This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: wWM9mCHzbviyViHpDMvF4ossI+yfkDRps3en3Rfy6t8= Subject key identifier: 41:BA:EA:66:B5:7E:A7:A9:EE:96:A8:89:CB:C3:82:17:C4:89:1D:16 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 2D6D7BDA51FE8E09A93F1D607E0E137BD3ABB509 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 03AE Signing time: Fri 19 Dec 2025 05:44:13 +0000 Manifest this update: Fri 19 Dec 2025 05:39:13 +0000 Manifest next update: Mon 22 Dec 2025 07:23:13 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: qopBTXCilk32pP6/VL7Q3O3eqylo1wCXyExQsEqhtFY=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6d:7b:da:51:fe:8e:09:a9:3f:1d:60:7e:0e:13:7b:d3:ab:b5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Dec 19 05:39:13 2025 GMT Not After : Dec 22 07:23:13 2025 GMT Subject: CN=41BAEA66B57EA7A9EE96A889CBC38217C4891D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e3:cf:2b:b8:05:13:03:fb:dc:7c:c8:e1:be: 4a:93:39:10:87:af:3b:7b:81:93:60:87:69:67:fd: d6:0d:ec:50:59:89:af:46:a3:c8:8e:04:79:7d:f9: 4a:2e:11:0e:3b:75:0e:50:5a:09:cf:b7:b5:99:2e: 1a:81:eb:29:e0:9a:92:b5:81:c6:fe:7c:a2:be:d1: ae:1d:8c:2b:b5:88:76:56:db:3f:3a:45:6e:b1:5b: a9:66:ef:d8:a0:db:56:01:af:e0:4b:e8:30:4f:8c: 7b:a5:5d:fc:50:b1:2b:a2:f0:19:22:2c:66:e8:0f: ff:46:ef:f4:fa:f5:4a:83:21:4e:7b:15:16:0b:3b: 54:e2:13:4a:75:e9:d0:fc:9f:d5:67:d4:6d:e7:b1: 54:ba:41:23:7a:1a:3c:87:a7:c9:fe:a8:c7:8f:59: 28:15:5c:d4:ff:bb:68:aa:a1:56:09:fb:d8:fd:3a: 95:69:b3:ea:2e:af:79:d5:d4:58:8a:b4:da:c3:14: bc:c4:93:4f:d5:08:08:61:0e:63:48:36:d7:4f:b3: 12:37:e8:ab:cd:f8:79:f9:fa:dd:7f:46:04:6b:d5: 4c:c2:d2:f5:22:a0:38:34:82:d3:1f:53:64:a0:1c: e6:71:3c:a3:86:74:c2:6f:3f:2d:bf:c5:52:d0:b6: 34:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:EA:66:B5:7E:A7:A9:EE:96:A8:89:CB:C3:82:17:C4:89:1D:16 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:64:40:5a:11:b4:5d:b0:56:54:3f:2c:82:7e:23:e0:d3:a7: 8c:00:f8:81:fb:93:26:cb:9b:39:32:36:8e:b5:6b:ab:ab:05: 72:a9:97:9d:4c:6c:3b:40:38:42:15:cc:54:85:64:4c:31:0a: 0e:f7:a0:c9:6c:f8:9d:ac:4a:01:a0:3e:8b:f0:85:46:49:1b: a0:8d:63:19:fc:53:22:7b:6f:25:61:15:6e:b6:c3:4b:9a:5d: ae:d7:66:e7:75:55:45:de:28:55:ac:8c:48:5e:07:30:e9:0c: 97:46:2d:4c:be:ad:f2:0a:34:ae:25:f6:7f:97:92:ca:27:38: d4:df:f5:91:a9:98:1b:b5:33:a4:3b:01:07:3d:bc:f9:ff:01: 45:ef:66:6e:63:4b:63:5a:5d:b7:f8:06:2a:87:eb:da:0a:f7: 40:29:67:26:a9:be:82:01:af:57:8f:1d:9e:6a:87:a4:1c:ac: 81:9d:3e:8a:93:4e:23:88:58:cb:b3:63:51:94:12:12:3d:70: 26:86:9d:af:4b:8d:d8:da:55:d4:a7:d5:6a:77:3c:df:f1:94: 2e:e9:65:11:71:60:8f:ac:14:cd:ee:91:c9:54:74:92:10:9d: b0:b1:fe:ca:83:3b:3b:4f:2b:61:ea:85:8b:31:e0:79:c2:c9: c8:a0:67:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULW172lH+jgmpPx1gfg4Te9OrtQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTEyMTkwNTM5MTNaFw0yNTEyMjIwNzIzMTNaMDMxMTAvBgNV BAMTKDQxQkFFQTY2QjU3RUE3QTlFRTk2QTg4OUNCQzM4MjE3QzQ4OTFEMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9488ruAUTA/vcfMjhvkqTORCH rzt7gZNgh2ln/dYN7FBZia9Go8iOBHl9+UouEQ47dQ5QWgnPt7WZLhqB6yngmpK1 gcb+fKK+0a4djCu1iHZW2z86RW6xW6lm79ig21YBr+BL6DBPjHulXfxQsSui8Bki LGboD/9G7/T69UqDIU57FRYLO1TiE0p16dD8n9Vn1G3nsVS6QSN6GjyHp8n+qMeP WSgVXNT/u2iqoVYJ+9j9OpVps+our3nV1FiKtNrDFLzEk0/VCAhhDmNINtdPsxI3 6KvN+Hn5+t1/RgRr1UzC0vUioDg0gtMfU2SgHOZxPKOGdMJvPy2/xVLQtjStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQbrqZrV+p6nulqiJy8OCF8SJHRYwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBkQFoRtF2wVlQ/LIJ+I+DTp4wA+IH7kybL mzkyNo61a6urBXKpl51MbDtAOEIVzFSFZEwxCg73oMls+J2sSgGgPovwhUZJG6CN Yxn8UyJ7byVhFW62w0uaXa7XZud1VUXeKFWsjEheBzDpDJdGLUy+rfIKNK4l9n+X ksonONTf9ZGpmBu1M6Q7AQc9vPn/AUXvZm5jS2NaXbf4BiqH69oK90ApZyapvoIB r1ePHZ5qh6QcrIGdPoqTTiOIWMuzY1GUEhI9cCaGna9LjdjaVdSn1Wp3PN/xlC7p ZRFxYI+sFM3ukclUdJIQnbCx/sqDOztPK2HqhYsx4HnCycigZ5U= -----END CERTIFICATE-----Generated at Sat Dec 20 21:39:43 2025 by rpki-client