$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: ICXZomYWvyojGTPiVfbzpDHtW/niALWqs4K8LcNCbgA= Subject key identifier: 90:46:16:46:B6:2B:9E:3E:4C:21:27:E6:47:07:D9:4C:5E:20:A6:66 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 67AC10A5F629328850AF1C8A5562D7D7426BB468 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 01E9 Signing time: Mon 04 Aug 2025 18:32:10 +0000 Manifest this update: Mon 04 Aug 2025 18:27:10 +0000 Manifest next update: Thu 07 Aug 2025 23:44:10 +0000 Files and hashes: 1: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: fFX2S0yuCGbDsYrqvIvfedkBEVG6E8+DQx58RVmq88I=) 2: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: Agx+J4/h9MlbBqh43yB+euIZ6rFwdAPG/rCFgbsHU80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ac:10:a5:f6:29:32:88:50:af:1c:8a:55:62:d7:d7:42:6b:b4:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Aug 4 18:27:10 2025 GMT Not After : Aug 7 23:44:10 2025 GMT Subject: CN=90461646B62B9E3E4C2127E64707D94C5E20A666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:09:35:89:1e:8a:90:a0:f6:0e:75:a4:8c: ff:b7:e7:5e:b7:2d:ec:c7:40:43:ea:69:8f:ad:cd: 05:3d:96:e3:88:02:e5:8b:f5:fd:68:ff:a5:69:e0: 50:89:aa:16:8d:33:4a:18:cb:9f:ac:8e:a6:b7:7c: c2:84:d9:8a:15:ac:c7:04:c0:69:df:35:90:fe:30: 95:ec:f1:e6:cb:e0:c6:42:6e:6e:39:9e:ac:70:b1: d2:2f:19:47:1d:a4:c6:5a:af:c7:8a:65:fe:03:d8: f8:1b:31:32:e8:6a:6f:63:ab:d6:d2:16:14:21:e3: 97:a8:7a:b4:20:4e:a0:3d:a4:b5:6a:79:7e:0c:70: e0:21:b4:46:dc:50:95:bc:bf:ad:14:0e:81:cc:78: 59:ea:04:ec:3d:fa:b9:2d:c6:a3:b7:f7:6b:65:7e: a6:76:cb:25:3a:18:96:51:e3:7e:a0:2a:eb:62:b2: 44:62:8f:e8:ce:90:52:b8:58:99:cd:89:11:d3:a8: 5e:d6:49:77:d0:89:0b:5d:51:ed:6c:b6:ab:f6:d4: 42:af:34:54:81:ee:ba:0c:77:6b:02:2b:ff:37:96: db:58:88:5e:f6:88:a6:11:ac:86:2b:29:2c:a5:d5: ee:3b:2f:2c:93:7e:64:22:74:eb:2f:e1:93:e7:7e: d6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:46:16:46:B6:2B:9E:3E:4C:21:27:E6:47:07:D9:4C:5E:20:A6:66 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d3:71:bd:9b:10:86:84:2b:b4:3b:4b:b4:ee:94:4a:49:e6: ba:82:26:db:8d:81:bf:98:81:00:19:03:ba:a9:d5:c1:1b:6c: 01:04:f6:15:c2:5b:77:c6:a7:81:54:6f:3c:e6:97:b7:d7:8a: 77:ce:c5:6c:c3:17:cc:20:a0:b4:ec:f5:8a:39:ef:84:2b:9f: b0:be:69:33:ba:b5:ef:a0:b1:ea:91:55:f7:e7:16:81:02:24: 56:b0:02:96:51:33:18:ab:80:91:bb:66:72:99:fc:5c:f3:82: d7:7e:12:29:52:57:fe:45:20:65:0e:36:b9:2d:da:3e:d4:76: f3:2b:bb:50:0f:5e:4d:7e:a1:85:e4:91:dc:a7:de:e7:44:04: 0b:a6:d6:1e:3f:0a:00:4a:f5:69:31:d5:9b:3d:33:3d:ea:39: 4f:d3:91:b2:47:6d:f4:d6:d0:16:64:c1:5f:61:13:64:9a:77: 55:ed:2a:48:fc:1f:3f:ab:27:79:15:3f:50:3c:4b:9b:68:2b: 42:f7:00:c7:66:fd:64:05:da:67:71:26:df:35:57:08:14:40: f1:8e:89:0f:a6:18:09:2f:ba:ae:49:15:8f:78:c5:56:d8:3e: 87:91:51:aa:f5:2d:f5:08:d1:e7:61:5f:14:92:56:35:88:61: 6b:d4:5f:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6wQpfYpMohQrxyKVWLX10JrtGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNTA4MDQxODI3MTBaFw0yNTA4MDcyMzQ0MTBaMDMxMTAvBgNV BAMTKDkwNDYxNjQ2QjYyQjlFM0U0QzIxMjdFNjQ3MDdEOTRDNUUyMEE2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHogk1iR6KkKD2DnWkjP+35163 LezHQEPqaY+tzQU9luOIAuWL9f1o/6Vp4FCJqhaNM0oYy5+sjqa3fMKE2YoVrMcE wGnfNZD+MJXs8ebL4MZCbm45nqxwsdIvGUcdpMZar8eKZf4D2PgbMTLoam9jq9bS FhQh45eoerQgTqA9pLVqeX4McOAhtEbcUJW8v60UDoHMeFnqBOw9+rktxqO392tl fqZ2yyU6GJZR436gKutiskRij+jOkFK4WJnNiRHTqF7WSXfQiQtdUe1stqv21EKv NFSB7roMd2sCK/83lttYiF72iKYRrIYrKSyl1e47LyyTfmQidOsv4ZPnftaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkEYWRrYrnj5MISfmRwfZTF4gpmYwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDTcb2bEIaEK7Q7S7TulEpJ5rqCJtuNgb+Y gQAZA7qp1cEbbAEE9hXCW3fGp4FUbzzml7fXinfOxWzDF8wgoLTs9Yo574Qrn7C+ aTO6te+gseqRVffnFoECJFawApZRMxirgJG7ZnKZ/Fzzgtd+EilSV/5FIGUONrkt 2j7UdvMru1APXk1+oYXkkdyn3udEBAum1h4/CgBK9Wkx1Zs9Mz3qOU/TkbJHbfTW 0BZkwV9hE2Sad1XtKkj8Hz+rJ3kVP1A8S5toK0L3AMdm/WQF2mdxJt81VwgUQPGO iQ+mGAkvuq5JFY94xVbYPoeRUar1LfUI0edhXxSSVjWIYWvUX2o= -----END CERTIFICATE-----Generated at Thu Aug 7 00:37:14 2025 by rpki-client