This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: r0QLqUGAhpmK3TGxKo5brj3nFEMX86poAhDLpBxRiiU= Subject key identifier: BD:AB:78:6B:53:FD:23:88:7A:52:59:F5:6F:A4:10:04:51:84:D8:37 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 44BB3853C927DE0FDC199CF7B4B8DBF84E6D91F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 03BE Signing time: Sat 24 Jan 2026 05:02:09 +0000 Manifest this update: Sat 24 Jan 2026 04:57:09 +0000 Manifest next update: Tue 27 Jan 2026 11:10:09 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: KVAK/N6ByjBuTMVLGXdpDRAwD9G3fV+4hRlYP44q8nM=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bb:38:53:c9:27:de:0f:dc:19:9c:f7:b4:b8:db:f8:4e:6d:91:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Jan 24 04:57:09 2026 GMT Not After : Jan 27 11:10:09 2026 GMT Subject: CN=BDAB786B53FD23887A5259F56FA410045184D837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:3c:40:f6:07:b9:75:29:7d:07:5d:99:ca: cf:32:cc:c8:ec:00:f3:e0:e4:3c:9f:4d:1b:25:d3: aa:93:14:a4:23:bc:3f:ca:e5:5a:31:26:ed:c3:df: 3d:14:0d:3b:f4:6e:d2:37:f0:6b:11:a9:2f:45:22: dc:1e:d7:14:4c:a1:3b:91:60:57:7f:6f:ac:c5:3c: fb:e2:f7:d2:97:e6:4a:73:74:91:c5:27:72:98:06: a4:f1:13:d5:4e:31:be:9f:ec:97:59:02:da:16:97: 7d:a3:db:80:b3:c8:e4:89:3c:0d:1d:90:87:b6:e1: c6:77:e1:a6:bb:e0:6e:6a:c0:47:11:8a:eb:8f:2f: d8:16:09:40:88:a6:00:0d:7c:16:be:8a:19:ce:37: a5:88:56:c3:19:44:79:84:d1:e7:75:9d:bd:83:28: 06:c6:02:a5:a2:22:b1:cd:65:4b:27:d4:79:e1:36: 98:f8:8a:ad:f8:b2:ed:80:9c:54:cc:65:46:dc:40: df:df:d3:b5:71:4c:2a:c0:fe:05:fc:2a:9d:e3:89: c1:7d:88:40:16:b4:30:14:bb:21:46:fe:be:cf:38: 5b:c3:08:e5:1c:e1:8d:b4:b7:7e:9e:c1:2e:4a:b9: 41:88:01:a0:f2:6a:eb:1e:1a:f5:6f:9e:ab:08:b7: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AB:78:6B:53:FD:23:88:7A:52:59:F5:6F:A4:10:04:51:84:D8:37 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:42:8a:1c:b0:c3:f2:5d:16:fc:b5:68:51:79:f5:c8:5c:7f: 2e:31:71:e0:1e:1e:6c:e1:03:ff:5b:b3:3a:94:f1:0d:c0:e6: f7:8c:69:64:08:e8:89:31:d6:02:02:71:7f:21:24:10:58:a4: 49:89:99:44:26:b3:76:a4:af:fa:4f:70:4f:b9:ae:06:a4:f5: 66:4c:20:5f:6e:fd:0e:20:72:b6:41:2d:f6:77:62:57:03:4b: f7:36:61:24:44:04:ca:43:92:81:78:ab:34:e4:37:09:db:ae: 4a:34:8c:3b:7b:80:4f:74:e1:41:6c:f2:90:34:59:43:ac:c3: 87:78:14:0a:10:98:f3:d6:4d:57:d0:48:7a:26:73:16:78:42: 0b:a6:f4:4e:3e:83:d9:fd:4a:4c:4f:d0:ba:4f:af:7f:e4:fa: 9b:73:29:fc:ea:9f:b1:42:07:bb:2e:1c:7e:a4:a8:11:2e:ea: 53:93:f3:00:75:4a:bc:14:7a:87:f7:96:b0:8c:3b:41:fa:2a: cd:b3:98:fb:03:30:5a:22:7f:27:e3:1b:f5:4a:22:fc:a3:7c: 78:02:d3:26:94:1e:01:a5:80:49:e3:5e:03:5a:9c:24:96:0c: 93:e3:47:69:fd:f6:ea:20:74:44:b3:37:f7:07:cc:42:a5:4e: 16:82:64:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURLs4U8kn3g/cGZz3tLjb+E5tkfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNjAxMjQwNDU3MDlaFw0yNjAxMjcxMTEwMDlaMDMxMTAvBgNV BAMTKEJEQUI3ODZCNTNGRDIzODg3QTUyNTlGNTZGQTQxMDA0NTE4NEQ4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21TxA9ge5dSl9B12Zys8yzMjs APPg5DyfTRsl06qTFKQjvD/K5VoxJu3D3z0UDTv0btI38GsRqS9FItwe1xRMoTuR YFd/b6zFPPvi99KX5kpzdJHFJ3KYBqTxE9VOMb6f7JdZAtoWl32j24CzyOSJPA0d kIe24cZ34aa74G5qwEcRiuuPL9gWCUCIpgANfBa+ihnON6WIVsMZRHmE0ed1nb2D KAbGAqWiIrHNZUsn1HnhNpj4iq34su2AnFTMZUbcQN/f07VxTCrA/gX8Kp3jicF9 iEAWtDAUuyFG/r7POFvDCOUc4Y20t36ewS5KuUGIAaDyauseGvVvnqsIt5ddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvat4a1P9I4h6Uln1b6QQBFGE2DcwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpCihyww/JdFvy1aFF59chcfy4xceAeHmzh A/9bszqU8Q3A5veMaWQI6Ikx1gICcX8hJBBYpEmJmUQms3akr/pPcE+5rgak9WZM IF9u/Q4gcrZBLfZ3YlcDS/c2YSREBMpDkoF4qzTkNwnbrko0jDt7gE904UFs8pA0 WUOsw4d4FAoQmPPWTVfQSHomcxZ4Qgum9E4+g9n9SkxP0LpPr3/k+ptzKfzqn7FC B7suHH6kqBEu6lOT8wB1SrwUeof3lrCMO0H6Ks2zmPsDMFoifyfjG/VKIvyjfHgC 0yaUHgGlgEnjXgNanCSWDJPjR2n99uogdESzN/cHzEKlThaCZKQ= -----END CERTIFICATE-----Generated at Sun Jan 25 14:23:10 2026 by rpki-client