$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: fSEYXHaVcJP+NAGMKBSrCr0YKMfBR84tM88gdauR47g= Subject key identifier: 0C:E1:83:04:2D:7D:18:F9:5C:52:1D:E5:BA:80:CC:70:75:B0:0B:BC Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 2162FBA7108A75138FFDD61E4809600E24D9654D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 03C2 Signing time: Thu 26 Mar 2026 06:43:03 +0000 Manifest this update: Thu 26 Mar 2026 06:38:03 +0000 Manifest next update: Sun 29 Mar 2026 07:51:03 +0000 Files and hashes: 1: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: mm2rJUad+NxB/BHL3RtYL/CZvh/WQFDpYMArEt/mLvY=) 2: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: cnM0NMAQN+nEB2uerjw6Qf1nArdtxZQ6ojcs75GS7ak=) 3: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: yDXbsqxukA4XHHQjS7wVsIWS20Xlf5VSX6w1YkD0k4s=) 4: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 5: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:62:fb:a7:10:8a:75:13:8f:fd:d6:1e:48:09:60:0e:24:d9:65:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Mar 26 06:38:03 2026 GMT Not After : Mar 29 07:51:03 2026 GMT Subject: CN=0CE183042D7D18F95C521DE5BA80CC7075B00BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0e:4b:27:00:6f:70:9a:51:bd:cd:98:2d:5f: 16:dc:56:b9:98:54:d5:c2:24:27:77:43:14:c8:6f: 56:a1:9f:73:2c:22:c8:5e:69:d8:12:28:c4:2d:9b: 43:79:98:24:76:c7:c3:03:b5:8d:4a:d8:65:32:5c: 3c:95:11:53:19:21:f1:14:55:75:21:c3:f7:f3:85: 1e:e5:36:4a:95:69:32:75:e6:f2:04:0b:63:41:01: 26:00:d7:4b:4f:ea:bb:5f:5d:90:c3:a9:85:6f:59: 1e:de:d5:58:be:4f:13:e1:a7:1b:d6:bf:3c:ae:ed: 9a:80:fd:e9:3a:ce:2f:dd:d5:ea:fd:3b:20:17:95: 73:35:f2:b6:d5:8a:29:4f:66:3b:fb:2d:bd:bc:96: 76:c2:44:3f:f7:e9:77:ea:fa:68:84:50:83:7f:93: 7d:11:51:41:1f:2c:f5:a9:08:5e:c8:f0:2a:02:22: b7:fe:bb:15:f5:0f:83:e1:5e:3d:f7:ec:aa:9a:2c: d1:5f:e5:4c:a3:ee:c4:f0:34:fa:6c:5e:51:f6:ab: 55:71:e8:d3:dd:e9:2f:11:ce:f5:94:5a:ac:70:a7: 1a:c2:5d:9d:62:16:ca:7f:3d:83:1b:5e:77:f1:af: e7:1a:b7:41:a6:0a:a3:18:0e:0f:e1:47:a1:52:c6: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E1:83:04:2D:7D:18:F9:5C:52:1D:E5:BA:80:CC:70:75:B0:0B:BC X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fe:2a:70:f4:f5:f2:6c:b1:19:0a:30:d1:00:8e:0a:31:19: 18:96:48:2b:fb:1d:ef:48:09:c3:8b:41:73:b7:92:50:e0:31: dc:56:d4:65:9f:28:6f:8a:06:1a:fc:58:52:36:7c:c3:a7:ce: c1:fe:6f:08:15:88:43:90:23:05:cb:ca:d5:96:ca:99:ce:aa: 5d:f0:32:58:3e:09:9e:80:1b:4c:4f:4d:ef:44:ce:28:5e:14: 40:f9:c1:2d:8f:fd:13:50:ae:24:51:4d:a3:a4:56:6b:15:37: 87:66:1c:63:9b:eb:66:37:8d:8f:ac:45:ad:eb:b6:44:81:e0: 92:57:7b:04:a1:d1:4b:b7:47:5f:ba:be:9a:86:9e:8a:7a:24: 68:1b:20:cf:e9:84:d5:eb:39:c9:27:32:7f:86:f0:d8:a7:d2: da:61:a2:df:4b:a6:f7:09:22:ef:8a:97:57:ee:8b:d9:93:7a: c9:9f:5f:cd:bc:48:6b:2f:7e:04:2e:85:f9:67:88:ec:63:aa: 4b:2b:4f:91:13:29:22:39:b7:ce:db:62:1f:be:6b:53:5e:1b: d9:f0:4e:df:cb:e3:3d:08:1e:39:54:d8:fc:a9:15:5a:37:c7: c3:61:c9:3e:92:0c:a6:96:5c:b0:88:46:a5:df:af:49:e3:5f: c3:b0:13:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWL7pxCKdROP/dYeSAlgDiTZZU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNjAzMjYwNjM4MDNaFw0yNjAzMjkwNzUxMDNaMDMxMTAvBgNV BAMTKDBDRTE4MzA0MkQ3RDE4Rjk1QzUyMURFNUJBODBDQzcwNzVCMDBCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDksnAG9wmlG9zZgtXxbcVrmY VNXCJCd3QxTIb1ahn3MsIsheadgSKMQtm0N5mCR2x8MDtY1K2GUyXDyVEVMZIfEU VXUhw/fzhR7lNkqVaTJ15vIEC2NBASYA10tP6rtfXZDDqYVvWR7e1Vi+TxPhpxvW vzyu7ZqA/ek6zi/d1er9OyAXlXM18rbViilPZjv7Lb28lnbCRD/36Xfq+miEUIN/ k30RUUEfLPWpCF7I8CoCIrf+uxX1D4PhXj337KqaLNFf5Uyj7sTwNPpsXlH2q1Vx 6NPd6S8RzvWUWqxwpxrCXZ1iFsp/PYMbXnfxr+cat0GmCqMYDg/hR6FSxl5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDOGDBC19GPlcUh3luoDMcHWwC7wwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL+KnD09fJssRkKMNEAjgoxGRiWSCv7He9I CcOLQXO3klDgMdxW1GWfKG+KBhr8WFI2fMOnzsH+bwgViEOQIwXLytWWypnOql3w Mlg+CZ6AG0xPTe9EziheFED5wS2P/RNQriRRTaOkVmsVN4dmHGOb62Y3jY+sRa3r tkSB4JJXewSh0Uu3R1+6vpqGnop6JGgbIM/phNXrOcknMn+G8Nin0tphot9LpvcJ Iu+Kl1fui9mTesmfX828SGsvfgQuhflniOxjqksrT5ETKSI5t87bYh++a1NeG9nw Tt/L4z0IHjlU2PypFVo3x8NhyT6SDKaWXLCIRqXfr0njX8OwE5U= -----END CERTIFICATE-----Generated at Thu Mar 26 21:25:16 2026 by rpki-client