This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: +C+QL3WGlLabbPF8zjumzBnRiJ0ezf5iKZwaVZcbYgI= Subject key identifier: FE:0C:54:3C:BC:9D:F5:B3:BA:B2:3E:3D:F7:7D:E6:FF:DB:D5:92:0D Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 3EC31F4F5E6E10146BE4255754DF17AC7A80B26A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 0495 Signing time: Fri 19 Dec 2025 07:11:53 +0000 Manifest this update: Fri 19 Dec 2025 07:06:53 +0000 Manifest next update: Mon 22 Dec 2025 07:42:53 +0000 Files and hashes: 1: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: 4Nyf95sTRdqoKN64WuRTyc5m5hoROhK6oFKdH03e8KY=) 2: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 9ih//U/iPAsPFZQIcxukFDIuvhJTLAD0tRGBXhc3tOc=) 3: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: F2KfMQXGHSwzCgcrJnTe6g+zKO1eDIs9cfnOFcTUzyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:c3:1f:4f:5e:6e:10:14:6b:e4:25:57:54:df:17:ac:7a:80:b2:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Dec 19 07:06:53 2025 GMT Not After : Dec 22 07:42:53 2025 GMT Subject: CN=FE0C543CBC9DF5B3BAB23E3DF77DE6FFDBD5920D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:6b:1c:ae:ef:cb:12:67:48:c0:8b:a8:03: f0:d2:98:d8:3c:a2:0c:13:2c:16:f1:b1:92:0c:2b: f8:54:d5:be:37:7b:08:87:db:4a:f1:bd:65:9c:97: 14:6a:c0:37:73:68:40:f2:87:9c:66:eb:ad:f3:f0: 1e:a9:8c:e8:59:14:6b:54:af:0a:07:b5:ff:22:80: 99:79:35:98:7d:52:70:77:33:a5:56:63:c0:fb:a2: 58:4f:0d:73:26:c4:05:e9:8f:71:d9:a0:e6:b2:d0: eb:0c:67:9b:67:be:e8:fb:79:9a:03:a8:8a:3e:9e: 26:a4:38:de:0e:42:2c:28:02:06:5a:f7:25:da:14: 34:2f:52:83:4d:1b:16:47:77:dc:00:72:02:51:80: e3:07:79:f1:e5:89:1d:e7:c4:59:72:62:00:41:f9: 57:05:e5:a7:aa:52:46:4f:3c:8e:74:b3:30:90:f5: c6:56:a9:30:d9:93:51:28:8f:c8:7d:b9:21:d9:a3: 5d:a4:18:7c:57:de:46:a9:cc:d2:93:2c:6c:1a:f7: 8f:32:9d:db:96:d5:61:92:03:2c:d2:6d:2a:24:b3: 8a:41:3d:4a:18:a9:98:5d:f1:88:05:db:b7:54:07: 45:06:9c:be:ad:9c:ff:ee:91:b7:82:26:ab:fa:f0: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0C:54:3C:BC:9D:F5:B3:BA:B2:3E:3D:F7:7D:E6:FF:DB:D5:92:0D X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:36:d1:98:1c:a0:ca:4e:36:36:65:af:52:c0:26:0b:7a:f8: c9:79:db:ea:7c:8a:8d:a8:87:34:5b:ef:df:73:5a:cf:30:bf: a0:5a:90:f8:59:d4:7b:4b:6f:5f:84:b1:05:16:48:3e:f0:8d: cf:8e:15:de:4d:9c:77:f2:ca:ff:02:7b:ca:65:7e:ea:78:f2: f3:3e:67:01:4e:62:8b:dc:0c:69:b4:ba:27:73:fc:2e:b3:a4: 23:55:c2:dd:8d:7b:80:75:ef:7b:4c:a6:11:2b:81:48:b2:70: ae:aa:fa:90:4d:71:23:29:65:03:fe:c6:fe:c2:d2:a3:67:18: 32:5d:96:ed:13:88:7f:e8:b4:18:34:e9:9b:7a:6f:da:b9:a8: 9b:b6:71:f3:11:72:fb:2c:3b:c8:5e:ea:f6:c6:ee:39:17:03: 92:c2:5d:68:79:87:a7:4e:10:a3:66:4b:59:83:3c:b4:2c:d5: 00:7b:38:b8:74:40:8f:5d:d7:39:94:4a:83:09:40:ee:53:73: 4e:43:b0:5e:8d:23:1c:6b:67:41:3f:ae:4a:9c:d0:9a:dc:cf: c4:2b:fa:19:30:30:75:30:f4:d7:57:0a:3d:56:12:65:f7:2a: 8e:0f:5b:e7:91:2c:7c:ce:3c:bc:36:cc:49:4a:3b:b7:85:1f: fa:1c:ce:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPsMfT15uEBRr5CVXVN8XrHqAsmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTEyMTkwNzA2NTNaFw0yNTEyMjIwNzQyNTNaMDMxMTAvBgNV BAMTKEZFMEM1NDNDQkM5REY1QjNCQUIyM0UzREY3N0RFNkZGREJENTkyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4mscru/LEmdIwIuoA/DSmNg8 ogwTLBbxsZIMK/hU1b43ewiH20rxvWWclxRqwDdzaEDyh5xm663z8B6pjOhZFGtU rwoHtf8igJl5NZh9UnB3M6VWY8D7olhPDXMmxAXpj3HZoOay0OsMZ5tnvuj7eZoD qIo+niakON4OQiwoAgZa9yXaFDQvUoNNGxZHd9wAcgJRgOMHefHliR3nxFlyYgBB +VcF5aeqUkZPPI50szCQ9cZWqTDZk1Eoj8h9uSHZo12kGHxX3kapzNKTLGwa948y nduW1WGSAyzSbSoks4pBPUoYqZhd8YgF27dUB0UGnL6tnP/ukbeCJqv68A9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/gxUPLyd9bO6sj49933m/9vVkg0wHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACc20ZgcoMpONjZlr1LAJgt6+Ml52+p8io2o hzRb799zWs8wv6BakPhZ1HtLb1+EsQUWSD7wjc+OFd5NnHfyyv8Ce8plfup48vM+ ZwFOYovcDGm0uidz/C6zpCNVwt2Ne4B173tMphErgUiycK6q+pBNcSMpZQP+xv7C 0qNnGDJdlu0TiH/otBg06Zt6b9q5qJu2cfMRcvssO8he6vbG7jkXA5LCXWh5h6dO EKNmS1mDPLQs1QB7OLh0QI9d1zmUSoMJQO5Tc05DsF6NIxxrZ0E/rkqc0Jrcz8Qr +hkwMHUw9NdXCj1WEmX3Ko4PW+eRLHzOPLw2zElKO7eFH/oczqk= -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:36 2025 by rpki-client