This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: 3MPwL1FYjqdmsTRFFYXHBUTzW9cK81uRO9DrwFPdekQ= Subject key identifier: 6F:0E:06:23:CE:14:D6:BB:BB:69:9D:9A:F5:DC:B7:29:53:6E:44:A7 Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 38B93F6C6073B33ECD3B961AF48AED39620CE6A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 03A8 Signing time: Fri 05 Dec 2025 04:52:11 +0000 Manifest this update: Fri 05 Dec 2025 04:47:11 +0000 Manifest next update: Mon 08 Dec 2025 16:14:11 +0000 Files and hashes: 1: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: nAR8G4hX3jq1kenmSubuYPxQaJLUTrXa6GEfC8a5iKc=) 2: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:b9:3f:6c:60:73:b3:3e:cd:3b:96:1a:f4:8a:ed:39:62:0c:e6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Dec 5 04:47:11 2025 GMT Not After : Dec 8 16:14:11 2025 GMT Subject: CN=6F0E0623CE14D6BBBB699D9AF5DCB729536E44A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:32:49:ad:ed:c1:16:64:e4:2e:59:14:e0:90: 19:82:ce:a8:ab:05:ad:d3:9c:2e:9e:8b:94:38:3f: 7a:f2:b9:ac:8a:a8:8a:2f:64:29:62:4e:fd:12:f7: 23:ec:e3:3e:48:68:48:81:73:54:b5:69:a7:6b:ad: 12:10:54:01:89:57:05:85:de:da:4f:fe:ac:6e:b1: 08:ed:07:54:27:34:cd:1a:6e:f2:3e:b5:b9:41:21: b9:33:41:31:bf:37:04:90:fa:ff:fc:b4:9d:2e:ed: eb:6b:2c:f2:99:a7:f6:c9:7f:82:07:92:2e:d4:5c: 6d:b2:dd:eb:49:f2:39:f7:c2:92:94:d1:c3:9a:16: 5f:5f:1e:21:0d:a3:8a:c6:dc:0b:81:b5:9a:e5:b6: be:7c:ea:b4:4a:36:59:41:79:23:3e:34:3a:dc:36: 89:54:6e:f1:8d:0f:5d:8b:33:73:ea:f9:b6:f2:ac: 62:1d:29:4d:34:d2:73:37:22:b5:6a:27:67:31:38: 73:f2:9f:22:22:af:2a:3a:a5:fa:0e:b8:a8:5d:50: cb:11:9e:8e:d0:c1:16:6b:6d:21:79:26:f7:9e:90: f3:ff:e6:4d:2c:4f:ca:ec:0e:ac:b0:ad:f8:3c:70: ff:c4:8c:12:66:fd:9f:d4:3c:a4:b6:75:f6:55:32: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0E:06:23:CE:14:D6:BB:BB:69:9D:9A:F5:DC:B7:29:53:6E:44:A7 X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:61:4a:f2:57:25:2b:1b:cf:2c:93:20:bb:9d:96:1f:35:5e: fa:3c:23:7a:ee:e1:e4:a5:1b:1f:dd:c3:55:5d:3d:3a:0a:7e: 2f:a8:87:31:da:41:f1:fa:14:11:03:28:e2:c7:e0:c8:3c:1b: 04:86:9a:7c:69:f8:7c:56:e2:b8:3f:e3:bf:68:ff:ac:33:ac: f0:31:15:4a:d0:93:6b:cb:14:97:be:2f:c1:74:82:d3:b3:7d: 35:a4:c0:72:33:41:27:22:a0:d3:f0:92:ba:55:ec:97:7c:1a: 5b:5a:cb:43:2a:dc:6c:e4:bf:67:2a:6f:07:f6:19:74:bb:f8: 59:14:d4:15:44:e7:87:0f:19:b1:f5:43:4f:28:51:18:27:da: 1c:1e:41:01:54:58:ee:a7:7c:35:0d:4c:ab:be:47:ab:74:c1: 04:8b:82:40:ed:b4:e1:bc:5b:70:57:a1:b0:4a:bb:24:7e:18: da:51:08:f3:3e:a1:01:62:7d:63:2b:6f:08:71:07:29:b2:1e: 73:be:6e:be:33:af:76:0a:ea:b6:30:45:84:99:e2:64:32:68: 6e:78:18:a7:85:d5:a2:dc:e7:4c:0e:05:a7:1a:52:fd:79:41: ba:21:5b:2a:0f:ed:2f:c7:71:a2:14:28:62:52:d5:2f:97:3d: a9:66:be:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOLk/bGBzsz7NO5Ya9IrtOWIM5qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNTEyMDUwNDQ3MTFaFw0yNTEyMDgxNjE0MTFaMDMxMTAvBgNV BAMTKDZGMEUwNjIzQ0UxNEQ2QkJCQjY5OUQ5QUY1RENCNzI5NTM2RTQ0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlMkmt7cEWZOQuWRTgkBmCzqir Ba3TnC6ei5Q4P3ryuayKqIovZCliTv0S9yPs4z5IaEiBc1S1aadrrRIQVAGJVwWF 3tpP/qxusQjtB1QnNM0abvI+tblBIbkzQTG/NwSQ+v/8tJ0u7etrLPKZp/bJf4IH ki7UXG2y3etJ8jn3wpKU0cOaFl9fHiENo4rG3AuBtZrltr586rRKNllBeSM+NDrc NolUbvGND12LM3Pq+bbyrGIdKU000nM3IrVqJ2cxOHPynyIiryo6pfoOuKhdUMsR no7QwRZrbSF5JveekPP/5k0sT8rsDqywrfg8cP/EjBJm/Z/UPKS2dfZVMmX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbw4GI84U1ru7aZ2a9dy3KVNuRKcwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9hSvJXJSsbzyyTILudlh81Xvo8I3ru4eSl Gx/dw1VdPToKfi+ohzHaQfH6FBEDKOLH4Mg8GwSGmnxp+HxW4rg/479o/6wzrPAx FUrQk2vLFJe+L8F0gtOzfTWkwHIzQScioNPwkrpV7Jd8Gltay0Mq3Gzkv2cqbwf2 GXS7+FkU1BVE54cPGbH1Q08oURgn2hweQQFUWO6nfDUNTKu+R6t0wQSLgkDttOG8 W3BXobBKuyR+GNpRCPM+oQFifWMrbwhxBymyHnO+br4zr3YK6rYwRYSZ4mQyaG54 GKeF1aLc50wOBacaUv15QbohWyoP7S/HcaIUKGJS1S+XPalmvmo= -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:29 2025 by rpki-client