$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: r5ig3nLzU+G6fclM0ujQS96tbb7jeYXCeoR7lMI6Hq8= Subject key identifier: C2:4A:60:06:27:5D:7A:44:F2:B4:CB:AF:D8:0A:4E:5A:67:C6:31:A1 Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 59555FB8CADBD7C4F495DAF0FA6ECFC617EDD1E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 02F5 Signing time: Sun 07 Sep 2025 08:51:08 +0000 Manifest this update: Sun 07 Sep 2025 08:46:08 +0000 Manifest next update: Wed 10 Sep 2025 11:34:08 +0000 Files and hashes: 1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: GVkETQMWvk2k+K3xly6x49KiGLra8Q2B7A0do9ECWVI=) 2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:55:5f:b8:ca:db:d7:c4:f4:95:da:f0:fa:6e:cf:c6:17:ed:d1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Sep 7 08:46:08 2025 GMT Not After : Sep 10 11:34:08 2025 GMT Subject: CN=C24A6006275D7A44F2B4CBAFD80A4E5A67C631A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:0d:67:5c:bb:2d:a2:5e:64:f6:51:e0:37: db:c4:e7:63:a2:dc:a2:a4:f6:54:95:93:65:9b:52: c2:b4:df:8a:25:54:23:73:55:37:cb:4d:26:1d:c7: 2c:6a:30:e5:ab:b1:3b:84:76:51:63:7b:73:32:ec: 00:6b:d8:32:a8:56:7c:90:77:da:a9:7e:a1:0d:7d: 2f:fc:5c:bd:8a:c6:11:50:ae:80:e4:19:f1:cc:37: a8:b3:72:9b:29:1e:e6:e8:66:2d:22:f4:46:92:dd: 1d:60:7b:54:5a:e1:e5:e8:50:48:fd:a1:eb:29:d9: 0e:7f:27:84:5f:c2:05:ec:fd:74:01:8f:01:79:b3: 41:3a:ba:e5:cc:22:d0:62:ad:f6:1a:14:18:e4:70: f0:26:e9:e2:d7:82:81:aa:8b:18:22:04:bf:84:f3: 5b:8d:87:6f:6d:d1:14:78:84:b0:63:0f:8f:4e:7a: 36:c1:f7:b5:82:bf:4a:4b:0b:ec:5a:c4:36:14:8a: 94:0b:c8:25:89:65:ef:66:59:7c:c2:64:b8:e8:37: 0e:0d:87:09:08:bc:8b:33:64:5e:83:67:18:9e:93: ed:44:5a:61:24:93:64:07:a2:5b:48:81:52:d8:6e: 9e:a5:23:3d:d6:fc:e8:46:85:08:84:b8:0d:a4:82: 71:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4A:60:06:27:5D:7A:44:F2:B4:CB:AF:D8:0A:4E:5A:67:C6:31:A1 X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:88:6d:36:b3:6c:69:22:22:28:75:94:6a:a7:44:09:4a:f5: 86:72:b4:86:5d:cd:ca:81:e9:a0:88:7b:6d:b3:16:c9:48:1a: 7c:11:46:91:b0:d7:f6:00:99:89:26:c3:32:7e:47:a2:26:40: e7:c1:be:09:1b:3f:ad:39:07:eb:3b:ae:d2:a1:52:22:2e:a7: 20:0d:83:ed:b9:b5:ff:01:61:c2:d2:b5:bd:03:c6:6a:f4:72: c2:4f:fc:63:6c:c6:7e:58:b2:30:0f:6c:89:f8:42:28:dc:a9: a0:9a:fe:89:8e:cb:d3:a5:f1:03:ba:77:af:d6:5a:15:6d:a8: 4c:e8:4e:a4:a3:e2:07:c2:76:ba:7f:f6:b6:31:f3:f0:37:65: 83:3d:fc:7c:eb:2a:b9:72:74:df:af:02:5b:bd:a8:34:d0:cd: 1d:4b:3e:a4:0e:33:60:a4:fe:03:28:1f:32:fc:81:b0:78:63: 49:46:de:b2:6c:a2:79:c1:97:77:ee:7b:e2:94:f2:da:64:42: 6a:20:5c:20:06:7f:e0:41:a7:31:9d:a4:b5:b8:e4:c5:28:79: ac:36:db:23:23:04:be:18:d7:b8:6c:67:3f:d8:ce:62:9c:ba: b7:89:ea:59:60:0c:ec:d2:9b:f3:a5:35:88:cb:a2:a5:f3:96: bd:ee:45:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWVVfuMrb18T0ldrw+m7Pxhft0eMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNTA5MDcwODQ2MDhaFw0yNTA5MTAxMTM0MDhaMDMxMTAvBgNV BAMTKEMyNEE2MDA2Mjc1RDdBNDRGMkI0Q0JBRkQ4MEE0RTVBNjdDNjMxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi/g1nXLstol5k9lHgN9vE52Oi 3KKk9lSVk2WbUsK034olVCNzVTfLTSYdxyxqMOWrsTuEdlFje3My7ABr2DKoVnyQ d9qpfqENfS/8XL2KxhFQroDkGfHMN6izcpspHuboZi0i9EaS3R1ge1Ra4eXoUEj9 oesp2Q5/J4RfwgXs/XQBjwF5s0E6uuXMItBirfYaFBjkcPAm6eLXgoGqixgiBL+E 81uNh29t0RR4hLBjD49OejbB97WCv0pLC+xaxDYUipQLyCWJZe9mWXzCZLjoNw4N hwkIvIszZF6DZxiek+1EWmEkk2QHoltIgVLYbp6lIz3W/OhGhQiEuA2kgnHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwkpgBiddekTytMuv2ApOWmfGMaEwHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeIbTazbGkiIih1lGqnRAlK9YZytIZdzcqB 6aCIe22zFslIGnwRRpGw1/YAmYkmwzJ+R6ImQOfBvgkbP605B+s7rtKhUiIupyAN g+25tf8BYcLStb0Dxmr0csJP/GNsxn5YsjAPbIn4QijcqaCa/omOy9Ol8QO6d6/W WhVtqEzoTqSj4gfCdrp/9rYx8/A3ZYM9/HzrKrlydN+vAlu9qDTQzR1LPqQOM2Ck /gMoHzL8gbB4Y0lG3rJsonnBl3fue+KU8tpkQmogXCAGf+BBpzGdpLW45MUoeaw2 2yMjBL4Y17hsZz/YzmKcureJ6llgDOzSm/OlNYjLoqXzlr3uRYE= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:13 2025 by rpki-client