$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: J9GFwjEJoVVqOAAXhGH+pxiQhSkzdqaTWse2CogaTeI= Subject key identifier: D4:C2:45:BC:0B:D8:A9:AD:DE:1B:DC:6A:E9:E5:DC:CF:56:CD:27:52 Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 183A36713E2514E28AA873B2C623D96E83256B89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 022D Signing time: Sat 18 Oct 2025 22:21:17 +0000 Manifest this update: Sat 18 Oct 2025 22:16:17 +0000 Manifest next update: Wed 22 Oct 2025 04:20:17 +0000 Files and hashes: 1: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: aq2E+KoUIVrsdH8sisJxOkwtFLssFToEgQfWLmFO49U=) 2: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 1PlLZ70/l1XO167EbfOMkFAS5NVNN52M28JEV2n5Nfw=) 3: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: lG93mDy8mZJ1KYLzkUSHtFdOp3jxkVuITP5q7tld/tA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3a:36:71:3e:25:14:e2:8a:a8:73:b2:c6:23:d9:6e:83:25:6b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Oct 18 22:16:17 2025 GMT Not After : Oct 22 04:20:17 2025 GMT Subject: CN=D4C245BC0BD8A9ADDE1BDC6AE9E5DCCF56CD2752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c7:f4:e5:7e:01:f1:aa:2b:bb:e1:18:5f:c9: 8e:67:bf:c9:8f:9c:2e:93:24:d4:82:12:b2:3e:79: a8:d8:f7:41:62:0e:9b:e4:ac:73:32:d2:63:f5:e1: e4:62:af:72:f8:a0:ed:8d:ff:8b:8b:b4:92:32:22: 47:f5:60:bc:36:5d:24:94:e0:af:99:db:cf:a4:db: e1:b9:e5:b6:79:dc:4c:47:07:34:c8:b7:ee:97:2c: 0c:5d:ff:64:cb:0d:4e:44:93:70:c0:f0:f3:d7:77: 6c:d9:19:cc:ea:12:98:cb:bf:c1:f6:20:12:0d:98: 17:03:71:8c:ab:56:14:89:f3:b5:7a:9a:11:17:04: 97:6f:29:80:a3:2a:69:0e:78:98:f7:dd:c3:7c:68: a7:2a:d6:9b:df:be:02:c8:87:3c:77:45:8f:11:57: f4:5e:82:a2:c7:42:66:2d:28:9e:98:67:37:00:d5: cc:37:ce:74:50:35:93:8a:9f:c1:51:6f:4d:ee:0b: 83:fa:41:71:06:f3:3d:b0:0f:8e:3c:71:df:52:19: a9:30:e0:61:1d:a1:59:fb:59:f7:2a:e1:0a:79:c3: c7:08:cf:69:16:75:5e:6e:49:b6:d4:b9:d9:f1:a3: 3f:51:1b:9a:e7:f2:0c:4c:f0:01:bd:7e:4f:12:2b: 1b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C2:45:BC:0B:D8:A9:AD:DE:1B:DC:6A:E9:E5:DC:CF:56:CD:27:52 X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2d:ff:ae:2f:cc:31:ea:ab:bb:a2:ff:23:53:54:7e:8f:6a: 12:d5:67:e9:5f:0a:99:29:4f:10:9a:1b:fe:46:9b:51:f9:87: a5:cb:15:52:98:3f:a4:b6:d4:4c:d7:e2:cf:97:a6:56:56:39: db:f4:0f:5e:35:a0:8f:f5:25:c8:25:69:eb:c7:52:2b:c2:86: a9:45:78:b0:93:0e:fe:a3:df:b3:a8:39:d4:e4:f8:5d:f3:b5: e3:b0:87:4f:16:e8:ab:91:81:a6:cb:0a:83:eb:43:c8:2d:c7: 76:e5:5b:1f:81:89:5e:b5:21:9c:f8:31:fd:93:17:be:8a:e1: 25:73:4a:c7:fc:68:ef:b0:e7:fb:d3:1b:90:e5:4c:c6:ab:60: 74:91:d6:83:74:88:f1:30:e3:88:73:1f:3c:77:dd:fc:52:8f: f7:9a:3c:74:39:94:31:c9:f7:bf:ab:f1:af:c7:6b:08:0f:f1: db:8e:5f:2c:c3:d8:58:a2:8f:a9:fc:b6:dc:29:a1:7a:13:11: 05:ed:f0:6e:7e:25:b4:17:71:85:1b:21:8a:4e:3f:17:c7:22: ce:d3:6d:2b:0a:10:bf:d0:ba:4e:1d:14:01:da:83:9d:7e:45: 47:58:ee:36:b1:75:f5:9e:0b:45:af:72:f3:fc:ff:1f:df:34: 85:61:8a:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDo2cT4lFOKKqHOyxiPZboMla4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNTEwMTgyMjE2MTdaFw0yNTEwMjIwNDIwMTdaMDMxMTAvBgNV BAMTKEQ0QzI0NUJDMEJEOEE5QURERTFCREM2QUU5RTVEQ0NGNTZDRDI3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYx/TlfgHxqiu74RhfyY5nv8mP nC6TJNSCErI+eajY90FiDpvkrHMy0mP14eRir3L4oO2N/4uLtJIyIkf1YLw2XSSU 4K+Z28+k2+G55bZ53ExHBzTIt+6XLAxd/2TLDU5Ek3DA8PPXd2zZGczqEpjLv8H2 IBINmBcDcYyrVhSJ87V6mhEXBJdvKYCjKmkOeJj33cN8aKcq1pvfvgLIhzx3RY8R V/RegqLHQmYtKJ6YZzcA1cw3znRQNZOKn8FRb03uC4P6QXEG8z2wD448cd9SGakw 4GEdoVn7Wfcq4Qp5w8cIz2kWdV5uSbbUudnxoz9RG5rn8gxM8AG9fk8SKxuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1MJFvAvYqa3eG9xq6eXcz1bNJ1IwHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIot/64vzDHqq7ui/yNTVH6PahLVZ+lfCpkp TxCaG/5Gm1H5h6XLFVKYP6S21EzX4s+XplZWOdv0D141oI/1JcglaevHUivChqlF eLCTDv6j37OoOdTk+F3zteOwh08W6KuRgabLCoPrQ8gtx3blWx+BiV61IZz4Mf2T F76K4SVzSsf8aO+w5/vTG5DlTMarYHSR1oN0iPEw44hzHzx33fxSj/eaPHQ5lDHJ 97+r8a/HawgP8duOXyzD2Fiij6n8ttwpoXoTEQXt8G5+JbQXcYUbIYpOPxfHIs7T bSsKEL/Quk4dFAHag51+RUdY7jaxdfWeC0WvcvP8/x/fNIVhigM= -----END CERTIFICATE-----Generated at Mon Oct 20 19:03:36 2025 by rpki-client