
$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json)
Hash identifier: cZvXFPVDqz0En/AfqwMBm1VPA6SopXAFZFNjzy1siII=
Subject key identifier: B8:43:F4:95:40:E8:4E:EF:A0:3C:57:75:6F:66:21:C2:65:B6:C4:26
Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Certificate serial: 140CA2CED5C1A4EC5D95434711E18ABA7BFD13E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
Manifest number: 027E
Signing time: Wed 15 Apr 2026 19:01:29 +0000
Manifest this update: Wed 15 Apr 2026 18:56:29 +0000
Manifest next update: Sun 19 Apr 2026 03:59:29 +0000
Files and hashes: 1: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: ZFl+RkZw956yQ3b9W2yTzr0jNkPBjEE6jHyNAEycjGs=)
2: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: n8F2dnayS2c7Gz6O/kRcKF07JLx6dMnMfAKcwvqnA+U=)
3: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: O8PP6D6wmr7e0F1qDmEuOt8cWwhh2JN1M8vUdwZ+Gnc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl
rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 03:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:0c:a2:ce:d5:c1:a4:ec:5d:95:43:47:11:e1:8a:ba:7b:fd:13:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Validity
Not Before: Apr 15 18:56:29 2026 GMT
Not After : Apr 19 03:59:29 2026 GMT
Subject: CN=B843F49540E84EEFA03C57756F6621C265B6C426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:e0:96:2f:b4:43:c4:f0:5c:3d:cb:b0:da:
56:08:bc:1b:21:bc:8e:b5:9b:9b:40:89:c2:05:f8:
0d:59:54:39:77:7b:31:d9:09:ff:a5:80:a7:fd:2a:
20:7d:1f:e8:47:5e:6e:e5:03:8e:bc:58:32:2e:6a:
e6:82:e5:8a:09:4b:ca:96:96:97:79:77:7d:58:bd:
1e:69:5f:a7:59:13:ea:6c:19:4d:3c:28:e6:2b:54:
75:f9:1d:ae:cf:63:10:89:24:df:15:f3:7c:d0:25:
74:34:cc:7e:2a:99:fd:fd:8e:3a:58:83:ae:d0:f8:
6e:56:37:10:7f:4b:78:e2:5a:6d:20:60:2e:d0:f4:
c0:b7:36:85:ea:34:34:6f:80:aa:df:97:34:cd:0b:
75:9c:2e:8c:8a:e6:b8:d7:42:df:82:89:64:24:f9:
f1:b4:e3:e8:69:02:26:4d:e7:ab:e9:23:e9:8b:73:
a5:a6:ad:62:81:fc:72:92:b1:41:51:6d:aa:ec:56:
cd:01:de:00:51:81:c8:29:d6:f9:ba:1e:90:75:94:
7b:5e:09:01:80:94:d6:e1:63:8a:92:b8:43:aa:63:
fc:c1:b8:1d:7b:9a:a7:be:f2:d7:04:35:95:f4:4e:
b2:c8:d9:58:b5:86:89:ed:b2:09:9c:4c:94:54:ce:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:43:F4:95:40:E8:4E:EF:A0:3C:57:75:6F:66:21:C2:65:B6:C4:26
X509v3 Authority Key Identifier:
keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5d:4b:55:d1:9a:c2:52:b3:0a:a2:2a:35:5b:fa:db:b6:cc:
9a:8d:2a:b0:18:a6:a4:3a:f2:d4:1f:90:26:99:27:cd:db:75:
7d:8d:40:1e:ec:10:ad:ed:c0:09:fa:8f:fc:53:d0:2d:38:ad:
45:cf:f4:c4:c2:c0:28:25:de:b9:8b:68:da:b6:fa:9b:2c:d4:
88:a3:7e:12:2d:ed:ab:98:37:3f:7d:bf:d3:26:7e:0a:45:37:
86:81:65:2e:fa:3e:8d:e6:a6:c7:58:e8:ee:f5:96:54:9f:98:
46:c3:fb:db:ff:8f:a6:bf:d6:a9:25:0a:30:7d:cb:96:fe:db:
ab:df:f1:c1:23:81:3f:fc:5c:9e:ec:94:bd:e2:bc:f8:5b:ab:
a2:35:d7:fa:14:d1:f3:b7:83:de:d3:8a:55:1a:99:98:b1:12:
52:58:75:24:a4:27:5e:eb:9f:d8:3a:05:f4:34:9a:5a:56:8d:
87:32:a1:dc:64:8d:a0:9b:cc:77:03:e6:67:ca:34:11:51:73:
ee:16:87:fe:b1:e5:70:0f:62:1b:9c:26:b0:67:0d:db:b3:5e:
04:7b:5d:c6:cf:c7:e4:f5:1d:27:cb:21:ff:91:08:cb:ff:8e:
f9:2c:b9:12:84:27:5b:37:1d:93:9f:77:bc:c0:66:55:69:84:
83:d7:6d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:17 2026 by rpki-client