$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: lcHk1KSyxqVzB5f+4sPtqpS1pNppOxpAZGDhsjSknNA= Subject key identifier: 11:5F:D1:EE:C3:98:04:FC:2D:A1:F7:91:B4:78:7F:A0:F6:F0:67:37 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 5B863A2793F092699C9042DCCADCA62F0397571C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 01CD Signing time: Mon 02 Jun 2025 16:32:06 +0000 Manifest this update: Mon 02 Jun 2025 16:27:06 +0000 Manifest next update: Fri 06 Jun 2025 02:31:06 +0000 Files and hashes: 1: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: 7y/oAtI3QlY5KsL5FOubJDe2F28GOADokHzUcQf+wSg=) 2: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: fFX2S0yuCGbDsYrqvIvfedkBEVG6E8+DQx58RVmq88I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 02:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:86:3a:27:93:f0:92:69:9c:90:42:dc:ca:dc:a6:2f:03:97:57:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Jun 2 16:27:06 2025 GMT Not After : Jun 6 02:31:06 2025 GMT Subject: CN=115FD1EEC39804FC2DA1F791B4787FA0F6F06737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:36:1e:b8:f0:1c:35:d7:9d:2b:5e:9e:7a: 01:38:5e:1e:e6:a8:07:32:f8:37:17:29:8b:6b:37: 37:6a:75:21:6a:8d:5c:ce:d8:b3:e6:53:6c:5c:35: 02:72:21:55:7f:63:7a:65:56:b5:c8:97:9d:1e:58: bd:02:12:5f:ae:ae:20:ff:0a:95:86:b4:8c:7a:78: f9:bc:86:51:09:5a:cf:2d:ba:f0:74:51:41:66:65: 10:01:55:1a:b9:d5:f1:4f:9a:91:4c:73:18:b5:6f: 14:74:d0:a7:e1:be:07:45:39:79:ba:e4:39:4a:da: 86:ef:72:74:eb:77:af:19:30:59:77:a2:e7:4c:ef: d3:53:2d:90:d6:10:ec:ce:f4:0e:d3:6a:01:54:40: ca:6e:0b:d4:1a:2f:c7:09:8d:fa:ec:96:e0:3b:f2: 1a:47:3f:c5:db:14:15:1b:3f:35:99:ff:d8:5d:8a: fb:43:3a:4f:f5:19:1f:1e:bb:2c:5b:2d:d6:60:a2: ab:24:f8:8a:eb:40:eb:db:11:2f:08:3b:a1:7d:4d: bc:67:1a:2a:05:fb:0f:ed:e1:0e:31:69:9f:fe:51: de:ad:00:b8:50:41:d9:cf:5e:cc:b5:30:61:51:d1: 2b:1c:7f:ae:06:5f:76:bc:1d:ac:58:60:3c:f0:01: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5F:D1:EE:C3:98:04:FC:2D:A1:F7:91:B4:78:7F:A0:F6:F0:67:37 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:29:13:bd:8e:a2:10:eb:87:2d:53:13:b3:e3:94:ff:81:14: be:8f:ec:3e:0b:f5:54:49:68:5f:ce:4a:72:9f:2a:8b:a1:41: 3a:45:0c:c7:ed:19:ee:fa:e8:98:8e:63:f4:26:57:5b:88:10: a4:b7:89:a0:6c:9d:ae:b1:18:48:a6:ba:e2:1a:77:45:14:17: 06:04:6a:f8:20:e3:b9:3f:20:4f:f1:91:c6:2b:a9:37:57:09: 59:ef:f4:79:9b:e3:54:25:ef:b6:e6:49:da:86:c3:19:72:84: c3:a7:ae:42:8d:a7:ce:5b:f5:40:e1:9b:40:27:3a:6e:7d:7b: 05:cb:2e:54:cb:d1:ac:84:44:05:5b:07:1b:15:e6:5c:57:3c: 1e:ad:07:80:ae:18:e7:e2:53:68:5c:73:6e:d8:6b:48:ea:67: fe:67:d2:d1:96:ec:00:03:c9:b0:bf:7e:43:27:e7:fd:5a:40: 7b:1c:64:9e:bc:1c:ab:02:44:4f:c2:82:63:55:ca:fe:d1:dd: e6:ef:e0:6d:e2:b5:4a:44:c2:24:c1:79:4a:4e:63:40:9d:b2: 97:49:5d:b9:54:78:57:d6:7c:3d:a2:28:7e:73:6b:96:a4:94: f0:83:65:85:45:c9:5d:60:5e:9a:b4:34:e5:57:a6:1c:55:63: 9c:e9:2c:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4Y6J5PwkmmckELcytymLwOXVxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNTA2MDIxNjI3MDZaFw0yNTA2MDYwMjMxMDZaMDMxMTAvBgNV BAMTKDExNUZEMUVFQzM5ODA0RkMyREExRjc5MUI0Nzg3RkEwRjZGMDY3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9zTYeuPAcNdedK16eegE4Xh7m qAcy+DcXKYtrNzdqdSFqjVzO2LPmU2xcNQJyIVV/Y3plVrXIl50eWL0CEl+uriD/ CpWGtIx6ePm8hlEJWs8tuvB0UUFmZRABVRq51fFPmpFMcxi1bxR00KfhvgdFOXm6 5DlK2obvcnTrd68ZMFl3oudM79NTLZDWEOzO9A7TagFUQMpuC9QaL8cJjfrsluA7 8hpHP8XbFBUbPzWZ/9hdivtDOk/1GR8euyxbLdZgoqsk+IrrQOvbES8IO6F9Tbxn GioF+w/t4Q4xaZ/+Ud6tALhQQdnPXsy1MGFR0Sscf64GX3a8HaxYYDzwAXZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEV/R7sOYBPwtofeRtHh/oPbwZzcwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4pE72OohDrhy1TE7PjlP+BFL6P7D4L9VRJ aF/OSnKfKouhQTpFDMftGe766JiOY/QmV1uIEKS3iaBsna6xGEimuuIad0UUFwYE avgg47k/IE/xkcYrqTdXCVnv9Hmb41Ql77bmSdqGwxlyhMOnrkKNp85b9UDhm0An Om59ewXLLlTL0ayERAVbBxsV5lxXPB6tB4CuGOfiU2hcc27Ya0jqZ/5n0tGW7AAD ybC/fkMn5/1aQHscZJ68HKsCRE/CgmNVyv7R3ebv4G3itUpEwiTBeUpOY0CdspdJ XblUeFfWfD2iKH5za5aklPCDZYVFyV1gXpq0NOVXphxVY5zpLHc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:16 2025 by rpki-client