$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: KzeLek7kJUqPcxiTUz54zkAw+5lny1Y/PpX5fjuCo8w= Subject key identifier: 0A:F3:56:87:DE:01:2C:6B:00:2E:92:78:26:DE:5E:89:A7:65:CE:AE Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 15442260002CDE2AF01AC98A0A652263F4742FF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 02CA Signing time: Tue 03 Jun 2025 16:43:58 +0000 Manifest this update: Tue 03 Jun 2025 16:38:58 +0000 Manifest next update: Sat 07 Jun 2025 01:24:58 +0000 Files and hashes: 1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: M3tUGodrUMTzxbZqEqcnyBZyZsyJU6CUOpKD99DFSpc=) 2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: 8pvSL0egc+WMc+a2/glW47Xs8RpIIsEutGyuUrDJkHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:44:22:60:00:2c:de:2a:f0:1a:c9:8a:0a:65:22:63:f4:74:2f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Jun 3 16:38:58 2025 GMT Not After : Jun 7 01:24:58 2025 GMT Subject: CN=0AF35687DE012C6B002E927826DE5E89A765CEAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e0:05:5d:58:d2:7e:36:14:11:58:a7:61:da: c3:02:fe:a5:45:0a:5e:c2:9a:9b:f0:b7:94:30:e2: e4:76:ad:0c:24:a4:66:30:f2:d3:db:8d:7c:d8:21: 67:86:b3:3f:57:a9:f1:ee:04:ee:c1:f8:fa:1d:69: 9c:d1:0d:3d:57:45:ff:d5:a3:0c:95:54:d4:1b:76: da:11:98:2b:bd:99:61:7a:28:ac:0d:c6:12:47:7a: 72:10:76:ec:8a:26:18:74:f9:4e:65:18:5f:9d:d1: 0e:1d:5c:40:b9:36:67:51:73:c4:9e:52:04:3d:86: 14:6a:27:2e:41:d9:d2:2d:51:c3:c3:f1:cf:bf:a2: 5c:e0:7c:af:6e:7c:d4:4c:a3:f7:9d:32:d9:94:46: 45:a2:b3:7f:8d:3a:42:e9:2b:14:24:c1:03:fc:c8: 8a:23:91:9e:a6:c4:96:e6:f1:8b:4a:a2:d9:93:9d: 8e:bc:ee:66:db:e1:73:19:79:94:a9:eb:aa:aa:c7: 67:66:7a:19:43:9e:8c:9b:a1:b0:58:5c:c0:5d:ca: 4c:7e:f1:46:07:dc:b6:ce:01:e4:65:e3:4e:02:1a: e2:70:b1:86:c4:d9:62:35:fb:b9:7f:4f:e1:29:6f: 19:73:68:ba:9f:b4:07:49:6f:33:6a:32:78:25:b4: 40:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F3:56:87:DE:01:2C:6B:00:2E:92:78:26:DE:5E:89:A7:65:CE:AE X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:60:17:44:8a:1e:93:e7:b9:b6:02:46:b3:8f:ab:0e:f0:cd: ed:25:f0:c2:b9:eb:11:a3:4e:fa:fb:10:6f:ba:9e:80:0b:77: 72:e3:02:91:3f:f7:2a:ef:62:d7:0d:69:19:16:47:b0:de:de: 8f:13:1b:03:9b:51:30:86:28:50:76:9c:bf:57:e7:29:fa:86: 42:58:8f:a6:32:03:38:f4:13:77:b9:be:11:e3:71:7f:ad:df: 63:8a:b3:58:bc:82:38:e8:2a:57:c5:d6:85:f8:05:fc:62:d1: 68:5f:b3:24:f3:8a:fe:85:0b:d3:d2:96:49:f5:14:a7:b5:4f: d1:1b:35:d5:3b:35:2d:be:a1:5b:80:d7:5f:56:88:9f:c8:87: 2b:2b:95:f0:f7:c7:0d:3d:56:6d:0f:f2:cd:76:17:5e:bd:3a: 35:06:a6:af:cb:e8:b8:c5:45:2b:4b:bb:76:d1:4a:20:ed:f3: a1:10:44:f5:1c:d2:5f:42:bc:98:eb:e3:d0:a7:3e:89:98:41: b5:1d:a1:18:a2:b3:f9:99:05:5b:94:13:26:f2:d6:de:c5:09: 1a:f5:3e:d4:29:fd:4c:83:04:74:c8:7f:3c:ed:ab:77:77:15: 31:a6:a7:b9:04:6b:7b:de:67:35:3d:bd:cb:84:0c:78:6f:c6: 73:ca:a5:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUQiYAAs3irwGsmKCmUiY/R0L/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNTA2MDMxNjM4NThaFw0yNTA2MDcwMTI0NThaMDMxMTAvBgNV BAMTKDBBRjM1Njg3REUwMTJDNkIwMDJFOTI3ODI2REU1RTg5QTc2NUNFQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24AVdWNJ+NhQRWKdh2sMC/qVF Cl7Cmpvwt5Qw4uR2rQwkpGYw8tPbjXzYIWeGsz9XqfHuBO7B+PodaZzRDT1XRf/V owyVVNQbdtoRmCu9mWF6KKwNxhJHenIQduyKJhh0+U5lGF+d0Q4dXEC5NmdRc8Se UgQ9hhRqJy5B2dItUcPD8c+/olzgfK9ufNRMo/edMtmURkWis3+NOkLpKxQkwQP8 yIojkZ6mxJbm8YtKotmTnY687mbb4XMZeZSp66qqx2dmehlDnoybobBYXMBdykx+ 8UYH3LbOAeRl404CGuJwsYbE2WI1+7l/T+EpbxlzaLqftAdJbzNqMngltEA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCvNWh94BLGsALpJ4Jt5eiadlzq4wHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN9gF0SKHpPnubYCRrOPqw7wze0l8MK56xGj Tvr7EG+6noALd3LjApE/9yrvYtcNaRkWR7De3o8TGwObUTCGKFB2nL9X5yn6hkJY j6YyAzj0E3e5vhHjcX+t32OKs1i8gjjoKlfF1oX4Bfxi0WhfsyTziv6FC9PSlkn1 FKe1T9EbNdU7NS2+oVuA119WiJ/IhysrlfD3xw09Vm0P8s12F169OjUGpq/L6LjF RStLu3bRSiDt86EQRPUc0l9CvJjr49CnPomYQbUdoRiis/mZBVuUEyby1t7FCRr1 PtQp/UyDBHTIfzztq3d3FTGmp7kEa3veZzU9vcuEDHhvxnPKpXA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:00 2025 by rpki-client