a3:93:c1:57:ee:30:36:19:f6:3d:be:fe:47:1f: 83:3a:7c:5a:31:ac:34:77:c8:02:3c:27:8e:07:28: 95:80:7d:43:2f:cc:2a:4e:4f:74:02:ad:15:d5:be: ba:d6:90:5e:fd:3d:bd:ce:d4:e4:64:39:94:fd:24: 15:1c:82:f6:c0:60:99:89:87:81:34:ea:70:1f:b1: 65:6a:b9:4b:93:bb:d2:11:e9:fa:b1:f3:d1:f3:60: ce:db:48:68:32:d5:2f:13:a9:6f:29:cb:d5:88:19: 8b:78:d6:fc:23:57:77:3e:72:24:bd:87:d1:39:6d: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F3:F0:51:62:7C:35:E2:14:BC:08:22:1C:DD:3B:00:B6:26:0E:8F X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:9f:f4:c4:ac:4a:56:f5:da:c7:df:8c:dd:ef:3a:38:16:6f: 45:94:e2:9e:3b:ff:0f:0a:50:9b:f0:4d:35:b6:e7:a6:8a:d5: a3:44:2c:b2:19:5c:db:c1:44:f7:68:13:31:09:a2:80:1f:52: 65:2a:75:93:fd:05:28:d9:1f:10:60:88:dc:ef:8c:0a:ce:b3: 42:b5:9e:b5:ab:11:42:83:9b:df:2d:78:42:53:3d:fe:28:d5: 79:32:a6:93:2d:c1:07:c4:c6:da:54:ef:fc:67:ed:4c:bd:46: cc:fc:38:65:08:c4:8b:cd:db:a7:b8:eb:1e:b7:3f:64:21:4f: 29:f6:81:94:90:b9:65:03:2e:cb:c9:2e:e2:1e:62:ef:bd:ac: fe:f2:54:da:9d:d5:db:c3:70:65:2f:d7:67:98:99:ff:5d:f1: fc:97:a7:10:11:78:3f:cc:e3:86:51:1c:b0:92:2e:85:a1:d4: 08:54:16:b4:4b:1c:bf:f7:f5:93:a0:02:fc:3b:0c:81:89:97: 00:30:ae:87:3f:2e:b6:28:56:8a:b8:39:3c:0b:ad:24:87:f0: f4:f6:32:fa:e0:bb:5d:9e:30:6e:0a:25:af:78:ca:8d:b2:61: 53:33:c8:8b:02:62:b3:59:1c:d9:b6:e6:b3:36:97:dd:9a:8e: 03:74:88:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOolo7outgxsUFlHciiklfTA64V8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTA3MjAxNjQ1NDNaFw0yNTA3MjQwNDM1NDNaMDMxMTAvBgNV BAMTKEJGRjNGMDUxNjI3QzM1RTIxNEJDMDgyMjFDREQzQjAwQjYyNjBFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIeeE/t7BPnQKjPqxP2aeAmYFY OleF0dffKI7mdKwHWNR51tC0gYjkB6YW6hYkFy8IO4V5IL82iOtADFKMX5T/dtR2 syw5gqjj+/Ip53R2KDJiIHJ6TX96KDWfpNVPZL/lw4949TGWJQIZsrRRa7G38p0w 3QcxMVFyWByurQzfbjgofeqRlWqjk8FX7jA2GfY9vv5HH4M6fFoxrDR3yAI8J44H KJWAfUMvzCpOT3QCrRXVvrrWkF79Pb3O1ORkOZT9JBUcgvbAYJmJh4E06nAfsWVq uUuTu9IR6fqx89HzYM7bSGgy1S8TqW8py9WIGYt41vwjV3c+ciS9h9E5beYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv/PwUWJ8NeIUvAgiHN07ALYmDo8wHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCf9MSsSlb12sffjN3vOjgWb0WU4p47/w8K UJvwTTW256aK1aNELLIZXNvBRPdoEzEJooAfUmUqdZP9BSjZHxBgiNzvjArOs0K1 nrWrEUKDm98teEJTPf4o1XkyppMtwQfExtpU7/xn7Uy9Rsz8OGUIxIvN26e46x63 P2QhTyn2gZSQuWUDLsvJLuIeYu+9rP7yVNqd1dvDcGUv12eYmf9d8fyXpxAReD/M 44ZRHLCSLoWh1AhUFrRLHL/39ZOgAvw7DIGJlwAwroc/LrYoVoq4OTwLrSSH8PT2 Mvrgu12eMG4KJa94yo2yYVMzyIsCYrNZHNm25rM2l92ajgN0iOg= -----END CERTIFICATE-----Generated at Mon Jul 21 10:32:33 2025 by rpki-client