$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: pE5pnA46CeRIwzFjEO1J3qRuenm9P+lu9A4O8zw3xmY= Subject key identifier: 5F:D4:58:D7:3A:C3:33:1E:EA:61:E2:B0:72:8A:4A:15:71:FF:4C:5D Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 44A96CD6799830440B1A7433C573954F022B74F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 024A Signing time: Sat 07 Mar 2026 09:52:21 +0000 Manifest this update: Sat 07 Mar 2026 09:47:21 +0000 Manifest next update: Tue 10 Mar 2026 11:27:21 +0000 Files and hashes: 1: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=) 2: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: GRFQLuF1St6uLuam+VMiPq1gaQU8bveebSfbei4Y/tE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a9:6c:d6:79:98:30:44:0b:1a:74:33:c5:73:95:4f:02:2b:74:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Mar 7 09:47:21 2026 GMT Not After : Mar 10 11:27:21 2026 GMT Subject: CN=5FD458D73AC3331EEA61E2B0728A4A1571FF4C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7c:af:f9:66:4a:22:9b:46:5e:9e:f8:37:0e: f4:88:15:88:1d:66:2f:fc:7c:49:74:88:28:08:24: 23:62:5c:5e:d7:41:48:0a:a8:71:c0:ac:83:8c:11: 34:c1:ed:6f:4c:a8:0f:a3:a2:fe:9c:c4:bc:11:e7: 74:6e:6b:15:f6:bb:8c:34:c7:5f:b8:27:f9:89:f3: 0c:68:2f:25:e0:79:28:28:c4:07:ef:f6:97:2b:48: 57:da:3a:aa:5a:fb:55:c4:a4:35:0b:0b:19:a3:55: db:1c:d5:8a:bc:d4:2d:5f:cb:2f:d7:9b:b4:4d:ba: 59:e6:49:36:09:d1:1f:b7:07:8e:9c:5f:71:ff:a5: 20:a5:6f:16:12:10:0d:2c:22:2b:a3:56:87:f8:34: 3c:57:5f:2b:c9:5e:9c:f4:b5:4e:c5:98:70:93:6e: f0:18:29:00:49:55:16:05:bd:4b:d7:92:38:4b:d8: 2d:52:10:a1:dc:55:c8:75:50:55:94:1e:4f:37:bc: a6:b0:fb:41:af:7c:6a:da:4b:9b:c8:97:16:cd:b8: 44:a5:8b:1d:c9:f5:69:37:93:df:43:01:ac:49:f9: d0:dd:07:72:d3:94:ba:2a:b7:06:57:bb:5b:cf:71: 75:5f:a8:55:35:9d:6b:d5:76:90:b8:e5:09:15:8b: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D4:58:D7:3A:C3:33:1E:EA:61:E2:B0:72:8A:4A:15:71:FF:4C:5D X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d5:06:2d:ea:f7:d3:78:07:d5:39:c8:0d:25:40:4c:45:02: 97:28:b2:51:6c:b3:93:9f:b2:42:e8:e7:32:d5:25:30:e0:67: 3c:3f:c3:b1:1f:f8:f2:e8:34:79:1a:40:16:19:b8:d7:04:07: 39:04:55:80:ea:0e:3f:eb:1f:24:90:81:b0:72:de:a1:74:51: 13:37:99:d4:43:c3:97:f0:c3:d5:e2:bd:a9:a6:2e:ba:32:99: 3a:6e:04:f9:d4:99:d2:fc:9e:3e:27:9c:0f:d6:c0:e6:e1:cd: d1:6e:9a:5c:de:ef:73:4c:f3:79:8d:e7:79:2f:63:33:5b:bb: 31:07:33:a5:44:e0:a2:cf:6e:b5:01:86:0f:49:46:44:f8:ef: 79:f1:f2:ef:c4:a3:71:5f:a3:01:ca:a7:95:9e:ca:b3:4a:e1: 11:7c:bb:46:79:bd:79:01:a1:73:23:c1:ad:31:ff:4a:68:41: d5:83:25:e4:9d:96:8c:2f:e2:64:83:48:f0:74:1a:5c:0d:15: f0:ee:c5:48:66:08:df:e8:22:59:ed:54:28:50:8b:ea:1b:b4: c1:64:bf:28:f9:cc:28:60:ae:cc:0d:16:81:af:3c:bf:be:65: 8e:ea:e1:3e:69:ca:4c:e5:e3:82:f1:16:e1:f2:14:21:5d:de: 5e:7c:f3:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURKls1nmYMEQLGnQzxXOVTwIrdPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNjAzMDcwOTQ3MjFaFw0yNjAzMTAxMTI3MjFaMDMxMTAvBgNV BAMTKDVGRDQ1OEQ3M0FDMzMzMUVFQTYxRTJCMDcyOEE0QTE1NzFGRjRDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifK/5Zkoim0Zenvg3DvSIFYgd Zi/8fEl0iCgIJCNiXF7XQUgKqHHArIOMETTB7W9MqA+jov6cxLwR53RuaxX2u4w0 x1+4J/mJ8wxoLyXgeSgoxAfv9pcrSFfaOqpa+1XEpDULCxmjVdsc1Yq81C1fyy/X m7RNulnmSTYJ0R+3B46cX3H/pSClbxYSEA0sIiujVof4NDxXXyvJXpz0tU7FmHCT bvAYKQBJVRYFvUvXkjhL2C1SEKHcVch1UFWUHk83vKaw+0GvfGraS5vIlxbNuESl ix3J9Wk3k99DAaxJ+dDdB3LTlLoqtwZXu1vPcXVfqFU1nWvVdpC45QkVi2r5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX9RY1zrDMx7qYeKwcopKFXH/TF0wHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/VBi3q99N4B9U5yA0lQExFApcoslFss5Of skLo5zLVJTDgZzw/w7Ef+PLoNHkaQBYZuNcEBzkEVYDqDj/rHySQgbBy3qF0URM3 mdRDw5fww9XivammLroymTpuBPnUmdL8nj4nnA/WwObhzdFumlze73NM83mN53kv YzNbuzEHM6VE4KLPbrUBhg9JRkT473nx8u/Eo3FfowHKp5WeyrNK4RF8u0Z5vXkB oXMjwa0x/0poQdWDJeSdlowv4mSDSPB0GlwNFfDuxUhmCN/oIlntVChQi+obtMFk vyj5zChgrswNFoGvPL++ZY7q4T5pykzl44LxFuHyFCFd3l588+s= -----END CERTIFICATE-----Generated at Sat Mar 7 21:20:03 2026 by rpki-client