This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: s9vVl/uVewko6bmUaesHzfSRu0NRCup+GnjZ6M4PJq4= Subject key identifier: 4F:B7:FB:83:E0:FE:2F:8A:06:08:C9:B4:EE:8E:9D:52:9D:27:9E:56 Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 11D4F8C5BE4C1B9DED536D92BFEB010EEFA2C193 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: B4 Signing time: Sat 06 Dec 2025 13:11:57 +0000 Manifest this update: Sat 06 Dec 2025 13:06:57 +0000 Manifest next update: Tue 09 Dec 2025 22:19:57 +0000 Files and hashes: 1: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: 0PyZ1Izmcdz8RbI4pvamYzCkDML//PlzpXnY61vINZs=) 2: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: kSoga068SMJ/x7pn4XYd6Kz2lf7JnmCaZO8DH0PoRyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d4:f8:c5:be:4c:1b:9d:ed:53:6d:92:bf:eb:01:0e:ef:a2:c1:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: Dec 6 13:06:57 2025 GMT Not After : Dec 9 22:19:57 2025 GMT Subject: CN=4FB7FB83E0FE2F8A0608C9B4EE8E9D529D279E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d1:9d:fe:9b:62:82:3d:53:09:01:ca:a4:00: b0:b9:b6:49:fd:63:be:d7:e3:ab:41:03:33:52:1d: c5:ef:80:f8:7b:9c:d1:8c:1b:dd:0b:ed:c9:c1:9d: 0d:42:90:34:bc:d1:c8:d8:c1:08:be:75:c8:4c:3f: bd:2f:43:10:db:bc:90:c5:ab:b7:bc:29:24:4a:ca: dc:4d:5d:9c:5f:27:f8:0a:37:40:09:09:69:99:0f: 62:8b:f8:45:52:59:83:e0:2e:1a:b3:01:2b:2d:de: 42:0b:1f:7c:de:32:8a:28:33:e3:f6:80:2a:e5:cf: 65:79:1f:f1:f0:2b:4c:3b:35:1e:04:1c:38:af:75: 4a:4f:5e:a1:90:53:96:0c:a8:5e:91:86:5e:4b:62: 08:fd:9c:d5:09:7c:81:0f:74:99:a2:59:25:a3:5a: 65:80:61:66:50:07:a2:cb:eb:2f:13:12:9b:bf:66: e7:28:a7:59:7d:15:81:5f:a8:ae:86:d0:8e:f4:c5: c1:57:b7:e9:53:2f:a5:72:15:c3:28:21:f7:5e:2f: b6:43:50:0a:3f:d3:e5:26:3c:5d:27:dd:f2:eb:9f: f9:5a:8d:db:1a:d6:b8:86:f3:a8:ca:28:a3:90:b9: 3e:df:a3:ec:db:e4:38:74:5f:4c:5e:81:58:72:c4: ae:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B7:FB:83:E0:FE:2F:8A:06:08:C9:B4:EE:8E:9D:52:9D:27:9E:56 X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:89:e7:5d:43:d8:2b:15:83:ec:ae:5a:ef:1a:9e:ba:bc:21: 1e:75:8a:86:13:c2:56:f1:2d:21:93:91:e4:9f:7c:40:cb:69: 53:17:46:04:08:75:52:e2:b3:34:fb:4d:91:b1:81:cc:07:b1: c6:06:33:d4:24:02:c2:4f:f3:ef:10:4a:0b:14:ff:e6:73:d0: 6a:48:f0:b0:86:f8:2c:25:08:b8:96:65:3b:26:11:64:e9:fe: 90:7e:9e:6a:5e:52:a4:18:22:43:35:21:b9:ce:b6:76:c4:d0: 45:e2:ae:87:8d:07:54:a5:6d:e2:3e:02:e6:23:fa:58:b6:4f: 55:cd:1a:32:6c:96:07:1a:bc:cd:86:be:ed:d4:dc:b6:43:ed: bd:21:28:08:c4:10:dc:b7:4b:f5:9e:76:0b:6b:08:e7:03:dc: 39:b6:2b:a2:11:53:f7:1f:03:0a:87:4d:25:29:1d:b6:04:1a: e4:7f:e6:59:7c:d0:0c:f5:e1:6b:ba:e8:b4:65:09:d8:9c:d8: 24:70:2a:85:af:5b:16:0d:58:ed:75:b9:6e:d2:4c:84:ce:69: ce:d3:e5:0c:c6:72:f2:a7:8a:ab:19:50:0f:37:96:db:47:ee: 7d:1f:9c:df:36:ad:bf:7a:c2:66:ce:ad:38:a6:f3:63:43:ce: af:6d:70:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdT4xb5MG53tU22Sv+sBDu+iwZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNTEyMDYxMzA2NTdaFw0yNTEyMDkyMjE5NTdaMDMxMTAvBgNV BAMTKDRGQjdGQjgzRTBGRTJGOEEwNjA4QzlCNEVFOEU5RDUyOUQyNzlFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD00Z3+m2KCPVMJAcqkALC5tkn9 Y77X46tBAzNSHcXvgPh7nNGMG90L7cnBnQ1CkDS80cjYwQi+dchMP70vQxDbvJDF q7e8KSRKytxNXZxfJ/gKN0AJCWmZD2KL+EVSWYPgLhqzASst3kILH3zeMoooM+P2 gCrlz2V5H/HwK0w7NR4EHDivdUpPXqGQU5YMqF6Rhl5LYgj9nNUJfIEPdJmiWSWj WmWAYWZQB6LL6y8TEpu/Zucop1l9FYFfqK6G0I70xcFXt+lTL6VyFcMoIfdeL7ZD UAo/0+UmPF0n3fLrn/lajdsa1riG86jKKKOQuT7fo+zb5Dh0X0xegVhyxK6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT7f7g+D+L4oGCMm07o6dUp0nnlYwHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOJ511D2CsVg+yuWu8anrq8IR51ioYTwlbx LSGTkeSffEDLaVMXRgQIdVLiszT7TZGxgcwHscYGM9QkAsJP8+8QSgsU/+Zz0GpI 8LCG+CwlCLiWZTsmEWTp/pB+nmpeUqQYIkM1IbnOtnbE0EXiroeNB1SlbeI+AuYj +li2T1XNGjJslgcavM2Gvu3U3LZD7b0hKAjEENy3S/WedgtrCOcD3Dm2K6IRU/cf AwqHTSUpHbYEGuR/5ll80Az14Wu66LRlCdic2CRwKoWvWxYNWO11uW7STITOac7T 5QzGcvKniqsZUA83lttH7n0fnN82rb96wmbOrTim82NDzq9tcFg= -----END CERTIFICATE-----Generated at Sun Dec 7 05:15:48 2025 by rpki-client