$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: CzKO67CC7hvXJzu1Im4H8s4NkFzmBzNmtlsRyNztmqA= Subject key identifier: 48:4F:9F:CF:3E:AC:12:BB:54:BD:06:44:97:CF:72:BB:4F:D2:2F:04 Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 10D322546752AA7006785CDCCA58E2BD7D42EA7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 02DF Signing time: Sat 19 Jul 2025 14:51:09 +0000 Manifest this update: Sat 19 Jul 2025 14:46:09 +0000 Manifest next update: Wed 23 Jul 2025 00:58:09 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=) 2: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: ANHBja30AFinO13o+qcVWhKzbbLrG7yPPWywAODV/KM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d3:22:54:67:52:aa:70:06:78:5c:dc:ca:58:e2:bd:7d:42:ea:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Jul 19 14:46:09 2025 GMT Not After : Jul 23 00:58:09 2025 GMT Subject: CN=484F9FCF3EAC12BB54BD064497CF72BB4FD22F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:58:29:0c:fe:aa:5b:df:46:ab:0f:6d:41: f3:35:fd:45:ee:d7:d6:e5:2b:d2:a7:08:17:83:f4: 02:18:a2:10:a2:ef:ac:78:64:dc:84:2a:89:47:82: 63:de:63:e8:83:b7:89:1a:15:32:a2:79:9d:66:cb: 6a:87:78:33:c5:b5:ba:ff:a9:3c:f2:a0:9f:2f:85: 86:c5:f8:95:03:f2:4f:38:f7:55:e0:a4:32:89:0f: d2:5d:72:88:7b:55:d6:6a:ab:bf:ad:97:ef:04:5f: f5:58:af:9a:a7:b9:4b:72:8b:e1:eb:95:0c:94:91: c8:ae:ab:b4:8c:7e:67:f1:5c:d9:54:82:0e:9c:6d: 1e:85:2d:30:03:6b:a4:d3:4b:8e:94:3d:3e:0d:ea: 62:b5:4e:4a:01:d5:34:25:f3:80:dd:da:7f:18:bd: b3:8b:66:49:88:12:8b:f7:ea:72:9d:ce:c1:dc:97: 12:58:d8:9e:4f:30:86:6e:f3:3c:ca:1d:0b:92:5f: 44:73:ed:2a:c9:6e:35:0c:e6:10:32:b2:86:ef:41: 83:f2:37:1b:68:d2:c2:44:5d:7d:e7:7a:b4:47:12: 89:f7:78:a8:86:ae:53:97:1e:8b:e0:15:93:8d:f4: 06:f0:0d:2c:2b:e8:1a:1e:03:bf:4c:e7:33:1c:be: 9e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4F:9F:CF:3E:AC:12:BB:54:BD:06:44:97:CF:72:BB:4F:D2:2F:04 X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:42:b2:6b:50:e2:e4:fa:84:76:eb:9b:84:02:d5:78:38:e3: d6:36:59:82:32:68:fb:24:11:e9:a4:b6:0b:e3:9d:38:19:cd: eb:83:ae:e9:c8:bd:f4:aa:6e:a9:a7:75:13:1b:15:02:46:cd: 76:db:40:5c:de:39:df:e3:02:16:f3:b8:08:4a:c3:49:a0:76: 59:62:78:d6:fe:70:c5:b0:4f:a2:c4:ca:e3:35:25:4d:a6:5d: 27:94:bb:8f:c5:e2:c9:16:10:fa:6b:cf:8f:93:b3:67:af:2e: a2:e5:a5:bb:0f:b9:49:ef:d3:58:42:74:71:9d:32:6f:dd:fe: 1e:c0:f4:60:14:53:0e:99:f0:ee:47:7e:70:44:67:b2:12:1c: 11:9e:c6:93:a7:fe:b4:40:55:22:a8:43:2b:69:58:98:6c:f4: c0:c8:3c:8f:2d:58:9c:7b:d2:ef:2b:b6:bd:d4:a1:d6:a9:46: 6d:03:a6:c2:6e:b9:63:5c:9f:3d:6d:b0:54:2a:2e:d6:91:1f: 51:aa:6e:6a:e3:f0:7a:1b:bb:43:8d:62:8e:d7:70:fd:76:bf: d7:b6:95:47:2d:4b:9a:cc:89:82:16:97:20:22:c1:f4:45:d7: c0:5e:25:cf:02:2d:30:30:cd:d3:45:f5:39:94:88:0e:14:34: f2:26:d1:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENMiVGdSqnAGeFzcyljivX1C6nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNTA3MTkxNDQ2MDlaFw0yNTA3MjMwMDU4MDlaMDMxMTAvBgNV BAMTKDQ4NEY5RkNGM0VBQzEyQkI1NEJEMDY0NDk3Q0Y3MkJCNEZEMjJGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzVgpDP6qW99Gqw9tQfM1/UXu 19blK9KnCBeD9AIYohCi76x4ZNyEKolHgmPeY+iDt4kaFTKieZ1my2qHeDPFtbr/ qTzyoJ8vhYbF+JUD8k8491XgpDKJD9Jdcoh7VdZqq7+tl+8EX/VYr5qnuUtyi+Hr lQyUkciuq7SMfmfxXNlUgg6cbR6FLTADa6TTS46UPT4N6mK1TkoB1TQl84Dd2n8Y vbOLZkmIEov36nKdzsHclxJY2J5PMIZu8zzKHQuSX0Rz7SrJbjUM5hAysobvQYPy Nxto0sJEXX3nerRHEon3eKiGrlOXHovgFZON9AbwDSwr6BoeA79M5zMcvp53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSE+fzz6sErtUvQZEl89yu0/SLwQwHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVCsmtQ4uT6hHbrm4QC1Xg449Y2WYIyaPsk EemktgvjnTgZzeuDrunIvfSqbqmndRMbFQJGzXbbQFzeOd/jAhbzuAhKw0mgdlli eNb+cMWwT6LEyuM1JU2mXSeUu4/F4skWEPprz4+Ts2evLqLlpbsPuUnv01hCdHGd Mm/d/h7A9GAUUw6Z8O5HfnBEZ7ISHBGexpOn/rRAVSKoQytpWJhs9MDIPI8tWJx7 0u8rtr3UodapRm0DpsJuuWNcnz1tsFQqLtaRH1Gqbmrj8Hobu0ONYo7XcP12v9e2 lUctS5rMiYIWlyAiwfRF18BeJc8CLTAwzdNF9TmUiA4UNPIm0d8= -----END CERTIFICATE-----Generated at Mon Jul 21 02:21:40 2025 by rpki-client