This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: oH5QShDfN6x32HGTTgnBOKC2B1hio+OBUm3xG1EcJzQ= Subject key identifier: A6:B2:0A:3F:CE:A3:21:A5:F0:E1:23:0F:72:AC:10:6B:4F:E0:19:F0 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 15AECE245C222A23317E99EA32E7DD41A4A15A7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 0399 Signing time: Mon 22 Dec 2025 23:11:49 +0000 Manifest this update: Mon 22 Dec 2025 23:06:49 +0000 Manifest next update: Fri 26 Dec 2025 04:39:49 +0000 Files and hashes: 1: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: 9Q/1lrYHEn0ZV2axyaCwGjONBivkMW/iZnQhv11Z1wA=) 2: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 3: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: cnM0NMAQN+nEB2uerjw6Qf1nArdtxZQ6ojcs75GS7ak=) 4: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 5: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: yDXbsqxukA4XHHQjS7wVsIWS20Xlf5VSX6w1YkD0k4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ae:ce:24:5c:22:2a:23:31:7e:99:ea:32:e7:dd:41:a4:a1:5a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Dec 22 23:06:49 2025 GMT Not After : Dec 26 04:39:49 2025 GMT Subject: CN=A6B20A3FCEA321A5F0E1230F72AC106B4FE019F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:a7:d2:5b:f4:8e:f1:a0:48:d0:aa:2c:d3: 6c:42:24:c0:99:b3:52:cb:bb:1c:5a:23:33:78:af: ec:bc:64:5e:38:42:3d:da:e7:94:15:eb:e9:20:41: 28:0a:cc:fa:04:9e:db:6c:a6:16:4f:dc:66:39:56: 4e:86:f6:0c:90:7a:18:db:f1:47:c5:8d:d1:fc:d7: c4:fd:87:1c:b8:c8:36:58:a1:53:59:79:e6:5f:7a: b7:a7:94:e2:c8:0e:65:7e:71:de:96:fb:a8:08:0e: 72:94:98:0d:fd:6b:e9:05:64:5e:66:b2:e6:83:43: 84:dd:84:4c:5b:81:31:e2:90:29:3e:33:df:0e:81: 5a:84:8a:84:38:71:c7:d1:7d:83:24:e9:1b:cb:3c: ad:61:c2:5e:fa:bf:99:46:55:9a:2d:a3:31:33:e4: 19:2e:3a:47:8b:64:a7:5f:a9:f1:c4:a4:bf:f2:0b: 47:9b:2b:ee:96:3d:e4:c6:b6:e2:68:cc:54:50:50: 69:a5:d0:5b:61:a4:0a:43:22:e8:f0:f2:43:a1:66: ca:5d:94:a7:22:b8:53:57:8b:e9:fa:ad:37:77:ac: c4:de:b6:af:02:82:a4:29:8a:27:27:e6:64:f3:e5: a8:aa:4a:8a:b0:1e:38:2e:44:7f:52:12:8f:8e:d9: 0c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B2:0A:3F:CE:A3:21:A5:F0:E1:23:0F:72:AC:10:6B:4F:E0:19:F0 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0e:9a:4e:41:d1:31:2e:2d:3d:6f:fc:2b:b5:e6:7d:e9:82: ff:ec:88:ee:a5:05:73:a0:e5:19:12:ce:01:63:37:e4:6e:ab: 9d:8d:d3:cc:8c:cb:9a:d4:dc:c6:f7:fc:75:b0:99:a8:e9:0e: d7:5a:fc:fb:3c:ec:4d:ac:8b:92:16:76:5f:21:18:b4:53:5e: 07:58:7a:a8:0a:a4:d7:b6:67:63:81:88:ef:17:f5:7a:07:86: 6b:cd:7d:76:71:2b:69:35:b9:5d:cc:9b:91:86:77:e9:0f:dd: f3:71:0a:db:1d:e2:5c:f5:4b:1e:09:c8:a0:39:bc:f6:d4:d1: 39:76:74:98:65:2a:6a:33:48:b7:49:40:d8:4a:94:30:3f:cb: 2f:2f:59:75:48:2d:75:44:2f:32:eb:ae:bb:27:45:e2:84:30: 30:72:5a:84:02:68:16:52:33:2b:3a:06:72:35:3b:2e:db:84: c7:16:3d:17:4d:cf:d8:ef:5d:13:6f:c8:a8:11:3a:ca:3b:ca: 7c:55:fd:d0:e1:f5:ee:f4:89:a0:cb:b1:03:f7:8a:c3:e5:2d: de:92:40:c2:f3:ed:b1:1c:86:19:5d:3a:15:f7:97:40:39:86: 46:a4:b1:b2:91:a9:4f:82:4e:91:1c:58:50:13:09:ea:b5:3c: 70:15:79:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFa7OJFwiKiMxfpnqMufdQaShWnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTEyMjIyMzA2NDlaFw0yNTEyMjYwNDM5NDlaMDMxMTAvBgNV BAMTKEE2QjIwQTNGQ0VBMzIxQTVGMEUxMjMwRjcyQUMxMDZCNEZFMDE5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KqfSW/SO8aBI0Kos02xCJMCZ s1LLuxxaIzN4r+y8ZF44Qj3a55QV6+kgQSgKzPoEnttsphZP3GY5Vk6G9gyQehjb 8UfFjdH818T9hxy4yDZYoVNZeeZferenlOLIDmV+cd6W+6gIDnKUmA39a+kFZF5m suaDQ4TdhExbgTHikCk+M98OgVqEioQ4ccfRfYMk6RvLPK1hwl76v5lGVZotozEz 5BkuOkeLZKdfqfHEpL/yC0ebK+6WPeTGtuJozFRQUGml0FthpApDIujw8kOhZspd lKciuFNXi+n6rTd3rMTetq8CgqQpiicn5mTz5aiqSoqwHjguRH9SEo+O2QzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUprIKP86jIaXw4SMPcqwQa0/gGfAwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAOmk5B0TEuLT1v/Cu15n3pgv/siO6lBXOg 5RkSzgFjN+Ruq52N08yMy5rU3Mb3/HWwmajpDtda/Ps87E2si5IWdl8hGLRTXgdY eqgKpNe2Z2OBiO8X9XoHhmvNfXZxK2k1uV3Mm5GGd+kP3fNxCtsd4lz1Sx4JyKA5 vPbU0Tl2dJhlKmozSLdJQNhKlDA/yy8vWXVILXVELzLrrrsnReKEMDByWoQCaBZS Mys6BnI1Oy7bhMcWPRdNz9jvXRNvyKgROso7ynxV/dDh9e70iaDLsQP3isPlLd6S QMLz7bEchhldOhX3l0A5hkaksbKRqU+CTpEcWFATCeq1PHAVeXo= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:14 2025 by rpki-client