$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: 0/Z6n44I7ZJTEspMQev8trAfq8MTdimXrVHmrys245g= Subject key identifier: D9:DD:C4:5A:EA:97:E9:5E:65:94:AC:AE:88:3F:00:41:3E:13:92:48 Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 72C2731B6035C793D94492EB16BD8FACFCDD1166 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 0508 Signing time: Sun 07 Sep 2025 04:00:44 +0000 Manifest this update: Sun 07 Sep 2025 03:55:44 +0000 Manifest next update: Wed 10 Sep 2025 06:55:44 +0000 Files and hashes: 1: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=) 2: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: 6SCaGi69hnuiGohl6/rNzXkdbysh5K/hd/pdY0iTOU0=) 3: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=) 4: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AX4Jn83p+r0+t8Humc/TBfXoxrYw8H5KgdJEdvTF/+E=) 5: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c2:73:1b:60:35:c7:93:d9:44:92:eb:16:bd:8f:ac:fc:dd:11:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Sep 7 03:55:44 2025 GMT Not After : Sep 10 06:55:44 2025 GMT Subject: CN=D9DDC45AEA97E95E6594ACAE883F00413E139248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:07:bf:67:06:a2:53:98:bc:8c:78:8f:49: 6a:2b:fc:a6:37:15:47:9a:37:08:b4:6b:f9:c3:c1: d2:14:62:b6:0d:f3:76:36:da:76:53:0c:55:aa:63: 77:88:52:28:4e:91:58:b3:a3:9e:56:59:41:0e:1c: 8b:5a:97:4f:35:75:27:16:c4:09:f3:48:68:2b:49: d6:56:ef:ad:28:f5:ac:ff:14:1b:a9:e3:56:7c:94: 0e:8d:8e:65:f1:70:5a:6d:6d:dd:e6:19:3f:00:5a: 6e:45:29:3c:80:1c:80:7e:f7:1d:f9:10:35:9f:af: fb:98:c4:2d:42:9a:0f:da:3f:a4:4c:e5:d7:43:3f: bc:6e:cb:e6:5f:e3:f7:39:0d:c9:e5:b1:8e:be:7c: 28:42:fa:d6:d7:0f:ec:01:e6:ea:25:d7:21:27:01: 21:c5:7f:6e:45:3c:d9:25:f7:1f:52:9c:98:39:69: 23:8e:fe:63:b5:ab:27:7f:6b:43:70:4c:06:ea:85: 89:18:b6:68:31:7c:40:de:77:fc:9a:c9:8b:9c:aa: 39:c8:73:42:fe:48:d2:a1:2b:5d:82:5f:63:59:96: a1:27:92:50:64:d5:c6:8d:3d:5f:bc:bd:ed:86:84: 08:a2:e2:f0:9a:8c:cb:ae:b3:63:dc:b5:e4:3e:52: 75:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DD:C4:5A:EA:97:E9:5E:65:94:AC:AE:88:3F:00:41:3E:13:92:48 X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:84:6c:08:02:4c:09:49:ed:e9:33:29:d1:8e:6f:10:ef:ca: 87:0e:31:e4:e4:43:57:ad:71:66:04:86:ec:2b:35:5c:4e:e0: ec:04:b6:d2:e5:de:b0:a9:cd:7f:96:1e:f8:18:6b:6d:9e:cb: 54:07:8a:12:10:5b:96:2d:bf:61:1d:67:70:0d:74:97:93:b4: f8:71:b6:f6:76:70:14:eb:d8:69:61:83:98:72:0d:06:44:57: 7a:cb:18:53:70:8f:2d:04:24:49:c0:2a:87:21:ed:64:28:ff: d5:b6:49:fc:f0:41:d2:01:29:d8:2a:dd:68:d1:a6:99:3d:51: 9c:d2:ca:f8:23:c7:82:5b:46:67:8e:c2:7c:16:c3:4c:5b:59: 83:46:6b:a0:cd:5a:dd:84:f8:21:8d:7c:79:d6:25:bd:ea:b0: 86:3a:b9:e2:ae:49:3c:ee:a4:8e:f9:c4:90:0a:98:1b:1d:41: cc:74:27:b7:06:09:1b:24:72:53:4a:81:4b:62:c4:a5:99:99: 84:eb:63:dd:18:a8:34:a2:c0:f1:ca:86:cd:13:e1:ad:d4:be: c8:1a:ef:f5:10:16:1b:86:35:bf:96:79:66:fa:7c:6f:62:c0: ad:d2:c5:ae:f4:16:42:7c:82:62:b0:69:10:0e:ec:79:c5:29: de:27:d3:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsJzG2A1x5PZRJLrFr2PrPzdEWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTA5MDcwMzU1NDRaFw0yNTA5MTAwNjU1NDRaMDMxMTAvBgNV BAMTKEQ5RERDNDVBRUE5N0U5NUU2NTk0QUNBRTg4M0YwMDQxM0UxMzkyNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/we/ZwaiU5i8jHiPSWor/KY3 FUeaNwi0a/nDwdIUYrYN83Y22nZTDFWqY3eIUihOkVizo55WWUEOHItal081dScW xAnzSGgrSdZW760o9az/FBup41Z8lA6NjmXxcFptbd3mGT8AWm5FKTyAHIB+9x35 EDWfr/uYxC1Cmg/aP6RM5ddDP7xuy+Zf4/c5DcnlsY6+fChC+tbXD+wB5uol1yEn ASHFf25FPNkl9x9SnJg5aSOO/mO1qyd/a0NwTAbqhYkYtmgxfEDed/yayYucqjnI c0L+SNKhK12CX2NZlqEnklBk1caNPV+8ve2GhAii4vCajMuus2PcteQ+UnXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2d3EWuqX6V5llKyuiD8AQT4TkkgwHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWEbAgCTAlJ7ekzKdGObxDvyocOMeTkQ1et cWYEhuwrNVxO4OwEttLl3rCpzX+WHvgYa22ey1QHihIQW5Ytv2EdZ3ANdJeTtPhx tvZ2cBTr2Glhg5hyDQZEV3rLGFNwjy0EJEnAKoch7WQo/9W2SfzwQdIBKdgq3WjR ppk9UZzSyvgjx4JbRmeOwnwWw0xbWYNGa6DNWt2E+CGNfHnWJb3qsIY6ueKuSTzu pI75xJAKmBsdQcx0J7cGCRskclNKgUtixKWZmYTrY90YqDSiwPHKhs0T4a3Uvsga 7/UQFhuGNb+WeWb6fG9iwK3Sxa70FkJ8gmKwaRAO7HnFKd4n04o= -----END CERTIFICATE-----Generated at Mon Sep 8 03:04:42 2025 by rpki-client