$ rpki-client -vvf repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft File: FE2463D1D88B492B75773E9AF81805E3139EF31E.mft (raw, json) Hash identifier: F3kmZfY1MPi0tAvhYkxFOn0PJ6N+IoMup12b3PQyY+A= Subject key identifier: 12:DB:A2:0A:3A:5C:CB:C8:4F:5D:38:E4:D4:27:12:43:81:D8:37:32 Authority key identifier: FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E Certificate issuer: /CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Certificate serial: 70B302C31D06405D6EF72C4087AFE78F7C61CB63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft Manifest number: 01A0 Signing time: Fri 22 Aug 2025 10:10:50 +0000 Manifest this update: Fri 22 Aug 2025 10:05:50 +0000 Manifest next update: Mon 25 Aug 2025 19:37:50 +0000 Files and hashes: 1: FE2463D1D88B492B75773E9AF81805E3139EF31E.crl (hash: XOuy3c6znzNgcgt0g9j/5ELWuiuMKR7FJ1XNWuggJqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:b3:02:c3:1d:06:40:5d:6e:f7:2c:40:87:af:e7:8f:7c:61:cb:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Validity Not Before: Aug 22 10:05:50 2025 GMT Not After : Aug 25 19:37:50 2025 GMT Subject: CN=12DBA20A3A5CCBC84F5D38E4D427124381D83732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0c:5e:4e:fa:c1:62:6d:8c:18:72:0c:8a:2f: b8:bf:2c:dc:1b:0b:29:72:1d:1a:eb:24:20:59:aa: 26:a6:28:01:fb:9c:7c:73:a1:8a:be:d8:d4:e6:0f: 4f:9e:db:5b:5b:b3:52:2d:95:5a:92:74:b1:c7:b5: 2b:bd:1f:3c:0d:8c:c1:48:f5:b6:cb:24:8f:f8:78: 48:eb:8a:20:18:18:51:c3:67:44:5d:a0:1b:8f:2e: 54:18:25:a9:39:ee:7a:29:af:38:99:ef:e0:12:83: 2e:f2:3a:23:51:cf:b1:5c:58:3e:3a:8e:fe:b6:82: 8d:69:02:84:75:80:60:fb:ed:0f:14:56:ff:45:6a: 30:bf:18:ad:28:c3:dc:20:89:9f:ed:cf:ad:c3:85: db:ba:2a:2d:bf:f5:99:7c:c8:fe:78:4f:ce:35:e0: c7:b7:6e:e9:94:d8:b9:69:56:f6:1b:ee:5d:a8:94: f7:41:ca:92:e5:43:49:4b:63:e5:8e:69:d9:3a:5f: f5:fc:21:c2:d0:1c:fd:5b:69:ee:e5:ce:0a:7e:c3: f2:e2:a2:6f:69:3c:c6:24:93:cb:23:31:ff:d7:29: 63:af:77:da:4f:5d:30:5d:4d:10:23:38:2e:8a:8d: d8:ec:e5:57:44:d0:ee:b1:ca:ed:38:22:e6:be:8a: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DB:A2:0A:3A:5C:CB:C8:4F:5D:38:E4:D4:27:12:43:81:D8:37:32 X509v3 Authority Key Identifier: keyid:FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:85:17:8a:bd:87:47:8f:da:ca:82:67:f6:3c:96:b2:a2:f1: 1e:70:a0:1d:9d:3b:68:1a:d4:a5:ee:63:7c:59:84:17:f9:98: af:49:b4:bd:f6:62:25:98:79:9e:67:a3:a4:1c:ba:39:4d:e2: fc:01:67:ab:87:d3:19:ec:8b:94:4b:13:af:61:be:99:f3:df: e8:52:e2:c3:ee:b1:da:53:93:ce:a6:9a:9a:ba:b5:66:7a:02: 7f:79:55:e1:82:9f:be:a3:42:b4:bd:a7:47:70:91:96:3b:f4: e4:2a:61:bf:7f:cb:ad:62:3e:8a:cf:ae:89:85:ca:4a:22:57: 80:82:76:47:27:1b:68:24:72:3a:0b:65:9a:98:63:d0:7d:bc: 5c:e3:39:93:8e:9f:31:25:d8:d2:9f:8c:7c:fd:ef:1e:68:af: 2a:3e:e6:df:8b:5e:80:7e:6d:70:3c:3f:c8:82:b2:34:57:5a: 95:a2:30:9d:3b:80:60:df:55:13:2a:e0:45:5d:12:50:23:b5: e1:9a:a5:28:9c:f3:10:b4:cb:3d:ad:b0:36:81:de:50:de:1f: 69:f0:cc:4e:3e:e3:38:df:ba:0e:34:22:97:07:cd:85:18:93: c0:e3:91:8b:b2:88:0b:e8:ca:94:ae:8e:ab:1e:29:cc:1d:db: a2:91:b8:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcLMCwx0GQF1u9yxAh6/nj3xhy2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMx MzlFRjMxRTAeFw0yNTA4MjIxMDA1NTBaFw0yNTA4MjUxOTM3NTBaMDMxMTAvBgNV BAMTKDEyREJBMjBBM0E1Q0NCQzg0RjVEMzhFNEQ0MjcxMjQzODFEODM3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChDF5O+sFibYwYcgyKL7i/LNwb CylyHRrrJCBZqiamKAH7nHxzoYq+2NTmD0+e21tbs1ItlVqSdLHHtSu9HzwNjMFI 9bbLJI/4eEjriiAYGFHDZ0RdoBuPLlQYJak57noprziZ7+ASgy7yOiNRz7FcWD46 jv62go1pAoR1gGD77Q8UVv9FajC/GK0ow9wgiZ/tz63Dhdu6Ki2/9Zl8yP54T841 4Me3bumU2LlpVvYb7l2olPdBypLlQ0lLY+WOadk6X/X8IcLQHP1bae7lzgp+w/Li om9pPMYkk8sjMf/XKWOvd9pPXTBdTRAjOC6Kjdjs5VdE0O6xyu04Iua+inlhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEtuiCjpcy8hPXTjk1CcSQ4HYNzIwHwYDVR0j BBgwFoAU/iRj0diLSSt1dz6a+BgF4xOe8x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE0YTA4OS02NWI2LTQ1ODUtYWY4NC0zZjgyYjE2OWMyN2EvMC9GRTI0NjNEMUQ4 OEI0OTJCNzU3NzNFOUFGODE4MDVFMzEzOUVGMzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMxMzlF RjMxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxNGEwODktNjViNi00NTg1LWFm ODQtM2Y4MmIxNjljMjdhLzAvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1 RTMxMzlFRjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOFF4q9h0eP2sqCZ/Y8lrKi8R5woB2dO2ga 1KXuY3xZhBf5mK9JtL32YiWYeZ5no6QcujlN4vwBZ6uH0xnsi5RLE69hvpnz3+hS 4sPusdpTk86mmpq6tWZ6An95VeGCn76jQrS9p0dwkZY79OQqYb9/y61iPorPromF ykoiV4CCdkcnG2gkcjoLZZqYY9B9vFzjOZOOnzEl2NKfjHz97x5oryo+5t+LXoB+ bXA8P8iCsjRXWpWiMJ07gGDfVRMq4EVdElAjteGapSic8xC0yz2tsDaB3lDeH2nw zE4+4zjfug40IpcHzYUYk8DjkYuyiAvoypSujqseKcwd26KRuEI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:13 2025 by rpki-client