$ rpki-client -vvf repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft File: FE2463D1D88B492B75773E9AF81805E3139EF31E.mft (raw, json) Hash identifier: RYbb9glWvgjrjdd6DEOFbXf31ziQxU2b1xMh3vbIFtE= Subject key identifier: 22:29:FE:F2:94:46:21:AA:E1:95:54:C0:53:EB:1F:B4:71:12:B5:89 Authority key identifier: FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E Certificate issuer: /CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Certificate serial: 4D397EFA18CDE344539F0211B50200EFC8BBDE18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft Manifest number: 0192 Signing time: Mon 21 Jul 2025 08:30:49 +0000 Manifest this update: Mon 21 Jul 2025 08:25:49 +0000 Manifest next update: Thu 24 Jul 2025 16:21:49 +0000 Files and hashes: 1: FE2463D1D88B492B75773E9AF81805E3139EF31E.crl (hash: e/3Fr0qVmtq/Y7r9C1HHfEv8QHXOhRPm1q48CzztQ0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:39:7e:fa:18:cd:e3:44:53:9f:02:11:b5:02:00:ef:c8:bb:de:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Validity Not Before: Jul 21 08:25:49 2025 GMT Not After : Jul 24 16:21:49 2025 GMT Subject: CN=2229FEF2944621AAE19554C053EB1FB47112B589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fa:eb:5b:ed:fa:08:f6:6e:2e:ad:ec:1c:fc: a6:74:5d:28:19:c9:9e:54:5f:67:f2:35:a4:64:b6: 68:64:58:57:cf:8c:96:40:e3:f9:a1:37:ab:c4:25: 68:16:85:d7:f1:62:b7:45:cd:aa:24:42:d8:3e:09: 53:7c:0b:80:2f:3a:61:8c:06:52:e7:db:3f:1a:67: d6:43:03:5c:42:0b:86:5c:4a:3f:5f:73:60:b7:8c: 8c:fd:7f:50:70:b8:64:45:a6:1d:6a:f9:ff:ad:35: e8:63:d2:c3:f6:bb:8a:b6:b5:67:3f:99:06:7e:ca: 8b:c5:41:a0:a9:44:12:ca:45:ab:bc:e0:6c:75:ea: 2c:ef:76:19:bf:17:84:4e:60:e3:24:9d:b1:14:02: cf:6b:c0:6d:22:81:5b:fd:70:1b:fe:5e:ce:ec:8c: 2d:85:48:6d:85:01:f6:24:13:25:c2:ce:22:75:14: 2b:1c:45:c2:bf:7c:81:d0:f8:27:62:3a:8a:52:8f: 75:87:5d:47:31:92:e7:be:81:ce:ac:bb:7d:e0:9f: 66:8b:96:41:1a:5d:67:01:68:04:fe:8b:92:2d:2a: a4:47:93:10:6d:f9:3d:85:f6:46:76:48:e2:31:a7: 48:a1:56:32:53:8f:dd:26:dc:05:f7:38:bb:88:5d: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:29:FE:F2:94:46:21:AA:E1:95:54:C0:53:EB:1F:B4:71:12:B5:89 X509v3 Authority Key Identifier: keyid:FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:2a:65:94:7f:b5:de:90:06:14:86:4a:c2:17:08:0c:0e:4f: 5c:5d:ad:41:ce:50:4a:9b:75:4e:b0:a7:48:ab:1f:f2:31:3f: e2:6d:9d:d6:ad:3d:09:87:04:6a:42:17:bc:bf:8b:3a:b3:27: b7:3b:07:08:b8:21:69:5a:04:0c:d2:be:32:f2:f8:d1:37:d6: 80:ff:8d:3f:72:23:0b:db:5e:f2:b3:6d:0a:40:1d:00:73:63: d7:4e:7f:23:0d:49:ea:40:9e:cd:2a:1c:10:1f:02:30:2d:b9: d6:25:81:cb:f4:82:93:7d:79:a8:c5:2e:29:5c:8f:d9:a6:bc: ef:2c:7e:bb:da:39:e7:f2:55:a6:5e:56:2c:5e:c7:5b:ac:31: a1:44:dc:7b:5b:f0:c6:79:be:8e:23:ed:67:3f:77:11:0e:77: b8:80:2c:3d:f3:22:fc:6f:6d:75:ad:82:ac:3d:64:b8:6a:54: 44:78:0e:53:73:4e:d2:0a:09:3a:78:b7:70:1a:d8:56:b4:4b: de:4d:a5:ab:23:a3:68:1a:1b:bc:4e:9d:d1:4f:f4:d2:64:b1: 48:17:e8:c1:33:c2:41:81:82:a3:8b:e9:7d:c1:26:d1:7d:f0: 4d:42:5c:95:54:cb:f1:42:f3:8f:e7:4f:98:e5:94:03:47:fc: 39:f3:05:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTl++hjN40RTnwIRtQIA78i73hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMx MzlFRjMxRTAeFw0yNTA3MjEwODI1NDlaFw0yNTA3MjQxNjIxNDlaMDMxMTAvBgNV BAMTKDIyMjlGRUYyOTQ0NjIxQUFFMTk1NTRDMDUzRUIxRkI0NzExMkI1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+utb7foI9m4urewc/KZ0XSgZ yZ5UX2fyNaRktmhkWFfPjJZA4/mhN6vEJWgWhdfxYrdFzaokQtg+CVN8C4AvOmGM BlLn2z8aZ9ZDA1xCC4ZcSj9fc2C3jIz9f1BwuGRFph1q+f+tNehj0sP2u4q2tWc/ mQZ+yovFQaCpRBLKRau84Gx16izvdhm/F4ROYOMknbEUAs9rwG0igVv9cBv+Xs7s jC2FSG2FAfYkEyXCziJ1FCscRcK/fIHQ+CdiOopSj3WHXUcxkue+gc6su33gn2aL lkEaXWcBaAT+i5ItKqRHkxBt+T2F9kZ2SOIxp0ihVjJTj90m3AX3OLuIXXuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIin+8pRGIarhlVTAU+sftHEStYkwHwYDVR0j BBgwFoAU/iRj0diLSSt1dz6a+BgF4xOe8x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE0YTA4OS02NWI2LTQ1ODUtYWY4NC0zZjgyYjE2OWMyN2EvMC9GRTI0NjNEMUQ4 OEI0OTJCNzU3NzNFOUFGODE4MDVFMzEzOUVGMzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMxMzlF RjMxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxNGEwODktNjViNi00NTg1LWFm ODQtM2Y4MmIxNjljMjdhLzAvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1 RTMxMzlFRjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMqZZR/td6QBhSGSsIXCAwOT1xdrUHOUEqb dU6wp0irH/IxP+JtndatPQmHBGpCF7y/izqzJ7c7Bwi4IWlaBAzSvjLy+NE31oD/ jT9yIwvbXvKzbQpAHQBzY9dOfyMNSepAns0qHBAfAjAtudYlgcv0gpN9eajFLilc j9mmvO8sfrvaOefyVaZeVixex1usMaFE3Htb8MZ5vo4j7Wc/dxEOd7iALD3zIvxv bXWtgqw9ZLhqVER4DlNzTtIKCTp4t3Aa2Fa0S95Npasjo2gaG7xOndFP9NJksUgX 6MEzwkGBgqOL6X3BJtF98E1CXJVUy/FC84/nT5jllANH/DnzBZ0= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:16 2025 by rpki-client