$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: EfuWvrswPwKyvzHzRFM8nh0Fckz59LThysEKJSfJzSg= Subject key identifier: CA:A3:12:0E:4B:BF:F5:9B:19:37:D5:3E:BC:10:CF:17:F1:AA:1C:37 Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 647BE0E4D300139652A14188FB5AC62A30336349 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 04DE Signing time: Wed 04 Jun 2025 04:00:43 +0000 Manifest this update: Wed 04 Jun 2025 03:55:43 +0000 Manifest next update: Sat 07 Jun 2025 12:14:43 +0000 Files and hashes: 1: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AX4Jn83p+r0+t8Humc/TBfXoxrYw8H5KgdJEdvTF/+E=) 2: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: 2Ta3m7+fLQfadcUeH330JhiN6I0jdVliTnJY1Ca7a9g=) 3: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=) 4: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: DXanr9rCtx6i+k0G2tD3+Tmn8iY0iPRqbe6UxiR1gjo=) 5: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: /WX8yCA5eyBT7h+J3vED28wdO9GDpBxOkwzal/IJark=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7b:e0:e4:d3:00:13:96:52:a1:41:88:fb:5a:c6:2a:30:33:63:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Jun 4 03:55:43 2025 GMT Not After : Jun 7 12:14:43 2025 GMT Subject: CN=CAA3120E4BBFF59B1937D53EBC10CF17F1AA1C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:91:c3:58:ef:64:25:95:1b:3d:6b:14:e9:63: 3a:1a:42:33:0c:ec:a1:42:89:10:98:eb:af:f4:0f: 42:e1:7b:10:b9:65:11:2f:54:ef:23:6f:6e:6d:9c: 11:f8:8d:3c:7b:61:f0:74:d7:ce:4d:be:0c:b5:a0: 5c:95:f6:5b:17:db:dc:5d:e5:6e:c5:6b:26:c0:7f: 6a:c1:7a:4d:60:71:a2:56:15:c3:de:03:59:3a:0f: 48:40:bb:3f:ea:ef:a3:75:78:54:f1:87:ed:10:f9: 71:9d:fe:dd:c2:f8:95:50:52:3c:9e:28:4c:a6:20: 2c:33:e3:d3:a9:cf:87:c3:b0:7d:7a:36:49:1a:5d: 8b:78:46:1b:9f:2a:3c:61:13:fb:55:9c:4b:fb:a0: fc:89:87:b9:be:a6:4c:1e:58:a7:5a:29:68:76:d7: c8:2a:65:6e:b3:4a:1c:11:ae:d6:07:55:0b:39:50: c6:e7:c7:51:88:d5:44:15:8d:8d:7a:a3:c7:a4:73: b9:58:0f:16:fe:db:7d:6a:d9:01:c5:d6:00:e3:83: a9:cf:83:82:03:a9:fb:d8:fa:1c:2d:99:44:3b:db: 04:56:cb:34:98:8e:9e:93:6b:49:d9:3d:f2:91:76: 9f:6f:9c:c6:4c:69:3e:cd:5f:f6:4e:cc:05:89:0c: 3b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A3:12:0E:4B:BF:F5:9B:19:37:D5:3E:BC:10:CF:17:F1:AA:1C:37 X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e9:33:be:f6:29:db:6a:90:0b:14:42:ac:e3:fd:40:84:bb: 03:85:be:9e:3c:ab:16:1c:d7:d4:44:88:43:8c:c7:5b:03:07: 57:fa:d3:02:85:24:7a:4c:5c:bb:37:0d:d1:db:09:aa:3e:18: 9e:26:52:ac:cc:a3:11:fa:d6:d0:5f:d8:4c:2d:91:df:86:87: 7c:ae:d1:5f:fa:82:a2:43:8c:1d:b3:de:67:93:03:6e:b0:66: 9c:98:e8:7f:b5:7e:52:db:36:20:64:3d:43:25:d7:06:bc:ad: 5c:46:fd:3d:b6:0c:9d:3b:d9:41:a9:83:1b:d0:4e:b2:b5:de: c6:e1:9e:fd:74:51:67:a9:60:49:9f:72:28:c8:bd:b0:5d:33: e6:8e:e3:b4:b8:ba:38:54:d8:bf:f2:98:0d:34:75:75:5c:93: 8a:20:0b:60:e4:17:a1:5f:69:60:c8:2c:d1:8e:d7:ce:d9:93: 65:68:7c:46:6e:9a:11:0b:9c:f3:a6:d8:c6:44:93:31:f5:1a: b5:11:03:78:c8:65:71:02:0e:a6:09:57:0b:f0:26:e9:c6:9f: 52:55:b5:99:7a:46:6f:35:d1:3a:93:48:40:23:0e:f5:f0:22: 07:c1:d4:86:05:7f:28:cd:ad:91:57:fe:8b:25:71:9c:8d:55: 5b:a0:85:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHvg5NMAE5ZSoUGI+1rGKjAzY0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTA2MDQwMzU1NDNaFw0yNTA2MDcxMjE0NDNaMDMxMTAvBgNV BAMTKENBQTMxMjBFNEJCRkY1OUIxOTM3RDUzRUJDMTBDRjE3RjFBQTFDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbkcNY72QllRs9axTpYzoaQjMM 7KFCiRCY66/0D0LhexC5ZREvVO8jb25tnBH4jTx7YfB0185Nvgy1oFyV9lsX29xd 5W7FaybAf2rBek1gcaJWFcPeA1k6D0hAuz/q76N1eFTxh+0Q+XGd/t3C+JVQUjye KEymICwz49Opz4fDsH16NkkaXYt4RhufKjxhE/tVnEv7oPyJh7m+pkweWKdaKWh2 18gqZW6zShwRrtYHVQs5UMbnx1GI1UQVjY16o8ekc7lYDxb+231q2QHF1gDjg6nP g4IDqfvY+hwtmUQ72wRWyzSYjp6Ta0nZPfKRdp9vnMZMaT7NX/ZOzAWJDDsbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyqMSDku/9ZsZN9U+vBDPF/GqHDcwHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXpM772KdtqkAsUQqzj/UCEuwOFvp48qxYc 19REiEOMx1sDB1f60wKFJHpMXLs3DdHbCao+GJ4mUqzMoxH61tBf2Ewtkd+Gh3yu 0V/6gqJDjB2z3meTA26wZpyY6H+1flLbNiBkPUMl1wa8rVxG/T22DJ072UGpgxvQ TrK13sbhnv10UWepYEmfcijIvbBdM+aO47S4ujhU2L/ymA00dXVck4ogC2DkF6Ff aWDILNGO187Zk2VofEZumhELnPOm2MZEkzH1GrURA3jIZXECDqYJVwvwJunGn1JV tZl6Rm810TqTSEAjDvXwIgfB1IYFfyjNrZFX/oslcZyNVVughfA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:59 2025 by rpki-client