$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: 75L0wXXkkor4CXoSejO+SKahAOD+7fERIYoD0y+Omrw= Subject key identifier: 67:2D:4E:18:61:EE:9C:5B:3C:07:D5:BF:4B:30:FA:11:FE:0C:CD:99 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 4663BCBFC2754E508926AFC7EA3F03AE458BE7D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 01F7 Signing time: Fri 05 Sep 2025 08:32:10 +0000 Manifest this update: Fri 05 Sep 2025 08:27:10 +0000 Manifest next update: Mon 08 Sep 2025 09:13:10 +0000 Files and hashes: 1: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: n7Q4OhX9gYcQfXlLyD3WhrrDiPuulDvU9xKQOuTQ5ys=) 2: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: fFX2S0yuCGbDsYrqvIvfedkBEVG6E8+DQx58RVmq88I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:63:bc:bf:c2:75:4e:50:89:26:af:c7:ea:3f:03:ae:45:8b:e7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Sep 5 08:27:10 2025 GMT Not After : Sep 8 09:13:10 2025 GMT Subject: CN=672D4E1861EE9C5B3C07D5BF4B30FA11FE0CCD99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:6e:75:02:56:22:3c:94:c9:5f:ba:21:1d: 41:88:27:89:0f:3b:31:3c:a3:0c:d1:1e:59:73:1d: ae:cd:6d:0a:3b:3b:ba:66:e4:c3:e9:40:71:93:7a: 33:d0:9b:c3:48:15:d3:ce:3f:ed:f7:d0:4e:fb:96: f8:4b:17:57:75:1f:2d:a1:48:64:2b:fb:84:b6:2a: a0:f2:d4:a7:e5:aa:4c:a1:e7:c0:32:88:d8:75:8e: 38:01:50:86:ca:e1:9e:9a:9d:b8:be:a8:4b:23:08: bb:b4:37:16:ad:e8:43:3e:98:d7:51:f5:c9:06:ca: f4:70:7d:fb:74:0b:86:15:14:70:bb:f4:87:85:65: 51:d9:48:43:98:39:b0:81:52:88:2b:24:96:10:fc: d7:f7:03:6d:7d:9b:77:99:41:02:5b:3d:88:34:46: 96:56:b1:f5:c5:57:42:db:75:f0:2b:c9:00:c7:78: af:a6:01:6a:78:ac:64:a4:c8:81:ec:f7:1f:6f:93: b0:f2:30:f4:d1:7c:b8:64:79:17:40:d6:28:0c:dc: 15:f1:58:27:af:bc:14:8b:3f:3c:61:c4:c3:68:41: 89:94:f5:5c:5d:e0:e5:6f:e7:e6:03:65:b4:e9:54: 65:bb:fe:13:45:9d:a7:02:31:24:95:cb:3a:e1:f4: 04:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2D:4E:18:61:EE:9C:5B:3C:07:D5:BF:4B:30:FA:11:FE:0C:CD:99 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:13:ce:cf:41:f5:24:27:8b:ec:46:5a:14:33:29:6f:ff:b3: 24:d7:23:06:b0:08:a6:c2:dd:8f:bb:8b:0b:d3:6a:fe:aa:3b: e2:9e:2c:66:96:ef:fa:b5:e9:cc:d5:a0:01:3a:6b:73:d3:2a: 4d:22:ca:2e:98:25:d1:48:86:8e:44:55:2e:e8:47:d2:d6:91: 9b:72:d4:dd:b9:e0:0d:37:0a:b7:df:79:24:7a:1d:96:c2:be: 26:d7:34:03:3a:f7:c4:ad:c9:2c:05:08:f6:b8:69:f7:f6:99: c3:aa:24:a1:ba:3e:1d:f2:c6:4d:32:47:c2:ca:86:fb:d4:54: a1:96:9b:20:6b:6a:76:ed:79:9d:c9:32:9e:01:b5:cc:1a:60: c9:3f:1d:03:89:96:a0:81:9f:f3:23:63:a8:cb:a7:60:a2:47: f2:4b:b3:64:ec:b8:cb:b1:e2:9b:85:2e:0a:e5:84:cb:78:f5: dc:24:03:0b:4b:48:bf:89:8c:0a:ee:29:95:3b:cd:26:e2:78: 3d:ba:86:ff:02:6c:82:ed:15:fa:b8:ee:82:e3:d0:5b:64:04: a9:fc:ad:02:cf:62:d9:b8:d3:e9:0c:f4:41:bb:b6:ad:97:14: 3a:2e:f7:f0:5b:bc:19:df:32:91:b7:40:93:e3:23:b2:f6:62: 12:40:51:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmO8v8J1TlCJJq/H6j8DrkWL59gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNTA5MDUwODI3MTBaFw0yNTA5MDgwOTEzMTBaMDMxMTAvBgNV BAMTKDY3MkQ0RTE4NjFFRTlDNUIzQzA3RDVCRjRCMzBGQTExRkUwQ0NEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTW51AlYiPJTJX7ohHUGIJ4kP OzE8owzRHllzHa7NbQo7O7pm5MPpQHGTejPQm8NIFdPOP+330E77lvhLF1d1Hy2h SGQr+4S2KqDy1Kflqkyh58AyiNh1jjgBUIbK4Z6anbi+qEsjCLu0Nxat6EM+mNdR 9ckGyvRwfft0C4YVFHC79IeFZVHZSEOYObCBUogrJJYQ/Nf3A219m3eZQQJbPYg0 RpZWsfXFV0LbdfAryQDHeK+mAWp4rGSkyIHs9x9vk7DyMPTRfLhkeRdA1igM3BXx WCevvBSLPzxhxMNoQYmU9Vxd4OVv5+YDZbTpVGW7/hNFnacCMSSVyzrh9ARhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZy1OGGHunFs8B9W/SzD6Ef4MzZkwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgTzs9B9SQni+xGWhQzKW//syTXIwawCKbC 3Y+7iwvTav6qO+KeLGaW7/q16czVoAE6a3PTKk0iyi6YJdFIho5EVS7oR9LWkZty 1N254A03CrffeSR6HZbCvibXNAM698StySwFCPa4aff2mcOqJKG6Ph3yxk0yR8LK hvvUVKGWmyBranbteZ3JMp4BtcwaYMk/HQOJlqCBn/MjY6jLp2CiR/JLs2TsuMux 4puFLgrlhMt49dwkAwtLSL+JjAruKZU7zSbieD26hv8CbILtFfq47oLj0FtkBKn8 rQLPYtm40+kM9EG7tq2XFDou9/BbvBnfMpG3QJPjI7L2YhJAUbI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:45 2025 by rpki-client