$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: 57P7d7OvJfh15JkCPp8obnjU3VJZTtd3Wz/NYvnImuE= Subject key identifier: 1A:EA:72:F9:44:58:FD:47:A5:87:96:73:47:0A:80:F3:4A:C6:5C:0E Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 6212E4F0A460A5889AE3CC7E313CACE42C28F830 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 025C Signing time: Fri 17 Apr 2026 00:52:25 +0000 Manifest this update: Fri 17 Apr 2026 00:47:25 +0000 Manifest next update: Mon 20 Apr 2026 11:59:25 +0000 Files and hashes: 1: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: og1gclay6MzWp9GVGpn2GNIheizORL2tj+06nteAM94=) 2: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 11:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:12:e4:f0:a4:60:a5:88:9a:e3:cc:7e:31:3c:ac:e4:2c:28:f8:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Apr 17 00:47:25 2026 GMT Not After : Apr 20 11:59:25 2026 GMT Subject: CN=1AEA72F94458FD47A5879673470A80F34AC65C0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c9:ae:15:aa:64:88:06:a4:f3:32:4e:f7:63: bd:16:d8:fc:99:12:4d:69:80:b4:18:f6:3f:07:02: a0:60:94:35:7c:2b:cd:9d:4a:df:44:6b:14:52:9a: 30:66:42:ab:00:32:99:fe:4b:93:e4:bc:2f:f6:f9: a8:47:c2:c3:67:5f:96:a8:a6:2d:70:d5:b4:e0:3c: 9a:a9:e3:be:f0:62:08:7c:92:f5:09:15:9e:35:e8: 96:f0:1e:f5:cc:c0:4d:76:f6:b1:c7:66:02:d9:08: 0f:33:20:36:e6:d9:e1:06:df:89:85:c0:52:e2:f0: 99:30:ca:3a:f2:0c:d5:c1:44:6b:ac:15:f8:53:47: 99:53:4a:bd:52:4a:ab:54:1e:2e:5d:eb:53:38:36: 92:2e:02:b5:18:29:b8:64:1d:eb:2d:c5:2a:26:e8: 75:1f:2a:a4:5f:85:c3:10:8f:2d:e0:57:84:81:3d: aa:f4:04:66:ed:0f:97:5b:18:dc:40:73:39:80:c3: 8b:6f:96:59:7d:11:ba:68:44:30:74:43:8f:e6:98: bf:6e:6f:e7:e0:18:36:53:45:a3:55:0f:93:4f:19: e8:9e:cf:cc:b5:51:a9:94:52:ac:a6:ce:be:5a:f6: ba:41:74:b5:e1:dd:6e:6f:97:39:dd:08:90:6b:17: 8b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EA:72:F9:44:58:FD:47:A5:87:96:73:47:0A:80:F3:4A:C6:5C:0E X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:40:2a:f6:63:46:c6:8a:f8:d6:8f:81:0f:6e:ac:01:3b:9c: 56:f3:52:68:87:cd:05:8a:49:29:4f:83:7f:b9:c9:8f:08:7b: a8:70:e9:aa:0e:2d:03:90:f4:a3:50:ec:40:fc:41:84:e5:4d: 52:78:d9:95:5e:81:3b:95:a0:b4:c4:a9:8e:81:0a:a4:f7:2f: b6:9e:ad:4a:ae:7e:b6:63:79:00:70:e9:ef:3e:28:03:1a:ce: df:82:40:b4:95:c3:9c:9f:bd:d2:a9:12:75:75:1d:8f:a1:d2: d2:09:0d:74:e5:56:4a:b5:dd:c5:d6:6f:f1:23:21:c3:e3:a3: c1:9c:81:50:e8:b5:9f:bf:f0:d4:56:10:ce:0d:f9:1d:9c:46: ed:4f:98:24:8a:63:ce:7b:9e:72:5e:a8:1d:0c:b3:d7:6d:21: 0c:08:c2:76:9e:0f:2b:69:17:31:80:61:e0:a0:9a:5b:f4:5d: 68:17:d9:17:68:f1:f3:ef:bc:60:94:97:38:0f:39:19:e3:e9: bf:ac:a0:f3:ba:6d:3d:68:21:9a:51:2e:80:09:3a:1f:f9:c0: 74:84:58:23:40:b7:00:fe:4b:0d:e8:3b:8e:e3:08:05:00:98: 54:be:cc:6f:0d:1f:39:68:54:9e:c6:c7:15:40:70:fa:bc:a1: f7:c9:f2:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhLk8KRgpYia48x+MTys5Cwo+DAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNjA0MTcwMDQ3MjVaFw0yNjA0MjAxMTU5MjVaMDMxMTAvBgNV BAMTKDFBRUE3MkY5NDQ1OEZENDdBNTg3OTY3MzQ3MEE4MEYzNEFDNjVDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ya4VqmSIBqTzMk73Y70W2PyZ Ek1pgLQY9j8HAqBglDV8K82dSt9EaxRSmjBmQqsAMpn+S5PkvC/2+ahHwsNnX5ao pi1w1bTgPJqp477wYgh8kvUJFZ416JbwHvXMwE129rHHZgLZCA8zIDbm2eEG34mF wFLi8JkwyjryDNXBRGusFfhTR5lTSr1SSqtUHi5d61M4NpIuArUYKbhkHestxSom 6HUfKqRfhcMQjy3gV4SBPar0BGbtD5dbGNxAczmAw4tvlll9EbpoRDB0Q4/mmL9u b+fgGDZTRaNVD5NPGeiez8y1UamUUqymzr5a9rpBdLXh3W5vlzndCJBrF4sFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGupy+URY/Uelh5ZzRwqA80rGXA4wHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdAKvZjRsaK+NaPgQ9urAE7nFbzUmiHzQWK SSlPg3+5yY8Ie6hw6aoOLQOQ9KNQ7ED8QYTlTVJ42ZVegTuVoLTEqY6BCqT3L7ae rUqufrZjeQBw6e8+KAMazt+CQLSVw5yfvdKpEnV1HY+h0tIJDXTlVkq13cXWb/Ej IcPjo8GcgVDotZ+/8NRWEM4N+R2cRu1PmCSKY857nnJeqB0Ms9dtIQwIwnaeDytp FzGAYeCgmlv0XWgX2Rdo8fPvvGCUlzgPORnj6b+soPO6bT1oIZpRLoAJOh/5wHSE WCNAtwD+Sw3oO47jCAUAmFS+zG8NHzloVJ7GxxVAcPq8offJ8lI= -----END CERTIFICATE-----Generated at Fri Apr 17 23:05:41 2026 by rpki-client