$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: Aq6Uf13lopsAwn6qDq9eeN6KVzLicXZ9iyTb0DwN5h0= Subject key identifier: 69:75:FF:11:89:51:97:6E:AD:B9:51:33:04:9A:31:D4:DC:E8:C6:6C Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 0E81D501A5E32349A2A020529F01B1DC90B2CC3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 021B Signing time: Mon 08 Sep 2025 02:41:16 +0000 Manifest this update: Mon 08 Sep 2025 02:36:16 +0000 Manifest next update: Thu 11 Sep 2025 11:18:16 +0000 Files and hashes: 1: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: taWvH4/ZOPjYqthf0J7L/vutxu2wEGZ/XHrGNqMTH+U=) 2: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: lG93mDy8mZJ1KYLzkUSHtFdOp3jxkVuITP5q7tld/tA=) 3: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 1PlLZ70/l1XO167EbfOMkFAS5NVNN52M28JEV2n5Nfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 11:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:81:d5:01:a5:e3:23:49:a2:a0:20:52:9f:01:b1:dc:90:b2:cc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Sep 8 02:36:16 2025 GMT Not After : Sep 11 11:18:16 2025 GMT Subject: CN=6975FF118951976EADB95133049A31D4DCE8C66C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:98:44:47:e2:a7:16:d4:6e:16:17:0f:e6:17: 22:8b:39:47:5c:46:7d:ae:5f:e3:0f:a2:11:0c:ef: 6d:8b:29:b9:0b:bc:b3:2e:5b:22:0c:21:e3:bc:e4: 68:fd:69:f4:93:89:bb:d1:07:e2:f7:b3:c4:99:c0: e7:4a:f2:4a:cb:2f:20:9f:8c:f0:a2:88:f1:fc:e7: 28:ea:99:a5:df:57:e7:00:50:a6:58:e5:c1:14:ea: 59:57:1c:bf:5d:31:ff:b2:55:fb:cf:36:de:73:a1: e1:ac:6c:db:88:45:1a:17:cc:79:05:99:a9:ad:41: 78:d9:b6:f9:a9:99:6a:c9:63:96:f2:f1:bd:e8:8d: 51:b4:76:58:15:97:01:21:99:ee:b5:d4:fa:ae:60: c6:9f:de:d4:cc:4e:25:2d:ca:94:de:89:21:f6:43: 36:3e:d2:40:83:5d:ed:b2:16:d3:7e:0a:54:3b:0a: a3:f5:3b:a8:86:09:ce:10:59:61:cb:4e:92:58:88: 4f:24:d4:05:77:d6:32:28:8b:0b:1c:d2:0e:59:64: a7:78:62:25:db:33:89:4d:4a:cc:2b:1d:a2:02:90: 17:e8:df:4e:69:6b:33:dc:20:74:57:c4:28:26:52: d2:0c:83:70:48:04:2c:b8:ce:0c:38:50:ed:1b:72: 42:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:75:FF:11:89:51:97:6E:AD:B9:51:33:04:9A:31:D4:DC:E8:C6:6C X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6e:36:79:dd:d1:ac:8e:52:9b:63:be:bb:08:3f:fe:ed:4d: 46:99:bf:83:bf:d5:65:eb:9e:d5:6e:f9:78:cb:0c:29:71:2e: 1c:6e:12:b5:40:1b:3d:93:d3:23:51:6a:b0:5b:bf:6c:83:13: f9:4e:ec:7f:94:ad:2f:dc:a5:77:96:8e:e9:29:74:f7:2a:69: 52:9b:da:3b:0b:bd:bb:fe:98:30:da:62:24:fd:5a:03:4a:b5: f4:69:7f:85:98:ae:9c:6d:d1:5e:a3:a7:df:21:41:a2:e0:47: 79:c3:a1:29:96:ca:b4:bf:d8:a5:36:4f:96:56:c1:cb:f8:7d: b7:75:61:05:eb:4a:ed:30:72:45:c8:02:29:70:ca:31:0c:6d: e2:0a:9b:e8:61:ea:6e:e8:7f:3b:18:71:c3:5e:9c:2c:0c:07: 21:6c:0e:3f:54:12:bc:4f:64:ea:0a:5e:51:af:5d:6e:1d:1d: 9f:4e:52:53:d3:55:c8:df:17:26:1e:51:30:01:de:34:87:4a: 03:90:77:5e:cb:a5:59:2f:90:f6:f0:4d:a8:90:ad:74:7e:d8: f4:2c:9e:b8:c8:9d:31:1a:ed:d6:f0:c5:7e:d9:c4:16:ba:52: d1:fa:67:eb:b9:d2:4a:af:c7:1e:51:8f:38:92:a4:e1:65:17: 18:d1:60:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDoHVAaXjI0mioCBSnwGx3JCyzDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNTA5MDgwMjM2MTZaFw0yNTA5MTExMTE4MTZaMDMxMTAvBgNV BAMTKDY5NzVGRjExODk1MTk3NkVBREI5NTEzMzA0OUEzMUQ0RENFOEM2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgmERH4qcW1G4WFw/mFyKLOUdc Rn2uX+MPohEM722LKbkLvLMuWyIMIeO85Gj9afSTibvRB+L3s8SZwOdK8krLLyCf jPCiiPH85yjqmaXfV+cAUKZY5cEU6llXHL9dMf+yVfvPNt5zoeGsbNuIRRoXzHkF mamtQXjZtvmpmWrJY5by8b3ojVG0dlgVlwEhme611PquYMaf3tTMTiUtypTeiSH2 QzY+0kCDXe2yFtN+ClQ7CqP1O6iGCc4QWWHLTpJYiE8k1AV31jIoiwsc0g5ZZKd4 YiXbM4lNSswrHaICkBfo305pazPcIHRXxCgmUtIMg3BIBCy4zgw4UO0bckKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaXX/EYlRl26tuVEzBJox1NzoxmwwHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1uNnnd0ayOUptjvrsIP/7tTUaZv4O/1WXr ntVu+XjLDClxLhxuErVAGz2T0yNRarBbv2yDE/lO7H+UrS/cpXeWjukpdPcqaVKb 2jsLvbv+mDDaYiT9WgNKtfRpf4WYrpxt0V6jp98hQaLgR3nDoSmWyrS/2KU2T5ZW wcv4fbd1YQXrSu0wckXIAilwyjEMbeIKm+hh6m7ofzsYccNenCwMByFsDj9UErxP ZOoKXlGvXW4dHZ9OUlPTVcjfFyYeUTAB3jSHSgOQd17LpVkvkPbwTaiQrXR+2PQs nrjInTEa7dbwxX7ZxBa6UtH6Z+u50kqvxx5RjziSpOFlFxjRYH4= -----END CERTIFICATE-----Generated at Wed Sep 10 03:53:03 2025 by rpki-client