This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json)
Hash identifier: Nemf8630cfYs33e2XboUJaQFuxzuxOPCDghlGLfofkE=
Subject key identifier: FA:D4:BD:59:20:AA:93:CD:F9:7D:3F:E3:7F:06:A4:00:8E:29:57:E1
Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Certificate serial: 601B45C89B14F1B63880AE52A7A93413000C383F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
Manifest number: 0391
Signing time: Fri 05 Dec 2025 09:04:07 +0000
Manifest this update: Fri 05 Dec 2025 08:59:07 +0000
Manifest next update: Mon 08 Dec 2025 15:35:07 +0000
Files and hashes: 1: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: cnM0NMAQN+nEB2uerjw6Qf1nArdtxZQ6ojcs75GS7ak=)
2: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: yDXbsqxukA4XHHQjS7wVsIWS20Xlf5VSX6w1YkD0k4s=)
3: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: 0fRsI8TFB+RUEbxSqxyjKoC8WzA/bsoSOH/HNkOO8lk=)
4: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=)
5: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl
rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 15:35:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:1b:45:c8:9b:14:f1:b6:38:80:ae:52:a7:a9:34:13:00:0c:38:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Validity
Not Before: Dec 5 08:59:07 2025 GMT
Not After : Dec 8 15:35:07 2025 GMT
Subject: CN=FAD4BD5920AA93CDF97D3FE37F06A4008E2957E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:82:ed:aa:ea:83:1b:36:f5:5a:c2:f2:2a:
d0:23:5f:1f:89:0f:6b:aa:76:17:7d:fd:ab:3d:dd:
e6:4b:c6:fa:20:70:a8:25:3f:1c:b4:b2:31:9e:e1:
e8:b8:94:01:5a:be:e3:2d:d1:31:bd:e3:4a:2a:df:
d5:8e:0d:5e:2f:60:a5:62:f2:c1:6b:24:fd:db:d4:
a1:b1:7d:66:0a:2f:de:3e:d5:26:f1:f7:6b:a9:f5:
e3:a1:4f:23:34:dd:63:d6:b1:13:bf:d9:d9:5d:a4:
99:7a:7e:95:07:f8:92:86:76:0e:0d:cd:7d:ff:e5:
b2:06:10:7e:7b:38:7d:32:0f:d8:cb:89:79:f8:d8:
07:56:9f:a3:81:a1:72:ad:16:6a:60:32:dd:26:92:
98:99:c1:8e:ab:19:8f:8f:66:97:eb:c9:54:08:2b:
5a:91:07:f1:dc:66:2f:ff:24:20:e9:d1:96:1c:81:
d2:a0:0d:ca:2f:b9:3b:98:1a:74:04:76:f6:a9:46:
09:02:af:49:4a:9a:a6:db:db:84:15:e3:9b:eb:32:
25:1b:ce:34:eb:9b:2e:24:46:2b:e2:bd:e7:88:0b:
4f:12:7f:3f:d3:a7:0f:5e:ce:23:8c:69:39:24:2a:
57:da:47:6f:8b:15:30:22:57:ff:03:88:bc:86:5d:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D4:BD:59:20:AA:93:CD:F9:7D:3F:E3:7F:06:A4:00:8E:29:57:E1
X509v3 Authority Key Identifier:
keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5d:47:f1:84:7f:84:4f:5d:3a:0d:03:ce:8e:96:eb:9e:b6:
a5:f7:f0:43:68:e0:42:95:fb:1a:6e:91:94:4a:62:3f:f6:20:
48:be:27:6d:e5:03:72:9b:97:8a:b6:ac:59:eb:55:aa:41:df:
8d:88:6b:02:c8:4a:70:b9:95:44:6f:d0:9d:cc:52:b2:33:ea:
20:17:da:34:af:49:c1:f5:cd:a6:42:d6:71:e9:cc:98:f7:ea:
aa:b1:18:9d:99:62:04:38:62:26:f2:a9:10:87:39:b3:f5:f5:
e9:ad:2e:b7:29:90:a7:31:71:fd:9f:a6:9e:9b:74:83:54:9b:
6b:5c:ff:67:d6:1f:13:22:88:3c:f2:eb:d3:46:d8:e1:64:67:
71:2a:45:45:a0:9d:7f:9f:9a:99:bc:eb:18:15:cc:e1:1b:59:
7c:01:4f:37:ef:45:eb:84:21:24:97:5f:51:c8:f2:e9:b8:de:
7d:cf:e4:13:ea:2d:8c:a5:78:9e:97:08:3a:e9:74:2a:31:d6:
df:ee:df:de:15:70:8c:a3:72:60:15:5b:e9:e8:46:ec:c6:1f:
ed:4f:ff:1f:a5:b8:81:39:96:f6:2c:15:35:09:9e:8c:5a:32:
ba:66:2a:6c:99:ab:ba:78:18:dd:6b:fa:5e:40:2b:b1:bb:56:
26:6e:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:12:36 2025 by rpki-client