This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: 4tcvbpHQPwr4TSS3H4QYbRd2PZ80/RYRGrt6I+5ZTnE= Subject key identifier: 94:74:3B:5D:D2:B2:12:6A:4A:EE:EC:58:BC:45:95:44:8D:A2:64:55 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 66A23860B3EE785D61DEE75B3A392EDBD4A95B95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 039B Signing time: Sat 27 Dec 2025 06:11:30 +0000 Manifest this update: Sat 27 Dec 2025 06:06:30 +0000 Manifest next update: Tue 30 Dec 2025 17:02:30 +0000 Files and hashes: 1: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: 0KL7jBPFdz7YRJgo6vOH4F5chv7L+cp0U53OKt7lE7s=) 2: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: cnM0NMAQN+nEB2uerjw6Qf1nArdtxZQ6ojcs75GS7ak=) 3: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 4: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 5: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: yDXbsqxukA4XHHQjS7wVsIWS20Xlf5VSX6w1YkD0k4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 17:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a2:38:60:b3:ee:78:5d:61:de:e7:5b:3a:39:2e:db:d4:a9:5b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Dec 27 06:06:30 2025 GMT Not After : Dec 30 17:02:30 2025 GMT Subject: CN=94743B5DD2B2126A4AEEEC58BC4595448DA26455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8d:af:63:c9:0d:af:47:7a:a3:27:f4:ec:7d: 00:d3:ec:aa:01:1b:15:37:0f:a4:53:a3:35:c1:70: 24:dc:e8:d7:76:fc:5e:9f:3c:62:74:13:b0:72:4a: 98:d9:15:20:3c:7f:d8:93:ee:cb:cd:82:69:65:f5: bb:05:07:5c:ca:20:4b:45:b8:97:5f:d3:41:3e:e1: b0:34:50:7f:47:5a:fd:9d:7f:81:1e:b3:f3:64:94: 8e:11:da:1c:ab:a5:fe:f1:00:27:f4:ac:86:1b:99: 40:03:83:b3:16:65:53:1c:7e:dd:82:f3:8f:2e:c2: 34:5e:c5:36:df:32:0c:f6:f9:59:29:9b:e9:76:0a: e0:35:91:17:c4:57:0a:42:cb:4f:52:73:80:3e:a9: 43:49:a3:4f:6d:bb:bb:59:6f:07:ab:66:8a:b3:e0: 0a:9a:c2:82:34:2c:88:46:27:a5:55:a9:89:c5:80: b9:2d:cc:6e:9f:93:80:8e:73:92:1d:4c:9b:ff:7b: 69:62:90:db:cc:04:1c:78:80:1d:0a:ff:b7:1c:94: f3:66:cd:bb:1d:fa:13:4d:50:1e:92:06:ea:77:63: 4d:7e:eb:0e:ab:fb:fa:bd:c9:68:53:0c:9b:c5:e4: 34:5d:d3:30:66:ff:81:97:5a:fb:a0:ff:01:53:0c: 08:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:74:3B:5D:D2:B2:12:6A:4A:EE:EC:58:BC:45:95:44:8D:A2:64:55 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d0:64:69:ee:24:7a:df:6d:56:97:44:36:81:13:74:bc:ee: 79:b9:be:15:a4:b9:ec:17:88:58:ee:71:fd:25:05:fc:c3:03: 3f:ed:85:c7:6a:45:8b:03:0b:b9:3b:7c:0b:24:c1:be:92:42: 16:e0:3d:59:0f:e7:db:61:39:56:bc:25:31:93:b2:8e:5e:97: dc:7b:e5:f5:28:40:51:4a:53:00:b2:c9:db:d9:6d:06:46:cc: 36:10:1d:c0:30:4d:bd:ac:f3:3c:d7:2e:59:fc:61:bb:aa:1b: 9d:8d:08:e1:31:00:65:99:09:bd:61:ff:ae:e0:f0:73:6e:c7: 1a:52:cf:ef:28:5e:b4:3d:1e:31:66:d0:08:df:cd:87:39:71: 41:ed:c2:26:df:40:2b:4e:23:5b:31:12:67:e9:cc:9b:e3:0c: 51:6c:8c:ac:c2:a0:b7:6f:18:cf:07:89:8d:f2:c7:44:08:e0: d3:ca:d5:c0:d9:05:c7:03:d3:45:81:b3:4e:6d:07:8b:a0:3d: 3a:66:04:eb:88:ba:06:81:16:35:51:85:66:a1:97:f0:66:c4: 2d:1c:c8:ca:94:6e:d1:7e:d2:be:9d:4e:6b:35:03:63:d9:cf: 3a:77:f9:e7:95:b8:3b:5f:ff:42:d6:59:26:45:f2:38:0c:ce: 54:87:40:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZqI4YLPueF1h3udbOjku29SpW5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTEyMjcwNjA2MzBaFw0yNTEyMzAxNzAyMzBaMDMxMTAvBgNV BAMTKDk0NzQzQjVERDJCMjEyNkE0QUVFRUM1OEJDNDU5NTQ0OERBMjY0NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcja9jyQ2vR3qjJ/TsfQDT7KoB GxU3D6RTozXBcCTc6Nd2/F6fPGJ0E7BySpjZFSA8f9iT7svNgmll9bsFB1zKIEtF uJdf00E+4bA0UH9HWv2df4Ees/NklI4R2hyrpf7xACf0rIYbmUADg7MWZVMcft2C 848uwjRexTbfMgz2+Vkpm+l2CuA1kRfEVwpCy09Sc4A+qUNJo09tu7tZbwerZoqz 4AqawoI0LIhGJ6VVqYnFgLktzG6fk4COc5IdTJv/e2likNvMBBx4gB0K/7cclPNm zbsd+hNNUB6SBup3Y01+6w6r+/q9yWhTDJvF5DRd0zBm/4GXWvug/wFTDAj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlHQ7XdKyEmpK7uxYvEWVRI2iZFUwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/QZGnuJHrfbVaXRDaBE3S87nm5vhWkuewX iFjucf0lBfzDAz/thcdqRYsDC7k7fAskwb6SQhbgPVkP59thOVa8JTGTso5el9x7 5fUoQFFKUwCyydvZbQZGzDYQHcAwTb2s8zzXLln8YbuqG52NCOExAGWZCb1h/67g 8HNuxxpSz+8oXrQ9HjFm0AjfzYc5cUHtwibfQCtOI1sxEmfpzJvjDFFsjKzCoLdv GM8HiY3yx0QI4NPK1cDZBccD00WBs05tB4ugPTpmBOuIugaBFjVRhWahl/BmxC0c yMqUbtF+0r6dTms1A2PZzzp3+eeVuDtf/0LWWSZF8jgMzlSHQE0= -----END CERTIFICATE-----Generated at Mon Dec 29 13:27:10 2025 by rpki-client