This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: NUfj1JG1DRn41cXr6/msjPXCtL5C8C1MPhTYh+BlnIk= Subject key identifier: BE:7C:6E:55:CE:73:C0:7A:4E:E1:24:D4:97:44:F2:CA:C2:AA:83:FC Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 2EF19AFA87CDA5923737579E297CF1F7959DE5A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 049A Signing time: Mon 29 Dec 2025 23:11:14 +0000 Manifest this update: Mon 29 Dec 2025 23:06:14 +0000 Manifest next update: Fri 02 Jan 2026 04:49:14 +0000 Files and hashes: 1: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 9ih//U/iPAsPFZQIcxukFDIuvhJTLAD0tRGBXhc3tOc=) 2: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: 4Nyf95sTRdqoKN64WuRTyc5m5hoROhK6oFKdH03e8KY=) 3: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: 3sgB8wVW7ucVuMS+y90EAD1vifDH+JwNnrafUuZov+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 04:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f1:9a:fa:87:cd:a5:92:37:37:57:9e:29:7c:f1:f7:95:9d:e5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Dec 29 23:06:14 2025 GMT Not After : Jan 2 04:49:14 2026 GMT Subject: CN=BE7C6E55CE73C07A4EE124D49744F2CAC2AA83FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:ca:2f:3d:b2:bf:ac:b2:8f:bb:88:ff:93: d0:d8:47:89:d4:3f:27:5c:bc:42:bf:df:30:22:cd: 3e:df:73:f4:7f:89:9d:be:76:d1:d4:ba:32:41:28: 62:6a:e6:c3:8a:f1:43:df:f3:fc:c6:a4:ab:dc:e3: ae:d3:41:44:69:5a:c3:d5:23:27:2c:7d:4e:42:0b: 1a:40:b2:32:47:9c:3a:da:94:5a:f3:54:30:e7:24: 9a:81:98:37:76:c8:8b:01:c9:d5:dc:f3:26:1e:5f: 66:b2:96:b4:1d:e3:f0:75:df:d6:96:cb:97:74:0c: 9b:52:f6:8f:c6:f6:8b:f2:1f:a2:73:ea:0b:5c:c3: 7b:d0:54:f2:6d:66:25:2e:91:4c:d2:06:5d:c6:f2: 88:03:68:2f:c5:17:67:06:3c:8a:29:ad:26:82:79: e5:a0:d8:e5:f9:73:c7:7e:c9:56:5e:bb:30:7f:81: d7:42:a8:69:f6:2a:fb:a1:a7:d8:51:e9:c5:bb:9f: 60:eb:28:a2:b8:16:f1:58:d7:9a:66:10:b9:04:fe: f1:ae:1c:46:e1:68:26:c5:a2:b1:f0:82:30:a4:cc: ee:d5:6a:1e:48:c0:2e:7d:54:7e:61:8b:4b:98:74: b4:64:80:af:3b:5d:f6:fa:0e:6b:af:4c:c9:ce:26: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7C:6E:55:CE:73:C0:7A:4E:E1:24:D4:97:44:F2:CA:C2:AA:83:FC X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a0:6a:39:6e:49:6f:ec:93:15:5c:26:d9:ff:34:ac:22:c7: 44:68:fc:0d:a1:8c:47:ef:f5:57:d2:a3:e7:ec:ad:fb:1a:fb: fb:46:32:50:1b:3e:c7:24:f0:92:4a:ea:b3:19:fe:6c:33:ae: 0b:27:eb:81:d9:7c:0d:4d:5c:6f:8e:58:eb:c7:58:79:f9:bf: cc:ac:a2:0c:f1:41:b8:de:0f:06:8d:f1:44:19:29:81:f9:9a: 86:f0:5f:62:34:24:4a:c8:a6:d1:e3:70:3c:c7:21:d7:2b:ec: 29:1e:7d:f2:ad:9e:77:f9:9e:5a:f4:5a:40:a4:e1:47:53:17: 86:c8:45:27:17:9b:0f:c6:b7:2e:e4:05:94:c1:95:7f:fa:c6: 24:1e:96:85:4f:0f:e0:68:73:12:a2:06:c7:0f:85:c6:7d:51: ee:9b:49:8c:c0:6a:f6:dc:0b:e3:2a:3e:39:04:39:71:d6:9c: e0:e5:d8:0c:97:5a:4b:61:51:40:34:2d:7b:60:37:67:85:46: 64:7c:2b:6d:24:ea:08:cd:a7:69:38:b7:db:32:cf:27:05:25: eb:ce:9f:8e:22:2e:80:a0:59:33:7a:45:fb:2f:a4:86:d1:80: 41:91:64:ee:5f:6f:ff:e0:ca:23:1f:06:39:04:d1:03:1c:2f: 3b:13:19:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvGa+ofNpZI3N1eeKXzx95Wd5akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTEyMjkyMzA2MTRaFw0yNjAxMDIwNDQ5MTRaMDMxMTAvBgNV BAMTKEJFN0M2RTU1Q0U3M0MwN0E0RUUxMjRENDk3NDRGMkNBQzJBQTgzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsosovPbK/rLKPu4j/k9DYR4nU PydcvEK/3zAizT7fc/R/iZ2+dtHUujJBKGJq5sOK8UPf8/zGpKvc467TQURpWsPV IycsfU5CCxpAsjJHnDralFrzVDDnJJqBmDd2yIsBydXc8yYeX2aylrQd4/B139aW y5d0DJtS9o/G9ovyH6Jz6gtcw3vQVPJtZiUukUzSBl3G8ogDaC/FF2cGPIoprSaC eeWg2OX5c8d+yVZeuzB/gddCqGn2Kvuhp9hR6cW7n2DrKKK4FvFY15pmELkE/vGu HEbhaCbForHwgjCkzO7Vah5IwC59VH5hi0uYdLRkgK87Xfb6DmuvTMnOJpm7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvnxuVc5zwHpO4STUl0TyysKqg/wwHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWgajluSW/skxVcJtn/NKwix0Ro/A2hjEfv 9VfSo+fsrfsa+/tGMlAbPsck8JJK6rMZ/mwzrgsn64HZfA1NXG+OWOvHWHn5v8ys ogzxQbjeDwaN8UQZKYH5mobwX2I0JErIptHjcDzHIdcr7CkeffKtnnf5nlr0WkCk 4UdTF4bIRScXmw/Gty7kBZTBlX/6xiQeloVPD+BocxKiBscPhcZ9Ue6bSYzAavbc C+MqPjkEOXHWnODl2AyXWkthUUA0LXtgN2eFRmR8K20k6gjNp2k4t9syzycFJevO n44iLoCgWTN6RfsvpIbRgEGRZO5fb//gyiMfBjkE0QMcLzsTGfQ= -----END CERTIFICATE-----Generated at Tue Dec 30 10:34:12 2025 by rpki-client