$ rpki-client -vvf repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft File: 247D705AC2F14A763F3EB87E2E41158A251F3D76.mft (raw, json) Hash identifier: C4DfL2jmKqZikzRDbQJPobAWfQJ8n8MMw0aZf3EQfwA= Subject key identifier: 90:3E:D4:AD:4F:46:BB:47:15:82:1E:3A:D0:4A:53:56:BB:B5:85:4E Authority key identifier: 24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 Certificate issuer: /CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Certificate serial: 221F6932C4D61AADADF28E4D5A7A226161E313AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft Manifest number: 0358 Signing time: Fri 17 Apr 2026 08:02:35 +0000 Manifest this update: Fri 17 Apr 2026 07:57:35 +0000 Manifest next update: Mon 20 Apr 2026 14:21:35 +0000 Files and hashes: 1: 247D705AC2F14A763F3EB87E2E41158A251F3D76.crl (hash: dEPwrswcZd+S5NeVKH3f5rAWaNhBN4NUvrfBXh+nlcI=) 2: 323430343a653930303a343030303a3a2f33342d3334203d3e203436303632.roa (hash: KX+TcfWMtFMWBw+/wMS/PSYWDCnYN7O3lGExEaabLIU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:1f:69:32:c4:d6:1a:ad:ad:f2:8e:4d:5a:7a:22:61:61:e3:13:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=247D705AC2F14A763F3EB87E2E41158A251F3D76 Validity Not Before: Apr 17 07:57:35 2026 GMT Not After : Apr 20 14:21:35 2026 GMT Subject: CN=903ED4AD4F46BB4715821E3AD04A5356BBB5854E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:b6:a5:0e:86:dc:c7:f3:05:9c:7e:b5:85: 05:c9:f4:cb:a8:ac:de:94:11:c5:fa:8b:20:ba:a3: 41:08:af:66:8f:4d:00:43:55:c7:7b:20:97:de:6b: 83:d7:2a:26:5e:69:27:52:85:cc:0c:83:81:ae:4f: a1:0a:26:19:f0:21:6d:87:e8:96:f6:37:0e:19:4d: bb:32:7d:11:e1:be:eb:58:32:12:3f:6c:b0:29:a7: 5b:d2:4a:8c:59:80:b1:ac:2b:69:07:a1:08:7d:84: 21:44:de:fa:be:32:c0:7f:42:68:7e:d5:8a:dc:41: ad:34:78:17:26:ee:75:be:e4:fb:c6:bc:15:0a:0b: 95:94:47:b0:2c:86:75:f9:1d:94:c6:5c:57:2b:12: 7c:27:97:cc:b7:b6:47:13:b5:0e:d6:41:74:5b:3a: 27:bb:89:8a:f5:ec:63:a8:88:b3:06:dd:44:d4:d7: be:41:59:36:16:2c:0e:1f:82:83:e5:ba:0e:4e:2d: a5:47:1c:a6:f3:cb:a8:f9:a8:02:be:fb:68:42:d6: 6e:46:c7:f0:44:d7:fe:10:82:27:c7:3e:9e:32:9e: dc:a9:c9:45:07:1b:91:2e:6d:a1:aa:9b:88:ad:1a: 36:10:a8:e4:40:af:64:eb:c9:9f:24:7e:c6:35:02: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:D4:AD:4F:46:BB:47:15:82:1E:3A:D0:4A:53:56:BB:B5:85:4E X509v3 Authority Key Identifier: keyid:24:7D:70:5A:C2:F1:4A:76:3F:3E:B8:7E:2E:41:15:8A:25:1F:3D:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/247D705AC2F14A763F3EB87E2E41158A251F3D76.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7488d4c0-dc92-4aa8-b169-52cab2a61ba1/0/247D705AC2F14A763F3EB87E2E41158A251F3D76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:32:98:77:5a:16:7b:18:53:6a:10:81:fb:28:d2:40:76:d4: 62:a8:5b:24:53:ee:5d:1c:d7:5f:90:58:30:b2:46:3f:d3:72: 4b:8e:98:ff:e5:b4:4d:8b:f3:6b:db:90:69:c5:c1:82:45:d3: 79:38:3d:1f:53:51:a8:93:df:be:56:fd:9f:46:fc:0a:7c:d8: f7:eb:69:36:8b:7d:73:7c:75:b9:79:0f:6e:dc:a0:91:f2:92: 72:72:31:40:04:38:91:33:34:b5:b2:8a:6d:67:d7:8d:5d:4f: ec:dd:84:72:02:a0:68:94:ca:1c:18:47:c3:e6:87:d2:d6:58: 88:fa:76:e4:39:17:18:93:87:96:fa:ee:98:85:83:90:ec:14: 4b:bb:1d:53:0b:05:2d:0b:28:3b:52:5d:85:15:95:52:73:e6: 9f:ef:11:25:46:15:a2:95:a8:38:e9:1b:71:25:6c:90:61:dc: 63:6d:01:ea:4e:91:aa:76:10:c7:ee:e3:5f:78:af:c4:67:1e: 10:7b:81:35:47:1e:a2:45:1a:9a:5f:58:95:f5:1e:ae:31:00: 1c:0b:79:f7:ae:b3:4f:f9:55:bb:a2:c2:f6:97:23:d4:1e:0c: e4:e9:9f:b2:cf:25:ef:e2:13:33:8c:8c:7a:a0:f8:4f:a9:fc: 09:74:19:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIh9pMsTWGq2t8o5NWnoiYWHjE60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEy NTFGM0Q3NjAeFw0yNjA0MTcwNzU3MzVaFw0yNjA0MjAxNDIxMzVaMDMxMTAvBgNV BAMTKDkwM0VENEFENEY0NkJCNDcxNTgyMUUzQUQwNEE1MzU2QkJCNTg1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLq7alDobcx/MFnH61hQXJ9Muo rN6UEcX6iyC6o0EIr2aPTQBDVcd7IJfea4PXKiZeaSdShcwMg4GuT6EKJhnwIW2H 6Jb2Nw4ZTbsyfRHhvutYMhI/bLApp1vSSoxZgLGsK2kHoQh9hCFE3vq+MsB/Qmh+ 1YrcQa00eBcm7nW+5PvGvBUKC5WUR7AshnX5HZTGXFcrEnwnl8y3tkcTtQ7WQXRb Oie7iYr17GOoiLMG3UTU175BWTYWLA4fgoPlug5OLaVHHKbzy6j5qAK++2hC1m5G x/BE1/4QgifHPp4yntypyUUHG5EubaGqm4itGjYQqORAr2TryZ8kfsY1AjE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkD7UrU9Gu0cVgh460EpTVru1hU4wHwYDVR0j BBgwFoAUJH1wWsLxSnY/Prh+LkEViiUfPXYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDg4ZDRjMC1kYzkyLTRhYTgtYjE2OS01MmNhYjJhNjFiYTEvMC8yNDdENzA1QUMy RjE0QTc2M0YzRUI4N0UyRTQxMTU4QTI1MUYzRDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1OEEyNTFG M0Q3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ4OGQ0YzAtZGM5Mi00YWE4LWIx NjktNTJjYWIyYTYxYmExLzAvMjQ3RDcwNUFDMkYxNEE3NjNGM0VCODdFMkU0MTE1 OEEyNTFGM0Q3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgymHdaFnsYU2oQgfso0kB21GKoWyRT7l0c 11+QWDCyRj/TckuOmP/ltE2L82vbkGnFwYJF03k4PR9TUaiT375W/Z9G/Ap82Pfr aTaLfXN8dbl5D27coJHyknJyMUAEOJEzNLWyim1n141dT+zdhHICoGiUyhwYR8Pm h9LWWIj6duQ5FxiTh5b67piFg5DsFEu7HVMLBS0LKDtSXYUVlVJz5p/vESVGFaKV qDjpG3ElbJBh3GNtAepOkap2EMfu4194r8RnHhB7gTVHHqJFGppfWJX1Hq4xABwL efeus0/5VbuiwvaXI9QeDOTpn7LPJe/iEzOMjHqg+E+p/Al0GQ8= -----END CERTIFICATE-----Generated at Sun Apr 19 11:27:37 2026 by rpki-client