This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft File: 2BB2F216687C4268643F593811E7E886DCD6CBFA.mft (raw, json) Hash identifier: zrtNffATMdQ411zldA7YRdJ2M223aOa/EKeJxaR0UK8= Subject key identifier: 8F:86:C6:55:34:82:22:5D:00:46:30:96:A3:19:00:9E:8D:72:AB:06 Authority key identifier: 2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA Certificate issuer: /CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Certificate serial: 3764C30098525395B5BDAA85ABA2EC00A3556601 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft Manifest number: 0237 Signing time: Fri 23 Jan 2026 18:02:13 +0000 Manifest this update: Fri 23 Jan 2026 17:57:13 +0000 Manifest next update: Tue 27 Jan 2026 02:41:13 +0000 Files and hashes: 1: 323030313a6466313a6134303a3a2f34382d3438203d3e20313431363432.roa (hash: vpFjRIttE1ynRbgvXovePteATzbLktRmbZK73Q8+SsU=) 2: 2BB2F216687C4268643F593811E7E886DCD6CBFA.crl (hash: txCwsF/5FGXNyFWmfIi6Vu8q3ROgFzDG/4+Y5LsnwAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 02:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:64:c3:00:98:52:53:95:b5:bd:aa:85:ab:a2:ec:00:a3:55:66:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB2F216687C4268643F593811E7E886DCD6CBFA Validity Not Before: Jan 23 17:57:13 2026 GMT Not After : Jan 27 02:41:13 2026 GMT Subject: CN=8F86C6553482225D00463096A319009E8D72AB06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:cd:4a:0d:3f:76:d9:8d:07:c6:6d:ef:20: a7:15:99:2a:b1:8c:9b:87:d5:8f:8a:c3:d8:f3:8f: 03:46:bf:5e:bc:25:cb:72:ad:b2:52:19:8e:ae:f7: 23:34:1c:bf:e8:95:7e:0d:ed:6d:e9:b7:1e:ac:64: 06:a4:2f:58:b3:fc:08:97:dc:0f:ba:39:90:10:56: e8:62:64:24:63:a8:ff:97:21:88:b7:d9:b2:f0:f2: 3a:8f:37:59:6c:aa:de:e0:15:c0:0b:54:57:61:bd: 5f:d3:d9:1b:f3:0b:40:c0:c5:19:3c:e6:c1:ef:96: 03:06:48:38:62:04:46:bc:92:1f:f5:88:35:d6:6d: 67:bd:f6:fc:0e:96:9a:6b:1e:25:e1:37:d6:fc:d5: 8c:48:89:e0:e6:fb:19:04:31:f1:12:3c:70:91:27: 05:41:50:49:1d:4e:8e:a6:60:e6:31:3b:08:91:72: 95:90:46:37:14:3d:38:3c:86:98:f8:84:b4:7f:40: 4a:ef:09:22:2e:8e:fc:ec:da:2b:af:cb:40:60:89: d4:b4:7a:ea:88:13:65:bc:ed:98:5a:de:d5:59:ea: 79:4c:48:1d:22:87:27:dd:6c:58:37:25:f0:4a:a5: a6:f5:95:e9:00:3c:df:d0:f9:1e:c4:0c:4b:40:3d: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:C6:55:34:82:22:5D:00:46:30:96:A3:19:00:9E:8D:72:AB:06 X509v3 Authority Key Identifier: keyid:2B:B2:F2:16:68:7C:42:68:64:3F:59:38:11:E7:E8:86:DC:D6:CB:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB2F216687C4268643F593811E7E886DCD6CBFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62afdf50-df51-495a-b1b0-a13a0139ab15/0/2BB2F216687C4268643F593811E7E886DCD6CBFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1f:c4:2b:f1:af:ce:5e:f0:bd:7c:a7:a8:89:f8:35:a2:cd: 06:e1:ac:f0:af:13:9a:cb:67:89:ab:54:f9:1a:61:48:c5:54: ba:11:95:85:8c:04:ef:35:be:47:ae:b6:37:06:ca:3d:9e:c7: 92:ab:c6:48:6d:32:24:74:ec:40:9a:16:8e:a9:14:04:34:1e: 18:07:9c:25:3f:2a:f4:95:57:44:37:dc:7d:70:ce:c0:69:c8: d6:60:d1:cd:1c:d5:db:71:6f:84:a8:09:4f:8e:a6:1a:d6:84: f8:99:fa:f9:5a:e4:f7:95:2e:cd:13:24:b0:0c:c7:a9:e9:bc: 18:aa:f2:fa:47:f5:b8:c8:4a:c8:bc:15:cb:6f:db:88:a6:b1: 53:c9:25:11:91:b8:9b:99:db:04:ad:cf:d5:f3:79:61:80:e9: ef:82:5d:e0:ae:a4:e9:50:7b:f1:5a:bb:36:97:a2:f8:6c:da: 28:f0:19:50:f1:c5:61:98:c2:cc:d4:2b:6f:01:b1:e2:7b:79: b8:1c:ea:79:e6:98:6e:8d:a5:37:61:48:e1:11:7c:12:f7:80: f3:be:54:bc:dc:b2:32:97:90:46:9f:a6:98:f0:a8:b7:c7:a2: 1a:20:63:06:5b:b9:8e:d7:26:b9:75:78:f8:91:34:38:fa:e1: 91:9a:57:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2TDAJhSU5W1vaqFq6LsAKNVZgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZE Q0Q2Q0JGQTAeFw0yNjAxMjMxNzU3MTNaFw0yNjAxMjcwMjQxMTNaMDMxMTAvBgNV BAMTKDhGODZDNjU1MzQ4MjIyNUQwMDQ2MzA5NkEzMTkwMDlFOEQ3MkFCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhs1KDT922Y0Hxm3vIKcVmSqx jJuH1Y+Kw9jzjwNGv168JctyrbJSGY6u9yM0HL/olX4N7W3ptx6sZAakL1iz/AiX 3A+6OZAQVuhiZCRjqP+XIYi32bLw8jqPN1lsqt7gFcALVFdhvV/T2RvzC0DAxRk8 5sHvlgMGSDhiBEa8kh/1iDXWbWe99vwOlpprHiXhN9b81YxIieDm+xkEMfESPHCR JwVBUEkdTo6mYOYxOwiRcpWQRjcUPTg8hpj4hLR/QErvCSIujvzs2iuvy0BgidS0 euqIE2W87Zha3tVZ6nlMSB0ihyfdbFg3JfBKpab1lekAPN/Q+R7EDEtAPbs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj4bGVTSCIl0ARjCWoxkAno1yqwYwHwYDVR0j BBgwFoAUK7LyFmh8QmhkP1k4EefohtzWy/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmZGY1MC1kZjUxLTQ5NWEtYjFiMC1hMTNhMDEzOWFiMTUvMC8yQkIyRjIxNjY4 N0M0MjY4NjQzRjU5MzgxMUU3RTg4NkRDRDZDQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4ODZEQ0Q2 Q0JGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZmRmNTAtZGY1MS00OTVhLWIx YjAtYTEzYTAxMzlhYjE1LzAvMkJCMkYyMTY2ODdDNDI2ODY0M0Y1OTM4MTFFN0U4 ODZEQ0Q2Q0JGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkfxCvxr85e8L18p6iJ+DWizQbhrPCvE5rL Z4mrVPkaYUjFVLoRlYWMBO81vkeutjcGyj2ex5KrxkhtMiR07ECaFo6pFAQ0HhgH nCU/KvSVV0Q33H1wzsBpyNZg0c0c1dtxb4SoCU+OphrWhPiZ+vla5PeVLs0TJLAM x6npvBiq8vpH9bjISsi8Fctv24imsVPJJRGRuJuZ2wStz9XzeWGA6e+CXeCupOlQ e/FauzaXovhs2ijwGVDxxWGYwszUK28BseJ7ebgc6nnmmG6NpTdhSOERfBL3gPO+ VLzcsjKXkEafppjwqLfHohogYwZbuY7XJrl1ePiRNDj64ZGaV+0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:41:13 2026 by rpki-client