$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: loG31BAzNQuCFcfTqwBJRlHSDo+TvIO6wVO8RcTmMok= Subject key identifier: EA:C9:FF:22:A7:25:2B:83:00:32:B2:BB:75:F7:40:97:92:9F:D0:95 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 0A5568CF89B14952B369F878509D039C853FC4F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 01E2 Signing time: Sat 19 Jul 2025 07:42:07 +0000 Manifest this update: Sat 19 Jul 2025 07:37:07 +0000 Manifest next update: Tue 22 Jul 2025 15:46:07 +0000 Files and hashes: 1: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: xRLhqeOA+FonHqQTsQ2/YngmLG/PZ7jDto2fPEqdLAw=) 2: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: fFX2S0yuCGbDsYrqvIvfedkBEVG6E8+DQx58RVmq88I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 15:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:55:68:cf:89:b1:49:52:b3:69:f8:78:50:9d:03:9c:85:3f:c4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Jul 19 07:37:07 2025 GMT Not After : Jul 22 15:46:07 2025 GMT Subject: CN=EAC9FF22A7252B830032B2BB75F74097929FD095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:5f:3b:80:21:13:2d:b7:28:db:97:b3:4d: 24:ad:71:2b:10:47:4c:d7:ec:01:a7:bc:8a:a7:51: 04:54:e5:01:4e:58:83:bd:59:0a:d4:93:dc:60:88: 52:58:b2:ad:bc:b7:89:70:c1:7f:fd:42:98:dc:2d: 6c:b2:b5:ac:91:cd:cd:7e:30:e2:03:75:5e:62:7c: e6:20:89:eb:95:17:6d:e7:65:f1:26:5f:86:b5:a1: c8:ae:48:f1:89:ec:50:45:80:f8:4c:27:3b:b9:b1: 74:52:7f:3d:7a:35:af:c7:3b:45:d7:c6:75:4b:99: 88:5b:9e:97:2c:96:55:a3:e3:98:ab:f3:ba:43:ca: db:06:a0:25:ac:08:9c:6a:88:14:0f:b3:9f:4d:c0: 29:30:c1:77:bf:77:95:c5:bb:1e:e2:13:6e:53:05: 01:0f:af:6f:1e:fd:81:47:c5:8e:88:b1:d2:21:91: 00:b3:b1:bc:15:d4:01:69:63:23:b1:35:4d:67:be: 4b:91:3c:72:fc:b3:84:54:63:73:9d:2b:e4:3c:b0: 83:71:24:db:5b:09:15:ca:cc:d0:ad:9e:f0:9b:ed: f3:e8:a1:26:65:d0:b3:27:1a:1e:c8:2d:b7:80:8e: f5:fc:5b:36:25:ff:ba:5d:6b:f0:42:04:d0:60:f4: a9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C9:FF:22:A7:25:2B:83:00:32:B2:BB:75:F7:40:97:92:9F:D0:95 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:28:55:4e:dd:1a:cc:b1:2d:e5:d4:91:a8:09:37:58:c4:a2: f9:b2:0e:cb:aa:f9:35:0f:b9:55:ee:0a:3a:7b:29:ff:51:ff: f5:ee:00:7e:44:04:b0:27:fc:fc:d6:da:74:cd:63:53:1c:ae: 50:e2:01:c6:4b:c5:e4:b3:66:e9:2f:66:37:55:be:24:99:b4: 90:b0:cb:3f:19:0c:a0:8e:58:63:1d:cb:c8:fb:da:c3:de:56: a7:85:2b:4b:37:82:78:83:58:14:90:1e:2e:f3:a1:cb:30:50: 9a:a1:d4:d7:84:9d:fc:5f:e6:3b:e6:78:6a:45:67:e4:2a:bb: 5e:8c:06:7e:7b:04:86:c6:e0:7e:8d:da:55:a0:cb:dc:8d:77: ba:d6:f5:8d:3a:ab:2c:17:09:0b:c4:2f:d6:82:c3:88:e7:54: 10:fe:2c:36:da:e9:b2:c2:49:bd:bd:39:ac:75:f7:b7:58:3b: e3:72:5f:b4:60:ef:00:4a:08:0f:5a:c3:2a:76:b3:a4:64:55: cf:e5:a4:1b:1d:b1:c9:fe:2b:7b:50:d4:ad:b4:7f:5b:1e:e7: 7a:6c:84:25:80:5c:b0:a3:85:ea:6b:6e:cd:d7:0b:f9:eb:6f: f3:3c:33:c8:a1:76:cd:e2:d8:6f:aa:97:d4:41:dc:e6:7f:45: 8a:dd:94:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClVoz4mxSVKzafh4UJ0DnIU/xPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNTA3MTkwNzM3MDdaFw0yNTA3MjIxNTQ2MDdaMDMxMTAvBgNV BAMTKEVBQzlGRjIyQTcyNTJCODMwMDMyQjJCQjc1Rjc0MDk3OTI5RkQwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZV87gCETLbco25ezTSStcSsQ R0zX7AGnvIqnUQRU5QFOWIO9WQrUk9xgiFJYsq28t4lwwX/9QpjcLWyytayRzc1+ MOIDdV5ifOYgieuVF23nZfEmX4a1ociuSPGJ7FBFgPhMJzu5sXRSfz16Na/HO0XX xnVLmYhbnpcsllWj45ir87pDytsGoCWsCJxqiBQPs59NwCkwwXe/d5XFux7iE25T BQEPr28e/YFHxY6IsdIhkQCzsbwV1AFpYyOxNU1nvkuRPHL8s4RUY3OdK+Q8sINx JNtbCRXKzNCtnvCb7fPooSZl0LMnGh7ILbeAjvX8WzYl/7pda/BCBNBg9KnrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6sn/IqclK4MAMrK7dfdAl5Kf0JUwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkoVU7dGsyxLeXUkagJN1jEovmyDsuq+TUP uVXuCjp7Kf9R//XuAH5EBLAn/PzW2nTNY1McrlDiAcZLxeSzZukvZjdVviSZtJCw yz8ZDKCOWGMdy8j72sPeVqeFK0s3gniDWBSQHi7zocswUJqh1NeEnfxf5jvmeGpF Z+Qqu16MBn57BIbG4H6N2lWgy9yNd7rW9Y06qywXCQvEL9aCw4jnVBD+LDba6bLC Sb29Oax197dYO+NyX7Rg7wBKCA9awyp2s6RkVc/lpBsdscn+K3tQ1K20f1se53ps hCWAXLCjheprbs3XC/nrb/M8M8ihds3i2G+ql9RB3OZ/RYrdlGo= -----END CERTIFICATE-----Generated at Mon Jul 21 02:06:42 2025 by rpki-client