$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: NjXgjOgdXbhkRewN/daQpXwZ8Q0QDaxPFOLMtPRYr0o= Subject key identifier: 24:CF:23:D1:67:57:89:F8:5E:2C:43:A6:7F:57:19:C1:68:7D:F4:5A Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 1D980E38AB9A035A5732A7F303B5DE4FD23F5CE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 0252 Signing time: Wed 25 Mar 2026 15:32:28 +0000 Manifest this update: Wed 25 Mar 2026 15:27:28 +0000 Manifest next update: Sun 29 Mar 2026 02:10:28 +0000 Files and hashes: 1: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: SLywPXBKqyO2M4Z4wyhY6IJv+17Vgwob3pAq0xqEhGw=) 2: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:98:0e:38:ab:9a:03:5a:57:32:a7:f3:03:b5:de:4f:d2:3f:5c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Mar 25 15:27:28 2026 GMT Not After : Mar 29 02:10:28 2026 GMT Subject: CN=24CF23D1675789F85E2C43A67F5719C1687DF45A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c4:d9:7c:3d:ce:2e:da:ec:6d:3d:a7:da:3f: 1b:a5:56:a0:a8:21:01:5b:4a:55:c7:cc:6b:56:f5: eb:30:4e:3b:27:6d:fe:c1:ed:58:ec:55:06:4a:8e: ab:00:7f:27:16:4d:65:c7:ed:db:f5:eb:7c:44:8b: 4e:47:01:4c:f4:75:4e:28:0b:5f:b7:56:df:a1:1d: a7:d4:b5:7e:57:e9:4d:36:10:03:ed:ae:28:9c:77: dc:ea:4c:6b:be:c7:94:7d:23:98:44:cf:4b:43:bc: 47:33:5f:3b:ec:19:03:34:ff:a2:0f:62:47:b3:4d: 61:da:88:f6:5f:29:93:df:97:f5:30:ed:a2:88:bb: a8:73:d4:ba:af:bf:e3:12:cd:6b:8c:04:08:23:d2: a6:31:54:36:2f:af:af:c3:d0:a2:15:2c:56:92:ca: 43:a5:91:85:aa:9e:55:f1:7f:be:8e:f1:5c:a7:68: 82:44:d9:ee:84:18:d6:57:b3:e8:94:3f:b8:c6:e8: 3f:f6:8e:f1:f6:5a:8e:73:87:7d:bd:ae:14:ff:a3: e3:f5:0c:c9:34:51:72:6c:e9:83:ff:7a:fa:01:a3: 6b:ec:c0:d6:1e:da:9f:40:d4:f4:97:7e:be:b7:b0: e9:19:1c:84:69:4d:46:14:8f:f7:fc:2a:00:04:5f: 2c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CF:23:D1:67:57:89:F8:5E:2C:43:A6:7F:57:19:C1:68:7D:F4:5A X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e8:63:22:79:99:8a:f6:1f:ec:2d:e6:a3:03:53:d5:bf:8a: d1:51:86:70:cf:5a:57:02:57:8d:9e:d3:f4:eb:44:78:bc:ac: 2d:4b:9a:72:5b:92:85:d7:ed:df:cd:b0:e3:7a:20:64:28:ca: 2f:1b:d1:01:23:9c:f8:7b:2f:d9:d0:ca:c8:b5:bb:f3:43:28: 3a:bc:1b:9c:bf:6f:ca:f8:fe:f1:2d:95:77:8f:7e:5a:ef:06: 27:e7:59:2f:7f:dd:a7:a1:d1:0d:76:ce:70:34:67:55:0f:16: c0:6a:aa:49:d8:53:74:d8:8f:eb:36:fb:60:4e:0b:89:f4:a2: 83:f8:bf:4a:23:72:8a:e9:81:01:5a:47:10:6f:71:0e:e3:f9: 18:f3:44:28:d1:5d:7a:8b:12:1a:64:18:e0:07:48:c9:7b:51: d9:61:f2:ad:1e:c2:07:fd:a9:fc:be:3e:34:68:25:fe:26:46: cd:ee:bc:14:62:b9:43:0b:e2:f7:cb:39:64:dd:9f:99:ba:4f: 2b:f0:ea:56:ea:29:d1:48:c2:53:fa:3a:ad:df:5b:c8:ac:e1: 65:18:29:3f:20:7f:bc:77:eb:c9:f6:93:1d:0f:07:6c:fc:02: 8a:8d:b0:6c:69:40:0c:b1:16:c7:fc:37:14:54:6f:08:3f:eb: 8f:72:2e:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZgOOKuaA1pXMqfzA7XeT9I/XOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNjAzMjUxNTI3MjhaFw0yNjAzMjkwMjEwMjhaMDMxMTAvBgNV BAMTKDI0Q0YyM0QxNjc1Nzg5Rjg1RTJDNDNBNjdGNTcxOUMxNjg3REY0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSxNl8Pc4u2uxtPafaPxulVqCo IQFbSlXHzGtW9eswTjsnbf7B7VjsVQZKjqsAfycWTWXH7dv163xEi05HAUz0dU4o C1+3Vt+hHafUtX5X6U02EAPtriicd9zqTGu+x5R9I5hEz0tDvEczXzvsGQM0/6IP YkezTWHaiPZfKZPfl/Uw7aKIu6hz1Lqvv+MSzWuMBAgj0qYxVDYvr6/D0KIVLFaS ykOlkYWqnlXxf76O8VynaIJE2e6EGNZXs+iUP7jG6D/2jvH2Wo5zh329rhT/o+P1 DMk0UXJs6YP/evoBo2vswNYe2p9A1PSXfr63sOkZHIRpTUYUj/f8KgAEXywHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJM8j0WdXifheLEOmf1cZwWh99FowHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvoYyJ5mYr2H+wt5qMDU9W/itFRhnDPWlcC V42e0/TrRHi8rC1LmnJbkoXX7d/NsON6IGQoyi8b0QEjnPh7L9nQysi1u/NDKDq8 G5y/b8r4/vEtlXePflrvBifnWS9/3aeh0Q12znA0Z1UPFsBqqknYU3TYj+s2+2BO C4n0ooP4v0ojcorpgQFaRxBvcQ7j+RjzRCjRXXqLEhpkGOAHSMl7Udlh8q0ewgf9 qfy+PjRoJf4mRs3uvBRiuUML4vfLOWTdn5m6Tyvw6lbqKdFIwlP6Oq3fW8is4WUY KT8gf7x368n2kx0PB2z8AoqNsGxpQAyxFsf8NxRUbwg/649yLqQ= -----END CERTIFICATE-----Generated at Thu Mar 26 19:47:34 2026 by rpki-client