$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: KWTGpCCUWh5wYURWA5rie55DO0dmHBW1aBt9XsfX6Sw= Subject key identifier: 4B:31:94:EA:EA:83:53:7D:7F:03:ED:38:3A:C7:4C:49:5F:D3:39:07 Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 1D03A16030F3F75AC6991400A378052B201DEDAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 04E9 Signing time: Sun 29 Jun 2025 05:40:44 +0000 Manifest this update: Sun 29 Jun 2025 05:35:44 +0000 Manifest next update: Wed 02 Jul 2025 06:15:44 +0000 Files and hashes: 1: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=) 2: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: AX4Jn83p+r0+t8Humc/TBfXoxrYw8H5KgdJEdvTF/+E=) 3: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=) 4: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: +8RThrHEejJtO1loQm6+xq6lKeD72htQ3Pcl4pwKU7s=) 5: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:03:a1:60:30:f3:f7:5a:c6:99:14:00:a3:78:05:2b:20:1d:ed:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Jun 29 05:35:44 2025 GMT Not After : Jul 2 06:15:44 2025 GMT Subject: CN=4B3194EAEA83537D7F03ED383AC74C495FD33907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:c1:88:bf:c1:d4:a7:f6:df:dd:fa:40:95: 64:b2:fe:15:b3:04:aa:bf:f8:b6:cc:e3:9e:a7:1e: 2b:ea:8b:1c:cb:12:cf:e7:b3:1a:28:d8:92:e8:a9: 40:b1:2d:0e:00:63:1e:9a:40:9d:30:7c:b5:65:26: cf:cd:51:95:0c:92:5c:69:3f:e5:2a:95:db:e3:5d: c2:d7:4a:ab:5f:0c:4e:fe:37:32:b3:32:7e:21:91: 95:a3:06:de:7a:0f:3b:56:b2:e4:8c:69:c5:ae:65: ce:26:f0:11:66:04:88:e0:0c:b2:3b:83:11:89:d2: 68:ed:b5:43:6c:dd:a9:e1:19:be:1e:ee:4f:cb:b3: 20:5d:4a:a1:a2:fd:1a:07:1c:4e:c0:5f:79:97:97: 5f:b4:25:4e:53:f9:cf:10:f8:bc:e4:d3:60:ec:64: 93:33:ce:62:b5:f6:2d:91:b9:c1:84:a5:eb:25:4f: 52:36:21:00:e7:25:69:ed:90:9f:e4:e5:b5:75:7d: 2b:cd:f9:86:ee:1e:9c:c1:82:c9:c5:fa:75:ad:22: f1:d3:af:cf:27:2e:48:cd:46:be:70:3b:eb:72:5c: 84:e1:4f:30:d9:f8:ae:59:08:99:a6:dd:80:d7:9f: 82:ff:e3:a3:e4:55:dd:b6:21:91:29:ea:50:a8:02: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:31:94:EA:EA:83:53:7D:7F:03:ED:38:3A:C7:4C:49:5F:D3:39:07 X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:67:fa:15:3f:5b:95:00:2c:be:6d:0d:c2:03:08:77:5b:ac: cd:2c:2d:ce:6b:9c:e1:42:46:ec:1c:49:3a:47:a5:9d:5c:c2: c8:df:de:e9:ca:3f:c3:1d:e7:e5:b6:03:d8:bb:19:42:71:b5: 6f:db:03:98:47:df:c5:45:fc:e1:0e:bd:88:6f:71:da:2d:2b: 97:44:e0:07:d9:97:b7:8b:dd:86:dc:2f:62:96:77:24:3f:ce: c6:b4:6c:a6:86:58:98:72:30:11:f2:9e:ed:22:97:83:bb:cd: 0a:94:d3:82:a0:19:f7:ad:e6:9d:c9:94:00:71:0c:f8:1e:a4: 33:ef:88:29:fc:30:a4:7a:67:c5:a0:e7:e3:d1:43:97:ca:71: e7:cf:1a:a6:b7:ce:db:01:c6:d2:b0:b1:00:88:a4:3b:c3:80: 7e:ab:94:2e:de:8d:c8:2a:80:a7:8e:2e:fd:d3:a1:d2:f7:a0: fb:89:18:85:df:57:a7:3c:83:04:65:f6:51:13:22:4a:5e:85: a0:b8:79:e6:73:6c:75:09:4a:50:67:27:19:1e:5a:c8:e3:1b: fc:9e:a1:3e:18:b3:e9:77:4d:8b:9f:dd:17:7d:66:2e:c1:80: 84:a7:65:44:a8:25:76:a0:68:70:35:c4:a4:85:d0:7f:2f:f5: 45:72:58:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQOhYDDz91rGmRQAo3gFKyAd7a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTA2MjkwNTM1NDRaFw0yNTA3MDIwNjE1NDRaMDMxMTAvBgNV BAMTKDRCMzE5NEVBRUE4MzUzN0Q3RjAzRUQzODNBQzc0QzQ5NUZEMzM5MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x8GIv8HUp/bf3fpAlWSy/hWz BKq/+LbM456nHivqixzLEs/nsxoo2JLoqUCxLQ4AYx6aQJ0wfLVlJs/NUZUMklxp P+UqldvjXcLXSqtfDE7+NzKzMn4hkZWjBt56DztWsuSMacWuZc4m8BFmBIjgDLI7 gxGJ0mjttUNs3anhGb4e7k/LsyBdSqGi/RoHHE7AX3mXl1+0JU5T+c8Q+Lzk02Ds ZJMzzmK19i2RucGEpeslT1I2IQDnJWntkJ/k5bV1fSvN+YbuHpzBgsnF+nWtIvHT r88nLkjNRr5wO+tyXIThTzDZ+K5ZCJmm3YDXn4L/46PkVd22IZEp6lCoAlwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSzGU6uqDU31/A+04OsdMSV/TOQcwHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJn+hU/W5UALL5tDcIDCHdbrM0sLc5rnOFC RuwcSTpHpZ1cwsjf3unKP8Md5+W2A9i7GUJxtW/bA5hH38VF/OEOvYhvcdotK5dE 4AfZl7eL3YbcL2KWdyQ/zsa0bKaGWJhyMBHynu0il4O7zQqU04KgGfet5p3JlABx DPgepDPviCn8MKR6Z8Wg5+PRQ5fKcefPGqa3ztsBxtKwsQCIpDvDgH6rlC7ejcgq gKeOLv3TodL3oPuJGIXfV6c8gwRl9lETIkpehaC4eeZzbHUJSlBnJxkeWsjjG/ye oT4Ys+l3TYuf3Rd9Zi7BgISnZUSoJXagaHA1xKSF0H8v9UVyWIQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:18:37 2025 by rpki-client