This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: zxv8YIkmlT2RX1XJe6jbChjH/O/Dr4qitrrqfeDHQrY= Subject key identifier: 73:70:36:1A:3E:BC:56:D9:2D:A1:AA:2A:36:B7:E9:4A:7F:D6:4A:90 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 27FE448E6905B7DC4278A7B11F6060FBF5CEAF77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 0235 Signing time: Mon 19 Jan 2026 11:52:17 +0000 Manifest this update: Mon 19 Jan 2026 11:47:17 +0000 Manifest next update: Thu 22 Jan 2026 16:29:17 +0000 Files and hashes: 1: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=) 2: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: UxujxVlwLqZzRkDKlsbPkF7qE/RiVwTdnZkiiOvmnnY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 16:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:fe:44:8e:69:05:b7:dc:42:78:a7:b1:1f:60:60:fb:f5:ce:af:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Jan 19 11:47:17 2026 GMT Not After : Jan 22 16:29:17 2026 GMT Subject: CN=7370361A3EBC56D92DA1AA2A36B7E94A7FD64A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e8:82:45:3d:a1:83:a8:e7:78:39:bc:53:86: f5:4a:2c:44:e7:a5:84:ee:96:86:bb:ba:81:69:3b: 3d:d6:3e:46:09:7b:1d:c7:93:57:00:d3:a6:c7:49: e5:5f:7c:0e:fa:cb:89:50:eb:53:d1:9f:4a:04:0e: 8d:fa:97:90:4c:62:87:77:09:11:d9:8a:5e:b2:c5: f5:9b:a5:59:ee:54:4b:71:c0:be:5e:09:8f:d6:b1: e7:ae:05:cf:2c:97:b5:72:e4:34:f3:27:29:32:b8: 6c:69:55:e9:ba:ad:94:18:88:57:74:01:e8:63:96: 21:75:ae:d0:6c:f2:a9:25:71:51:7b:da:c9:87:97: 14:df:e2:02:71:47:21:21:97:b2:57:a3:ae:37:81: d8:69:aa:3b:45:0f:2d:60:d2:f2:1e:51:be:98:8d: b3:c6:94:00:b7:9a:10:19:5e:05:3f:80:27:fa:1d: 10:45:c6:2f:ec:d7:20:16:c7:fd:87:fb:ea:04:b6: e6:e9:c6:c2:fd:f9:5b:6e:99:16:d4:3c:2d:e6:84: 92:e1:e1:d2:16:47:af:51:d8:79:9f:ad:4a:70:9d: a8:17:ac:f9:4e:62:c3:62:88:42:0e:04:a5:a1:a0: ea:15:a3:1f:c3:5d:cd:06:c8:69:4b:a8:f4:10:aa: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:70:36:1A:3E:BC:56:D9:2D:A1:AA:2A:36:B7:E9:4A:7F:D6:4A:90 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:86:b8:18:31:ab:df:d8:1f:52:3c:70:81:d9:1b:91:de:24: 8d:6c:67:27:f0:67:bb:dc:6c:6e:09:98:4b:96:c3:75:af:48: 13:90:75:9a:8f:4b:6e:19:75:cd:ba:e7:9f:13:86:0f:bd:7e: a0:f7:ff:17:d4:ad:4d:5a:c7:3e:38:d7:4a:bb:af:99:d6:bb: 9c:ab:0a:87:bb:ca:2e:a5:7d:7b:3c:fa:d0:47:90:61:42:0a: 8c:96:aa:6b:9e:eb:1d:ee:95:ec:6d:72:83:26:25:80:bd:a3: ef:29:f6:03:4e:0c:e3:a5:bc:ca:86:30:de:a7:df:78:25:29: 9f:67:52:0c:4b:84:29:98:a4:19:f2:83:68:8b:e5:fb:59:d0: c8:05:b3:9e:54:4b:87:54:2b:45:0f:dd:f0:f0:ee:ce:55:ac: bb:ef:1e:98:05:3d:0e:4a:64:c7:7e:87:64:07:70:63:63:e4: 2b:f0:ab:bf:5c:c5:92:a7:44:98:81:89:11:54:3b:b1:ab:91: 67:9a:38:55:8f:b6:eb:9d:ba:61:e3:41:35:ad:29:63:0f:34: 0a:13:e8:ec:a7:95:2e:b4:99:e4:b5:6a:44:cf:83:d4:ae:b1: bb:5e:98:92:87:49:ae:e3:b6:21:26:00:97:c6:27:01:47:54: f1:0c:a2:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ/5EjmkFt9xCeKexH2Bg+/XOr3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNjAxMTkxMTQ3MTdaFw0yNjAxMjIxNjI5MTdaMDMxMTAvBgNV BAMTKDczNzAzNjFBM0VCQzU2RDkyREExQUEyQTM2QjdFOTRBN0ZENjRBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm6IJFPaGDqOd4ObxThvVKLETn pYTuloa7uoFpOz3WPkYJex3Hk1cA06bHSeVffA76y4lQ61PRn0oEDo36l5BMYod3 CRHZil6yxfWbpVnuVEtxwL5eCY/WseeuBc8sl7Vy5DTzJykyuGxpVem6rZQYiFd0 AehjliF1rtBs8qklcVF72smHlxTf4gJxRyEhl7JXo643gdhpqjtFDy1g0vIeUb6Y jbPGlAC3mhAZXgU/gCf6HRBFxi/s1yAWx/2H++oEtubpxsL9+VtumRbUPC3mhJLh 4dIWR69R2HmfrUpwnagXrPlOYsNiiEIOBKWhoOoVox/DXc0GyGlLqPQQqrp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc3A2Gj68VtktoaoqNrfpSn/WSpAwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqGuBgxq9/YH1I8cIHZG5HeJI1sZyfwZ7vc bG4JmEuWw3WvSBOQdZqPS24Zdc26558Thg+9fqD3/xfUrU1axz4410q7r5nWu5yr Coe7yi6lfXs8+tBHkGFCCoyWqmue6x3ulextcoMmJYC9o+8p9gNODOOlvMqGMN6n 33glKZ9nUgxLhCmYpBnyg2iL5ftZ0MgFs55US4dUK0UP3fDw7s5VrLvvHpgFPQ5K ZMd+h2QHcGNj5Cvwq79cxZKnRJiBiRFUO7GrkWeaOFWPtuudumHjQTWtKWMPNAoT 6OynlS60meS1akTPg9SusbtemJKHSa7jtiEmAJfGJwFHVPEMojg= -----END CERTIFICATE-----Generated at Wed Jan 21 14:45:54 2026 by rpki-client