$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: cOhwIAz8OFKG4odo5II4xFXCou+1aEcgnes9mHDbZgw= Subject key identifier: FA:FF:D6:87:37:E8:66:EC:7E:19:68:9D:C3:F1:C2:A4:E8:EB:2E:28 Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 339BFB15EA9A221559B6389B6820C3D5C0524BAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 0274 Signing time: Tue 24 Mar 2026 13:51:26 +0000 Manifest this update: Tue 24 Mar 2026 13:46:26 +0000 Manifest next update: Sat 28 Mar 2026 01:08:26 +0000 Files and hashes: 1: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: O8PP6D6wmr7e0F1qDmEuOt8cWwhh2JN1M8vUdwZ+Gnc=) 2: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: 5gUGAi29ZoMoWzs+Gr70igrmZzKyc7P+Oku40O36HR0=) 3: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: n8F2dnayS2c7Gz6O/kRcKF07JLx6dMnMfAKcwvqnA+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:9b:fb:15:ea:9a:22:15:59:b6:38:9b:68:20:c3:d5:c0:52:4b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Mar 24 13:46:26 2026 GMT Not After : Mar 28 01:08:26 2026 GMT Subject: CN=FAFFD68737E866EC7E19689DC3F1C2A4E8EB2E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:b1:36:70:02:af:8a:22:c7:8f:e5:24:1a: 28:e2:82:82:6b:16:1f:2a:97:d1:7f:09:81:2d:bd: f2:f6:27:78:82:cb:35:52:9f:a8:ee:fb:ba:38:1e: 5f:67:f5:58:2a:a2:95:c9:24:b2:44:58:c0:b2:9b: a2:f7:18:f5:72:1e:72:ca:e6:a0:67:2a:b9:b1:6d: eb:56:90:6e:2b:eb:55:df:97:85:7e:11:02:0e:30: 2e:e9:6b:b9:5f:a6:26:2f:5c:99:69:87:15:b0:cb: 9b:f2:e5:79:38:70:07:5f:d2:b9:70:0b:1a:74:7f: 8f:cd:5d:e3:64:37:28:7c:68:89:52:6f:3f:7a:db: dc:0d:81:2b:8e:99:3d:cd:0e:a1:38:b7:e3:5c:37: 10:b0:02:ad:73:ea:30:2b:8d:7a:1f:4f:aa:e5:39: 12:ed:75:c4:7c:5f:98:5d:d9:cb:47:0b:43:11:94: 13:cf:1b:41:92:dd:8c:91:3c:1b:6f:9e:f0:61:23: 58:9f:65:d5:07:02:25:fe:b1:2f:f9:18:6f:ae:af: 23:fd:20:59:f4:e3:04:1e:90:8f:ee:70:ad:ef:8d: ca:70:df:46:f0:cf:f7:c0:04:49:40:7b:c6:fd:95: 38:d6:c4:59:44:85:c1:fc:0c:6d:6e:74:bb:85:e4: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FF:D6:87:37:E8:66:EC:7E:19:68:9D:C3:F1:C2:A4:E8:EB:2E:28 X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:14:dd:6d:8a:05:5f:d8:28:29:c9:c9:27:30:33:b5:f5:79: 6f:b1:6d:9a:12:69:58:bb:a2:97:02:d8:b9:8d:b2:fa:e8:c7: 08:93:ee:b1:8c:67:a8:46:c6:fa:0d:80:80:e9:16:90:ac:b0: 8f:77:b3:29:d2:61:e4:72:fb:42:68:1a:98:31:6f:0c:4e:ee: 70:2e:4f:9f:8b:0a:7a:a1:b1:6a:0d:90:38:21:2d:6f:d7:de: 23:94:5f:bf:ce:83:d9:d4:18:79:27:61:f5:44:8d:92:61:e0: cc:b7:89:79:f7:bd:e0:8c:64:04:fa:a6:66:99:3f:01:07:e0: a6:a8:de:3f:9e:ae:0c:c1:46:fd:e2:c4:f2:15:ea:b8:58:e0: dd:ee:f7:b7:73:7d:c6:ec:8a:2b:b7:ea:8b:65:b9:15:3f:92: c4:6c:f0:69:d3:87:79:cd:fb:b6:7d:08:77:82:c3:82:62:a7: c6:9e:38:8e:9e:d5:77:61:86:b6:6c:d6:9d:95:70:66:b4:96: c0:6d:39:9d:eb:0f:b3:ad:15:66:d8:4f:ca:66:bc:99:1a:bc: 78:d9:f2:f2:6a:ad:96:1e:ae:7d:58:67:35:fe:f4:75:1d:d3: 15:ed:19:c3:73:2a:f0:59:32:7d:f2:08:b6:7f:4a:c6:e1:1b: 12:63:8e:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5v7FeqaIhVZtjibaCDD1cBSS68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNjAzMjQxMzQ2MjZaFw0yNjAzMjgwMTA4MjZaMDMxMTAvBgNV BAMTKEZBRkZENjg3MzdFODY2RUM3RTE5Njg5REMzRjFDMkE0RThFQjJFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQ7E2cAKviiLHj+UkGijigoJr Fh8ql9F/CYEtvfL2J3iCyzVSn6ju+7o4Hl9n9VgqopXJJLJEWMCym6L3GPVyHnLK 5qBnKrmxbetWkG4r61Xfl4V+EQIOMC7pa7lfpiYvXJlphxWwy5vy5Xk4cAdf0rlw Cxp0f4/NXeNkNyh8aIlSbz9629wNgSuOmT3NDqE4t+NcNxCwAq1z6jArjXofT6rl ORLtdcR8X5hd2ctHC0MRlBPPG0GS3YyRPBtvnvBhI1ifZdUHAiX+sS/5GG+uryP9 IFn04wQekI/ucK3vjcpw30bwz/fABElAe8b9lTjWxFlEhcH8DG1udLuF5N7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+v/WhzfoZux+GWidw/HCpOjrLigwHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0U3W2KBV/YKCnJyScwM7X1eW+xbZoSaVi7 opcC2LmNsvroxwiT7rGMZ6hGxvoNgIDpFpCssI93synSYeRy+0JoGpgxbwxO7nAu T5+LCnqhsWoNkDghLW/X3iOUX7/Og9nUGHknYfVEjZJh4My3iXn3veCMZAT6pmaZ PwEH4Kao3j+ergzBRv3ixPIV6rhY4N3u97dzfcbsiiu36otluRU/ksRs8GnTh3nN +7Z9CHeCw4Jip8aeOI6e1XdhhrZs1p2VcGa0lsBtOZ3rD7OtFWbYT8pmvJkavHjZ 8vJqrZYern1YZzX+9HUd0xXtGcNzKvBZMn3yCLZ/SsbhGxJjjjs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:07:48 2026 by rpki-client