
$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft
File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json)
Hash identifier: kyeQAOOyUTtBMvqxFghHWCbOTn/ge5IImFJlbxZILk4=
Subject key identifier: 02:F5:BC:73:96:5B:E4:17:BC:21:5A:3D:CC:16:0B:08:25:BF:33:65
Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA
Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA
Certificate serial: 7DE0BE3C5692D328A217B65A238E4BC909FECA90
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft
Manifest number: 0247
Signing time: Sat 28 Feb 2026 17:22:24 +0000
Manifest this update: Sat 28 Feb 2026 17:17:24 +0000
Manifest next update: Wed 04 Mar 2026 02:19:24 +0000
Files and hashes: 1: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: RDdntKK8W1fEQXv6kCTAd+eiufLbB3q42yZgMtGYU9o=)
2: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl
rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 02:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e0:be:3c:56:92:d3:28:a2:17:b6:5a:23:8e:4b:c9:09:fe:ca:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA
Validity
Not Before: Feb 28 17:17:24 2026 GMT
Not After : Mar 4 02:19:24 2026 GMT
Subject: CN=02F5BC73965BE417BC215A3DCC160B0825BF3365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:e4:a7:38:a9:94:35:22:14:c2:d5:b0:37:
a5:9b:2e:99:08:0b:8e:2f:3f:c5:10:3c:c5:7b:e0:
4a:62:1c:5c:3f:36:6d:db:de:d3:7a:84:99:45:59:
ae:db:c1:a3:e1:c7:a8:52:95:15:80:85:d3:70:eb:
f9:22:67:f5:73:00:7a:60:f4:cd:09:5b:cb:69:0e:
48:16:49:6b:7a:ae:28:71:c9:f7:ab:11:33:57:99:
1d:c9:fd:0f:0d:39:99:be:81:e8:f0:ea:20:fb:d1:
5f:8d:8a:da:3f:3d:e6:84:71:7c:53:97:47:97:71:
fb:41:14:08:5b:1f:18:af:0e:64:d2:ac:be:03:c6:
c3:3a:a1:d4:98:97:72:0d:fd:e3:84:f6:af:e9:1d:
95:b0:32:c0:25:3c:a6:ac:1c:e8:98:e5:e2:1a:9b:
4e:c6:65:51:fe:8e:e0:4f:5d:60:bb:8d:d2:bc:9b:
7b:39:f5:1c:1b:ec:32:49:8f:3d:72:db:21:57:32:
0f:30:b2:e2:45:fd:02:ed:18:b5:69:d2:43:4e:2f:
8c:d5:f3:cd:fe:aa:01:c1:fa:5c:01:8e:b2:56:3d:
34:c6:81:b1:54:34:b8:20:fc:97:08:52:dc:96:3b:
3e:0d:61:88:20:cd:a9:eb:e5:36:5a:7e:f6:71:06:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F5:BC:73:96:5B:E4:17:BC:21:5A:3D:CC:16:0B:08:25:BF:33:65
X509v3 Authority Key Identifier:
keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:37:b9:c0:4f:18:07:8b:af:72:54:52:68:e0:2b:10:6c:
91:0c:68:33:6a:8e:10:20:58:05:46:80:1b:05:79:a8:bd:4a:
bf:48:d0:ea:c1:37:54:dd:a5:f4:89:2b:77:af:6a:7f:58:66:
3b:0b:ed:53:df:f9:9e:02:3f:9a:ec:7e:30:14:da:f8:f1:87:
22:f4:89:b7:8c:1f:43:9f:44:02:19:59:90:04:ca:d6:22:60:
6e:b8:e0:1c:3d:be:9d:5c:60:e3:6f:24:7c:e6:c4:04:1f:77:
be:56:c3:eb:89:3a:de:63:29:04:50:1c:66:97:98:6b:04:fd:
25:76:18:a5:3c:28:de:d6:ad:bc:2d:b4:f6:c8:74:51:63:d5:
e5:f6:03:4b:68:f5:60:c6:b3:95:de:1b:b4:5a:c1:90:87:8f:
5d:75:b1:5f:a0:b4:da:ed:ff:2f:29:0a:8d:fd:61:a1:05:db:
97:a7:51:bd:28:5b:cd:e4:09:52:59:ea:62:c9:b9:9c:c1:9f:
8d:d1:93:38:eb:5b:72:4d:27:ce:2f:d5:1c:24:bb:15:06:75:
b8:5f:67:95:14:d9:fd:28:0e:bd:2f:82:ea:7f:22:9c:cf:37:
b9:06:df:dd:31:f7:7b:f3:17:b5:09:b0:f5:84:fe:29:15:fb:
90:64:f7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:07 2026 by rpki-client