
$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json)
Hash identifier: FzfNAhqTuyvMdURA9/CIsjq+yCelpDOs3gsec/xTyGc=
Subject key identifier: 2B:17:2F:83:70:14:CE:93:A7:A7:85:0A:A4:EF:73:9C:36:18:68:08
Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Certificate serial: 6C0E2DBD902C3570CCC98B86CB47D601D1C0657B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
Manifest number: 026A
Signing time: Mon 02 Mar 2026 05:21:26 +0000
Manifest this update: Mon 02 Mar 2026 05:16:26 +0000
Manifest next update: Thu 05 Mar 2026 12:19:26 +0000
Files and hashes: 1: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: jUr/BLTVDnNbcSjSmudOgOrigXtpbruq93a7e/oSMFg=)
2: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: n8F2dnayS2c7Gz6O/kRcKF07JLx6dMnMfAKcwvqnA+U=)
3: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: O8PP6D6wmr7e0F1qDmEuOt8cWwhh2JN1M8vUdwZ+Gnc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl
rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:0e:2d:bd:90:2c:35:70:cc:c9:8b:86:cb:47:d6:01:d1:c0:65:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0
Validity
Not Before: Mar 2 05:16:26 2026 GMT
Not After : Mar 5 12:19:26 2026 GMT
Subject: CN=2B172F837014CE93A7A7850AA4EF739C36186808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:d1:b8:f7:11:f0:87:20:19:56:36:81:73:
45:0c:db:d6:0e:e7:e5:6b:ce:12:85:ba:ca:ed:49:
35:56:5a:ed:27:43:ea:12:53:a3:30:e4:56:81:59:
6e:81:85:73:c8:d6:1b:98:37:3d:e5:38:e1:d3:75:
62:c5:d4:17:77:3e:9c:15:9e:42:63:9a:d0:b1:bc:
6d:a6:81:2e:e2:73:81:a4:a5:96:28:06:aa:c6:22:
cc:3c:4e:c1:80:4d:5b:80:fd:67:b6:81:fc:ee:23:
0e:b4:fa:fb:8a:ea:da:06:64:ce:86:ec:69:51:c2:
e9:5f:7b:3b:80:a8:d8:69:1c:32:fa:5c:f3:2d:b1:
a0:00:88:72:72:5e:dc:b7:e5:04:80:d3:05:6a:49:
58:82:ea:47:0b:49:22:ab:46:e6:cf:74:21:7f:57:
6f:1c:ce:b7:16:37:31:e0:cf:ac:b2:07:93:81:cc:
74:4f:f3:38:cf:ec:2e:15:49:5a:c6:80:c1:d0:08:
06:0e:89:43:57:ed:e0:d4:fc:b5:2d:39:e1:43:fd:
bf:cd:84:a2:3f:1e:39:14:1a:5e:6e:ab:04:37:bd:
46:b9:3e:43:14:90:49:39:92:24:04:17:ad:3c:28:
c4:d8:e8:17:e9:4a:1e:77:f0:30:33:1f:0c:39:95:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:17:2F:83:70:14:CE:93:A7:A7:85:0A:A4:EF:73:9C:36:18:68:08
X509v3 Authority Key Identifier:
keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:63:28:c9:b5:fd:57:ec:98:37:1b:48:86:18:48:fd:df:9c:
3c:cf:dd:1a:17:e9:ee:6a:c1:5b:ae:db:fa:f9:05:b5:1d:7f:
53:f1:48:0b:70:d6:9f:93:d5:b9:de:0d:76:64:be:17:df:43:
b8:f9:4e:d8:af:4b:81:11:27:96:aa:16:70:97:21:10:6e:02:
91:51:81:7d:b0:00:7e:33:d7:af:0e:88:94:04:72:05:0f:d8:
e6:c1:8f:a5:b9:d0:38:4b:ed:56:02:f0:99:73:c9:31:5c:da:
a0:8a:ab:c5:43:72:97:e9:88:58:15:f4:48:47:76:b3:40:e4:
59:12:22:c3:aa:64:65:29:b9:f8:e8:02:94:d2:3d:53:a9:1c:
7a:ce:c1:7c:04:2a:ef:93:1c:d9:b7:56:52:f9:3e:45:ff:be:
0e:bc:d7:b5:24:d3:23:c4:13:8e:21:53:78:f8:15:94:97:58:
57:7b:16:07:d9:8a:58:b8:7c:7f:68:88:31:96:35:eb:90:ca:
2c:98:ba:ac:3e:21:d3:5e:b4:50:86:38:06:8d:da:5f:95:9f:
2b:9e:4d:e5:24:9e:b4:7f:74:25:0b:3d:a7:9e:a3:25:da:be:
b8:91:b3:4d:09:12:18:a9:cd:37:4e:71:9e:58:75:b1:48:e8:
61:68:a8:66
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUbA4tvZAsNXDMyYuGy0fWAdHAZXswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE
QUJENDVGMDAeFw0yNjAzMDIwNTE2MjZaFw0yNjAzMDUxMjE5MjZaMDMxMTAvBgNV
BAMTKDJCMTcyRjgzNzAxNENFOTNBN0E3ODUwQUE0RUY3MzlDMzYxODY4MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx69G49xHwhyAZVjaBc0UM29YO
5+VrzhKFusrtSTVWWu0nQ+oSU6Mw5FaBWW6BhXPI1huYNz3lOOHTdWLF1Bd3PpwV
nkJjmtCxvG2mgS7ic4GkpZYoBqrGIsw8TsGATVuA/We2gfzuIw60+vuK6toGZM6G
7GlRwulfezuAqNhpHDL6XPMtsaAAiHJyXty35QSA0wVqSViC6kcLSSKrRubPdCF/
V28czrcWNzHgz6yyB5OBzHRP8zjP7C4VSVrGgMHQCAYOiUNX7eDU/LUtOeFD/b/N
hKI/HjkUGl5uqwQ3vUa5PkMUkEk5kiQEF608KMTY6BfpSh538DAzHww5ld6NAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUKxcvg3AUzpOnp4UKpO9znDYYaAgwHwYDVR0j
BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG
QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE
NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz
MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz
RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGtjKMm1/VfsmDcbSIYYSP3fnDzP3RoX6e5q
wVuu2/r5BbUdf1PxSAtw1p+T1bneDXZkvhffQ7j5TtivS4ERJ5aqFnCXIRBuApFR
gX2wAH4z168OiJQEcgUP2ObBj6W50DhL7VYC8JlzyTFc2qCKq8VDcpfpiFgV9EhH
drNA5FkSIsOqZGUpufjoApTSPVOpHHrOwXwEKu+THNm3VlL5PkX/vg6817Uk0yPE
E44hU3j4FZSXWFd7FgfZili4fH9oiDGWNeuQyiyYuqw+IdNetFCGOAaN2l+Vnyue
TeUknrR/dCULPaeeoyXavriRs00JEhipzTdOcZ5YdbFI6GFoqGY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:17 2026 by rpki-client