$ rpki-client -vvf repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft File: FE2463D1D88B492B75773E9AF81805E3139EF31E.mft (raw, json) Hash identifier: PR9L6SvQrEFOUsP4hB/z2IhpPmRdd9njU81juQmNmkY= Subject key identifier: 01:FF:E7:4C:19:33:29:A5:9B:12:4A:70:58:46:C9:EB:19:65:B0:38 Authority key identifier: FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E Certificate issuer: /CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Certificate serial: 6FD83555A186D6E83C4E563035D67EAC26921EC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft Manifest number: 016D Signing time: Mon 28 Apr 2025 09:30:46 +0000 Manifest this update: Mon 28 Apr 2025 09:25:46 +0000 Manifest next update: Thu 01 May 2025 17:13:46 +0000 Files and hashes: 1: FE2463D1D88B492B75773E9AF81805E3139EF31E.crl (hash: WJGbDGuEPo/YhElMJzVXhuUqANXYlXqPm8Ie7rP7Jec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d8:35:55:a1:86:d6:e8:3c:4e:56:30:35:d6:7e:ac:26:92:1e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Validity Not Before: Apr 28 09:25:46 2025 GMT Not After : May 1 17:13:46 2025 GMT Subject: CN=01FFE74C193329A59B124A705846C9EB1965B038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:c1:72:59:06:02:a2:79:0f:3a:83:a3:8b: 1f:58:b9:2a:49:58:33:37:ec:58:c3:c3:3a:42:42: 82:a6:2a:37:31:76:17:86:bb:af:63:04:f1:65:52: a7:f7:4c:22:c6:85:ef:e2:9a:a7:42:28:a4:81:75: ea:7c:4a:5e:dc:24:69:7b:d7:b3:c7:d5:32:f1:43: cb:5c:de:9d:3d:80:f6:bc:2e:d3:a4:e0:49:c4:bf: a5:a9:63:43:f2:6b:58:fc:6d:ce:6f:e1:2f:d6:12: be:cb:ed:be:09:9f:1d:9e:ee:2c:a5:c8:84:d0:3e: 32:25:14:2f:ae:61:be:9e:b0:bc:35:82:de:d7:d4: 60:64:59:a8:6f:c7:f8:fd:eb:c8:3e:c5:3e:58:84: 1b:d0:78:91:fc:e3:8f:82:45:dc:aa:07:22:98:e6: 8d:1f:9f:c3:f0:e4:b3:f5:51:9f:48:3a:69:05:78: 2a:d0:98:c8:59:4f:0a:8a:3a:d0:95:b6:49:06:0a: f2:3a:dc:9c:1b:1b:e9:fb:79:95:73:15:27:73:86: 94:18:b5:97:0e:b0:21:05:8d:6b:7c:df:a6:01:f5: 68:88:2a:8d:f3:9c:35:af:fc:fe:c7:e5:2b:1b:4e: 68:dc:48:2b:df:fc:b9:c4:66:ca:7a:c9:66:90:c4: db:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FF:E7:4C:19:33:29:A5:9B:12:4A:70:58:46:C9:EB:19:65:B0:38 X509v3 Authority Key Identifier: keyid:FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:0c:ea:9d:a1:2f:b6:cd:fd:44:45:72:b2:6f:75:ad:aa:ba: 2b:9c:a6:fa:63:a0:c4:5e:10:fc:9e:0c:c6:ad:cf:c2:2f:da: 7b:90:3f:f5:8a:13:c6:5a:5c:c0:99:c5:7c:ec:03:5c:ee:9f: 36:f4:48:5c:be:3b:60:55:a2:b4:43:ff:48:6d:44:62:e8:f1: 91:26:d9:3b:e6:86:6a:1c:2d:e3:2f:5f:c8:8d:fa:02:6d:03: 80:83:57:76:a2:ca:d8:a4:a2:7c:ed:5b:ce:20:33:42:30:a0: 32:95:5b:2c:53:46:a9:34:cf:75:eb:93:11:2a:78:3f:de:a8: 61:7f:bf:f8:23:ad:2c:23:7c:e0:29:ef:7b:49:5c:71:ce:ee: 39:c0:bb:94:68:09:b9:53:41:29:b5:9e:ab:6e:4a:79:dc:4d: 85:3a:6b:1f:a9:b6:0d:c0:a2:df:93:f9:98:44:73:99:e0:42: ec:10:f1:11:88:08:91:b8:db:23:69:70:85:69:33:eb:44:93: 91:68:32:b6:10:fb:f5:b7:14:98:d4:4f:e8:fd:29:f9:71:f0: 6a:3e:1c:24:26:20:96:db:bc:ae:10:7b:10:72:f0:6e:0a:9c: f9:ba:33:94:85:c3:d1:89:95:f2:0c:ad:06:03:03:8c:bd:05: 8b:3b:2b:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb9g1VaGG1ug8TlYwNdZ+rCaSHskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMx MzlFRjMxRTAeFw0yNTA0MjgwOTI1NDZaFw0yNTA1MDExNzEzNDZaMDMxMTAvBgNV BAMTKDAxRkZFNzRDMTkzMzI5QTU5QjEyNEE3MDU4NDZDOUVCMTk2NUIwMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPMFyWQYConkPOoOjix9YuSpJ WDM37FjDwzpCQoKmKjcxdheGu69jBPFlUqf3TCLGhe/imqdCKKSBdep8Sl7cJGl7 17PH1TLxQ8tc3p09gPa8LtOk4EnEv6WpY0Pya1j8bc5v4S/WEr7L7b4Jnx2e7iyl yITQPjIlFC+uYb6esLw1gt7X1GBkWahvx/j968g+xT5YhBvQeJH844+CRdyqByKY 5o0fn8Pw5LP1UZ9IOmkFeCrQmMhZTwqKOtCVtkkGCvI63JwbG+n7eZVzFSdzhpQY tZcOsCEFjWt836YB9WiIKo3znDWv/P7H5SsbTmjcSCvf/LnEZsp6yWaQxNtRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAf/nTBkzKaWbEkpwWEbJ6xllsDgwHwYDVR0j BBgwFoAU/iRj0diLSSt1dz6a+BgF4xOe8x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE0YTA4OS02NWI2LTQ1ODUtYWY4NC0zZjgyYjE2OWMyN2EvMC9GRTI0NjNEMUQ4 OEI0OTJCNzU3NzNFOUFGODE4MDVFMzEzOUVGMzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMxMzlF RjMxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxNGEwODktNjViNi00NTg1LWFm ODQtM2Y4MmIxNjljMjdhLzAvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1 RTMxMzlFRjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIM6p2hL7bN/URFcrJvda2quiucpvpjoMRe EPyeDMatz8Iv2nuQP/WKE8ZaXMCZxXzsA1zunzb0SFy+O2BVorRD/0htRGLo8ZEm 2TvmhmocLeMvX8iN+gJtA4CDV3aiytikonztW84gM0IwoDKVWyxTRqk0z3XrkxEq eD/eqGF/v/gjrSwjfOAp73tJXHHO7jnAu5RoCblTQSm1nqtuSnncTYU6ax+ptg3A ot+T+ZhEc5ngQuwQ8RGICJG42yNpcIVpM+tEk5FoMrYQ+/W3FJjUT+j9Kflx8Go+ HCQmIJbbvK4QexBy8G4KnPm6M5SFw9GJlfIMrQYDA4y9BYs7K5M= -----END CERTIFICATE-----Generated at Tue Apr 29 12:07:10 2025 by rpki-client