This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: JcCpswZfkSKZBMbNfVfnb9capC4ht3U8C3K2aF0jsLQ= Subject key identifier: 34:D5:74:4F:88:6B:3B:69:6E:69:F5:7C:50:3A:25:D1:9B:09:2A:B1 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 433B45F4B072561252FC4A39681DC224F54E9C41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 0220 Signing time: Wed 03 Dec 2025 07:22:14 +0000 Manifest this update: Wed 03 Dec 2025 07:17:14 +0000 Manifest next update: Sat 06 Dec 2025 10:55:14 +0000 Files and hashes: 1: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: qd+75GZUd0Pk4dZGbsrUIF1dGYkwgpYZTZ6csr0kdHw=) 2: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3b:45:f4:b0:72:56:12:52:fc:4a:39:68:1d:c2:24:f5:4e:9c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Dec 3 07:17:14 2025 GMT Not After : Dec 6 10:55:14 2025 GMT Subject: CN=34D5744F886B3B696E69F57C503A25D19B092AB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:43:d4:56:01:61:d3:7f:48:be:9e:70:7a: 66:9a:94:29:c8:26:6f:0c:73:50:78:94:06:a4:0c: 4d:f7:e8:67:a7:96:04:49:c2:75:e8:a8:db:d5:0f: f5:8e:3f:14:08:e6:19:3f:21:5d:cd:dd:7e:9e:1b: 31:62:73:0e:81:7c:59:1a:7b:da:57:b4:a4:c9:fc: 74:70:8f:ec:48:0f:78:ab:09:d1:53:c8:cb:b8:b8: 4c:6c:c8:79:10:e8:99:e9:d5:3c:96:bf:9d:ae:cf: 7c:12:2c:18:5d:3d:82:8a:d7:35:8c:19:f3:d9:5b: 83:f8:c1:3b:03:d3:6e:51:0d:28:39:dd:e3:50:76: a6:a6:b4:db:31:77:ea:6c:60:86:5e:6c:1c:9d:16: bf:e4:69:ce:cf:0e:df:eb:de:89:cb:7b:3d:45:b5: 26:32:de:24:c8:e9:b6:24:8d:1a:8d:f9:68:e9:7c: 79:b2:f2:45:9f:c8:77:95:e8:c6:42:0b:46:b3:aa: c2:c6:36:41:a4:db:53:76:5c:5e:20:2f:00:44:33: 22:f4:e6:ec:b0:aa:79:07:ff:c9:79:65:e8:75:41: a2:90:45:38:70:84:eb:ad:d0:10:84:c6:68:fe:14: c1:52:09:df:48:98:d5:7c:af:67:76:ec:58:24:58: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:74:4F:88:6B:3B:69:6E:69:F5:7C:50:3A:25:D1:9B:09:2A:B1 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:15:c9:4a:22:f8:86:d2:92:9d:70:46:e6:71:d1:6e:70:bc: da:17:ed:38:52:bb:c2:70:a1:46:79:4c:65:45:50:31:c9:b1: 70:37:dc:72:1a:8f:c1:6e:bb:00:25:9d:c2:2b:35:0f:0f:66: af:66:0b:45:ea:76:95:a7:e5:4b:3c:08:9a:8b:34:c5:5b:cb: 22:65:a1:66:9b:79:23:cf:a0:7c:3f:66:58:1b:07:a3:03:9b: 43:ed:c6:39:26:8d:48:d5:8c:9a:1c:07:16:ee:c6:7e:2d:55: 33:b0:96:00:9d:fb:1d:6a:1e:75:04:c4:37:30:39:ac:af:47: 5a:76:d0:43:ad:a2:2e:e6:28:00:6f:5b:2a:66:b8:b6:ca:b5: 6e:24:40:c1:fe:28:17:3e:3b:74:e3:15:b0:ad:15:69:84:c6: a6:f7:ea:a3:e2:44:ed:c0:55:56:22:c0:20:fa:0e:ad:34:63: 2f:5c:c6:c4:4a:5f:62:a7:0d:91:d2:18:d7:d4:19:60:5c:49: 4c:a5:48:4c:e5:cf:bf:ef:92:39:d5:89:e7:c5:e7:5a:e9:bb: da:32:ac:50:58:18:14:5e:20:07:9c:43:4f:4c:81:34:87:0a: f8:dc:52:3d:96:dc:2e:ca:38:79:a0:36:2f:97:f7:93:e0:f5: 41:60:36:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQztF9LByVhJS/Eo5aB3CJPVOnEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNTEyMDMwNzE3MTRaFw0yNTEyMDYxMDU1MTRaMDMxMTAvBgNV BAMTKDM0RDU3NDRGODg2QjNCNjk2RTY5RjU3QzUwM0EyNUQxOUIwOTJBQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYvEPUVgFh039Ivp5wemaalCnI Jm8Mc1B4lAakDE336GenlgRJwnXoqNvVD/WOPxQI5hk/IV3N3X6eGzFicw6BfFka e9pXtKTJ/HRwj+xID3irCdFTyMu4uExsyHkQ6Jnp1TyWv52uz3wSLBhdPYKK1zWM GfPZW4P4wTsD025RDSg53eNQdqamtNsxd+psYIZebBydFr/kac7PDt/r3onLez1F tSYy3iTI6bYkjRqN+WjpfHmy8kWfyHeV6MZCC0azqsLGNkGk21N2XF4gLwBEMyL0 5uywqnkH/8l5Zeh1QaKQRThwhOut0BCExmj+FMFSCd9ImNV8r2d27FgkWHurAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNV0T4hrO2luafV8UDol0ZsJKrEwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0VyUoi+IbSkp1wRuZx0W5wvNoX7ThSu8Jw oUZ5TGVFUDHJsXA33HIaj8FuuwAlncIrNQ8PZq9mC0XqdpWn5Us8CJqLNMVbyyJl oWabeSPPoHw/ZlgbB6MDm0PtxjkmjUjVjJocBxbuxn4tVTOwlgCd+x1qHnUExDcw OayvR1p20EOtoi7mKABvWypmuLbKtW4kQMH+KBc+O3TjFbCtFWmExqb36qPiRO3A VVYiwCD6Dq00Yy9cxsRKX2KnDZHSGNfUGWBcSUylSEzlz7/vkjnViefF51rpu9oy rFBYGBReIAecQ09MgTSHCvjcUj2W3C7KOHmgNi+X95Pg9UFgNsE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:40 2025 by rpki-client