$ rpki-client -vvf repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft File: FE2463D1D88B492B75773E9AF81805E3139EF31E.mft (raw, json) Hash identifier: acU33y4uXvFCcPIKVIHvJeKBkZci+abouUSQVE6yivg= Subject key identifier: E9:A1:7E:4F:50:F4:07:9B:60:BB:DA:D1:F7:64:2F:B2:2F:70:D5:3C Authority key identifier: FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E Certificate issuer: /CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Certificate serial: 3FA1A9C892B3F0C235B11EA47E4F41D762E5801D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft Manifest number: 01BA Signing time: Sat 18 Oct 2025 15:50:49 +0000 Manifest this update: Sat 18 Oct 2025 15:45:48 +0000 Manifest next update: Tue 21 Oct 2025 20:51:48 +0000 Files and hashes: 1: FE2463D1D88B492B75773E9AF81805E3139EF31E.crl (hash: OK3HuB+H0Qz4o7rEj6RHwHT2NjzdTS+9LntnIupBuNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a1:a9:c8:92:b3:f0:c2:35:b1:1e:a4:7e:4f:41:d7:62:e5:80:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Validity Not Before: Oct 18 15:45:48 2025 GMT Not After : Oct 21 20:51:48 2025 GMT Subject: CN=E9A17E4F50F4079B60BBDAD1F7642FB22F70D53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:df:2d:54:4d:1e:b6:c2:4c:57:26:5b:53: ba:c5:87:e0:d4:dc:34:92:e9:86:67:5e:82:5d:ea: e9:dc:c9:1c:c9:a1:4f:62:06:aa:b5:ec:0f:98:db: b7:62:bd:74:b2:3f:7b:01:42:36:77:23:60:dc:e6: 13:dc:a2:f7:a0:82:03:7b:5b:84:9e:4a:45:c9:64: 53:2a:6b:4c:a4:55:64:f0:4d:8e:5a:f4:64:2f:58: b4:f6:61:4c:c9:1b:d8:d0:86:9e:8b:f3:e2:9e:9e: 02:2e:03:63:5a:ec:a9:97:85:dd:a0:c2:ca:b8:c8: d5:ff:e9:2b:53:c6:b8:c9:2f:eb:93:7d:11:7b:af: be:a4:bd:b4:82:bc:26:9c:94:c0:cb:37:e6:ca:3c: 27:5d:01:14:f4:28:3c:75:b1:79:2e:17:50:21:36: 46:d8:e6:7a:26:c1:39:ab:4f:68:25:df:46:80:12: ba:6b:cd:81:64:b2:52:d8:f1:1d:43:33:9c:f6:65: f4:e0:18:c4:b6:00:fa:c8:88:43:22:5f:18:05:40: df:62:09:29:89:e8:b3:d5:bc:0b:82:b0:55:49:b2: 1b:36:d3:e6:3b:8c:a0:8e:44:19:6f:04:79:d1:c3: c0:30:5a:7e:6e:4b:65:e3:67:2d:6e:8c:d2:10:06: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A1:7E:4F:50:F4:07:9B:60:BB:DA:D1:F7:64:2F:B2:2F:70:D5:3C X509v3 Authority Key Identifier: keyid:FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ea:a5:a1:81:35:e1:6a:2b:75:68:39:e6:65:05:ea:31:c2: 52:8e:e2:b4:97:ab:44:69:cd:b0:32:52:57:d3:f6:0c:cf:c9: bd:a9:e2:d4:bf:7f:a5:a5:a0:34:0c:65:88:46:04:c3:a6:9a: b0:27:e7:5f:ce:5f:74:d7:f4:b2:ae:96:78:57:de:5a:6b:65: 57:c8:16:4f:28:2d:85:23:2e:61:91:63:84:6f:85:64:98:70: 09:3c:41:a2:13:d8:ca:62:cc:24:f7:a3:4d:de:2e:15:8a:c1: 7e:af:61:f8:19:0f:49:2e:cb:d6:9e:e0:1f:e1:6c:e8:4d:3d: 00:81:eb:c8:7c:84:40:59:f9:b6:10:23:f5:ff:b8:a3:8f:4c: e5:9f:20:49:8f:92:0e:5d:70:08:22:df:d3:09:37:4a:d9:c6: 46:d7:cd:d3:a7:32:8e:cb:07:03:64:4b:14:04:49:a3:3c:b0: b8:64:cb:9e:d3:ef:25:63:de:d4:3e:aa:75:3a:ac:45:58:1f: 9b:4d:4f:21:10:f6:9e:39:1d:ca:d9:77:32:cb:d5:41:ed:9e: 63:bc:d9:72:5d:c2:47:e9:c3:dc:8f:33:45:a3:c1:44:76:8d: fb:66:8b:6c:51:bd:92:48:ea:27:c6:02:df:98:4c:3a:37:bc: bd:74:8d:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6GpyJKz8MI1sR6kfk9B12LlgB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMx MzlFRjMxRTAeFw0yNTEwMTgxNTQ1NDhaFw0yNTEwMjEyMDUxNDhaMDMxMTAvBgNV BAMTKEU5QTE3RTRGNTBGNDA3OUI2MEJCREFEMUY3NjQyRkIyMkY3MEQ1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmf98tVE0etsJMVyZbU7rFh+DU 3DSS6YZnXoJd6uncyRzJoU9iBqq17A+Y27divXSyP3sBQjZ3I2Dc5hPcovegggN7 W4SeSkXJZFMqa0ykVWTwTY5a9GQvWLT2YUzJG9jQhp6L8+KengIuA2Na7KmXhd2g wsq4yNX/6StTxrjJL+uTfRF7r76kvbSCvCaclMDLN+bKPCddART0KDx1sXkuF1Ah NkbY5nomwTmrT2gl30aAErprzYFkslLY8R1DM5z2ZfTgGMS2APrIiEMiXxgFQN9i CSmJ6LPVvAuCsFVJshs20+Y7jKCORBlvBHnRw8AwWn5uS2XjZy1ujNIQBtHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6aF+T1D0B5tgu9rR92Qvsi9w1TwwHwYDVR0j BBgwFoAU/iRj0diLSSt1dz6a+BgF4xOe8x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE0YTA4OS02NWI2LTQ1ODUtYWY4NC0zZjgyYjE2OWMyN2EvMC9GRTI0NjNEMUQ4 OEI0OTJCNzU3NzNFOUFGODE4MDVFMzEzOUVGMzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMxMzlF RjMxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxNGEwODktNjViNi00NTg1LWFm ODQtM2Y4MmIxNjljMjdhLzAvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1 RTMxMzlFRjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbqpaGBNeFqK3VoOeZlBeoxwlKO4rSXq0Rp zbAyUlfT9gzPyb2p4tS/f6WloDQMZYhGBMOmmrAn51/OX3TX9LKulnhX3lprZVfI Fk8oLYUjLmGRY4RvhWSYcAk8QaIT2MpizCT3o03eLhWKwX6vYfgZD0kuy9ae4B/h bOhNPQCB68h8hEBZ+bYQI/X/uKOPTOWfIEmPkg5dcAgi39MJN0rZxkbXzdOnMo7L BwNkSxQESaM8sLhky57T7yVj3tQ+qnU6rEVYH5tNTyEQ9p45HcrZdzLL1UHtnmO8 2XJdwkfpw9yPM0WjwUR2jftmi2xRvZJI6ifGAt+YTDo3vL10jYs= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:21 2025 by rpki-client