This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft File: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft (raw, json) Hash identifier: d7pUXgBloXNEEj8a9i/Iue55fWmhKD/LJ0bb6Cg4k5Y= Subject key identifier: 25:32:CD:9D:4D:21:73:4F:3C:39:14:FF:C6:62:9D:44:1D:99:49:A1 Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 Certificate issuer: /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Certificate serial: 4DC3AD40508DF896299ACDEEA1D702FD42637379 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft Manifest number: 052F Signing time: Wed 03 Dec 2025 03:30:43 +0000 Manifest this update: Wed 03 Dec 2025 03:25:43 +0000 Manifest next update: Sat 06 Dec 2025 07:48:43 +0000 Files and hashes: 1: 3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (hash: gCxomhlXPqJzdF7SJ3iSXnHHdDE1CzdM3fX39z9NSbw=) 2: B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl (hash: Wn/XBJs9VrrstKqy/4IArKoVCqpAXaJLaCvrnUgQMYU=) 3: 3130332e3130362e3137322e302f32332d3234203d3e20313336383838.roa (hash: DZlWR7tuLnpwDkeYEthZYN05oc1IXglcFF75rJ6G2+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c3:ad:40:50:8d:f8:96:29:9a:cd:ee:a1:d7:02:fd:42:63:73:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8 Validity Not Before: Dec 3 03:25:43 2025 GMT Not After : Dec 6 07:48:43 2025 GMT Subject: CN=2532CD9D4D21734F3C3914FFC6629D441D9949A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:16:d1:73:73:b6:ef:0f:99:a9:87:83:e0: e4:52:e1:86:34:70:5a:8e:76:0e:60:c0:81:28:b8: ba:c0:a7:d0:d6:10:04:1c:9c:f3:7c:5e:ba:d6:db: 71:b1:c8:e5:22:c7:73:d9:6d:ba:d7:ba:c4:97:12: 83:63:37:9e:4b:ea:2d:85:56:80:79:fa:96:52:b9: 7c:37:5b:b4:9e:53:e9:d1:3a:93:8a:fb:0d:74:c8: 58:9c:53:18:bb:25:0c:cd:4d:17:61:29:e2:ac:fa: 12:fa:dc:e9:89:c5:a5:01:55:43:18:7f:2a:f8:57: 67:1a:ab:ef:16:aa:87:b8:56:53:3f:8a:50:d7:d2: 0f:16:39:2d:e5:74:32:72:1b:6b:e0:57:e5:5b:f6: 0a:aa:a4:06:01:74:8b:1b:89:df:a8:f0:45:58:2e: 56:fb:cb:f3:ad:67:f4:38:78:18:b6:31:db:88:f6: fa:62:f7:e1:17:64:47:3f:fa:06:f0:d0:d0:d1:24: f7:f5:99:4b:0d:e6:8f:32:02:fb:18:f6:82:c7:ef: f6:18:e2:25:c3:18:99:8b:81:ff:cb:54:0c:e9:26: 36:5f:ab:6c:6a:a2:e0:3a:1c:68:1f:3e:0e:da:ff: ef:e1:c0:9d:46:6d:0b:0e:36:79:84:23:84:f1:aa: 4c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:32:CD:9D:4D:21:73:4F:3C:39:14:FF:C6:62:9D:44:1D:99:49:A1 X509v3 Authority Key Identifier: keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1e:94:26:77:2a:e4:7a:0e:4d:96:33:24:47:c7:af:00:dc: 41:d8:20:90:fc:3e:37:dd:d2:d2:5d:57:fc:cc:94:26:69:87: a7:95:3c:dd:6f:c7:88:09:28:3c:5a:f4:f4:ce:ab:db:ce:ef: 1b:6a:a1:0b:49:a3:a0:ef:2f:71:70:f9:67:e9:eb:b4:ac:3c: 55:f5:85:68:cc:28:d2:b7:46:0d:dd:f3:10:17:78:b1:9a:2c: dd:3e:5e:0b:9a:ff:40:e1:a4:ea:c6:2b:1d:3a:88:09:d9:de: 97:c8:af:6c:f8:4f:4b:28:9a:21:45:c6:35:1a:6a:65:b5:af: da:db:3b:b4:b4:b8:ae:19:a7:e0:20:21:16:34:f5:3a:36:6c: 9d:3d:48:8c:dc:94:e5:93:0b:d3:ce:16:7f:e6:3e:ed:ee:e5: 1d:9c:f3:f4:5c:ab:04:9c:b9:1f:ae:a6:f0:8e:ef:fc:66:c7: b4:ff:ba:54:47:e2:f5:3a:5b:0b:00:fb:72:02:a6:29:37:65: 0f:78:fc:26:75:f8:b5:df:ce:de:7f:6c:9e:8b:6f:7f:53:a9: 64:42:50:2d:d9:f6:3b:73:07:d6:1e:6d:14:e4:f0:f4:a0:d8: 28:2e:74:df:ce:75:0d:6a:01:35:c7:ec:04:e2:b6:88:35:6e: 8e:65:ae:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTcOtQFCN+JYpms3uodcC/UJjc3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0 NDMyQjdCODAeFw0yNTEyMDMwMzI1NDNaFw0yNTEyMDYwNzQ4NDNaMDMxMTAvBgNV BAMTKDI1MzJDRDlENEQyMTczNEYzQzM5MTRGRkM2NjI5RDQ0MUQ5OTQ5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgRbRc3O27w+ZqYeD4ORS4YY0 cFqOdg5gwIEouLrAp9DWEAQcnPN8XrrW23GxyOUix3PZbbrXusSXEoNjN55L6i2F VoB5+pZSuXw3W7SeU+nROpOK+w10yFicUxi7JQzNTRdhKeKs+hL63OmJxaUBVUMY fyr4V2caq+8Wqoe4VlM/ilDX0g8WOS3ldDJyG2vgV+Vb9gqqpAYBdIsbid+o8EVY Llb7y/OtZ/Q4eBi2MduI9vpi9+EXZEc/+gbw0NDRJPf1mUsN5o8yAvsY9oLH7/YY 4iXDGJmLgf/LVAzpJjZfq2xqouA6HGgfPg7a/+/hwJ1GbQsONnmEI4TxqkwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJTLNnU0hc088ORT/xmKdRB2ZSaEwHwYDVR0j BBgwFoAUsvpt1iwNYOqtZPa0cdItKUQyt7gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmJkN2NmNi1mNTVhLTRiNzgtYTU4OC1kOTI2MWYxNWY3NjMvMC9CMkZBNkRENjJD MEQ2MEVBQUQ2NEY2QjQ3MUQyMkQyOTQ0MzJCN0I4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJEMjk0NDMy QjdCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiZDdjZjYtZjU1YS00Yjc4LWE1 ODgtZDkyNjFmMTVmNzYzLzAvQjJGQTZERDYyQzBENjBFQUFENjRGNkI0NzFEMjJE Mjk0NDMyQjdCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKselCZ3KuR6Dk2WMyRHx68A3EHYIJD8Pjfd 0tJdV/zMlCZph6eVPN1vx4gJKDxa9PTOq9vO7xtqoQtJo6DvL3Fw+Wfp67SsPFX1 hWjMKNK3Rg3d8xAXeLGaLN0+Xgua/0DhpOrGKx06iAnZ3pfIr2z4T0somiFFxjUa amW1r9rbO7S0uK4Zp+AgIRY09To2bJ09SIzclOWTC9POFn/mPu3u5R2c8/RcqwSc uR+upvCO7/xmx7T/ulRH4vU6WwsA+3ICpik3ZQ94/CZ1+LXfzt5/bJ6Lb39TqWRC UC3Z9jtzB9YebRTk8PSg2CgudN/OdQ1qATXH7ATitog1bo5lrgY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:49 2025 by rpki-client