$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: bwjmfeKhw61ZYp32Wlf8Uf4KqWBqE8vy8zGBfeswrx8= Subject key identifier: 21:37:ED:00:3E:BD:66:E4:3D:D2:DC:E0:06:E2:FF:92:4C:2C:F1:48 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 4EF3C916B05941E29B536233006CFE967CFA3C2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 025E Signing time: Tue 21 Apr 2026 22:22:25 +0000 Manifest this update: Tue 21 Apr 2026 22:17:25 +0000 Manifest next update: Sat 25 Apr 2026 05:40:25 +0000 Files and hashes: 1: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=) 2: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: 9HF0xTpJIbXmHRH9/qRma60UHmsTMrLmGvNRHBd1R4U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 05:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f3:c9:16:b0:59:41:e2:9b:53:62:33:00:6c:fe:96:7c:fa:3c:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Apr 21 22:17:25 2026 GMT Not After : Apr 25 05:40:25 2026 GMT Subject: CN=2137ED003EBD66E43DD2DCE006E2FF924C2CF148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:5f:c9:26:18:eb:cc:6d:aa:54:0c:3e:a6: 1a:35:bf:2f:82:44:95:99:6b:0b:e1:2d:0e:76:d3: ad:4e:89:c6:3d:fb:40:d1:74:29:25:9b:4c:d2:02: 86:6e:4e:4f:db:52:71:e9:7f:48:02:5d:bd:60:92: f3:a8:da:e5:5c:1d:79:f7:73:b6:5c:6b:09:37:18: aa:3f:db:f8:3a:74:ea:ef:61:70:a6:4d:55:1b:44: 58:03:d5:13:62:cc:fd:fd:9a:18:3d:56:a6:93:55: 96:52:7a:ea:d7:00:35:5a:42:f3:2f:28:50:d1:45: b2:68:d5:de:39:b8:d8:5f:3f:c6:72:c4:32:8b:a4: 72:df:6c:6e:fd:b5:3e:f6:54:b0:ea:93:4a:2a:04: 32:36:f1:e3:c8:eb:a5:6a:6b:4a:91:ce:f6:ac:a2: 79:15:1a:d9:af:33:ef:94:63:7f:e3:79:80:9e:e3: c7:cf:54:60:91:27:0e:e9:8f:55:da:70:37:cc:4b: ae:f8:ef:bb:aa:97:7d:71:3a:22:7e:14:2a:3e:f2: ef:0c:5a:37:b6:fa:06:82:49:4b:87:1f:5e:3a:b5: 05:41:e3:61:31:98:0b:3e:95:46:b4:42:5b:89:06: 76:77:28:fb:7d:ed:a7:3f:41:3e:69:7d:d2:c7:17: 74:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:37:ED:00:3E:BD:66:E4:3D:D2:DC:E0:06:E2:FF:92:4C:2C:F1:48 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:64:b0:c3:f9:fb:09:aa:41:26:58:e3:b5:b2:05:ef:6c:12: 9c:2a:f9:7e:0e:44:74:7f:58:24:1d:bc:fd:c0:34:51:da:67: 7a:d1:41:07:98:46:7c:93:ef:e4:53:93:7a:c0:88:a6:1e:1c: af:41:b7:aa:10:62:35:a3:8a:03:ce:86:d1:ab:3f:77:74:fe: 92:f8:b6:f5:df:36:1a:2e:93:f0:39:04:5c:1c:20:72:63:5b: 54:c0:3a:7a:3b:93:9e:52:98:08:60:30:8b:33:ee:b4:33:73: 6d:bc:ab:f7:e8:81:56:57:2d:b1:04:aa:cf:2c:3f:24:4d:05: af:15:9d:9f:ba:80:52:07:9a:4a:0b:6e:77:20:50:36:bc:89: 1f:e8:0a:bd:9a:0c:19:90:4a:91:59:52:fc:77:eb:3a:a8:c1: 03:ef:b4:e4:33:46:8a:e7:e2:6f:f2:29:01:1a:c0:7c:00:a6: cf:da:00:b2:76:f9:6b:93:48:b2:d2:da:fe:50:a1:53:09:af: 4f:81:f2:4a:a0:54:30:92:fe:00:db:56:85:6e:8f:b3:fa:bd: 5e:52:1b:a1:1f:d6:ea:87:31:09:80:d8:3a:5a:42:dd:1c:de: 4a:30:cb:f9:6b:b8:85:54:26:54:40:00:a4:1c:25:b9:2b:12: 5e:45:4c:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTvPJFrBZQeKbU2IzAGz+lnz6PC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNjA0MjEyMjE3MjVaFw0yNjA0MjUwNTQwMjVaMDMxMTAvBgNV BAMTKDIxMzdFRDAwM0VCRDY2RTQzREQyRENFMDA2RTJGRjkyNEMyQ0YxNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSc1/JJhjrzG2qVAw+pho1vy+C RJWZawvhLQ52061OicY9+0DRdCklm0zSAoZuTk/bUnHpf0gCXb1gkvOo2uVcHXn3 c7Zcawk3GKo/2/g6dOrvYXCmTVUbRFgD1RNizP39mhg9VqaTVZZSeurXADVaQvMv KFDRRbJo1d45uNhfP8ZyxDKLpHLfbG79tT72VLDqk0oqBDI28ePI66Vqa0qRzvas onkVGtmvM++UY3/jeYCe48fPVGCRJw7pj1XacDfMS67477uql31xOiJ+FCo+8u8M Wje2+gaCSUuHH146tQVB42ExmAs+lUa0QluJBnZ3KPt97ac/QT5pfdLHF3RtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITftAD69ZuQ90tzgBuL/kkws8UgwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRksMP5+wmqQSZY47WyBe9sEpwq+X4ORHR/ WCQdvP3ANFHaZ3rRQQeYRnyT7+RTk3rAiKYeHK9Bt6oQYjWjigPOhtGrP3d0/pL4 tvXfNhouk/A5BFwcIHJjW1TAOno7k55SmAhgMIsz7rQzc228q/fogVZXLbEEqs8s PyRNBa8VnZ+6gFIHmkoLbncgUDa8iR/oCr2aDBmQSpFZUvx36zqowQPvtOQzRorn 4m/yKQEawHwAps/aALJ2+WuTSLLS2v5QoVMJr0+B8kqgVDCS/gDbVoVuj7P6vV5S G6Ef1uqHMQmA2DpaQt0c3kowy/lruIVUJlRAAKQcJbkrEl5FTHM= -----END CERTIFICATE-----Generated at Wed Apr 22 08:55:41 2026 by rpki-client