$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: bYEUmvSZ31Vw1l2Rkopfn1TEH+WGCNAMdfuN2UPCGxg= Subject key identifier: AA:ED:E2:3B:76:B3:DC:3C:FA:DC:2D:EB:BA:D9:43:4C:CA:D3:85:EC Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 14F9DABB5EA4A1B51362FBA63F4F5FB9BACC36AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 0214 Signing time: Fri 22 Aug 2025 12:01:19 +0000 Manifest this update: Fri 22 Aug 2025 11:56:19 +0000 Manifest next update: Mon 25 Aug 2025 19:05:19 +0000 Files and hashes: 1: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 1PlLZ70/l1XO167EbfOMkFAS5NVNN52M28JEV2n5Nfw=) 2: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: lG93mDy8mZJ1KYLzkUSHtFdOp3jxkVuITP5q7tld/tA=) 3: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: WA1wLUF8OWaq6qobdAOvGRpv5Mrnl2ssuX+3ILuPNDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f9:da:bb:5e:a4:a1:b5:13:62:fb:a6:3f:4f:5f:b9:ba:cc:36:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Aug 22 11:56:19 2025 GMT Not After : Aug 25 19:05:19 2025 GMT Subject: CN=AAEDE23B76B3DC3CFADC2DEBBAD9434CCAD385EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:14:f3:17:ee:c8:d4:b5:17:28:90:ce:78:80: 61:c8:e0:2c:57:1e:03:c9:13:4a:e7:d5:a8:50:2c: f8:11:b4:43:da:1b:c2:2c:d4:3f:85:78:9a:9f:54: 33:3c:69:e8:8a:d5:52:b6:dc:1b:4d:8f:90:ef:87: aa:0a:0d:fa:a0:40:9f:0b:37:df:47:92:a2:39:96: 68:67:1f:f7:39:ee:dd:0e:04:81:65:5c:f5:cc:ee: 85:36:d2:bb:24:bd:b0:90:07:d5:7b:9a:fd:fb:e5: 07:15:62:10:7f:49:4d:ad:97:4c:75:40:88:f9:df: 65:51:1a:fa:7c:07:ee:64:98:4a:8b:e5:28:0f:f1: 94:03:00:bf:82:50:fe:1f:23:4b:f6:93:06:03:71: 05:eb:07:43:e2:6f:c6:e7:f9:e7:70:48:6a:01:54: 7e:98:ba:32:3f:b3:10:ac:9f:e5:0f:b9:f5:31:ba: 49:6f:35:01:d6:fa:e8:6e:63:25:31:36:da:08:3a: 3b:cd:1b:2a:6d:e7:c7:ea:2c:22:62:95:44:5d:51: 79:a7:b9:4f:94:27:ad:b3:fd:c3:80:d3:cb:81:30: 72:b3:e5:78:33:b2:a4:7c:40:5b:d2:e2:09:be:14: aa:7b:4d:4b:69:a2:8b:86:5a:dd:d9:78:ae:c9:33: ca:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:E2:3B:76:B3:DC:3C:FA:DC:2D:EB:BA:D9:43:4C:CA:D3:85:EC X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:42:10:1d:20:bf:fb:73:19:10:07:bc:d0:d1:f3:f1:c3:75: cd:87:e4:ed:2e:f2:79:79:8d:e2:91:c8:75:14:4d:93:4f:20: 1c:a6:55:c6:d8:73:2e:2f:58:9c:95:4f:23:5f:9c:64:53:6d: 77:ca:e3:c0:02:73:1d:b4:eb:a7:43:13:de:b7:c2:13:36:36: d8:f2:df:71:88:9b:99:98:79:a2:eb:12:4b:1f:58:fe:d8:54: c2:05:e7:d2:97:b7:0e:2c:d5:60:04:af:06:15:67:b0:53:ae: c7:2d:a9:c2:ba:26:0e:05:bd:63:f8:ed:f0:8f:08:45:e4:7b: 4c:8d:26:29:8f:ca:d1:d7:0b:8c:56:6b:03:ea:ca:d7:c6:82: af:3d:dd:2d:7d:35:34:d0:73:08:40:5c:32:f9:52:8e:1e:fa: 6e:3f:88:4f:20:42:8b:ba:1f:4f:cb:ed:3e:ee:00:52:1e:55: 56:45:8c:9a:f1:c0:e9:18:08:0d:6f:75:bc:6a:9c:99:73:34: be:8b:f0:e0:39:6c:5c:ac:1f:24:97:6a:ca:8f:63:60:8b:0b: 02:2a:04:3f:33:9a:7b:bd:ac:8e:f7:56:a8:2c:9a:13:c1:0a: 19:ea:f7:f7:1d:65:65:c0:a1:65:a0:4b:1d:1f:9e:38:71:b3: 3b:ac:bb:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPnau16kobUTYvumP09fubrMNq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNTA4MjIxMTU2MTlaFw0yNTA4MjUxOTA1MTlaMDMxMTAvBgNV BAMTKEFBRURFMjNCNzZCM0RDM0NGQURDMkRFQkJBRDk0MzRDQ0FEMzg1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1FPMX7sjUtRcokM54gGHI4CxX HgPJE0rn1ahQLPgRtEPaG8Is1D+FeJqfVDM8aeiK1VK23BtNj5Dvh6oKDfqgQJ8L N99HkqI5lmhnH/c57t0OBIFlXPXM7oU20rskvbCQB9V7mv375QcVYhB/SU2tl0x1 QIj532VRGvp8B+5kmEqL5SgP8ZQDAL+CUP4fI0v2kwYDcQXrB0Pib8bn+edwSGoB VH6YujI/sxCsn+UPufUxuklvNQHW+uhuYyUxNtoIOjvNGypt58fqLCJilURdUXmn uU+UJ62z/cOA08uBMHKz5XgzsqR8QFvS4gm+FKp7TUtpoouGWt3ZeK7JM8qrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqu3iO3az3Dz63C3rutlDTMrThewwHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExCEB0gv/tzGRAHvNDR8/HDdc2H5O0u8nl5 jeKRyHUUTZNPIBymVcbYcy4vWJyVTyNfnGRTbXfK48ACcx2066dDE963whM2Ntjy 33GIm5mYeaLrEksfWP7YVMIF59KXtw4s1WAErwYVZ7BTrsctqcK6Jg4FvWP47fCP CEXke0yNJimPytHXC4xWawPqytfGgq893S19NTTQcwhAXDL5Uo4e+m4/iE8gQou6 H0/L7T7uAFIeVVZFjJrxwOkYCA1vdbxqnJlzNL6L8OA5bFysHySXasqPY2CLCwIq BD8zmnu9rI73VqgsmhPBChnq9/cdZWXAoWWgSx0fnjhxszusu+o= -----END CERTIFICATE-----Generated at Sat Aug 23 12:45:47 2025 by rpki-client