This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: 5T6F77N1Bzc4uU9MztFBWejORlRF8PZb1fjl1UDny4Y= Subject key identifier: 5B:4E:EB:B1:91:82:C2:F9:F9:69:48:EF:77:8A:60:08:8C:B7:55:7A Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 0FBD6572F45EE984AC82B13C4A9459BDED48551A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 038E Signing time: Mon 01 Dec 2025 17:51:31 +0000 Manifest this update: Mon 01 Dec 2025 17:46:31 +0000 Manifest next update: Thu 04 Dec 2025 23:21:31 +0000 Files and hashes: 1: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) 2: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: etlEVL/G6ecv5pikZQs/QfSTGNp1Hz5OKi7d2dSKjks=) 3: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: 8wq4Zs1kDAGViqW5ojW9tprX2SGdybMrd1MrJ56BEDw=) 4: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: cHq0w9NeVR2kphOoYMXZeSGQxfdQLrs5CAZ+diGk+MY=) 5: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bd:65:72:f4:5e:e9:84:ac:82:b1:3c:4a:94:59:bd:ed:48:55:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Dec 1 17:46:31 2025 GMT Not After : Dec 4 23:21:31 2025 GMT Subject: CN=5B4EEBB19182C2F9F96948EF778A60088CB7557A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:7b:7f:f7:37:da:e8:37:20:d0:bf:c0:cb: 91:e4:e3:81:ca:2f:74:b7:e0:73:3a:5b:39:52:35: e6:14:5d:fc:12:2b:97:fb:eb:8a:49:81:32:04:c7: f5:47:0f:bf:0a:95:e4:b9:cf:04:6f:c7:83:0e:b3: fc:52:cd:3d:a6:31:c6:11:12:de:de:eb:3d:9f:19: 0f:4d:4c:0b:a4:b8:31:81:43:7c:a5:1f:a9:d0:a5: ed:c5:12:8b:47:50:47:8b:bd:e7:f4:25:7f:39:b8: c2:b1:cb:f4:18:e7:69:2d:c2:ee:33:93:79:77:90: e2:77:f4:20:7b:0b:4e:59:ea:3c:ad:ed:54:40:f6: e7:87:7f:86:fc:d2:11:ba:f2:ad:1a:d8:a9:e1:b7: 37:3a:31:08:17:bf:bb:08:db:7b:a0:1c:ce:f9:24: ae:18:17:50:91:cc:cb:ca:a7:01:e9:61:a5:76:98: ff:31:5d:4e:ed:9e:52:f2:f8:d2:74:02:fd:73:1a: 0e:33:b6:fe:86:fd:b3:f8:9e:80:4f:e2:f8:20:6b: 5e:f2:9a:e3:3b:90:12:36:c5:63:de:3c:4a:b2:dd: b6:50:5d:e5:4e:67:aa:e0:23:dd:e6:fa:fa:af:99: cd:a9:69:c4:c4:91:5b:81:8c:a2:0d:f9:ba:0a:b4: bd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4E:EB:B1:91:82:C2:F9:F9:69:48:EF:77:8A:60:08:8C:B7:55:7A X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c4:1f:32:7e:37:2d:9c:61:c5:af:17:ed:3e:09:83:a3:d8: c5:e5:8d:1e:55:b5:dd:fe:21:af:10:2c:2c:7d:8c:76:86:ee: 80:ce:06:fd:7e:e1:57:53:1b:27:43:d7:7e:2d:87:97:d8:f9: 1b:f5:55:01:b4:f5:54:ed:d6:ac:3f:6e:bf:52:d1:a7:30:c0: 1d:a2:c4:02:a4:17:4d:71:37:dd:62:9b:5d:e8:45:6a:a6:33: 43:52:10:aa:c7:a5:81:4a:d2:c1:37:11:55:61:b7:3e:5b:80: e2:ff:f8:5c:53:b0:5f:f0:92:30:75:41:3f:f0:b1:e0:d6:0e: 97:01:1f:9d:93:ea:5c:d3:6a:d7:b3:23:97:dd:90:e7:b4:85: 69:59:2c:04:4b:00:bb:1c:bb:f6:db:a4:77:38:9a:68:47:f8: 33:33:a6:29:60:20:bf:5c:9d:ba:97:cb:a7:c4:a4:11:69:50: 64:de:df:46:44:ec:df:9e:62:7b:5d:6d:71:6f:25:5c:b1:c6: df:d3:15:3a:e5:a3:96:34:4e:56:d9:10:89:17:ac:13:7d:2f: dc:04:2c:35:be:6a:8f:11:6a:ce:ba:5c:b0:0a:2e:0c:f1:35: 99:85:e4:25:4d:b5:bf:11:3b:46:0e:84:ff:40:f3:e3:a1:2b: 4d:c9:cb:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD71lcvRe6YSsgrE8SpRZve1IVRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNTEyMDExNzQ2MzFaFw0yNTEyMDQyMzIxMzFaMDMxMTAvBgNV BAMTKDVCNEVFQkIxOTE4MkMyRjlGOTY5NDhFRjc3OEE2MDA4OENCNzU1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GXt/9zfa6Dcg0L/Ay5Hk44HK L3S34HM6WzlSNeYUXfwSK5f764pJgTIEx/VHD78KleS5zwRvx4MOs/xSzT2mMcYR Et7e6z2fGQ9NTAukuDGBQ3ylH6nQpe3FEotHUEeLvef0JX85uMKxy/QY52ktwu4z k3l3kOJ39CB7C05Z6jyt7VRA9ueHf4b80hG68q0a2Knhtzc6MQgXv7sI23ugHM75 JK4YF1CRzMvKpwHpYaV2mP8xXU7tnlLy+NJ0Av1zGg4ztv6G/bP4noBP4vgga17y muM7kBI2xWPePEqy3bZQXeVOZ6rgI93m+vqvmc2pacTEkVuBjKIN+boKtL01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW07rsZGCwvn5aUjvd4pgCIy3VXowHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzEHzJ+Ny2cYcWvF+0+CYOj2MXljR5Vtd3+ Ia8QLCx9jHaG7oDOBv1+4VdTGydD134th5fY+Rv1VQG09VTt1qw/br9S0acwwB2i xAKkF01xN91im13oRWqmM0NSEKrHpYFK0sE3EVVhtz5bgOL/+FxTsF/wkjB1QT/w seDWDpcBH52T6lzTatezI5fdkOe0hWlZLARLALscu/bbpHc4mmhH+DMzpilgIL9c nbqXy6fEpBFpUGTe30ZE7N+eYntdbXFvJVyxxt/TFTrlo5Y0TlbZEIkXrBN9L9wE LDW+ao8Ras66XLAKLgzxNZmF5CVNtb8RO0YOhP9A8+OhK03Jyz4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:47 2025 by rpki-client