$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: ARmg4R4bgSQ/TOli+eld0RYNeUMBZD25V6klfOlewDU= Subject key identifier: C2:5B:19:9E:A1:0C:25:61:DD:EF:5F:73:C5:11:76:8E:2D:07:E9:C2 Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 736A213BA0497434B4F41DD7354080A3E47E1BF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 04D0 Signing time: Mon 05 May 2025 09:10:43 +0000 Manifest this update: Mon 05 May 2025 09:05:43 +0000 Manifest next update: Thu 08 May 2025 16:34:43 +0000 Files and hashes: 1: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: /WX8yCA5eyBT7h+J3vED28wdO9GDpBxOkwzal/IJark=) 2: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: 9l77c+ELVpnt8sBa7r5sdntlRqnRcBIJIYmt6ZvAHvU=) 3: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AX4Jn83p+r0+t8Humc/TBfXoxrYw8H5KgdJEdvTF/+E=) 4: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: H75EIrt2ahkV/OUTazoYaOig4txyFsHneI55ctNwcPg=) 5: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: DXanr9rCtx6i+k0G2tD3+Tmn8iY0iPRqbe6UxiR1gjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6a:21:3b:a0:49:74:34:b4:f4:1d:d7:35:40:80:a3:e4:7e:1b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: May 5 09:05:43 2025 GMT Not After : May 8 16:34:43 2025 GMT Subject: CN=C25B199EA10C2561DDEF5F73C511768E2D07E9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:c0:39:0d:b6:cf:20:f1:d3:5a:f0:ed:42: 58:e2:3b:94:b9:52:ef:37:ab:22:24:e9:f6:d4:a2: 8e:a1:d1:83:54:c1:e4:15:8e:98:18:79:59:96:d9: ef:67:98:cc:1c:19:2c:f4:e5:ad:cc:5a:89:4b:57: 5a:12:69:33:d9:40:bc:a9:88:41:3e:83:a8:00:23: f8:fb:56:50:a9:69:b1:53:54:cd:36:33:5d:39:38: 29:90:e2:fd:3d:e8:8c:be:80:74:7b:14:32:78:dc: 94:04:d0:04:31:b8:db:05:ef:01:85:a2:49:79:59: 45:cd:8e:ef:96:45:94:16:ed:48:ba:b4:81:3a:ac: ea:db:dd:64:e7:18:86:6b:45:44:6e:d1:68:96:7f: f3:7d:b4:e5:de:67:06:c1:b9:be:30:49:40:5a:fd: 02:90:28:38:11:7f:bb:5b:73:15:9c:09:81:f6:bc: c9:00:3e:76:12:c2:b9:d0:c5:c2:aa:43:01:58:e2: cf:13:11:17:38:5c:c0:3f:cd:96:00:f7:ec:ab:40: 5c:ba:6b:e0:6c:24:76:84:36:da:7b:71:02:a0:04: 61:da:ce:a3:8d:fd:d0:03:28:e6:5f:eb:ca:4f:92: a1:a0:91:30:2a:01:3f:60:68:d2:be:c1:2e:80:80: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5B:19:9E:A1:0C:25:61:DD:EF:5F:73:C5:11:76:8E:2D:07:E9:C2 X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:25:c0:bf:7c:3c:fb:6e:16:3b:1e:2b:f7:78:d7:4f:30:a0: 9f:3c:2e:e3:4c:39:f6:9d:14:10:e1:b2:f4:ed:e9:1c:37:fa: 76:a9:c3:fd:f5:e9:61:99:01:a3:a7:53:ee:98:15:b4:77:c7: 28:76:44:38:43:ee:52:6d:7e:f2:a9:dc:9b:78:be:d0:59:a2: 6d:55:d3:1f:7a:63:23:cf:4d:46:95:89:05:6d:91:7b:7f:06: 85:35:a0:a3:9d:a0:4f:c4:dd:18:67:05:90:40:47:b6:dd:09: 02:cd:13:7b:95:19:ab:7d:77:c6:36:bf:c2:f5:43:12:e7:b6: c3:1d:5d:05:96:56:f6:3a:36:d2:2a:6d:e9:78:48:5e:78:e9: d0:a3:86:f8:a4:43:ca:93:85:90:24:3f:ec:69:13:40:0e:e9: 50:3f:6f:eb:56:af:f1:b7:65:88:97:4e:e9:b8:66:df:8e:56: 42:e5:58:d8:db:0f:cf:e2:d6:5c:ae:11:a6:7a:9a:3f:0d:b7: 9e:f3:0d:78:6b:e1:ab:46:57:df:8c:08:fa:37:09:6a:e4:13: cc:b6:61:9d:9c:76:ea:5a:e3:e7:0e:d6:52:ee:8b:97:d7:3d: 8d:59:b6:6c:19:9f:76:5d:b0:2b:1b:29:70:c8:d9:02:80:ed: 1a:4b:bc:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2ohO6BJdDS09B3XNUCAo+R+G/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTA1MDUwOTA1NDNaFw0yNTA1MDgxNjM0NDNaMDMxMTAvBgNV BAMTKEMyNUIxOTlFQTEwQzI1NjFEREVGNUY3M0M1MTE3NjhFMkQwN0U5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWXsA5DbbPIPHTWvDtQljiO5S5 Uu83qyIk6fbUoo6h0YNUweQVjpgYeVmW2e9nmMwcGSz05a3MWolLV1oSaTPZQLyp iEE+g6gAI/j7VlCpabFTVM02M105OCmQ4v096Iy+gHR7FDJ43JQE0AQxuNsF7wGF okl5WUXNju+WRZQW7Ui6tIE6rOrb3WTnGIZrRURu0WiWf/N9tOXeZwbBub4wSUBa /QKQKDgRf7tbcxWcCYH2vMkAPnYSwrnQxcKqQwFY4s8TERc4XMA/zZYA9+yrQFy6 a+BsJHaENtp7cQKgBGHazqON/dADKOZf68pPkqGgkTAqAT9gaNK+wS6AgDVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlsZnqEMJWHd719zxRF2ji0H6cIwHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADglwL98PPtuFjseK/d4108woJ88LuNMOfad FBDhsvTt6Rw3+napw/316WGZAaOnU+6YFbR3xyh2RDhD7lJtfvKp3Jt4vtBZom1V 0x96YyPPTUaViQVtkXt/BoU1oKOdoE/E3RhnBZBAR7bdCQLNE3uVGat9d8Y2v8L1 QxLntsMdXQWWVvY6NtIqbel4SF546dCjhvikQ8qThZAkP+xpE0AO6VA/b+tWr/G3 ZYiXTum4Zt+OVkLlWNjbD8/i1lyuEaZ6mj8Nt57zDXhr4atGV9+MCPo3CWrkE8y2 YZ2cdupa4+cO1lLui5fXPY1ZtmwZn3ZdsCsbKXDI2QKA7RpLvBc= -----END CERTIFICATE-----Generated at Tue May 6 04:43:08 2025 by rpki-client