$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: o4gwcK0qHp3z74JyjSLydc5Aeo/ufPYlNdGi5xeIJBo= Subject key identifier: 48:39:CE:3B:74:45:F8:02:BB:AB:2C:A5:F7:00:5F:67:2F:D0:01:F6 Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 540F7CE24863C2ABD9A9EB5DA137A446A0F3CEE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 0308 Signing time: Sun 19 Oct 2025 23:11:10 +0000 Manifest this update: Sun 19 Oct 2025 23:06:10 +0000 Manifest next update: Thu 23 Oct 2025 08:27:10 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=) 2: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: ybvDzwAuJQ6Kst3Nzr3C0MqcuIRD3+PFdezY53M0WKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:0f:7c:e2:48:63:c2:ab:d9:a9:eb:5d:a1:37:a4:46:a0:f3:ce:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Oct 19 23:06:10 2025 GMT Not After : Oct 23 08:27:10 2025 GMT Subject: CN=4839CE3B7445F802BBAB2CA5F7005F672FD001F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:88:2a:06:67:7d:8b:48:d0:d9:3c:28:bb:1e: 5e:c1:2c:fd:5c:a0:31:35:d6:e2:47:86:bd:b0:f5: 0b:15:7e:07:3d:a5:7c:1e:30:7d:6f:4e:56:cd:f7: 5c:e0:ae:69:b0:a3:b1:e3:14:ba:6a:0d:88:c4:b3: a6:cc:7d:e0:b7:3d:6a:6b:6e:cb:bf:bb:7d:eb:6e: e9:cd:12:9d:6e:94:28:f5:9b:7f:bc:46:0a:82:70: a6:54:79:52:a8:79:65:c9:4a:2e:91:a9:a0:0e:9c: 90:d4:27:7d:97:b1:ed:57:37:e9:71:95:8a:08:c0: 8a:18:aa:0e:0b:2b:ec:c5:52:b7:c6:09:b1:62:cf: 14:c7:dd:45:ba:7c:2d:06:55:52:fd:1e:34:5a:01: 7f:6d:dd:a8:a6:d8:f4:c4:4b:16:89:eb:0f:4c:c7: f3:15:0f:a8:52:a8:1c:bf:ff:aa:07:5d:d9:e2:ee: ad:f7:a3:bb:de:bf:7c:0e:b4:13:41:60:00:2f:e8: fa:40:74:2b:27:98:61:4c:d1:f4:f6:a0:ef:72:8b: b7:3d:b7:2b:57:c5:e7:e7:77:3d:0f:72:3e:09:d0: 32:bc:4b:b3:9e:85:41:bb:a3:6b:7c:2d:f6:9a:cc: b1:11:e6:81:e8:39:1c:97:c5:bc:c7:0f:2c:ec:53: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:39:CE:3B:74:45:F8:02:BB:AB:2C:A5:F7:00:5F:67:2F:D0:01:F6 X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:c5:8d:aa:23:af:75:fc:8e:fb:d2:48:48:e8:da:bc:fc:26: 65:2f:4f:dd:69:8e:87:c6:60:4e:64:db:35:58:69:c9:c9:92: ca:8d:b7:d4:23:96:84:ab:30:7d:ed:ff:97:84:04:19:b3:fd: 6d:e3:5d:5a:4f:a7:01:5a:f6:19:6e:f0:6b:56:fe:3f:80:03: 50:52:71:99:7e:b9:e3:52:9a:c1:f9:d1:ef:c8:c4:4d:46:ba: 9d:d4:a9:58:f9:10:98:f2:08:36:58:50:9a:56:47:c2:a0:ef: fc:1d:32:1d:cf:bc:d1:44:6c:99:91:40:f2:83:a5:13:4c:09: b8:1e:b6:83:03:39:bb:e2:3c:54:d7:70:e5:14:65:ca:2c:84: e1:38:7b:55:b5:6c:bf:0f:c7:93:4f:2c:04:3c:22:b7:4e:a3: ff:1c:08:49:89:89:a4:42:92:aa:79:0e:84:ff:30:70:d9:d3: 29:8e:96:46:c4:db:ea:90:60:c3:3d:4f:59:43:85:b3:05:09: 41:c8:27:d7:11:a2:26:45:cf:fb:19:a4:10:15:63:aa:ff:27: 6a:61:ee:96:6c:61:f0:a2:52:dc:f4:8d:ae:0e:05:ce:09:63: 8f:90:51:4c:23:fc:33:62:36:2e:15:bf:ea:bb:f7:cb:91:88: e1:83:b8:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVA984khjwqvZqetdoTekRqDzzuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNTEwMTkyMzA2MTBaFw0yNTEwMjMwODI3MTBaMDMxMTAvBgNV BAMTKDQ4MzlDRTNCNzQ0NUY4MDJCQkFCMkNBNUY3MDA1RjY3MkZEMDAxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiiCoGZ32LSNDZPCi7Hl7BLP1c oDE11uJHhr2w9QsVfgc9pXweMH1vTlbN91zgrmmwo7HjFLpqDYjEs6bMfeC3PWpr bsu/u33rbunNEp1ulCj1m3+8RgqCcKZUeVKoeWXJSi6RqaAOnJDUJ32Xse1XN+lx lYoIwIoYqg4LK+zFUrfGCbFizxTH3UW6fC0GVVL9HjRaAX9t3aim2PTESxaJ6w9M x/MVD6hSqBy//6oHXdni7q33o7vev3wOtBNBYAAv6PpAdCsnmGFM0fT2oO9yi7c9 tytXxefndz0Pcj4J0DK8S7OehUG7o2t8LfaazLER5oHoORyXxbzHDyzsUyqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDnOO3RF+AK7qyyl9wBfZy/QAfYwHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDFjaojr3X8jvvSSEjo2rz8JmUvT91pjofG YE5k2zVYacnJksqNt9QjloSrMH3t/5eEBBmz/W3jXVpPpwFa9hlu8GtW/j+AA1BS cZl+ueNSmsH50e/IxE1Gup3UqVj5EJjyCDZYUJpWR8Kg7/wdMh3PvNFEbJmRQPKD pRNMCbgetoMDObviPFTXcOUUZcoshOE4e1W1bL8Px5NPLAQ8IrdOo/8cCEmJiaRC kqp5DoT/MHDZ0ymOlkbE2+qQYMM9T1lDhbMFCUHIJ9cRoiZFz/sZpBAVY6r/J2ph 7pZsYfCiUtz0ja4OBc4JY4+QUUwj/DNiNi4Vv+q798uRiOGDuGg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:57:13 2025 by rpki-client