This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft File: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft (raw, json) Hash identifier: vniZgHBk2ZN49Pn3f3y5hqCxZCk9YIDx5Al0EJD0zyk= Subject key identifier: 5A:3A:33:9C:71:18:B4:1F:C5:CA:05:84:C3:BE:97:1F:6E:93:DA:C6 Authority key identifier: 2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC Certificate issuer: /CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Certificate serial: 70DF5A1C197A31C79AEB9383253D683FC73F01E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft Manifest number: 0355 Signing time: Thu 18 Dec 2025 23:13:49 +0000 Manifest this update: Thu 18 Dec 2025 23:08:49 +0000 Manifest next update: Mon 22 Dec 2025 01:28:49 +0000 Files and hashes: 1: 3130332e3137322e31372e302f32342d3234203d3e20313432333831.roa (hash: VSwmKbWt2mj/4Xnvw/p95KrSyYtbtzdvXf2hu0E4abA=) 2: 2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl (hash: Wd9qm/4h3bE2+R/Gk3PjO0LlHBGwankTfoa0rJbtXCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:df:5a:1c:19:7a:31:c7:9a:eb:93:83:25:3d:68:3f:c7:3f:01:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC Validity Not Before: Dec 18 23:08:49 2025 GMT Not After : Dec 22 01:28:49 2025 GMT Subject: CN=5A3A339C7118B41FC5CA0584C3BE971F6E93DAC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4e:7d:a5:a3:8c:57:8c:6a:48:cb:63:23:75: 09:fa:f7:8b:7f:09:be:74:3a:f6:d7:3d:01:b6:19: df:3f:54:d7:22:66:a4:ef:15:62:a8:ac:c5:11:1d: 0f:a1:3e:83:d4:18:85:9a:71:11:79:c2:4d:86:99: 1e:7e:e3:10:1b:43:f8:1e:21:3c:81:3b:d7:6e:c3: b0:12:6a:ff:e0:97:47:77:19:92:3f:26:e0:86:6d: 70:7d:ca:e3:e3:1c:7a:0a:ec:ba:9f:53:98:b7:0f: 5b:a1:37:5c:40:ef:cc:ef:3c:7f:55:59:a7:15:65: cf:3c:09:76:e1:b9:9e:a1:cb:ff:1f:3f:47:2d:2b: e8:93:e4:64:69:b1:db:2e:62:44:cd:46:fe:f7:66: c2:a1:65:5e:0d:21:1f:5a:3e:f2:c3:50:c2:5d:d0: 2b:05:b3:6e:41:f7:51:89:73:e7:e2:3c:49:01:e0: b7:76:19:b5:62:46:56:e6:19:ee:49:b2:2f:b4:6f: 13:c5:9f:f6:68:95:36:9d:c9:ca:15:07:6c:2c:cf: 25:8e:2a:bc:06:9c:9c:8f:f8:69:97:1e:12:d4:3a: 93:e0:28:c0:f4:24:da:1e:42:01:1e:ef:0f:33:a3: ab:9c:90:ff:76:26:0c:b1:5c:b6:67:93:a5:e4:d2: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3A:33:9C:71:18:B4:1F:C5:CA:05:84:C3:BE:97:1F:6E:93:DA:C6 X509v3 Authority Key Identifier: keyid:2B:15:30:AD:20:AC:1F:2F:7F:2E:A2:EB:AA:E7:07:D0:E1:28:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f668854a-3f24-40b1-80cd-e636aa7e8b1c/0/2B1530AD20AC1F2F7F2EA2EBAAE707D0E128A1DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:0c:79:b8:8d:e4:fc:66:8b:49:b8:3b:e1:31:30:a4:45:a3: 51:19:16:f2:c4:88:41:e4:a8:7b:c8:bb:15:a5:13:07:99:49: f9:23:cf:c9:a7:92:46:c4:24:79:28:ba:99:77:0b:a6:0b:32: 5c:a3:53:fc:6e:3d:00:a3:2a:fe:2a:73:bd:6a:08:bf:d6:dd: 2e:b3:d8:5c:c9:15:1e:b3:4a:16:92:43:32:45:5c:5c:ff:a7: 08:83:dc:45:71:11:82:3a:bc:c3:cd:1e:8c:75:d7:56:56:ec: dc:55:d1:a1:7d:08:95:0e:d8:91:52:75:c3:e8:75:dd:50:c1: 11:82:77:81:7e:c2:d3:26:1a:9b:59:8f:e7:f2:bc:67:be:5b: 87:d5:0b:9e:50:75:23:7a:be:c9:e6:db:2e:d0:05:b9:f4:87: 70:8a:a9:ce:76:b6:00:42:00:fd:b5:1f:a2:94:bd:e2:e2:f0: a3:c5:90:a0:bc:4b:af:b9:94:e4:13:f7:6e:89:a9:22:e8:3f: 4a:fd:5f:13:0c:10:d6:5a:b7:ad:92:23:8b:eb:4f:f1:c6:bd: 83:f3:a9:22:a8:9a:9d:b7:48:04:db:40:53:f3:23:10:f8:fe: 6b:0e:f0:54:f1:5e:53:a3:c8:03:a5:cb:49:8e:64:9a:7c:25: 30:78:28:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcN9aHBl6Mcea65ODJT1oP8c/AeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBF MTI4QTFEQzAeFw0yNTEyMTgyMzA4NDlaFw0yNTEyMjIwMTI4NDlaMDMxMTAvBgNV BAMTKDVBM0EzMzlDNzExOEI0MUZDNUNBMDU4NEMzQkU5NzFGNkU5M0RBQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Tn2lo4xXjGpIy2MjdQn694t/ Cb50OvbXPQG2Gd8/VNciZqTvFWKorMURHQ+hPoPUGIWacRF5wk2GmR5+4xAbQ/ge ITyBO9duw7ASav/gl0d3GZI/JuCGbXB9yuPjHHoK7LqfU5i3D1uhN1xA78zvPH9V WacVZc88CXbhuZ6hy/8fP0ctK+iT5GRpsdsuYkTNRv73ZsKhZV4NIR9aPvLDUMJd 0CsFs25B91GJc+fiPEkB4Ld2GbViRlbmGe5Jsi+0bxPFn/ZolTadycoVB2wszyWO KrwGnJyP+GmXHhLUOpPgKMD0JNoeQgEe7w8zo6uckP92JgyxXLZnk6Xk0lwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjoznHEYtB/FygWEw76XH26T2sYwHwYDVR0j BBgwFoAUKxUwrSCsHy9/LqLrqucH0OEoodwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjY4ODU0YS0zZjI0LTQwYjEtODBjZC1lNjM2YWE3ZThiMWMvMC8yQjE1MzBBRDIw QUMxRjJGN0YyRUEyRUJBQUU3MDdEMEUxMjhBMURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3RDBFMTI4 QTFEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjY2ODg1NGEtM2YyNC00MGIxLTgw Y2QtZTYzNmFhN2U4YjFjLzAvMkIxNTMwQUQyMEFDMUYyRjdGMkVBMkVCQUFFNzA3 RDBFMTI4QTFEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL8MebiN5Pxmi0m4O+ExMKRFo1EZFvLEiEHk qHvIuxWlEweZSfkjz8mnkkbEJHkoupl3C6YLMlyjU/xuPQCjKv4qc71qCL/W3S6z 2FzJFR6zShaSQzJFXFz/pwiD3EVxEYI6vMPNHox111ZW7NxV0aF9CJUO2JFSdcPo dd1QwRGCd4F+wtMmGptZj+fyvGe+W4fVC55QdSN6vsnm2y7QBbn0h3CKqc52tgBC AP21H6KUveLi8KPFkKC8S6+5lOQT926JqSLoP0r9XxMMENZat62SI4vrT/HGvYPz qSKomp23SATbQFPzIxD4/msO8FTxXlOjyAOly0mOZJp8JTB4KAw= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:47 2025 by rpki-client