$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: P82/cy9dVUowGzMotfv2CaXNp2trhHzNreq3p4niy/Q= Subject key identifier: F4:CA:45:50:DF:4E:93:04:F0:76:88:29:EE:0E:11:2C:D0:76:9F:4F Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 7D139BCF890C234F37D4CDADEB668202384FA2AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 0501 Signing time: Fri 22 Aug 2025 03:00:44 +0000 Manifest this update: Fri 22 Aug 2025 02:55:44 +0000 Manifest next update: Mon 25 Aug 2025 06:07:44 +0000 Files and hashes: 1: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: Ar26vYZxMQiJIv6mt5CG8iUFNyJDuuLryrsD4WNc6qs=) 2: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=) 3: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=) 4: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=) 5: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AX4Jn83p+r0+t8Humc/TBfXoxrYw8H5KgdJEdvTF/+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:13:9b:cf:89:0c:23:4f:37:d4:cd:ad:eb:66:82:02:38:4f:a2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Aug 22 02:55:44 2025 GMT Not After : Aug 25 06:07:44 2025 GMT Subject: CN=F4CA4550DF4E9304F0768829EE0E112CD0769F4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:68:16:19:66:5c:dc:d4:11:9d:2d:d6:80: 50:28:03:16:09:50:02:c8:d2:7a:68:63:12:65:15: 01:f7:e4:b1:ff:90:68:ea:26:48:74:be:ae:46:3e: 69:df:87:5c:3e:6c:52:b5:6f:ed:79:5b:60:c3:5c: a8:3c:35:a9:5f:17:70:ab:6a:28:11:d8:95:b0:79: 0c:d0:28:88:3c:5a:7e:53:b0:3b:96:33:61:c2:c8: 80:f2:b2:ce:ff:3a:ba:55:b5:b8:fb:ed:23:de:30: cd:7c:d1:6b:e1:9f:ba:01:0e:56:fd:2e:65:b8:9a: 2b:45:ee:fe:80:dd:18:23:f9:d3:08:69:a7:40:81: 6d:47:9f:9c:d1:b9:0e:ed:ad:0c:51:d6:8b:d3:5a: 09:73:0b:ec:a2:73:ae:12:56:81:bf:39:d8:b4:3a: 90:4e:89:ab:f0:ed:d7:58:bb:d5:30:3d:25:6c:c2: 00:97:52:1c:e1:35:0c:cf:41:e8:06:47:e4:02:0e: 1b:c1:40:07:61:17:d0:3f:fc:25:75:82:96:77:0b: 1a:35:45:3f:2b:67:7e:8e:ce:1d:79:85:75:fe:d2: 7c:7b:89:1d:1a:6e:8c:f7:89:48:91:20:88:cc:61: 24:ad:a2:c5:96:3f:89:8a:12:24:4e:27:5f:58:05: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CA:45:50:DF:4E:93:04:F0:76:88:29:EE:0E:11:2C:D0:76:9F:4F X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:cb:7a:02:31:5b:5f:d4:e0:83:10:88:8d:96:49:e5:5a:8c: b6:3f:68:df:c0:1f:ae:e1:ed:47:84:8e:38:30:56:46:54:96: be:e4:be:f7:06:f7:97:2e:18:d6:90:35:dd:dd:3f:d7:ff:b1: d8:04:65:4b:a7:ef:74:2f:01:1b:f5:78:13:b3:26:fe:79:0d: 9a:c3:cc:48:1d:47:8c:51:96:55:f6:6e:9b:58:6a:a6:3d:9b: e5:b9:b2:4e:94:75:bf:12:b5:f7:4b:06:8b:1f:ba:05:d9:34: 35:a9:f5:99:24:f2:03:d4:a0:12:81:67:d5:d5:d9:58:b7:f5: 3b:57:2b:fb:c9:af:a7:ca:7b:6d:ed:61:9c:81:2c:ff:a9:51: ff:dd:2d:c7:ae:1f:e3:6b:a9:22:29:b2:f1:b3:85:d7:a1:ab: 23:df:33:c0:5e:4e:9b:5e:c6:b3:7d:99:69:3e:25:6c:85:a5: 3c:5c:ed:a5:51:21:df:51:d6:d5:13:06:7b:ce:2a:e4:79:a6: f7:41:58:37:b7:46:7f:63:91:5c:43:f0:74:26:c4:14:f0:5c: 04:04:cf:5c:99:d4:44:fc:a0:1e:9b:47:c7:04:cf:21:82:eb: a4:97:d0:42:e3:18:28:35:20:ad:7f:4e:fd:e5:40:87:9d:05: 2f:68:6f:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRObz4kMI0831M2t62aCAjhPoqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTA4MjIwMjU1NDRaFw0yNTA4MjUwNjA3NDRaMDMxMTAvBgNV BAMTKEY0Q0E0NTUwREY0RTkzMDRGMDc2ODgyOUVFMEUxMTJDRDA3NjlGNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWmgWGWZc3NQRnS3WgFAoAxYJ UALI0npoYxJlFQH35LH/kGjqJkh0vq5GPmnfh1w+bFK1b+15W2DDXKg8NalfF3Cr aigR2JWweQzQKIg8Wn5TsDuWM2HCyIDyss7/OrpVtbj77SPeMM180Wvhn7oBDlb9 LmW4mitF7v6A3Rgj+dMIaadAgW1Hn5zRuQ7trQxR1ovTWglzC+yic64SVoG/Odi0 OpBOiavw7ddYu9UwPSVswgCXUhzhNQzPQegGR+QCDhvBQAdhF9A//CV1gpZ3Cxo1 RT8rZ36Ozh15hXX+0nx7iR0aboz3iUiRIIjMYSStosWWP4mKEiROJ19YBavNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9MpFUN9OkwTwdogp7g4RLNB2n08wHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvLegIxW1/U4IMQiI2WSeVajLY/aN/AH67h 7UeEjjgwVkZUlr7kvvcG95cuGNaQNd3dP9f/sdgEZUun73QvARv1eBOzJv55DZrD zEgdR4xRllX2bptYaqY9m+W5sk6Udb8StfdLBosfugXZNDWp9Zkk8gPUoBKBZ9XV 2Vi39TtXK/vJr6fKe23tYZyBLP+pUf/dLceuH+NrqSIpsvGzhdehqyPfM8BeTpte xrN9mWk+JWyFpTxc7aVRId9R1tUTBnvOKuR5pvdBWDe3Rn9jkVxD8HQmxBTwXAQE z1yZ1ET8oB6bR8cEzyGC66SX0ELjGCg1IK1/Tv3lQIedBS9ob3k= -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:27 2025 by rpki-client