$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: 8jcEmw1j7sV8diqCnhxsMUBJnJETFlakFpXzWyLrW5s= Subject key identifier: 10:CC:E8:D7:35:90:61:E9:A1:53:12:0D:04:2E:BE:D1:72:1D:5C:77 Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 0E21861A212233B65FDE955A9176DB0C355ED225 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 02EE Signing time: Fri 22 Aug 2025 18:01:09 +0000 Manifest this update: Fri 22 Aug 2025 17:56:09 +0000 Manifest next update: Mon 25 Aug 2025 22:08:09 +0000 Files and hashes: 1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: 9MsBPqP2Pp+h8rePLC7YM1R6kSVvihUquqvXrbvTJdo=) 2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:21:86:1a:21:22:33:b6:5f:de:95:5a:91:76:db:0c:35:5e:d2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Aug 22 17:56:09 2025 GMT Not After : Aug 25 22:08:09 2025 GMT Subject: CN=10CCE8D7359061E9A153120D042EBED1721D5C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:df:f6:a8:d1:88:f4:72:be:ee:ba:cd:3c: 3c:76:f1:92:9e:4b:f4:54:57:4a:76:18:37:10:ed: 5f:f3:a4:e0:ad:0a:e6:e6:a0:62:63:75:fd:88:b3: 2e:b7:e3:6d:69:96:3a:c4:65:ce:9b:b7:05:96:89: 64:92:ed:0d:88:50:9c:e3:70:7f:3f:c7:a6:28:cf: 51:2d:8b:67:ab:67:74:23:04:00:1f:38:29:14:41: 17:b9:e1:b6:ca:08:9d:03:bd:2c:2e:56:46:23:cd: 6f:8a:9e:2e:7b:f8:44:1c:2c:f7:5b:70:90:5e:9c: 78:9a:5f:34:e4:b2:7e:76:96:8e:d4:e8:50:1d:bb: b6:db:cf:3f:09:f6:50:60:25:37:17:2b:7c:40:83: 96:22:fe:ef:94:64:60:da:5e:d7:d6:8a:ff:39:a7: 00:80:6a:31:35:60:11:36:38:fc:ee:44:d5:a0:03: 8e:25:f0:00:c1:ee:93:09:34:a3:f6:f0:b1:a8:ce: a2:10:b5:ba:f7:0e:9a:fe:5c:be:bb:6b:e4:6b:0c: 5e:8f:4f:54:39:82:a4:aa:4d:d9:6b:1d:ce:4a:36: 82:47:18:66:1e:ea:c7:ab:9e:41:16:97:39:3d:69: c2:d2:f4:50:da:09:7e:ed:79:54:a7:0e:2e:7b:01: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CC:E8:D7:35:90:61:E9:A1:53:12:0D:04:2E:BE:D1:72:1D:5C:77 X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:39:fc:f7:42:18:5b:ac:1f:db:4d:51:9f:2a:c8:8e:9d:04: 3b:fb:d7:3f:2a:63:d7:69:74:a8:db:64:ae:5d:38:2d:38:62: 95:a1:db:ac:17:73:98:f3:4d:2e:2d:6e:31:e4:f1:0b:58:ed: da:78:52:98:da:f3:e4:de:8b:e9:dd:30:b2:42:5e:42:8c:f8: 9e:4b:8c:20:b8:76:95:d8:d1:c9:13:ab:db:cb:23:e7:53:b3: d6:19:db:e6:f9:7c:0d:d6:c6:c9:fb:7b:eb:36:6b:8d:47:c7: 81:1a:a4:3c:d0:ca:88:4a:08:60:c2:ed:66:13:e3:37:13:54: e6:31:b2:55:cc:76:fc:0e:58:fd:5f:dc:15:9d:e8:e4:92:8a: c6:9b:a7:73:ab:d6:20:0c:e0:38:bd:6d:38:12:ff:3a:57:9d: 8d:47:a9:40:6e:da:ae:7e:b0:7a:97:e1:47:ac:8e:dc:e8:b4: 9a:c3:93:00:df:13:66:6f:6a:2e:64:42:43:12:7a:72:a0:80: 8e:ee:1b:cd:fc:aa:48:44:00:69:f7:27:41:ee:c1:ed:ca:8e: e0:b8:c8:c6:cb:6e:13:3a:a7:1a:26:a3:ba:ee:d3:18:fb:92: 51:17:65:f1:35:ec:23:bf:21:f6:31:42:77:d1:ba:d6:89:83: 8b:a1:30:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDiGGGiEiM7Zf3pVakXbbDDVe0iUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNTA4MjIxNzU2MDlaFw0yNTA4MjUyMjA4MDlaMDMxMTAvBgNV BAMTKDEwQ0NFOEQ3MzU5MDYxRTlBMTUzMTIwRDA0MkVCRUQxNzIxRDVDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbxt/2qNGI9HK+7rrNPDx28ZKe S/RUV0p2GDcQ7V/zpOCtCubmoGJjdf2Isy63421pljrEZc6btwWWiWSS7Q2IUJzj cH8/x6Yoz1Eti2erZ3QjBAAfOCkUQRe54bbKCJ0DvSwuVkYjzW+Kni57+EQcLPdb cJBenHiaXzTksn52lo7U6FAdu7bbzz8J9lBgJTcXK3xAg5Yi/u+UZGDaXtfWiv85 pwCAajE1YBE2OPzuRNWgA44l8ADB7pMJNKP28LGozqIQtbr3Dpr+XL67a+RrDF6P T1Q5gqSqTdlrHc5KNoJHGGYe6sernkEWlzk9acLS9FDaCX7teVSnDi57Ad+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEMzo1zWQYemhUxINBC6+0XIdXHcwHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI5/PdCGFusH9tNUZ8qyI6dBDv71z8qY9dp dKjbZK5dOC04YpWh26wXc5jzTS4tbjHk8QtY7dp4Upja8+Tei+ndMLJCXkKM+J5L jCC4dpXY0ckTq9vLI+dTs9YZ2+b5fA3Wxsn7e+s2a41Hx4EapDzQyohKCGDC7WYT 4zcTVOYxslXMdvwOWP1f3BWd6OSSisabp3Or1iAM4Di9bTgS/zpXnY1HqUBu2q5+ sHqX4UesjtzotJrDkwDfE2Zvai5kQkMSenKggI7uG838qkhEAGn3J0Huwe3KjuC4 yMbLbhM6pxomo7ru0xj7klEXZfE17CO/IfYxQnfRutaJg4uhMJ8= -----END CERTIFICATE-----Generated at Sat Aug 23 19:55:50 2025 by rpki-client