$ rpki-client -vvf repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft File: FE2463D1D88B492B75773E9AF81805E3139EF31E.mft (raw, json) Hash identifier: Re84NjdXCmRNmnupyIx1hhBq9fU4mU+IBDnKY/H37qM= Subject key identifier: 8A:F8:A5:E7:26:06:4E:16:7B:77:C6:1E:15:14:03:DE:3A:9E:20:A4 Authority key identifier: FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E Certificate issuer: /CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Certificate serial: 03DD6639BE69970AA83A1728D16085755F32596E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft Manifest number: 01C1 Signing time: Mon 03 Nov 2025 16:10:50 +0000 Manifest this update: Mon 03 Nov 2025 16:05:50 +0000 Manifest next update: Thu 06 Nov 2025 20:41:50 +0000 Files and hashes: 1: FE2463D1D88B492B75773E9AF81805E3139EF31E.crl (hash: Z37cwqDeJAtk9fTv6oaoCyO5brEIL1KK6hRCe/VNq3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 20:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:dd:66:39:be:69:97:0a:a8:3a:17:28:d1:60:85:75:5f:32:59:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE2463D1D88B492B75773E9AF81805E3139EF31E Validity Not Before: Nov 3 16:05:50 2025 GMT Not After : Nov 6 20:41:50 2025 GMT Subject: CN=8AF8A5E726064E167B77C61E151403DE3A9E20A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:9c:03:d8:94:a2:36:14:5e:bc:68:d0:0e: 2f:c7:4f:8e:ff:bf:3f:85:ae:75:2d:65:20:51:e6: 22:66:7d:20:66:1b:a3:0f:40:50:a2:f5:ea:94:e9: 9d:b4:e2:45:0c:be:09:51:17:ae:8b:e7:15:28:01: 1f:d7:83:67:40:24:98:2c:2e:2f:b3:14:3f:11:2d: 7d:3b:1a:3a:27:3c:7a:a2:33:bd:9a:57:7a:0d:69: 47:02:f9:01:7f:c8:d2:51:e5:59:7e:54:4f:04:a5: f2:9e:fc:97:3c:eb:67:ed:ad:bc:d3:94:cb:08:71: 77:6b:99:33:cd:ac:49:34:40:68:3c:08:aa:55:1e: 48:28:65:2e:e6:fa:55:33:02:9b:70:ae:41:52:1e: 3f:e3:9f:4f:8d:0f:5d:1c:f2:9e:2a:04:a2:19:1e: 91:89:ac:bc:78:65:f2:4d:cd:68:ba:bc:ba:89:02: 6e:33:c0:f4:e2:f8:8f:7f:fa:38:52:12:66:20:c8: de:ff:1a:46:6c:2e:f9:be:59:a5:f0:7c:40:5f:3a: c7:24:32:a7:ff:c7:56:76:fd:88:c9:dc:23:e5:5b: ce:6e:10:08:30:56:19:6d:04:f9:b4:78:f7:9f:3c: 87:6a:5b:54:02:39:d8:1b:47:bf:c2:96:4f:f2:c3: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F8:A5:E7:26:06:4E:16:7B:77:C6:1E:15:14:03:DE:3A:9E:20:A4 X509v3 Authority Key Identifier: keyid:FE:24:63:D1:D8:8B:49:2B:75:77:3E:9A:F8:18:05:E3:13:9E:F3:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE2463D1D88B492B75773E9AF81805E3139EF31E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7514a089-65b6-4585-af84-3f82b169c27a/0/FE2463D1D88B492B75773E9AF81805E3139EF31E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8c:81:4a:72:a4:f5:1b:67:41:da:76:82:25:44:f7:33:5d: e2:69:b2:5e:bd:0c:76:fd:80:48:d8:97:02:54:69:ce:6c:1f: 38:85:cc:40:4c:cc:f9:fc:08:02:ba:e7:8a:dd:90:e1:9e:08: db:9b:5e:20:9f:97:2d:6a:33:61:3e:2e:4a:82:49:21:bb:42: f3:96:02:8c:ab:8d:d7:83:bd:1b:b7:e6:03:21:3d:dd:03:a3: a4:84:79:4c:6b:dc:59:54:0f:d5:5b:8d:56:2c:be:95:3f:69: 2f:9f:d8:0c:b9:b3:e1:67:e7:75:99:91:5a:a1:20:a7:3b:60: 5e:80:ab:f0:36:d0:20:59:b5:f4:3e:66:79:30:9f:0e:08:07: 78:9f:cd:01:72:08:a4:fa:4b:04:44:65:c6:df:ac:68:d7:6e: b6:6d:c9:34:43:34:a4:64:db:90:81:ed:ad:2a:54:39:c7:99: d2:2a:1e:97:d1:35:35:c7:c6:5f:e1:fd:4d:ed:d5:91:b8:43: 6b:71:88:34:0e:d2:00:b7:67:c1:e4:36:eb:80:7e:ea:4a:f0: 5d:f0:76:f5:4b:71:40:fc:88:1c:a5:8d:53:44:82:91:81:72: f6:c1:49:44:ec:1d:aa:97:ab:8f:e5:b2:8b:81:66:6e:19:29: 86:55:69:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA91mOb5plwqoOhco0WCFdV8yWW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMx MzlFRjMxRTAeFw0yNTExMDMxNjA1NTBaFw0yNTExMDYyMDQxNTBaMDMxMTAvBgNV BAMTKDhBRjhBNUU3MjYwNjRFMTY3Qjc3QzYxRTE1MTQwM0RFM0E5RTIwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dZwD2JSiNhRevGjQDi/HT47/ vz+FrnUtZSBR5iJmfSBmG6MPQFCi9eqU6Z204kUMvglRF66L5xUoAR/Xg2dAJJgs Li+zFD8RLX07GjonPHqiM72aV3oNaUcC+QF/yNJR5Vl+VE8EpfKe/Jc862ftrbzT lMsIcXdrmTPNrEk0QGg8CKpVHkgoZS7m+lUzAptwrkFSHj/jn0+ND10c8p4qBKIZ HpGJrLx4ZfJNzWi6vLqJAm4zwPTi+I9/+jhSEmYgyN7/GkZsLvm+WaXwfEBfOsck Mqf/x1Z2/YjJ3CPlW85uEAgwVhltBPm0ePefPIdqW1QCOdgbR7/Clk/yw4ahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivil5yYGThZ7d8YeFRQD3jqeIKQwHwYDVR0j BBgwFoAU/iRj0diLSSt1dz6a+BgF4xOe8x4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE0YTA4OS02NWI2LTQ1ODUtYWY4NC0zZjgyYjE2OWMyN2EvMC9GRTI0NjNEMUQ4 OEI0OTJCNzU3NzNFOUFGODE4MDVFMzEzOUVGMzFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1RTMxMzlF RjMxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxNGEwODktNjViNi00NTg1LWFm ODQtM2Y4MmIxNjljMjdhLzAvRkUyNDYzRDFEODhCNDkyQjc1NzczRTlBRjgxODA1 RTMxMzlFRjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiMgUpypPUbZ0HadoIlRPczXeJpsl69DHb9 gEjYlwJUac5sHziFzEBMzPn8CAK654rdkOGeCNubXiCfly1qM2E+LkqCSSG7QvOW AoyrjdeDvRu35gMhPd0Do6SEeUxr3FlUD9VbjVYsvpU/aS+f2Ay5s+Fn53WZkVqh IKc7YF6Aq/A20CBZtfQ+Znkwnw4IB3ifzQFyCKT6SwREZcbfrGjXbrZtyTRDNKRk 25CB7a0qVDnHmdIqHpfRNTXHxl/h/U3t1ZG4Q2txiDQO0gC3Z8HkNuuAfupK8F3w dvVLcUD8iByljVNEgpGBcvbBSUTsHaqXq4/lsouBZm4ZKYZVaaw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:30:18 2025 by rpki-client