$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: odIztAKn3c38R2kzVcinHM3trMs0NNUPqK5z7oqsv7M= Subject key identifier: DF:83:79:78:AC:BE:83:A5:21:12:D2:5A:14:D6:BA:AD:F2:85:E6:44 Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 597F49A55E6923D71E6C5DFBFC4567D2B33B4542 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 020D Signing time: Wed 06 Aug 2025 21:31:17 +0000 Manifest this update: Wed 06 Aug 2025 21:26:17 +0000 Manifest next update: Sun 10 Aug 2025 01:02:17 +0000 Files and hashes: 1: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 1PlLZ70/l1XO167EbfOMkFAS5NVNN52M28JEV2n5Nfw=) 2: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: lG93mDy8mZJ1KYLzkUSHtFdOp3jxkVuITP5q7tld/tA=) 3: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: cMBhspTZYYOZBRAsP/IPcDXGAXzOQUikXsboyZJpZSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:7f:49:a5:5e:69:23:d7:1e:6c:5d:fb:fc:45:67:d2:b3:3b:45:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Aug 6 21:26:17 2025 GMT Not After : Aug 10 01:02:17 2025 GMT Subject: CN=DF837978ACBE83A52112D25A14D6BAADF285E644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0c:a0:2c:73:20:9d:73:80:10:34:83:c8:2a: fc:96:24:ff:77:25:77:a2:5d:2a:80:48:d8:03:79: d7:1d:99:77:d7:24:16:17:e5:bc:46:2d:ed:a4:03: 7b:6b:c1:85:bd:47:a6:df:be:5b:69:e5:f2:5a:62: c1:bb:5d:2c:8c:78:95:7e:c0:7a:a0:b4:64:cd:ef: 57:f8:ac:91:b4:c5:dc:6b:1f:6a:01:62:43:a3:a8: 6a:2a:0a:b3:09:3a:62:b2:bc:0e:d4:40:a6:3a:ed: 2a:f9:6c:a2:2c:e4:94:85:8c:c0:6d:e7:a8:6f:d0: e7:31:7f:e8:d2:d0:30:de:b1:60:4f:70:d5:35:1c: 74:83:e4:10:00:e4:68:c8:b4:19:38:13:48:31:62: b1:70:66:43:3d:80:f3:da:fe:9a:e2:d8:0c:a8:f8: 75:ec:d8:6f:7e:20:5a:a8:b5:5e:c8:a1:d2:fa:e0: a2:a5:b7:57:0b:1a:5a:67:ff:ed:f0:21:30:88:3e: 0b:e5:aa:c5:03:dc:85:4b:0c:02:45:30:18:3e:69: 7e:bb:1b:28:7d:ab:23:4c:8a:45:5d:ce:89:f5:d3: 24:9d:c2:e4:ff:6d:94:b4:e4:bc:b4:70:9f:11:25: c5:8d:fd:f1:4b:cf:65:47:fe:46:c6:91:f4:b4:f7: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:83:79:78:AC:BE:83:A5:21:12:D2:5A:14:D6:BA:AD:F2:85:E6:44 X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:61:9a:0b:15:d8:ad:81:f2:88:1a:a5:e6:6a:b8:9d:ff:37: d3:c1:ba:55:17:aa:a4:1a:1b:fe:26:18:e7:eb:25:11:ca:0d: c2:22:19:5a:08:52:4d:5f:9f:96:8f:4a:c7:f4:03:5a:a4:b0: 33:5f:94:8c:88:73:4f:4c:50:b8:dd:66:f1:ea:2e:b9:7d:21: 46:37:5b:8b:f6:01:10:67:3b:88:a0:d0:7b:b8:a0:e7:56:7d: 4e:83:08:c6:fd:a9:e5:66:e2:17:7c:03:db:9d:ac:14:e0:94: 3a:c5:e0:9d:20:59:6c:57:17:40:da:68:8a:6c:7d:b6:74:65: 80:4a:58:9d:84:3e:b1:18:02:6e:2b:ca:1a:8e:ec:b2:9c:69: 87:09:43:4f:e0:9e:49:5b:f2:10:8b:45:a3:d8:b7:78:ca:aa: 4c:83:56:ac:39:45:ee:24:af:38:9c:07:43:63:4a:37:1f:f7: 23:9f:cb:10:7a:1a:fe:07:38:8e:8f:cd:4c:39:f9:e0:f3:a5: 24:cd:34:dd:9e:fc:62:9d:89:c9:bd:a4:78:bc:df:a8:f3:19: 08:b2:fd:3f:4e:c2:23:1c:7d:7c:9c:f1:e4:76:b0:fd:68:7f: 93:6c:bc:0a:de:11:49:c2:bd:8d:8a:7c:64:f1:00:29:d4:95: b3:b0:a2:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWX9JpV5pI9cebF37/EVn0rM7RUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNTA4MDYyMTI2MTdaFw0yNTA4MTAwMTAyMTdaMDMxMTAvBgNV BAMTKERGODM3OTc4QUNCRTgzQTUyMTEyRDI1QTE0RDZCQUFERjI4NUU2NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLDKAscyCdc4AQNIPIKvyWJP93 JXeiXSqASNgDedcdmXfXJBYX5bxGLe2kA3trwYW9R6bfvltp5fJaYsG7XSyMeJV+ wHqgtGTN71f4rJG0xdxrH2oBYkOjqGoqCrMJOmKyvA7UQKY67Sr5bKIs5JSFjMBt 56hv0Ocxf+jS0DDesWBPcNU1HHSD5BAA5GjItBk4E0gxYrFwZkM9gPPa/pri2Ayo +HXs2G9+IFqotV7IodL64KKlt1cLGlpn/+3wITCIPgvlqsUD3IVLDAJFMBg+aX67 Gyh9qyNMikVdzon10ySdwuT/bZS05Ly0cJ8RJcWN/fFLz2VH/kbGkfS099mxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU34N5eKy+g6UhEtJaFNa6rfKF5kQwHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhhmgsV2K2B8ogapeZquJ3/N9PBulUXqqQa G/4mGOfrJRHKDcIiGVoIUk1fn5aPSsf0A1qksDNflIyIc09MULjdZvHqLrl9IUY3 W4v2ARBnO4ig0Hu4oOdWfU6DCMb9qeVm4hd8A9udrBTglDrF4J0gWWxXF0DaaIps fbZ0ZYBKWJ2EPrEYAm4ryhqO7LKcaYcJQ0/gnklb8hCLRaPYt3jKqkyDVqw5Re4k rzicB0NjSjcf9yOfyxB6Gv4HOI6PzUw5+eDzpSTNNN2e/GKdicm9pHi836jzGQiy /T9OwiMcfXyc8eR2sP1of5NsvAreEUnCvY2KfGTxACnUlbOwomI= -----END CERTIFICATE-----Generated at Sat Aug 9 01:20:05 2025 by rpki-client