This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft File: B2BCF7264F89246583B384F354CB350DF3B6AADB.mft (raw, json) Hash identifier: fvb3KEB9mD87pngy/gyM30qetQGAONlED+LCSs0LDeU= Subject key identifier: 8F:47:03:7F:8E:E3:E7:31:B8:67:5F:97:8C:A7:8E:18:B6:29:F6:8F Authority key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB Certificate issuer: /CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Certificate serial: 3AD0624FEBF1D0FBC44730C7EB9FF9145909C0DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft Manifest number: 052B Signing time: Tue 02 Dec 2025 19:02:11 +0000 Manifest this update: Tue 02 Dec 2025 18:57:11 +0000 Manifest next update: Sat 06 Dec 2025 03:06:11 +0000 Files and hashes: 1: B2BCF7264F89246583B384F354CB350DF3B6AADB.crl (hash: qjVbyF+G5sjtAjqzkqGTuRjyzPUJyDnVySujvPsOFRg=) 2: 3230322e34372e39302e302f32332d3234203d3e203436303230.roa (hash: f31WSeSw8w1qVqSz7UZlMp3AZocd9nv655saAh7fViI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d0:62:4f:eb:f1:d0:fb:c4:47:30:c7:eb:9f:f9:14:59:09:c0:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Validity Not Before: Dec 2 18:57:11 2025 GMT Not After : Dec 6 03:06:11 2025 GMT Subject: CN=8F47037F8EE3E731B8675F978CA78E18B629F68F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:35:19:41:2b:4a:9f:fc:88:54:6c:29:af: c3:3c:3a:57:ff:58:f5:78:04:de:f4:69:0c:61:ff: 0e:2a:e8:2b:19:5b:dd:79:5b:f0:87:28:b6:8b:e5: de:89:3a:19:ad:69:66:6f:c6:64:8a:8b:77:20:46: 7b:70:05:29:3b:75:1e:9f:15:20:77:36:5e:37:c1: d1:7e:85:7d:18:1f:af:75:63:f9:e7:d1:92:a6:29: 0c:0c:ba:48:69:5b:d1:42:d7:64:50:2d:f5:d4:88: f0:97:8a:5b:b0:55:a5:91:38:84:5b:32:92:3d:02: b2:a7:5f:0c:ae:54:c4:fe:4f:e0:73:1b:20:47:6c: 4b:1d:f6:34:5d:41:44:66:34:e3:24:ea:14:ba:d3: d1:4b:2f:68:07:9b:72:df:b1:ed:53:b2:2e:64:81: b0:ef:96:9b:84:dc:2b:b3:01:66:4d:a7:e7:56:f7: d0:dd:a3:e3:fe:2f:6c:0d:3c:6b:b7:02:bc:e9:24: 04:15:67:fc:06:29:23:4c:bb:80:03:c0:98:cb:19: ab:33:1f:8b:24:d4:aa:2a:0d:ec:4d:87:8c:91:e5: 4f:5d:de:93:6a:f3:71:5d:43:64:2c:3f:55:bf:e2: b9:cc:b8:06:32:1c:22:b2:74:5c:3d:d5:d9:b1:5a: 89:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:47:03:7F:8E:E3:E7:31:B8:67:5F:97:8C:A7:8E:18:B6:29:F6:8F X509v3 Authority Key Identifier: keyid:B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a1:c7:f9:ff:26:be:d5:15:90:11:e1:ff:99:26:68:91:64: a3:a1:fd:02:b4:f4:a1:26:62:4a:25:df:a5:4e:0c:ac:70:aa: ab:bf:6d:01:e1:a4:7d:86:95:99:d0:70:f1:d8:e0:3f:aa:c8: 07:d6:f2:6f:d7:8c:9c:dd:e4:35:41:bc:70:30:ab:8a:e3:4b: cb:14:85:69:06:e1:e1:3a:90:b4:8a:03:a0:ed:e6:e3:f6:11: e3:65:f9:35:ef:56:8e:d0:af:5e:c9:f9:e3:0b:94:67:9b:68: 66:1a:e4:aa:b5:70:31:4b:57:31:80:b1:1d:db:19:74:9f:c0: df:35:95:4f:d6:08:43:62:0d:dc:3c:e5:db:fa:ad:d8:89:72: d0:6e:f5:99:7d:eb:d4:74:4f:69:b7:58:08:fc:3f:d3:ef:ef: 81:e7:87:f8:39:55:1e:31:a7:68:87:d1:6c:ab:a6:91:bf:5c: 64:f9:81:1d:82:c2:ff:ed:54:61:36:c9:c9:a2:e5:59:80:be: cb:f4:06:21:25:77:d1:1c:f9:67:19:7b:9f:32:02:38:28:d6: a2:d8:e2:75:3a:03:5c:3f:76:43:15:55:1e:1e:b2:92:85:6f: e5:4b:6f:88:8c:4f:0d:c8:d4:bc:b8:6b:f8:2a:a5:94:f5:81: b5:8a:b7:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtBiT+vx0PvERzDH65/5FFkJwNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERG M0I2QUFEQjAeFw0yNTEyMDIxODU3MTFaFw0yNTEyMDYwMzA2MTFaMDMxMTAvBgNV BAMTKDhGNDcwMzdGOEVFM0U3MzFCODY3NUY5NzhDQTc4RTE4QjYyOUY2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdjUZQStKn/yIVGwpr8M8Olf/ WPV4BN70aQxh/w4q6CsZW915W/CHKLaL5d6JOhmtaWZvxmSKi3cgRntwBSk7dR6f FSB3Nl43wdF+hX0YH691Y/nn0ZKmKQwMukhpW9FC12RQLfXUiPCXiluwVaWROIRb MpI9ArKnXwyuVMT+T+BzGyBHbEsd9jRdQURmNOMk6hS609FLL2gHm3Lfse1Tsi5k gbDvlpuE3CuzAWZNp+dW99Ddo+P+L2wNPGu3ArzpJAQVZ/wGKSNMu4ADwJjLGasz H4sk1KoqDexNh4yR5U9d3pNq83FdQ2QsP1W/4rnMuAYyHCKydFw91dmxWoktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj0cDf47j5zG4Z1+XjKeOGLYp9o8wHwYDVR0j BBgwFoAUsrz3Jk+JJGWDs4TzVMs1DfO2qtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmEwYTc3MS02MmQyLTQyMzgtYTQwNi03OTk5ZjIyNDg0OWMvMC9CMkJDRjcyNjRG ODkyNDY1ODNCMzg0RjM1NENCMzUwREYzQjZBQURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1MERGM0I2 QUFEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhMGE3NzEtNjJkMi00MjM4LWE0 MDYtNzk5OWYyMjQ4NDljLzAvQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4NEYzNTRDQjM1 MERGM0I2QUFEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGhx/n/Jr7VFZAR4f+ZJmiRZKOh/QK09KEm Ykol36VODKxwqqu/bQHhpH2GlZnQcPHY4D+qyAfW8m/XjJzd5DVBvHAwq4rjS8sU hWkG4eE6kLSKA6Dt5uP2EeNl+TXvVo7Qr17J+eMLlGebaGYa5Kq1cDFLVzGAsR3b GXSfwN81lU/WCENiDdw85dv6rdiJctBu9Zl969R0T2m3WAj8P9Pv74Hnh/g5VR4x p2iH0WyrppG/XGT5gR2Cwv/tVGE2ycmi5VmAvsv0BiEld9Ec+WcZe58yAjgo1qLY 4nU6A1w/dkMVVR4espKFb+VLb4iMTw3I1Ly4a/gqpZT1gbWKt04= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:52 2025 by rpki-client