$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: zH/I4/XI+oRuso/k/bYiaf11WVEkuqWTZhEEKY64e2w= Subject key identifier: 36:A8:78:5B:E9:44:66:04:F5:23:C4:3C:EB:21:3E:5E:91:7F:50:8B Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 321E01B3FCA0D8148BBBC937AF4CD447961C1C43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 03B7 Signing time: Sun 01 Mar 2026 10:11:35 +0000 Manifest this update: Sun 01 Mar 2026 10:06:35 +0000 Manifest next update: Wed 04 Mar 2026 12:07:35 +0000 Files and hashes: 1: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: VextcfePMS7eBVL5slCzTZmwtyuqfowegC0r+eqfwSA=) 2: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 3: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: yDXbsqxukA4XHHQjS7wVsIWS20Xlf5VSX6w1YkD0k4s=) 4: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: cnM0NMAQN+nEB2uerjw6Qf1nArdtxZQ6ojcs75GS7ak=) 5: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1e:01:b3:fc:a0:d8:14:8b:bb:c9:37:af:4c:d4:47:96:1c:1c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Mar 1 10:06:35 2026 GMT Not After : Mar 4 12:07:35 2026 GMT Subject: CN=36A8785BE9446604F523C43CEB213E5E917F508B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:f5:d5:90:44:e5:f8:61:97:8f:42:8f:3d: 4a:36:da:f4:f8:3d:0c:4d:ef:42:26:34:7e:d6:28: cf:da:74:b3:70:5a:49:4d:1e:72:fe:f6:6e:09:a8: cd:18:4b:82:5f:4a:61:f9:a1:1c:25:bd:6c:08:0c: 7a:2d:cf:45:33:07:1a:02:0b:06:a9:6b:60:3f:6e: 0a:30:50:31:4c:66:ae:48:6a:f3:a9:a9:01:01:de: 83:84:f8:86:bc:ba:5f:85:48:2f:aa:d6:70:49:9d: 95:73:f0:01:a1:54:06:0f:45:d0:c0:4d:28:32:9d: 7f:08:c6:65:0e:00:04:ca:ec:f8:bc:c1:5f:d1:9e: 4a:23:54:bb:83:12:7c:73:66:e4:e4:50:49:ad:ff: bb:9e:91:58:bc:51:e0:9b:07:ce:28:64:27:68:f1: ff:5b:4f:e4:bc:5a:7b:92:ed:ad:bc:0d:d7:1e:c4: 41:15:97:f9:50:e5:b7:32:d0:ff:a7:e8:51:1c:6e: 81:54:9b:fc:d4:6e:d5:32:91:5c:44:5a:04:47:87: dc:6b:09:b1:b6:3d:1a:3c:cf:51:b6:ab:ab:be:b6: 54:fb:15:29:e6:02:44:31:4b:19:7d:3f:30:f0:20: d0:aa:fc:10:23:46:4a:a4:04:22:c9:f7:ab:73:c5: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A8:78:5B:E9:44:66:04:F5:23:C4:3C:EB:21:3E:5E:91:7F:50:8B X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a9:b5:94:b1:f1:a5:cc:a8:72:aa:3b:5d:4e:ca:69:53:b3: 6d:1d:2b:cb:9d:a9:a1:80:f1:89:e8:bb:25:26:27:62:2d:f3: b7:31:d9:ba:fe:96:65:8e:58:c7:fc:93:32:e9:0d:a3:8e:44: 7b:73:7c:db:ca:61:e6:4a:6e:ec:5b:99:a6:d6:49:35:0b:b8: ce:9c:77:99:dc:58:ef:46:d0:02:c3:4f:7c:0c:e6:50:1c:77: 6d:68:c3:50:5e:61:15:5c:ce:3c:8d:78:45:30:16:db:74:04: 63:7f:e8:60:81:6a:db:7f:30:a5:d6:e3:81:5c:27:88:96:93: d1:2c:3d:94:80:4a:41:c4:00:eb:85:91:c0:a8:4d:d1:ab:3c: 88:f0:92:2e:23:56:62:d1:0f:f4:b1:fa:90:a0:2c:90:56:43: 7c:19:b2:4c:d2:a2:7f:9a:d7:d0:00:79:51:56:40:bf:be:78: dd:6a:cb:a4:96:13:49:e2:9c:49:42:fb:cb:00:8f:f7:e8:e1: 99:67:48:a9:66:f5:d4:6f:e1:a8:17:03:e7:ea:00:a5:7b:28: a9:d7:8c:dd:44:0e:90:46:97:72:e3:c8:e7:a7:a1:5e:c1:08: 7d:75:27:eb:e1:5f:7e:3a:53:56:23:38:2a:ce:43:65:a5:cf: 49:a4:33:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMh4Bs/yg2BSLu8k3r0zUR5YcHEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNjAzMDExMDA2MzVaFw0yNjAzMDQxMjA3MzVaMDMxMTAvBgNV BAMTKDM2QTg3ODVCRTk0NDY2MDRGNTIzQzQzQ0VCMjEzRTVFOTE3RjUwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hfXVkETl+GGXj0KPPUo22vT4 PQxN70ImNH7WKM/adLNwWklNHnL+9m4JqM0YS4JfSmH5oRwlvWwIDHotz0UzBxoC Cwapa2A/bgowUDFMZq5IavOpqQEB3oOE+Ia8ul+FSC+q1nBJnZVz8AGhVAYPRdDA TSgynX8IxmUOAATK7Pi8wV/RnkojVLuDEnxzZuTkUEmt/7uekVi8UeCbB84oZCdo 8f9bT+S8WnuS7a28DdcexEEVl/lQ5bcy0P+n6FEcboFUm/zUbtUykVxEWgRHh9xr CbG2PRo8z1G2q6u+tlT7FSnmAkQxSxl9PzDwINCq/BAjRkqkBCLJ96tzxWn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNqh4W+lEZgT1I8Q86yE+XpF/UIswHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaptZSx8aXMqHKqO11OymlTs20dK8udqaGA 8YnouyUmJ2It87cx2br+lmWOWMf8kzLpDaOORHtzfNvKYeZKbuxbmabWSTULuM6c d5ncWO9G0ALDT3wM5lAcd21ow1BeYRVczjyNeEUwFtt0BGN/6GCBatt/MKXW44Fc J4iWk9EsPZSASkHEAOuFkcCoTdGrPIjwki4jVmLRD/Sx+pCgLJBWQ3wZskzSon+a 19AAeVFWQL++eN1qy6SWE0ninElC+8sAj/fo4ZlnSKlm9dRv4agXA+fqAKV7KKnX jN1EDpBGl3LjyOenoV7BCH11J+vhX346U1YjOCrOQ2Wlz0mkM+g= -----END CERTIFICATE-----Generated at Tue Mar 3 05:30:46 2026 by rpki-client