$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: b1fF6xsV7lkivkEhpaER84agpt9QfC+sGP9NeptaQOE= Subject key identifier: EB:AD:F1:E3:48:2B:D4:C3:98:21:27:BD:DE:E2:DE:8C:E4:9F:EA:8E Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 7647A40FB4E336D83AC88F60ACB769C98D3FDF9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 034E Signing time: Wed 25 Mar 2026 18:51:18 +0000 Manifest this update: Wed 25 Mar 2026 18:46:18 +0000 Manifest next update: Sat 28 Mar 2026 22:27:18 +0000 Files and hashes: 1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: FzAVyZ1HIdIjRUTdYlZJlXFY84VVOfSekKzfu3f3KhA=) 2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:47:a4:0f:b4:e3:36:d8:3a:c8:8f:60:ac:b7:69:c9:8d:3f:df:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Mar 25 18:46:18 2026 GMT Not After : Mar 28 22:27:18 2026 GMT Subject: CN=EBADF1E3482BD4C3982127BDDEE2DE8CE49FEA8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:c5:fc:ae:87:f8:06:2f:67:f5:df:83:89: 10:9b:f2:50:4f:be:49:5f:7e:46:b4:53:ff:b7:e6: 1e:ac:af:3e:a1:43:62:43:40:ae:33:c2:28:d6:bb: 5f:85:be:55:42:2f:2c:3d:a8:45:51:80:55:f4:67: 0d:e2:8c:7e:05:29:c2:3d:e0:af:2a:27:47:08:b4: 20:b7:e1:65:6e:d0:b5:cc:93:2e:5f:a1:94:e8:c0: 5c:27:9b:8b:9c:73:62:07:98:9e:58:8e:7a:81:41: 49:1a:84:0f:5c:79:b5:be:f4:df:48:c3:e7:5b:30: b5:20:4b:e4:bd:9b:36:d7:7b:26:2b:f0:25:44:77: 1a:06:76:c0:e0:a8:09:6f:30:f9:8b:84:2f:c9:2a: b3:5d:2a:be:d2:a6:2d:5e:65:da:22:c3:d0:eb:ff: 93:50:87:dc:92:c0:d7:4c:b1:e2:f5:dc:2e:86:9e: e7:b0:a7:29:22:f8:b5:d6:79:06:6f:2c:cd:f3:cb: 27:16:79:fc:b5:85:77:25:8a:5d:ed:41:51:78:e3: bd:59:c8:f1:9a:0f:47:d1:cb:1a:0c:15:94:61:eb: 8d:4a:0f:9c:55:ab:5c:8c:2e:d9:d0:55:af:06:ee: e2:a2:79:21:cd:6d:ee:1c:de:e2:28:a3:25:9e:a7: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AD:F1:E3:48:2B:D4:C3:98:21:27:BD:DE:E2:DE:8C:E4:9F:EA:8E X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:fe:80:10:ba:32:08:45:52:e7:68:68:57:49:be:4c:76:da: e1:90:28:59:85:1a:1b:e6:39:e6:9a:2c:96:10:9a:b1:09:00: 80:4d:8d:75:58:30:96:dd:07:85:71:c3:93:db:db:73:68:9e: 37:0c:52:47:4a:8e:84:27:a6:45:2f:4d:8f:60:3d:13:c5:0e: 4c:4f:a5:bd:99:e2:14:91:ec:fd:f5:49:54:d9:5e:47:aa:8c: a1:2b:ff:a8:26:70:e3:86:fc:92:89:f7:56:2c:2d:e1:12:dd: 93:d0:04:7c:f5:ec:70:67:7b:3a:ec:06:d9:68:93:17:64:0b: 8e:43:67:b1:40:c3:35:76:2d:ee:62:60:35:e1:db:7e:41:cc: 97:9c:f3:77:12:84:92:3b:e2:56:e7:a6:59:a3:de:da:50:18: 95:aa:4c:3b:9e:3e:5c:5b:8c:e4:46:4d:5f:20:67:85:09:e8: 92:dd:a7:a3:2d:4a:61:f3:79:3d:45:f6:14:cb:4b:c6:f2:c5: f1:cd:3d:34:44:d3:37:27:6d:ff:f1:96:45:82:b0:72:ad:c3: d2:3d:49:da:95:47:8d:cb:27:b8:5e:92:16:47:e2:a0:07:4d: 0a:3c:a5:f0:b6:7a:0e:e8:a9:99:3c:6a:89:11:fa:4d:1d:e2: 62:ca:c1:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkekD7TjNtg6yI9grLdpyY0/35swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNjAzMjUxODQ2MThaFw0yNjAzMjgyMjI3MThaMDMxMTAvBgNV BAMTKEVCQURGMUUzNDgyQkQ0QzM5ODIxMjdCRERFRTJERThDRTQ5RkVBOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEsX8rof4Bi9n9d+DiRCb8lBP vklffka0U/+35h6srz6hQ2JDQK4zwijWu1+FvlVCLyw9qEVRgFX0Zw3ijH4FKcI9 4K8qJ0cItCC34WVu0LXMky5foZTowFwnm4ucc2IHmJ5YjnqBQUkahA9cebW+9N9I w+dbMLUgS+S9mzbXeyYr8CVEdxoGdsDgqAlvMPmLhC/JKrNdKr7Spi1eZdoiw9Dr /5NQh9ySwNdMseL13C6Gnuewpyki+LXWeQZvLM3zyycWefy1hXclil3tQVF4471Z yPGaD0fRyxoMFZRh641KD5xVq1yMLtnQVa8G7uKieSHNbe4c3uIooyWep2e1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU663x40gr1MOYISe93uLejOSf6o4wHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALT+gBC6MghFUudoaFdJvkx22uGQKFmFGhvm OeaaLJYQmrEJAIBNjXVYMJbdB4Vxw5Pb23NonjcMUkdKjoQnpkUvTY9gPRPFDkxP pb2Z4hSR7P31SVTZXkeqjKEr/6gmcOOG/JKJ91YsLeES3ZPQBHz17HBnezrsBtlo kxdkC45DZ7FAwzV2Le5iYDXh235BzJec83cShJI74lbnplmj3tpQGJWqTDuePlxb jORGTV8gZ4UJ6JLdp6MtSmHzeT1F9hTLS8byxfHNPTRE0zcnbf/xlkWCsHKtw9I9 SdqVR43LJ7hekhZH4qAHTQo8pfC2eg7oqZk8aokR+k0d4mLKwdc= -----END CERTIFICATE-----Generated at Thu Mar 26 08:58:15 2026 by rpki-client