This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
File:                     2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json)
Hash identifier:          BT+673m85VtooOvxeRWTqNz39O4ED0j6Rk+LNB5h3g8=
Subject key identifier:   64:8F:EB:3E:D3:C1:91:70:1E:F0:EB:19:B2:99:F9:FE:08:89:6B:78
Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC
Certificate issuer:       /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC
Certificate serial:       3E6A8A45D55A4AEEC3E4AFBFDD5712BBC1A042C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft
Manifest number:          0356
Signing time:             Sun 21 Dec 2025 01:32:35 +0000
Manifest this update:     Sun 21 Dec 2025 01:27:35 +0000
Manifest next update:     Wed 24 Dec 2025 01:49:35 +0000
Files and hashes:         1: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: 3W2TYe0CD/hZjivCqS/Cuky0CoJCw8pSySW6UA9qKm8=)
                          2: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6a:8a:45:d5:5a:4a:ee:c3:e4:af:bf:dd:57:12:bb:c1:a0:42:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC
        Validity
            Not Before: Dec 21 01:27:35 2025 GMT
            Not After : Dec 24 01:49:35 2025 GMT
        Subject: CN=648FEB3ED3C191701EF0EB19B299F9FE08896B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:e5:75:08:87:8e:85:41:98:07:fc:dc:a2:
                    e7:5b:d9:41:49:32:96:d0:e1:a0:76:7f:d6:31:da:
                    56:c2:41:f0:c5:62:a1:ed:a5:15:06:5f:25:6e:23:
                    fd:20:40:a5:ad:74:59:e9:be:30:fb:f2:3b:6f:c4:
                    32:20:f0:e7:4a:2a:81:37:bf:6f:50:15:99:82:37:
                    ed:83:6c:86:71:a7:15:f0:c7:26:11:e9:03:82:da:
                    46:b5:72:0b:5b:02:89:dc:c3:cf:48:ca:39:e3:9a:
                    cb:e1:57:18:78:fd:4f:fa:7b:ec:53:d6:5b:a2:17:
                    d5:59:ce:e5:d6:3b:bc:dd:1b:fb:6c:ee:bb:2c:84:
                    8e:3d:5b:8d:e1:6c:55:f3:f3:60:72:ea:f8:e1:df:
                    54:d0:00:ca:0c:3b:78:fb:1c:37:88:c1:de:9d:92:
                    c7:5f:99:5e:d1:aa:a8:a7:ab:f2:d2:66:56:65:ac:
                    2a:d4:33:a9:18:9b:05:73:d6:0a:45:1b:a2:f9:3f:
                    0c:e4:e2:bb:c0:8a:2a:65:57:0a:0a:54:1e:e7:c9:
                    6f:27:b0:13:d2:bd:b6:e0:5c:78:25:83:53:c6:37:
                    d1:37:88:ef:67:66:74:bf:c8:f4:e8:e2:4e:ed:02:
                    01:2f:51:fa:c8:fd:cf:8c:04:2c:67:87:7a:f7:c7:
                    bb:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8F:EB:3E:D3:C1:91:70:1E:F0:EB:19:B2:99:F9:FE:08:89:6B:78
            X509v3 Authority Key Identifier:
                keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:f7:09:b8:4a:cf:62:fa:fd:47:32:bb:8e:00:0b:48:ed:e8:
         f9:4b:fd:24:e7:cc:05:6d:60:4f:b5:33:56:32:66:5e:45:10:
         9b:19:68:ed:2c:92:6e:fb:3a:66:d7:ca:e8:fb:33:eb:a5:f0:
         f9:31:31:25:7b:1f:59:6c:c0:c4:df:c1:55:55:b5:5a:c1:1e:
         d7:61:18:b7:46:c1:a1:4f:d0:95:21:8e:e2:8f:c7:88:b0:3a:
         34:f6:f6:b4:d8:93:31:8a:44:80:5c:73:64:7d:ee:0c:b8:18:
         cb:d7:66:61:a9:dc:73:ca:24:4e:c0:f3:e6:30:93:d6:89:6e:
         c1:d9:56:e4:b0:17:fe:df:6d:72:42:e7:2a:a2:8b:e6:4a:1b:
         ed:55:cd:df:52:5c:e0:e0:c8:33:b3:ec:67:7f:37:79:6e:ce:
         2f:70:75:92:c0:14:53:17:52:ec:35:83:9e:06:85:50:27:17:
         b2:ce:86:39:e6:e0:1c:7f:5e:a8:ce:36:70:9d:f1:7b:62:21:
         f8:ef:94:b6:3e:6b:de:de:2a:e7:d7:52:f8:cf:db:4e:e8:ac:
         21:d3:ac:d2:a4:95:0b:33:a4:ac:c5:cf:52:7e:34:55:cd:55:
         8c:ac:66:cd:e0:a5:33:fc:93:fa:06:1b:36:f9:cf:0a:62:75:
         1c:73:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----