This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: aZIF0sDq/MsAMpc50QWgfJURvG7oz6rbvPdRDYax8jA= Subject key identifier: 2D:B6:0A:52:12:6C:A8:B3:09:ED:FD:82:1E:72:4D:73:37:4D:2F:69 Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 1FD15A966057E7FE1D7D992E1D11D8672E8521AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 04F3 Signing time: Mon 01 Dec 2025 22:41:17 +0000 Manifest this update: Mon 01 Dec 2025 22:36:17 +0000 Manifest next update: Thu 04 Dec 2025 23:15:17 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: rrx/n9Lis+x0nq2Fk7T1r20cxLhijLS6FomNmSfC9fQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d1:5a:96:60:57:e7:fe:1d:7d:99:2e:1d:11:d8:67:2e:85:21:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Dec 1 22:36:17 2025 GMT Not After : Dec 4 23:15:17 2025 GMT Subject: CN=2DB60A52126CA8B309EDFD821E724D73374D2F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:3e:4b:49:65:a4:a6:32:ca:5c:54:f0:bb: 06:5e:ac:2d:8f:8a:38:33:a3:ae:39:bd:80:d7:a7: b2:09:43:2d:4f:60:88:34:d7:ec:ab:46:22:27:7a: 1c:50:1b:85:29:93:53:e3:36:e1:7a:e4:ea:32:60: ff:83:ca:89:07:e0:91:12:a2:65:3f:f1:28:75:7e: 90:7e:47:e0:69:52:76:88:56:7f:0e:22:4e:0b:62: 1b:d5:bf:fe:06:e2:37:d2:d2:c2:90:2c:3d:da:7e: b6:45:f1:8b:30:52:8e:83:1b:5b:91:e7:50:98:17: 51:ed:c8:75:34:59:ad:01:0f:4a:cd:67:11:40:ae: c7:3c:0e:39:b5:cb:03:be:48:e9:28:dc:8d:29:2b: be:09:12:6b:14:bc:6b:00:13:2d:67:8a:0d:3c:4a: fd:1d:fd:4e:76:17:16:95:32:fc:de:c7:41:02:df: 42:a5:84:a6:d4:53:f0:56:f8:12:d4:6b:97:67:00: 6d:2e:91:35:7d:00:e1:08:c0:3a:26:a4:c2:8c:75: c6:11:0a:ff:89:3b:9a:df:f6:3e:fc:18:9d:3f:6f: 14:8a:ab:90:4d:60:01:a8:83:15:fd:d2:74:61:ba: 57:7a:91:43:5d:d9:8d:7c:dc:03:e0:ec:bb:60:95: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B6:0A:52:12:6C:A8:B3:09:ED:FD:82:1E:72:4D:73:37:4D:2F:69 X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:46:62:a7:e9:be:5b:b4:16:af:57:2c:40:e7:ad:c2:63:2d: 7f:4d:35:e2:3a:a8:b3:3c:a0:55:92:17:5b:17:9e:34:ba:6a: 7d:ef:c0:47:16:cf:61:ab:d0:f1:25:86:ba:41:8a:a7:51:24: d0:87:e3:eb:93:0e:8b:06:fd:05:67:a4:80:4d:bb:1e:99:ab: 26:6c:e5:e6:39:37:23:32:4f:1d:99:ff:1a:50:f3:8f:a6:61: 2f:ed:78:6e:77:f1:85:4b:e5:71:30:29:2a:b4:1c:b4:65:c7: ca:29:f1:57:cf:7f:8a:45:47:a0:ff:0a:83:69:15:ef:d3:51: 71:05:12:a4:4a:91:0c:fa:de:11:ab:9e:55:82:05:59:7a:9e: c8:bc:e1:3c:75:64:62:20:05:93:17:22:6b:27:83:ec:f0:29: 74:27:e7:ea:c5:57:41:7e:49:12:04:00:f5:a6:25:68:b9:19: 4a:3a:2d:d5:f0:45:9a:bc:bb:88:4d:35:5d:6d:72:28:17:31: b3:92:a6:44:36:62:c8:e9:05:65:8b:57:21:2c:a6:13:2d:8a: 16:85:9f:f5:16:46:a7:37:21:b6:07:f3:ad:da:0e:ea:f5:56: 7b:95:50:91:a3:25:1f:24:18:28:6a:9e:e3:e7:89:d6:58:c7: 1a:63:be:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9FalmBX5/4dfZkuHRHYZy6FIawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTEyMDEyMjM2MTdaFw0yNTEyMDQyMzE1MTdaMDMxMTAvBgNV BAMTKDJEQjYwQTUyMTI2Q0E4QjMwOUVERkQ4MjFFNzI0RDczMzc0RDJGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Vj5LSWWkpjLKXFTwuwZerC2P ijgzo645vYDXp7IJQy1PYIg01+yrRiInehxQG4Upk1PjNuF65OoyYP+DyokH4JES omU/8Sh1fpB+R+BpUnaIVn8OIk4LYhvVv/4G4jfS0sKQLD3afrZF8YswUo6DG1uR 51CYF1HtyHU0Wa0BD0rNZxFArsc8Djm1ywO+SOko3I0pK74JEmsUvGsAEy1nig08 Sv0d/U52FxaVMvzex0EC30KlhKbUU/BW+BLUa5dnAG0ukTV9AOEIwDompMKMdcYR Cv+JO5rf9j78GJ0/bxSKq5BNYAGogxX90nRhuld6kUNd2Y183APg7LtglVxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULbYKUhJsqLMJ7f2CHnJNczdNL2kwHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdGYqfpvlu0Fq9XLEDnrcJjLX9NNeI6qLM8 oFWSF1sXnjS6an3vwEcWz2Gr0PElhrpBiqdRJNCH4+uTDosG/QVnpIBNux6ZqyZs 5eY5NyMyTx2Z/xpQ84+mYS/teG538YVL5XEwKSq0HLRlx8op8VfPf4pFR6D/CoNp Fe/TUXEFEqRKkQz63hGrnlWCBVl6nsi84Tx1ZGIgBZMXImsng+zwKXQn5+rFV0F+ SRIEAPWmJWi5GUo6LdXwRZq8u4hNNV1tcigXMbOSpkQ2YsjpBWWLVyEsphMtihaF n/UWRqc3IbYH863aDur1VnuVUJGjJR8kGChqnuPnidZYxxpjvhc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:28 2025 by rpki-client