$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: lmikXV3miX6rUSlbFFoBQ8ZqnpCPucOXfiRsmTNwvWs= Subject key identifier: A7:A2:08:2D:EC:56:FB:4C:84:0E:E3:CF:75:79:BD:62:2D:E1:B7:38 Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 011A6041C1561AB7A1B2541AF8EB88418830A3DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 030E Signing time: Sun 02 Nov 2025 03:21:10 +0000 Manifest this update: Sun 02 Nov 2025 03:16:10 +0000 Manifest next update: Wed 05 Nov 2025 13:25:10 +0000 Files and hashes: 1: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=) 2: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: nrTfjNCEfRK3IHzAoVe9jJG+swMLyhYDQRaOlnnenbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 13:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1a:60:41:c1:56:1a:b7:a1:b2:54:1a:f8:eb:88:41:88:30:a3:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Nov 2 03:16:10 2025 GMT Not After : Nov 5 13:25:10 2025 GMT Subject: CN=A7A2082DEC56FB4C840EE3CF7579BD622DE1B738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:7e:26:fc:bf:94:40:33:a7:a9:d9:2d:c9: 80:94:64:03:21:3b:76:dc:e8:ac:70:13:ad:71:75: f9:d2:d1:4c:9c:3b:64:a1:e1:68:7f:a8:1e:2c:93: 86:4c:c8:07:dd:e2:33:09:49:90:e7:0e:04:80:88: 6b:55:53:f8:b8:35:f3:b8:db:cb:a8:7f:6a:38:3d: a3:fa:2f:35:fd:48:ad:f2:1e:83:75:59:3a:28:00: 30:a1:42:ba:04:35:7e:37:0c:5c:11:50:f1:25:0f: ac:60:5e:55:a9:32:5b:bf:c2:e5:c1:cd:4a:9b:5e: 62:68:c4:f5:4f:1a:dd:6f:f0:b1:d0:20:17:f7:19: 67:d0:95:1d:6c:c0:a9:00:f7:d6:ae:40:5d:64:dc: 91:82:a4:12:44:86:7a:f6:b3:cc:ac:50:ea:de:92: b5:97:ed:3e:27:0c:87:66:df:43:2f:3c:62:d0:94: 75:86:9f:a6:af:8c:dd:e8:0e:77:12:66:bf:a6:66: e6:1e:ae:37:f0:82:2d:3d:7e:67:fa:85:d7:04:5e: 93:6e:29:ba:0e:0f:58:87:92:79:1d:2a:e3:88:99: a8:bd:ad:4d:f9:db:54:cd:23:71:52:c0:10:40:34: e7:12:bf:64:d7:65:6a:35:2d:3d:bd:28:3a:0e:43: 89:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A2:08:2D:EC:56:FB:4C:84:0E:E3:CF:75:79:BD:62:2D:E1:B7:38 X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:54:77:08:69:0d:83:04:08:76:6a:f2:86:82:fb:02:36:bd: 7e:c9:5e:12:2f:32:a7:01:69:97:ef:dc:29:56:a3:38:9d:d4: 1b:0c:5a:16:b7:6c:51:5b:9b:9f:5c:5b:ff:6a:54:be:3c:85: 8c:c9:8d:0d:8c:d2:33:3d:f0:c5:b3:53:9e:61:b0:9a:20:d3: cd:7c:0a:1b:29:98:b3:e9:c8:86:ab:a7:1c:c3:28:eb:6d:2b: aa:94:07:d8:83:b8:4f:c0:39:24:42:f7:57:1c:9e:f9:d5:a6: cd:a3:7c:f8:bf:8b:ea:a0:54:a8:bf:e3:fb:db:be:52:06:7a: f3:4d:1e:8e:74:01:36:83:63:05:f9:33:ee:42:7d:7f:cc:6f: e6:e3:b8:5e:51:1c:af:2d:50:ad:87:45:e6:bc:a2:69:ca:f9: 0c:a3:e8:6e:c5:15:1f:bc:8f:52:b5:1a:64:27:87:ee:f8:6f: d0:8c:6a:f2:61:10:42:ca:41:4c:af:34:eb:49:89:bb:a1:fe: 58:61:94:2a:cc:d0:67:c9:e3:59:94:68:e9:1c:f8:4e:29:2f: 3f:48:fe:94:29:6f:d8:1e:fa:19:f4:73:8f:0e:a3:f7:5e:7d: 34:8e:7c:65:0f:59:49:36:a5:35:92:5a:4d:82:44:69:e7:76: 93:30:7c:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARpgQcFWGrehslQa+OuIQYgwo90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNTExMDIwMzE2MTBaFw0yNTExMDUxMzI1MTBaMDMxMTAvBgNV BAMTKEE3QTIwODJERUM1NkZCNEM4NDBFRTNDRjc1NzlCRDYyMkRFMUI3MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBX4m/L+UQDOnqdktyYCUZAMh O3bc6KxwE61xdfnS0UycO2Sh4Wh/qB4sk4ZMyAfd4jMJSZDnDgSAiGtVU/i4NfO4 28uof2o4PaP6LzX9SK3yHoN1WTooADChQroENX43DFwRUPElD6xgXlWpMlu/wuXB zUqbXmJoxPVPGt1v8LHQIBf3GWfQlR1swKkA99auQF1k3JGCpBJEhnr2s8ysUOre krWX7T4nDIdm30MvPGLQlHWGn6avjN3oDncSZr+mZuYerjfwgi09fmf6hdcEXpNu KboOD1iHknkdKuOImai9rU3521TNI3FSwBBANOcSv2TXZWo1LT29KDoOQ4nDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6IILexW+0yEDuPPdXm9Yi3htzgwHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdUdwhpDYMECHZq8oaC+wI2vX7JXhIvMqcB aZfv3ClWozid1BsMWha3bFFbm59cW/9qVL48hYzJjQ2M0jM98MWzU55hsJog0818 ChspmLPpyIarpxzDKOttK6qUB9iDuE/AOSRC91ccnvnVps2jfPi/i+qgVKi/4/vb vlIGevNNHo50ATaDYwX5M+5CfX/Mb+bjuF5RHK8tUK2HRea8omnK+Qyj6G7FFR+8 j1K1GmQnh+74b9CMavJhEELKQUyvNOtJibuh/lhhlCrM0GfJ41mUaOkc+E4pLz9I /pQpb9ge+hn0c48Oo/defTSOfGUPWUk2pTWSWk2CRGnndpMwfEw= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:32 2025 by rpki-client