$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: HAkyyqXVWecoaeTv1n3KBs1IKOqEYf3V2IUhojyWcgI= Subject key identifier: 1C:E1:54:54:8C:F5:C7:CD:08:4E:38:58:F4:3D:9C:A2:C2:6E:2C:C5 Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 56985CC8E4ACB23A72659CDB35E9E7BF09C48FCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 02D6 Signing time: Mon 30 Jun 2025 01:21:07 +0000 Manifest this update: Mon 30 Jun 2025 01:16:07 +0000 Manifest next update: Thu 03 Jul 2025 06:23:07 +0000 Files and hashes: 1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: uEaJa82UBU1IrpA0ZKaoY5YDui+3fVL/M0FKQ4gi0XE=) 2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: 8pvSL0egc+WMc+a2/glW47Xs8RpIIsEutGyuUrDJkHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 06:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:98:5c:c8:e4:ac:b2:3a:72:65:9c:db:35:e9:e7:bf:09:c4:8f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Jun 30 01:16:07 2025 GMT Not After : Jul 3 06:23:07 2025 GMT Subject: CN=1CE154548CF5C7CD084E3858F43D9CA2C26E2CC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:51:1b:a4:9b:e4:81:68:bb:f8:54:be:7c: 3b:18:0b:c6:4b:93:9e:cd:5c:b2:cb:62:5e:8f:2d: 90:ef:d3:3a:17:08:83:ac:53:41:77:b0:a7:53:fd: 4f:ec:56:ba:c7:ff:13:9d:d5:ef:86:37:b4:c7:8e: 57:d0:1f:d8:33:f5:81:58:0d:5f:ee:51:9d:32:20: ab:e2:ba:b6:3a:64:fb:78:fc:16:29:8a:8e:cd:4d: 00:ab:35:85:6a:d2:31:15:b6:13:6a:ba:95:c9:79: c6:85:42:5f:d3:ca:21:90:90:bd:44:4b:6f:72:eb: 6c:e8:94:93:ec:86:82:34:0e:4a:2b:c8:47:83:64: e9:65:b7:f5:d4:30:4b:f7:b3:83:7f:b3:ec:e2:9c: c7:91:e3:44:1a:89:21:ae:a8:f2:f9:0c:e3:72:18: a6:09:6f:d7:fa:49:b2:7d:6e:eb:2a:7b:68:84:98: 95:22:96:bf:31:8f:0b:ff:bb:79:34:07:45:14:29: 27:b5:71:5e:b8:c1:37:0e:da:4b:36:59:dd:ca:8c: 16:ba:9b:ed:e9:84:06:0e:ba:df:13:ef:96:a2:d4: 45:f6:96:da:16:f9:8c:9b:e0:a7:25:99:12:aa:d4: df:22:fc:d3:ac:41:b8:dd:8a:27:5a:59:d0:39:1b: 6e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E1:54:54:8C:F5:C7:CD:08:4E:38:58:F4:3D:9C:A2:C2:6E:2C:C5 X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:a8:2a:12:da:6d:2e:52:5e:8f:c4:21:28:07:f3:22:6f:f7: f1:9f:93:d5:d4:bd:12:bc:0e:4e:97:a6:14:d0:e2:2f:7f:e3: 7c:dd:4c:98:ce:50:76:ab:66:64:8a:4f:83:cd:83:96:fa:d6: db:66:d6:f8:f0:40:8c:b9:41:1e:cc:6a:3f:c6:49:9b:22:3e: e2:b7:fa:1f:ac:bc:9b:78:52:0d:49:78:e2:83:bf:29:98:95: f0:0c:08:e2:cd:b9:8d:f9:d6:96:f8:a8:42:96:5e:f1:a1:3f: db:fc:4f:0a:6b:a1:73:7d:6c:6d:88:9a:42:d6:a1:75:de:ce: 05:77:4a:58:84:eb:65:ed:f8:1e:37:5b:38:7f:68:24:76:1a: ea:f8:ed:84:a7:a2:37:26:0b:e6:9a:ca:eb:c8:d1:2e:72:41: 5c:44:37:05:fa:c0:32:b7:df:2a:b3:b2:94:20:3f:13:6d:57: 71:ca:e5:d1:09:6f:7d:4c:6d:8f:31:ba:c2:e8:0c:43:a3:3b: a9:69:e3:3a:8f:54:ad:2a:ef:e2:6b:f7:36:42:c0:21:e0:6c: bd:4a:a7:87:ed:db:eb:2c:1e:05:cd:f5:25:f7:e8:a4:63:ec: b7:f4:af:e4:83:6f:0d:e5:8e:ed:39:df:31:56:65:3a:bd:6b: d2:ad:3a:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVphcyOSssjpyZZzbNennvwnEj84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNTA2MzAwMTE2MDdaFw0yNTA3MDMwNjIzMDdaMDMxMTAvBgNV BAMTKDFDRTE1NDU0OENGNUM3Q0QwODRFMzg1OEY0M0Q5Q0EyQzI2RTJDQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmVEbpJvkgWi7+FS+fDsYC8ZL k57NXLLLYl6PLZDv0zoXCIOsU0F3sKdT/U/sVrrH/xOd1e+GN7THjlfQH9gz9YFY DV/uUZ0yIKviurY6ZPt4/BYpio7NTQCrNYVq0jEVthNqupXJecaFQl/TyiGQkL1E S29y62zolJPshoI0DkoryEeDZOllt/XUMEv3s4N/s+zinMeR40QaiSGuqPL5DONy GKYJb9f6SbJ9busqe2iEmJUilr8xjwv/u3k0B0UUKSe1cV64wTcO2ks2Wd3KjBa6 m+3phAYOut8T75ai1EX2ltoW+Yyb4KclmRKq1N8i/NOsQbjdiidaWdA5G26LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHOFUVIz1x80ITjhY9D2cosJuLMUwHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANioKhLabS5SXo/EISgH8yJv9/Gfk9XUvRK8 Dk6XphTQ4i9/43zdTJjOUHarZmSKT4PNg5b61ttm1vjwQIy5QR7Maj/GSZsiPuK3 +h+svJt4Ug1JeOKDvymYlfAMCOLNuY351pb4qEKWXvGhP9v8TwproXN9bG2ImkLW oXXezgV3SliE62Xt+B43Wzh/aCR2Gur47YSnojcmC+aayuvI0S5yQVxENwX6wDK3 3yqzspQgPxNtV3HK5dEJb31MbY8xusLoDEOjO6lp4zqPVK0q7+Jr9zZCwCHgbL1K p4ft2+ssHgXN9SX36KRj7Lf0r+SDbw3lju053zFWZTq9a9KtOoU= -----END CERTIFICATE-----Generated at Tue Jul 1 15:58:48 2025 by rpki-client