This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: ySHZsiK5xJ3n7WpWLytpIVUk8F50QcB21abukB84pkQ= Subject key identifier: B9:7E:F5:56:19:FE:DA:D8:B4:95:06:9C:B5:A0:FC:47:8C:0A:97:36 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 25086805C4A821CC6E556E4987B9DB2DC2D5E453 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 03C2 Signing time: Sun 01 Feb 2026 16:22:09 +0000 Manifest this update: Sun 01 Feb 2026 16:17:09 +0000 Manifest next update: Wed 04 Feb 2026 17:13:09 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: n5BrnuzlBGy66ZjBHgimUqbvyirCwXSl5qMnAR3MDQE=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 17:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:08:68:05:c4:a8:21:cc:6e:55:6e:49:87:b9:db:2d:c2:d5:e4:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Feb 1 16:17:09 2026 GMT Not After : Feb 4 17:13:09 2026 GMT Subject: CN=B97EF55619FEDAD8B495069CB5A0FC478C0A9736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:5d:05:df:a1:1d:68:68:35:6b:c0:f6:09: 52:c5:c3:8a:5c:56:1a:2a:04:f5:34:cf:f1:4c:08: ad:e8:2a:05:84:7d:41:ac:f0:32:ef:a2:73:d6:ec: 29:25:88:e0:05:fa:58:b8:17:cf:cc:d1:9b:db:31: 56:1d:c5:46:77:ac:58:64:15:8d:0a:2c:b5:31:e9: 08:6b:ea:e3:97:3b:4a:a3:9b:e0:e5:8d:93:84:32: 71:fe:dd:f6:ff:24:09:a7:67:78:80:2d:5b:d5:e1: e9:0f:83:ce:a8:6f:ba:c1:44:3e:ec:cb:24:a3:fe: 31:bb:aa:e4:e0:24:75:48:c8:4f:40:c5:6e:04:25: ad:ac:6b:3f:31:18:c2:89:bd:1d:ec:8e:e3:9e:6f: 53:fc:ac:2c:d5:a2:56:19:ef:d3:7f:2e:25:05:52: f3:c2:ee:33:4d:cc:c6:42:89:47:3a:a7:85:bf:eb: c9:a1:7a:29:35:b1:a3:46:80:cd:ed:2a:35:24:28: d5:b4:b0:2d:6f:1a:fe:72:43:9d:bb:e8:81:98:4f: 0a:20:d4:d0:56:6d:90:65:5f:21:c1:85:91:cb:bd: e5:48:7a:2e:6a:30:9c:00:dc:e7:da:2f:6c:53:f3: b7:66:50:de:21:d9:c6:d7:b9:e2:e7:ae:dc:91:2c: 05:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7E:F5:56:19:FE:DA:D8:B4:95:06:9C:B5:A0:FC:47:8C:0A:97:36 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:19:d3:68:f5:7c:f2:ed:36:6e:24:6f:fc:c6:c9:cb:2c:71: ff:05:a7:32:5b:b0:62:b8:b2:5a:76:67:8e:7c:3c:61:65:4c: 9c:a8:24:ae:a1:47:d2:b1:32:82:9c:2f:cc:ef:77:58:c7:c1: eb:17:59:10:a5:b1:fb:d9:49:6b:e4:b6:b5:49:32:a8:5a:27: 16:5f:70:e6:7d:d2:0b:23:26:60:4e:ff:e8:23:d2:0e:81:ea: fb:12:62:9c:55:ad:80:58:3f:b8:7b:49:c6:32:07:7e:dc:e5: 9c:62:64:72:03:84:6c:3c:c7:08:50:7d:3f:21:44:43:ff:bb: 12:e6:b8:ee:69:59:97:e7:82:25:60:a4:44:b6:23:91:8e:80: ef:de:e0:15:7b:74:56:ba:8d:a0:f3:68:0e:f3:5b:1b:61:b7: 66:07:70:7e:28:2f:95:f0:b3:ec:d5:14:75:42:d3:e6:f0:cc: 52:07:d9:35:99:3e:01:94:b8:96:52:51:05:38:f6:1d:c4:5e: fe:db:9f:c8:f5:dd:53:50:0f:11:8f:f6:0c:2a:8d:6a:88:3c: a8:00:86:51:2a:40:1c:d9:17:0a:50:50:a3:bc:e5:c7:dc:cc: 56:f5:a3:77:56:cd:a1:7d:49:df:ec:11:a8:38:83:d0:2f:9e: 7a:52:25:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQhoBcSoIcxuVW5Jh7nbLcLV5FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNjAyMDExNjE3MDlaFw0yNjAyMDQxNzEzMDlaMDMxMTAvBgNV BAMTKEI5N0VGNTU2MTlGRURBRDhCNDk1MDY5Q0I1QTBGQzQ3OEMwQTk3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaBF0F36EdaGg1a8D2CVLFw4pc VhoqBPU0z/FMCK3oKgWEfUGs8DLvonPW7CkliOAF+li4F8/M0ZvbMVYdxUZ3rFhk FY0KLLUx6Qhr6uOXO0qjm+DljZOEMnH+3fb/JAmnZ3iALVvV4ekPg86ob7rBRD7s yySj/jG7quTgJHVIyE9AxW4EJa2saz8xGMKJvR3sjuOeb1P8rCzVolYZ79N/LiUF UvPC7jNNzMZCiUc6p4W/68mheik1saNGgM3tKjUkKNW0sC1vGv5yQ5276IGYTwog 1NBWbZBlXyHBhZHLveVIei5qMJwA3OfaL2xT87dmUN4h2cbXueLnrtyRLAUBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuX71Vhn+2ti0lQactaD8R4wKlzYwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQZ02j1fPLtNm4kb/zGycsscf8FpzJbsGK4 slp2Z458PGFlTJyoJK6hR9KxMoKcL8zvd1jHwesXWRClsfvZSWvktrVJMqhaJxZf cOZ90gsjJmBO/+gj0g6B6vsSYpxVrYBYP7h7ScYyB37c5ZxiZHIDhGw8xwhQfT8h REP/uxLmuO5pWZfngiVgpES2I5GOgO/e4BV7dFa6jaDzaA7zWxtht2YHcH4oL5Xw s+zVFHVC0+bwzFIH2TWZPgGUuJZSUQU49h3EXv7bn8j13VNQDxGP9gwqjWqIPKgA hlEqQBzZFwpQUKO85cfczFb1o3dWzaF9Sd/sEag4g9AvnnpSJaM= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:58 2026 by rpki-client