$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: 5uGfi2ZFm0dToHyyHwWjOnFIsmcaUyA5p61llW65KNg= Subject key identifier: A4:B3:6E:C8:EE:A8:97:DD:6D:6A:33:CC:16:8A:AB:A0:91:33:B9:55 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 09ED740F1526E1F3AF0EA56F299B7250008E5D95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 01F1 Signing time: Fri 22 Aug 2025 18:02:08 +0000 Manifest this update: Fri 22 Aug 2025 17:57:08 +0000 Manifest next update: Tue 26 Aug 2025 02:05:08 +0000 Files and hashes: 1: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: fFX2S0yuCGbDsYrqvIvfedkBEVG6E8+DQx58RVmq88I=) 2: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: LHUOHDjYSiwNLZcGRNC4LyCfPp3GVeTlIlxFVK3YGE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 02:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ed:74:0f:15:26:e1:f3:af:0e:a5:6f:29:9b:72:50:00:8e:5d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Aug 22 17:57:08 2025 GMT Not After : Aug 26 02:05:08 2025 GMT Subject: CN=A4B36EC8EEA897DD6D6A33CC168AABA09133B955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:56:dd:0b:90:bd:16:fc:70:fc:c9:23:9a: 6d:65:06:50:0f:6e:a6:f5:6d:69:48:a7:a4:94:da: 7a:b2:27:6f:99:10:4b:ad:2d:f0:58:6b:82:51:6f: 5b:a1:9c:df:50:03:ef:07:f2:14:6d:0c:8d:99:e1: d5:26:ed:4f:f2:8c:cc:3c:aa:38:25:38:f4:8f:83: 79:b0:9b:97:0a:b8:44:82:5d:d8:2e:4d:f1:69:cc: 58:df:a8:dd:66:e8:55:40:ea:5b:3c:c2:87:41:5f: 8e:ab:ca:f0:59:18:d5:b7:5c:4e:b8:d2:26:17:ca: 8c:19:96:f3:e4:a0:1c:05:82:c7:6f:ef:9f:3f:2b: 68:5b:b7:d4:cd:8f:4f:04:77:5c:0c:0f:ca:de:74: 72:ce:4c:c0:c6:6e:f7:79:5b:7b:bb:82:72:4d:0d: 52:65:3c:68:2e:f5:b3:a7:8a:d2:20:6e:19:aa:df: e4:86:35:d7:8e:6d:fd:8f:6e:51:dc:ee:92:4f:bc: f9:b4:63:14:f0:3e:6d:2c:9c:c3:ba:33:77:88:5f: a3:e6:13:0a:ac:20:8a:77:0c:aa:17:9b:8f:ea:59: 4a:32:97:5f:bb:13:16:bd:53:6f:cf:71:c9:86:c8: ff:e4:40:6d:9b:27:b5:9e:f5:99:bc:3a:67:00:6b: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B3:6E:C8:EE:A8:97:DD:6D:6A:33:CC:16:8A:AB:A0:91:33:B9:55 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:11:b3:03:8b:d5:d6:6e:9f:98:36:3a:25:35:ae:3b:c5:fc: 90:a5:8b:5b:4e:0f:1e:a8:78:9b:30:7d:13:90:83:36:d5:94: 33:5c:da:01:af:8c:76:13:2f:52:24:70:9d:49:ca:02:7c:26: 54:7b:1c:53:9c:f0:77:fa:3b:bf:6d:6d:ff:3f:82:75:eb:6c: 97:f0:c2:b6:7d:ba:40:b0:10:ff:5b:7a:96:d5:94:22:cd:30: 40:bc:50:05:24:37:e4:54:c6:bb:dc:d4:c9:15:81:8d:75:4d: 2d:be:25:96:d9:2a:3c:7a:8e:1e:a3:a5:8a:17:c7:12:49:49: 16:63:85:34:6f:e9:d0:46:e1:a0:bb:eb:fa:7c:c2:b4:d2:7a: 49:5a:c2:81:87:b1:18:ab:0d:32:4e:60:3f:df:15:12:29:2b: ba:0b:2f:d7:b0:38:c8:4a:d7:f0:0d:05:80:5c:95:e9:fc:9f: 54:90:d0:23:9f:a5:af:92:a6:bc:61:c1:2d:4c:a5:e2:33:65: fc:cd:90:d9:35:e1:e6:bf:d0:0d:5a:6c:dc:7e:75:10:43:38: 12:82:58:bf:a5:7c:10:60:9d:62:f9:be:f1:52:6c:bc:95:bc: 89:50:c7:96:6b:0c:bb:14:03:6f:94:f7:b0:ef:d2:1a:95:b5: 77:b3:8f:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCe10DxUm4fOvDqVvKZtyUACOXZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNTA4MjIxNzU3MDhaFw0yNTA4MjYwMjA1MDhaMDMxMTAvBgNV BAMTKEE0QjM2RUM4RUVBODk3REQ2RDZBMzNDQzE2OEFBQkEwOTEzM0I5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkjlbdC5C9Fvxw/Mkjmm1lBlAP bqb1bWlIp6SU2nqyJ2+ZEEutLfBYa4JRb1uhnN9QA+8H8hRtDI2Z4dUm7U/yjMw8 qjglOPSPg3mwm5cKuESCXdguTfFpzFjfqN1m6FVA6ls8wodBX46ryvBZGNW3XE64 0iYXyowZlvPkoBwFgsdv758/K2hbt9TNj08Ed1wMD8redHLOTMDGbvd5W3u7gnJN DVJlPGgu9bOnitIgbhmq3+SGNdeObf2PblHc7pJPvPm0YxTwPm0snMO6M3eIX6Pm EwqsIIp3DKoXm4/qWUoyl1+7Exa9U2/PccmGyP/kQG2bJ7We9Zm8OmcAazuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLNuyO6ol91tajPMFoqroJEzuVUwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMRswOL1dZun5g2OiU1rjvF/JCli1tODx6o eJswfROQgzbVlDNc2gGvjHYTL1IkcJ1JygJ8JlR7HFOc8Hf6O79tbf8/gnXrbJfw wrZ9ukCwEP9bepbVlCLNMEC8UAUkN+RUxrvc1MkVgY11TS2+JZbZKjx6jh6jpYoX xxJJSRZjhTRv6dBG4aC76/p8wrTSeklawoGHsRirDTJOYD/fFRIpK7oLL9ewOMhK 1/ANBYBclen8n1SQ0COfpa+SprxhwS1MpeIzZfzNkNk14ea/0A1abNx+dRBDOBKC WL+lfBBgnWL5vvFSbLyVvIlQx5ZrDLsUA2+U97Dv0hqVtXezj3U= -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:22 2025 by rpki-client