$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: D8RgUH0jSDKII5HGdtDzRy1cs9kzNblsCsXFNlAhHWQ= Subject key identifier: D4:B3:3E:AE:EF:5E:DB:3F:A9:AF:3D:D2:A5:A3:45:0D:F7:32:E9:D7 Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 1F2281A6585F2B8908620FF81CA6868F145B530B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 0273 Signing time: Sun 22 Mar 2026 12:41:27 +0000 Manifest this update: Sun 22 Mar 2026 12:36:27 +0000 Manifest next update: Wed 25 Mar 2026 13:46:27 +0000 Files and hashes: 1: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: O8PP6D6wmr7e0F1qDmEuOt8cWwhh2JN1M8vUdwZ+Gnc=) 2: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: x8NomXBHGuMEU70oRlp1dUkK27hL/J80jX7V9LqMtAg=) 3: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: n8F2dnayS2c7Gz6O/kRcKF07JLx6dMnMfAKcwvqnA+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 13:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:22:81:a6:58:5f:2b:89:08:62:0f:f8:1c:a6:86:8f:14:5b:53:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Mar 22 12:36:27 2026 GMT Not After : Mar 25 13:46:27 2026 GMT Subject: CN=D4B33EAEEF5EDB3FA9AF3DD2A5A3450DF732E9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6c:8d:8f:0a:96:e0:37:86:03:f7:dd:ff:8a: 3b:83:34:95:e3:e1:25:db:0b:a2:04:7e:34:f2:c9: 1f:ef:5f:1f:36:5a:12:95:77:ae:24:42:aa:b7:aa: 2e:a5:5f:9e:4a:03:0f:42:27:80:65:6a:7a:4b:5b: ba:50:5c:af:46:c0:26:6f:55:a2:8c:41:7e:a5:f9: 1a:79:99:3b:32:d6:96:cc:bf:6b:60:5e:1b:40:db: b4:dd:3d:fa:fc:71:dc:ba:2f:91:66:72:ad:53:db: 74:9e:9f:54:55:bf:03:c4:b7:9a:0c:80:4b:81:55: f7:87:29:18:e8:58:b9:a0:20:ad:c7:ec:9a:bc:a9: 5e:66:fb:7d:db:c2:2a:2f:84:a3:0f:dd:b0:b9:30: 5c:f1:2d:14:dc:35:77:d2:93:f8:fd:e7:d7:13:c2: 4b:09:dd:67:41:ce:70:29:17:2a:42:63:5b:15:1f: bd:27:82:50:73:29:a5:bf:ba:12:73:aa:71:07:71: b7:cc:86:b8:ac:70:4a:80:22:77:f1:ce:65:06:a3: 6e:4c:f3:1e:e4:84:6e:d4:3c:27:ac:94:21:82:51: 8a:80:b2:9b:90:c8:b2:98:bc:90:ae:a2:eb:50:0b: 28:81:6f:bb:12:31:8e:e7:b9:49:1b:e0:e9:5e:cc: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B3:3E:AE:EF:5E:DB:3F:A9:AF:3D:D2:A5:A3:45:0D:F7:32:E9:D7 X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:54:d5:21:96:1d:c3:6c:bb:d2:1f:5d:6b:c7:c2:b0:e3:de: 31:c0:ac:c4:53:39:d8:49:b1:b9:30:85:bb:3e:5e:70:27:b3: fc:b4:b3:26:55:ee:43:24:22:c6:ee:5e:30:00:78:cd:c8:47: 80:36:bf:a6:cc:da:a7:2c:cf:33:ec:e1:e4:0c:75:c7:da:9d: 6d:65:e5:34:f4:c0:48:22:e1:9c:22:f8:c0:6b:6c:76:9f:dd: dc:f5:84:e0:fe:a3:f3:13:62:4d:fe:ef:ba:dd:6d:e8:7b:a0: ea:90:db:7a:f0:4c:5b:5c:3a:df:f2:a6:49:ac:33:8f:87:57: c7:8a:57:78:22:85:99:8d:9e:95:d9:a2:28:10:b3:cb:ef:e7: ea:15:bc:9c:1f:1d:36:4f:46:67:25:b0:27:9e:c1:55:1f:d8: 4c:17:93:22:ef:40:c8:6f:26:1d:e1:78:3c:93:54:5e:7b:19: 11:c8:3a:ca:d0:24:5d:16:cd:97:0d:7d:5b:49:dd:74:ac:58: e3:24:69:76:0b:53:46:b2:59:22:8c:28:5e:d9:20:e0:fc:24: 02:a8:a2:be:29:c9:36:93:23:5f:fc:04:2d:dc:17:3a:54:9e: 21:54:d9:48:13:66:8f:75:ea:5c:84:b4:51:f7:8f:f2:b1:45: 31:54:4d:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyKBplhfK4kIYg/4HKaGjxRbUwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNjAzMjIxMjM2MjdaFw0yNjAzMjUxMzQ2MjdaMDMxMTAvBgNV BAMTKEQ0QjMzRUFFRUY1RURCM0ZBOUFGM0REMkE1QTM0NTBERjczMkU5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbI2PCpbgN4YD993/ijuDNJXj 4SXbC6IEfjTyyR/vXx82WhKVd64kQqq3qi6lX55KAw9CJ4BlanpLW7pQXK9GwCZv VaKMQX6l+Rp5mTsy1pbMv2tgXhtA27TdPfr8cdy6L5Fmcq1T23Sen1RVvwPEt5oM gEuBVfeHKRjoWLmgIK3H7Jq8qV5m+33bwiovhKMP3bC5MFzxLRTcNXfSk/j959cT wksJ3WdBznApFypCY1sVH70nglBzKaW/uhJzqnEHcbfMhriscEqAInfxzmUGo25M 8x7khG7UPCeslCGCUYqAspuQyLKYvJCuoutQCyiBb7sSMY7nuUkb4OlezEu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1LM+ru9e2z+prz3SpaNFDfcy6dcwHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJU1SGWHcNsu9IfXWvHwrDj3jHArMRTOdhJ sbkwhbs+XnAns/y0syZV7kMkIsbuXjAAeM3IR4A2v6bM2qcszzPs4eQMdcfanW1l 5TT0wEgi4Zwi+MBrbHaf3dz1hOD+o/MTYk3+77rdbeh7oOqQ23rwTFtcOt/ypkms M4+HV8eKV3gihZmNnpXZoigQs8vv5+oVvJwfHTZPRmclsCeewVUf2EwXkyLvQMhv Jh3heDyTVF57GRHIOsrQJF0WzZcNfVtJ3XSsWOMkaXYLU0ayWSKMKF7ZIOD8JAKo or4pyTaTI1/8BC3cFzpUniFU2UgTZo916lyEtFH3j/KxRTFUTYQ= -----END CERTIFICATE-----Generated at Tue Mar 24 13:54:20 2026 by rpki-client