This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: rVlhUJTdsQgPGaAniKypK0guAs99QibzvF0nt2dtv8c= Subject key identifier: 4E:A6:54:C9:6B:DC:20:F1:7B:28:E9:CE:E6:00:65:90:7E:31:94:A2 Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 4718208B891ECF8756773D6567EC5A4C1B89A7E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 048E Signing time: Wed 03 Dec 2025 05:01:14 +0000 Manifest this update: Wed 03 Dec 2025 04:56:14 +0000 Manifest next update: Sat 06 Dec 2025 05:39:14 +0000 Files and hashes: 1: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: ijNSrOdzeNa9N8I7k5ue1ttK0rwEU32eiwefGlzM0Vc=) 2: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: 4Nyf95sTRdqoKN64WuRTyc5m5hoROhK6oFKdH03e8KY=) 3: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 9ih//U/iPAsPFZQIcxukFDIuvhJTLAD0tRGBXhc3tOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:18:20:8b:89:1e:cf:87:56:77:3d:65:67:ec:5a:4c:1b:89:a7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Dec 3 04:56:14 2025 GMT Not After : Dec 6 05:39:14 2025 GMT Subject: CN=4EA654C96BDC20F17B28E9CEE60065907E3194A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:63:3d:f6:ae:50:26:76:81:0c:83:f5:9a:cb: a0:65:c4:24:52:ba:cd:b6:22:b5:02:3a:2b:e4:31: 16:f2:0f:a6:7e:7f:71:94:ef:ff:5b:d1:4c:9e:20: da:5b:47:21:d1:7c:56:24:c1:16:73:e7:d9:68:44: 05:f2:a8:05:79:86:87:f7:9e:b3:e3:c4:6d:82:73: 05:f5:d8:1e:3b:6b:b4:2b:df:70:19:f9:a5:a4:94: cc:67:a1:99:2b:2c:68:08:b7:0e:74:28:fd:dc:1f: 65:86:e0:df:10:f9:af:46:a6:23:71:48:5b:af:f3: e2:0a:e7:a5:95:3e:71:e3:27:17:d0:b7:20:32:9f: cb:5e:0c:0d:65:0c:8d:c8:c3:5b:a0:7d:1e:bb:a2: 9a:1d:c4:9a:7a:a0:69:d0:0a:f5:ba:23:b0:11:09: 36:42:c5:bd:54:0b:25:6c:93:90:45:4d:b1:f0:65: 41:8c:f5:38:ad:60:3a:66:c6:7b:bf:23:a0:a8:8e: 59:f4:7c:08:4f:38:e3:96:0d:ad:53:45:2c:3b:63: db:2d:b2:8c:61:d9:dc:1d:7e:cf:2e:8f:a0:69:73: 7a:17:c6:7e:fc:0a:1c:36:9e:8a:83:cd:38:16:1a: c0:ca:d0:0c:60:59:a6:35:de:46:23:a1:73:eb:57: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A6:54:C9:6B:DC:20:F1:7B:28:E9:CE:E6:00:65:90:7E:31:94:A2 X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:8e:a6:62:16:13:8c:90:be:49:18:d4:6a:79:f7:93:e1:86: d5:d6:6f:32:59:60:9c:46:38:ac:09:8d:70:ec:46:5f:b8:e2: 27:08:52:73:ab:43:5a:24:0c:05:78:be:ce:58:cc:3c:9c:d5: ba:95:5a:3f:4c:c0:30:ac:5b:ae:46:18:56:45:51:64:45:7f: 3d:87:65:7d:a4:50:a8:c2:c0:62:68:9d:3c:7a:5f:91:5e:be: 8b:72:f4:2d:3f:42:b2:b6:21:35:c3:3f:7c:9f:f3:0e:88:f4: 8e:bc:70:ea:55:de:a7:cf:c3:e4:5a:13:20:ac:30:45:07:34: 5b:ef:b5:ce:1f:8b:b8:b1:c4:7f:19:8b:63:19:ae:f0:04:ce: cd:a8:64:70:f5:de:ec:22:b4:65:73:52:bf:f1:06:75:d1:fb: f7:ee:cc:2a:ff:87:08:65:85:9b:f0:e7:56:43:ce:f4:18:ef: e9:ed:04:36:51:09:8f:67:3f:5a:44:50:f9:fc:c3:cb:85:ec: 94:c7:a6:24:b7:26:4b:88:ec:52:3d:60:4e:88:91:68:ca:41: 73:d3:88:02:28:8c:91:4a:b2:a2:d7:0a:6b:7e:a8:c0:a0:ea: cf:de:a2:74:82:4e:df:7e:af:14:81:50:6b:8a:b8:8e:23:63: 5f:e0:50:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxggi4kez4dWdz1lZ+xaTBuJp+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTEyMDMwNDU2MTRaFw0yNTEyMDYwNTM5MTRaMDMxMTAvBgNV BAMTKDRFQTY1NEM5NkJEQzIwRjE3QjI4RTlDRUU2MDA2NTkwN0UzMTk0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqYz32rlAmdoEMg/Way6BlxCRS us22IrUCOivkMRbyD6Z+f3GU7/9b0UyeINpbRyHRfFYkwRZz59loRAXyqAV5hof3 nrPjxG2CcwX12B47a7Qr33AZ+aWklMxnoZkrLGgItw50KP3cH2WG4N8Q+a9GpiNx SFuv8+IK56WVPnHjJxfQtyAyn8teDA1lDI3Iw1ugfR67opodxJp6oGnQCvW6I7AR CTZCxb1UCyVsk5BFTbHwZUGM9TitYDpmxnu/I6Cojln0fAhPOOOWDa1TRSw7Y9st soxh2dwdfs8uj6Bpc3oXxn78Chw2noqDzTgWGsDK0AxgWaY13kYjoXPrV5HLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTqZUyWvcIPF7KOnO5gBlkH4xlKIwHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmOpmIWE4yQvkkY1Gp595PhhtXWbzJZYJxG OKwJjXDsRl+44icIUnOrQ1okDAV4vs5YzDyc1bqVWj9MwDCsW65GGFZFUWRFfz2H ZX2kUKjCwGJonTx6X5Fevoty9C0/QrK2ITXDP3yf8w6I9I68cOpV3qfPw+RaEyCs MEUHNFvvtc4fi7ixxH8Zi2MZrvAEzs2oZHD13uwitGVzUr/xBnXR+/fuzCr/hwhl hZvw51ZDzvQY7+ntBDZRCY9nP1pEUPn8w8uF7JTHpiS3JkuI7FI9YE6IkWjKQXPT iAIojJFKsqLXCmt+qMCg6s/eonSCTt9+rxSBUGuKuI4jY1/gULw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:39 2025 by rpki-client