This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: DvamMRpwilgkPuqxLl3OYdrYF9ElLxexDR+ambfmhtE= Subject key identifier: FF:35:A5:35:90:4E:1E:6F:10:30:06:1D:CC:FE:F8:80:06:8D:90:70 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 7DE90567518860F3342A1A00934D7908D283ED70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 0221 Signing time: Fri 05 Dec 2025 11:02:12 +0000 Manifest this update: Fri 05 Dec 2025 10:57:12 +0000 Manifest next update: Mon 08 Dec 2025 18:53:12 +0000 Files and hashes: 1: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: HaHx5OkTCBOAwXvI8F/uktfkzp/7IuQG4oeD+zz4ntM=) 2: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e9:05:67:51:88:60:f3:34:2a:1a:00:93:4d:79:08:d2:83:ed:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Dec 5 10:57:12 2025 GMT Not After : Dec 8 18:53:12 2025 GMT Subject: CN=FF35A535904E1E6F1030061DCCFEF880068D9070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:66:26:86:8c:a3:3c:0f:ad:a0:aa:cd:79:21: 9b:fe:bc:d3:1b:fe:ae:ec:d1:35:5f:ac:a9:fd:2b: a5:d2:5f:27:07:4a:a5:94:8d:68:94:8d:f7:a4:b3: 46:fa:7b:3c:fc:d7:43:e7:0a:cb:19:94:72:17:8f: 1b:0f:87:ec:28:4f:f9:6f:2c:38:55:1e:46:61:57: 9a:69:1f:0a:b2:87:85:38:1a:a7:90:e3:05:ec:8f: 2f:a3:25:82:b4:a8:35:c0:0c:bd:a7:4a:e5:14:04: 53:46:6b:29:8f:18:dc:64:3e:89:d6:1f:93:1b:b9: 6c:d0:6c:e2:3c:bb:f2:9e:5b:fb:71:d1:11:2d:9b: 7d:f7:73:a7:9b:4c:54:25:7e:d4:de:74:97:de:c7: 39:40:91:51:49:85:12:ec:9d:1e:b5:6b:77:66:96: 05:3a:88:dd:f6:cd:c2:d0:23:cd:7d:1e:fe:b9:7d: 98:9a:6a:7e:3b:ef:df:57:d2:e4:6b:a5:35:cb:f4: 13:8b:62:58:d4:77:cc:4c:2b:38:50:93:24:66:0e: 96:cc:1b:5b:6a:73:97:6d:47:a1:fd:57:58:27:61: a2:d8:af:ca:49:ac:ce:5a:71:e7:c9:d7:3f:c8:86: b6:21:55:32:d2:66:e1:cd:2d:0d:8e:c9:3d:c6:66: 53:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:35:A5:35:90:4E:1E:6F:10:30:06:1D:CC:FE:F8:80:06:8D:90:70 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:25:d8:0e:a8:77:e3:dd:8f:18:ef:94:0b:dd:6a:8f:7d:3a: 56:93:df:5f:94:14:45:ad:df:b0:2f:ff:44:81:fb:2f:91:60: 6d:c4:40:0f:cc:a7:a7:f6:b7:59:b2:2b:5d:67:8d:1a:d7:8a: e6:3b:70:0e:2e:9d:af:99:bb:9a:24:26:2a:94:24:ca:31:c0: 5c:67:e2:1d:8e:26:99:ce:d8:d0:57:c5:28:8c:52:69:1c:70: 6d:41:b0:ae:e7:13:f1:3e:28:f0:ab:c2:bf:b6:7c:4a:88:40: 72:75:69:31:75:e8:de:d7:e4:46:f6:24:9b:45:07:d4:6a:5f: 7f:48:97:a9:a0:08:7d:54:b4:41:3d:07:c1:80:e1:a8:63:4e: 32:d9:4d:9c:87:38:55:63:4d:68:ff:77:f3:45:af:9d:39:1e: d2:7a:af:1e:2b:fd:35:6f:e9:f2:55:8e:a7:dc:21:a4:15:43: 6b:9e:6f:8a:ba:93:72:63:55:81:cd:e7:1e:f4:4f:7e:25:96: 0d:ec:f4:b4:69:4d:4f:34:8e:ba:e0:34:e1:c2:8a:48:18:24: 8d:d0:d5:eb:fe:c0:89:89:e5:15:e9:a8:1b:be:74:84:3c:ad: e3:60:7d:c1:2a:db:81:e2:4e:be:ca:e3:71:5d:c9:93:25:e2: 06:05:c4:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfekFZ1GIYPM0KhoAk015CNKD7XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNTEyMDUxMDU3MTJaFw0yNTEyMDgxODUzMTJaMDMxMTAvBgNV BAMTKEZGMzVBNTM1OTA0RTFFNkYxMDMwMDYxRENDRkVGODgwMDY4RDkwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVZiaGjKM8D62gqs15IZv+vNMb /q7s0TVfrKn9K6XSXycHSqWUjWiUjfeks0b6ezz810PnCssZlHIXjxsPh+woT/lv LDhVHkZhV5ppHwqyh4U4GqeQ4wXsjy+jJYK0qDXADL2nSuUUBFNGaymPGNxkPonW H5MbuWzQbOI8u/KeW/tx0REtm333c6ebTFQlftTedJfexzlAkVFJhRLsnR61a3dm lgU6iN32zcLQI819Hv65fZiaan47799X0uRrpTXL9BOLYljUd8xMKzhQkyRmDpbM G1tqc5dtR6H9V1gnYaLYr8pJrM5acefJ1z/IhrYhVTLSZuHNLQ2OyT3GZlOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/zWlNZBOHm8QMAYdzP74gAaNkHAwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0l2A6od+PdjxjvlAvdao99OlaT31+UFEWt 37Av/0SB+y+RYG3EQA/Mp6f2t1myK11njRrXiuY7cA4una+Zu5okJiqUJMoxwFxn 4h2OJpnO2NBXxSiMUmkccG1BsK7nE/E+KPCrwr+2fEqIQHJ1aTF16N7X5Eb2JJtF B9RqX39Il6mgCH1UtEE9B8GA4ahjTjLZTZyHOFVjTWj/d/NFr505HtJ6rx4r/TVv 6fJVjqfcIaQVQ2ueb4q6k3JjVYHN5x70T34llg3s9LRpTU80jrrgNOHCikgYJI3Q 1ev+wImJ5RXpqBu+dIQ8reNgfcEq24HiTr7K43FdyZMl4gYFxI0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:29 2025 by rpki-client