$ rpki-client -vvf repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft File: FE2463D1D88B492B75773E9AF81805E3139EF31E.mft (raw, json) Hash identifier: 3WA4IR6bbRoXi+0r1qabV1wv6L2UpGFP5ZPRv8ynfFs= Subject key identifier: 27:C7:2F:F9:18:A6:78:2E:97:A5:8B:40:E9:84:35:64:8D:01:FD:DB Authority key identifier: FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E Certificate issuer: /CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Certificate serial: 1B6B12672B21BA0C03A9D0FF3AACA0F13F985367 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft Manifest number: 017D Signing time: Tue 03 Jun 2025 21:11:16 +0000 Manifest this update: Tue 03 Jun 2025 21:06:16 +0000 Manifest next update: Sat 07 Jun 2025 03:44:16 +0000 Files and hashes: 1: FE2463D1D88B492B75773E9AF81805E3139EF31E.crl (hash: TSWxt3lMX6AmhbotTMPSTi4bxkDUmxuDnKwWD5FXfLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6b:12:67:2b:21:ba:0c:03:a9:d0:ff:3a:ac:a0:f1:3f:98:53:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Validity Not Before: Jun 3 21:06:16 2025 GMT Not After : Jun 7 03:44:16 2025 GMT Subject: CN=27C72FF918A6782E97A58B40E98435648D01FDDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:2b:55:cf:7d:3f:b4:1f:fb:d3:9d:9e:b4: 9a:be:0b:49:76:83:79:b2:e8:b0:4b:c4:83:fd:64: 4c:a5:37:2b:a1:13:f1:92:70:3d:ed:b5:66:94:e2: 4b:c7:7c:5a:22:6a:f0:e9:28:58:98:c8:5a:0c:9b: c7:82:4d:a4:44:11:21:f2:03:78:d1:eb:b0:c8:87: ff:01:9a:36:8e:86:45:88:87:b5:12:06:d8:ea:85: 08:13:2f:5e:e0:1c:04:f8:22:3f:dd:1b:b3:c2:13: e3:b4:06:e3:e0:91:ad:62:67:26:7e:07:17:5d:cd: 5a:19:4b:e6:83:24:5b:a1:52:2f:61:5a:2a:da:31: 54:37:d5:a8:70:94:fd:c5:dd:b5:56:b3:31:fe:30: 58:8d:6b:22:e3:3a:11:f6:b6:3c:bb:59:81:04:ed: 8d:01:15:f5:99:d8:30:e2:62:81:ba:7b:b5:c1:31: c1:61:63:97:dc:2f:f5:75:0e:4c:1a:9b:65:b2:12: 0c:ee:99:ac:36:07:20:1d:ab:70:e8:38:0b:58:13: 9b:02:8c:94:73:d3:08:30:90:06:ca:4a:f7:13:4c: fd:36:0b:df:16:c6:73:b3:3d:64:9e:76:8f:1f:38: 52:1b:7f:74:90:5e:82:19:e1:d0:07:5a:c8:7d:88: ab:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C7:2F:F9:18:A6:78:2E:97:A5:8B:40:E9:84:35:64:8D:01:FD:DB X509v3 Authority Key Identifier: keyid:FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8d:0b:fe:91:51:13:4d:17:c3:d7:38:4a:e5:69:fd:ad:e4: ed:fa:38:e0:c2:05:3a:08:77:0c:60:13:9d:20:7d:40:a8:1a: 69:13:73:5d:04:26:a1:ac:76:58:ac:da:5b:32:3a:fa:c8:83: 6a:e0:b5:fa:29:30:b8:e0:17:4e:7b:b7:0c:3f:76:c6:a8:f8: e5:d1:f8:65:f7:ed:d8:aa:d8:17:3d:43:15:d5:ed:4d:ba:1e: 0f:bc:30:1a:38:16:f9:15:ea:65:e9:2a:ff:b3:57:46:84:f5: 85:4c:5f:59:44:c5:4c:0f:15:09:28:e0:5f:f8:51:72:f3:64: 73:d8:16:e1:f3:0a:f4:fe:e4:05:da:9d:87:c3:bd:c7:22:a9: 4a:11:bb:92:fa:70:07:90:e8:4c:64:b8:97:db:f2:d0:9d:ee: ed:fa:68:8f:b5:99:b4:0c:8e:ab:be:2c:76:0f:63:e2:ac:c4: 8d:46:d1:3d:68:75:9c:67:3b:44:8a:00:18:e9:8a:14:85:21: 9a:37:c5:12:cf:16:94:02:e2:83:31:93:b8:15:13:5e:70:67: 35:64:15:45:f8:1f:51:cf:75:b9:dd:de:89:b8:8f:d6:0b:86: 7d:b9:6a:7b:18:31:7f:72:e8:be:eb:5b:b7:56:9b:29:c3:f7: 7f:9d:00:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2sSZyshugwDqdD/Oqyg8T+YU2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMx MzlFRjMxRTAeFw0yNTA2MDMyMTA2MTZaFw0yNTA2MDcwMzQ0MTZaMDMxMTAvBgNV BAMTKDI3QzcyRkY5MThBNjc4MkU5N0E1OEI0MEU5ODQzNTY0OEQwMUZEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoytVz30/tB/7052etJq+C0l2 g3my6LBLxIP9ZEylNyuhE/GScD3ttWaU4kvHfFoiavDpKFiYyFoMm8eCTaREESHy A3jR67DIh/8BmjaOhkWIh7USBtjqhQgTL17gHAT4Ij/dG7PCE+O0BuPgka1iZyZ+ BxddzVoZS+aDJFuhUi9hWiraMVQ31ahwlP3F3bVWszH+MFiNayLjOhH2tjy7WYEE 7Y0BFfWZ2DDiYoG6e7XBMcFhY5fcL/V1Dkwam2WyEgzumaw2ByAdq3DoOAtYE5sC jJRz0wgwkAbKSvcTTP02C98WxnOzPWSedo8fOFIbf3SQXoIZ4dAHWsh9iKvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ8cv+RimeC6XpYtA6YQ1ZI0B/dswHwYDVR0j BBgwFoAU/iRj0diLSSt1dz6a+BgF4xOe8x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE0YTA4OS02NWI2LTQ1ODUtYWY4NC0zZjgyYjE2OWMyN2EvMC9GRTI0NjNEMUQ4 OEI0OTJCNzU3NzNFOUFGODE4MDVFMzEzOUVGMzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMxMzlF RjMxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxNGEwODktNjViNi00NTg1LWFm ODQtM2Y4MmIxNjljMjdhLzAvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1 RTMxMzlFRjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWNC/6RURNNF8PXOErlaf2t5O36OODCBToI dwxgE50gfUCoGmkTc10EJqGsdlis2lsyOvrIg2rgtfopMLjgF057tww/dsao+OXR +GX37diq2Bc9QxXV7U26Hg+8MBo4FvkV6mXpKv+zV0aE9YVMX1lExUwPFQko4F/4 UXLzZHPYFuHzCvT+5AXanYfDvcciqUoRu5L6cAeQ6ExkuJfb8tCd7u36aI+1mbQM jqu+LHYPY+KsxI1G0T1odZxnO0SKABjpihSFIZo3xRLPFpQC4oMxk7gVE15wZzVk FUX4H1HPdbnd3om4j9YLhn25ansYMX9y6L7rW7dWmynD93+dAIs= -----END CERTIFICATE-----Generated at Thu Jun 5 19:46:01 2025 by rpki-client