$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: UV3y5s61QD4exRKfuQjKpOGOjnCkiF7nVRlZmnyYA9w= Subject key identifier: 38:0D:6A:DB:0E:C9:FE:E2:5C:9E:4A:CC:0E:AE:39:BF:F4:5B:EF:67 Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 127A8370DBD5CC996677CD3EB8424B49E71F97C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 02BF Signing time: Sat 10 May 2025 05:31:08 +0000 Manifest this update: Sat 10 May 2025 05:26:08 +0000 Manifest next update: Tue 13 May 2025 12:09:08 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: 8pvSL0egc+WMc+a2/glW47Xs8RpIIsEutGyuUrDJkHQ=) 2: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: zejkMaB/Qm3HhvU6dG0dD14XKwAzYUauCaNIev9em6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7a:83:70:db:d5:cc:99:66:77:cd:3e:b8:42:4b:49:e7:1f:97:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: May 10 05:26:08 2025 GMT Not After : May 13 12:09:08 2025 GMT Subject: CN=380D6ADB0EC9FEE25C9E4ACC0EAE39BFF45BEF67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5b:c2:fe:e0:ce:43:ed:6b:a2:25:87:eb:e9: 59:d2:df:93:d4:10:32:98:4e:c2:c1:4f:2f:15:01: 6c:9a:99:d8:4b:b7:8f:4e:8b:54:b1:5f:88:52:24: 30:4a:ec:90:b3:1e:b0:18:96:9a:ce:b1:9c:33:66: e3:13:6a:ad:c6:c0:49:7f:7b:26:82:d4:b8:0c:00: 72:d3:3a:3f:24:28:fa:c9:92:3c:ee:8c:61:b2:bc: 82:db:ce:f3:28:3f:cd:52:98:9c:c5:7a:c8:25:ab: 85:93:c7:ff:27:6e:c9:44:d9:ee:d9:d5:42:ce:9a: 6a:c5:67:a1:1e:4d:97:49:99:6a:e6:67:23:be:df: f7:d2:66:6e:b8:ba:30:86:3a:d4:2f:12:c2:43:9e: 27:e2:45:63:03:11:a3:08:04:a4:64:5a:9e:7a:db: 70:6f:f8:c2:76:24:81:e1:89:ae:70:89:75:89:24: e5:44:5d:cc:41:ba:fe:a9:4f:66:5b:fa:27:f8:ef: d6:3a:48:91:aa:dd:90:90:66:85:d4:7d:bf:c8:d7: e4:53:8b:e1:a3:2e:a4:ea:26:6e:5c:0b:19:00:eb: 57:0f:8c:44:79:03:b4:c9:d8:0d:00:55:0b:5a:5a: 73:a3:4d:af:cd:9e:2c:21:07:29:e8:5a:33:df:da: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0D:6A:DB:0E:C9:FE:E2:5C:9E:4A:CC:0E:AE:39:BF:F4:5B:EF:67 X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:aa:8c:61:cb:ee:74:fd:10:b4:fa:41:17:9f:53:0b:33:e4: 67:cf:c2:09:81:30:7c:73:3a:e2:34:07:69:1f:d7:63:59:72: 09:7e:a5:9e:a3:71:64:9f:98:bb:e9:89:4d:68:bf:b0:0a:ec: 13:3a:b6:8a:ea:41:55:54:88:83:c1:e3:26:e9:a4:bc:ba:46: c0:88:47:67:7b:bf:d7:5e:48:0c:a9:0f:57:ca:10:5c:49:5c: e3:16:ed:d0:ef:ba:3d:ff:63:7c:c2:6d:5d:0e:ff:9f:79:07: e7:91:95:ee:1f:13:10:fe:97:3f:61:45:6c:56:75:ff:db:ea: 58:61:32:ed:84:04:58:10:31:55:37:fb:22:a6:27:93:d0:cc: 21:b1:3d:cb:f1:3d:7d:9e:c2:67:9f:a9:2e:35:eb:11:06:5f: a0:3b:91:b0:00:4e:0f:50:91:58:72:2c:9b:bd:af:8d:c3:74: 66:c7:bd:67:a9:b7:e9:cf:00:ac:fe:cf:12:31:f9:d4:d0:3c: 3a:30:65:b2:04:db:7a:ba:8f:31:9c:76:27:f1:5b:8f:e4:f3: 4a:df:a1:3a:d1:81:19:0f:07:87:ef:f5:b4:0c:2f:a1:12:da: c9:a5:2f:09:75:04:38:d8:70:14:03:22:30:8f:13:7a:e6:06: de:c1:24:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEnqDcNvVzJlmd80+uEJLSecfl8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNTA1MTAwNTI2MDhaFw0yNTA1MTMxMjA5MDhaMDMxMTAvBgNV BAMTKDM4MEQ2QURCMEVDOUZFRTI1QzlFNEFDQzBFQUUzOUJGRjQ1QkVGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmW8L+4M5D7WuiJYfr6VnS35PU EDKYTsLBTy8VAWyamdhLt49Oi1SxX4hSJDBK7JCzHrAYlprOsZwzZuMTaq3GwEl/ eyaC1LgMAHLTOj8kKPrJkjzujGGyvILbzvMoP81SmJzFesglq4WTx/8nbslE2e7Z 1ULOmmrFZ6EeTZdJmWrmZyO+3/fSZm64ujCGOtQvEsJDnifiRWMDEaMIBKRkWp56 23Bv+MJ2JIHhia5wiXWJJOVEXcxBuv6pT2Zb+if479Y6SJGq3ZCQZoXUfb/I1+RT i+GjLqTqJm5cCxkA61cPjER5A7TJ2A0AVQtaWnOjTa/NniwhBynoWjPf2qDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOA1q2w7J/uJcnkrMDq45v/Rb72cwHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2qjGHL7nT9ELT6QRefUwsz5GfPwgmBMHxz OuI0B2kf12NZcgl+pZ6jcWSfmLvpiU1ov7AK7BM6torqQVVUiIPB4ybppLy6RsCI R2d7v9deSAypD1fKEFxJXOMW7dDvuj3/Y3zCbV0O/595B+eRle4fExD+lz9hRWxW df/b6lhhMu2EBFgQMVU3+yKmJ5PQzCGxPcvxPX2ewmefqS416xEGX6A7kbAATg9Q kVhyLJu9r43DdGbHvWept+nPAKz+zxIx+dTQPDowZbIE23q6jzGcdifxW4/k80rf oTrRgRkPB4fv9bQML6ES2smlLwl1BDjYcBQDIjCPE3rmBt7BJMU= -----END CERTIFICATE-----Generated at Sat May 10 18:04:27 2025 by rpki-client