This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft File: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft (raw, json) Hash identifier: bgoPea8RDc2D7gwMterzcoqFwSd8Fb1parAoODknFTE= Subject key identifier: DA:4B:66:4C:DC:1D:06:46:F7:1C:B3:FA:C5:73:5F:5A:C6:5B:B2:B7 Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 Certificate issuer: /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Certificate serial: 1699F0BC4EB71CB268AF9679CA66F3D6498FE122 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft Manifest number: 03A7 Signing time: Fri 23 Jan 2026 20:51:33 +0000 Manifest this update: Fri 23 Jan 2026 20:46:33 +0000 Manifest next update: Tue 27 Jan 2026 01:48:33 +0000 Files and hashes: 1: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: cnM0NMAQN+nEB2uerjw6Qf1nArdtxZQ6ojcs75GS7ak=) 2: 2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl (hash: ysURM6BvwAnwZVPemZX/yWN+aafrufGMPVvI309Ywtg=) 3: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: yDXbsqxukA4XHHQjS7wVsIWS20Xlf5VSX6w1YkD0k4s=) 4: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: 8zUKTcgIM2YuD1hdzVzeO7drrLCkIVs9L0M7lsGNsV4=) 5: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: UN6dazoYFxgS6jdi8SmiPFiRAzrs0mSEhCBMn6iEnws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:99:f0:bc:4e:b7:1c:b2:68:af:96:79:ca:66:f3:d6:49:8f:e1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6 Validity Not Before: Jan 23 20:46:33 2026 GMT Not After : Jan 27 01:48:33 2026 GMT Subject: CN=DA4B664CDC1D0646F71CB3FAC5735F5AC65BB2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c1:38:8b:ac:b3:2b:61:3a:c0:b4:33:d1:fc: 29:00:db:cb:39:bb:02:81:78:43:a2:df:f8:9e:47: 29:d6:41:8f:2a:f3:a5:a6:4d:01:64:31:8e:01:26: c7:ea:75:9e:52:1a:57:81:e9:81:40:2e:db:f3:ae: d8:77:ad:12:ce:8f:2b:75:f6:63:26:2f:2f:3a:3c: ca:d8:fb:16:22:83:b3:11:f1:50:b6:55:76:fe:91: 68:e0:38:39:f3:79:9e:8e:8f:90:68:5f:bb:f2:59: a7:2a:9f:42:59:26:ae:75:4f:ff:fa:64:50:93:67: 51:33:bc:89:6f:ac:83:4a:d4:fb:fa:f6:9a:e8:bb: 62:4d:8e:1d:34:cb:73:15:91:48:b7:be:01:89:bb: 9f:90:d5:70:e9:e0:42:a5:1d:a5:4e:a3:3a:e2:99: 33:fe:52:6a:b5:94:e1:2a:23:61:fe:08:17:09:8f: 92:3a:c2:d1:1c:eb:4c:86:f7:cc:67:24:3e:d8:82: 4f:fd:32:e0:0c:7b:93:aa:64:9f:03:b8:1a:9c:8a: cb:71:36:a7:39:8b:0e:9a:38:1f:d8:de:3f:db:ba: 7e:85:57:ec:d2:e3:12:89:6b:94:21:53:ad:2c:55: 6c:ef:37:29:aa:df:76:86:fd:c4:16:16:0f:ed:b8: 4c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4B:66:4C:DC:1D:06:46:F7:1C:B3:FA:C5:73:5F:5A:C6:5B:B2:B7 X509v3 Authority Key Identifier: keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:91:be:5d:d6:eb:26:ae:ac:8b:5f:0b:66:64:30:84:b3:42: 3a:dd:6e:9e:c4:e1:bf:e0:aa:b9:8f:11:39:f6:80:53:bd:27: 72:6e:a0:12:e2:54:23:77:a0:c3:93:a0:d9:49:64:78:46:14: 25:6d:af:ba:c8:2d:3b:87:4c:17:ab:94:37:8c:e0:91:e3:37: a8:40:32:17:f7:76:13:6e:7e:d3:7f:45:6c:13:18:45:b5:5e: 61:d0:ca:f5:87:b3:f8:76:ad:9c:b2:c0:a6:36:df:93:af:65: e5:79:b0:cc:c1:76:7f:49:b6:d5:0f:91:81:7f:eb:19:49:31: 94:a3:a6:79:06:e9:1b:94:3a:3a:eb:90:28:ef:8f:c0:9e:6e: fc:29:7c:7e:20:9d:04:d5:bc:0c:23:03:c4:74:34:d2:84:8c: ed:eb:a4:00:01:68:1c:5b:8e:dd:04:cf:18:c9:15:bc:4c:65: 68:be:3f:3e:03:86:19:f1:0b:56:12:ae:94:70:d0:13:80:4f: a8:5a:ae:15:7b:10:47:ac:28:16:fb:4b:39:bf:f3:ef:69:4e: 9d:29:1c:69:25:04:56:9c:ef:c0:df:de:dc:f1:4c:57:15:2d: 1a:e2:50:6e:a6:ab:0d:db:f4:12:63:1b:b7:40:e3:f1:23:84: fb:a6:9c:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFpnwvE63HLJor5Z5ymbz1kmP4SIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1 RDdBNjNBNjAeFw0yNjAxMjMyMDQ2MzNaFw0yNjAxMjcwMTQ4MzNaMDMxMTAvBgNV BAMTKERBNEI2NjRDREMxRDA2NDZGNzFDQjNGQUM1NzM1RjVBQzY1QkIyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwTiLrLMrYTrAtDPR/CkA28s5 uwKBeEOi3/ieRynWQY8q86WmTQFkMY4BJsfqdZ5SGleB6YFALtvzrth3rRLOjyt1 9mMmLy86PMrY+xYig7MR8VC2VXb+kWjgODnzeZ6Oj5BoX7vyWacqn0JZJq51T//6 ZFCTZ1EzvIlvrINK1Pv69prou2JNjh00y3MVkUi3vgGJu5+Q1XDp4EKlHaVOozri mTP+Umq1lOEqI2H+CBcJj5I6wtEc60yG98xnJD7Ygk/9MuAMe5OqZJ8DuBqcistx Nqc5iw6aOB/Y3j/bun6FV+zS4xKJa5QhU60sVWzvNymq33aG/cQWFg/tuEy7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ktmTNwdBkb3HLP6xXNfWsZbsrcwHwYDVR0j BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB NjNBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3 REU1RDdBNjNBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKRvl3W6yaurItfC2ZkMISzQjrdbp7E4b/g qrmPETn2gFO9J3JuoBLiVCN3oMOToNlJZHhGFCVtr7rILTuHTBerlDeM4JHjN6hA Mhf3dhNuftN/RWwTGEW1XmHQyvWHs/h2rZyywKY235OvZeV5sMzBdn9JttUPkYF/ 6xlJMZSjpnkG6RuUOjrrkCjvj8CebvwpfH4gnQTVvAwjA8R0NNKEjO3rpAABaBxb jt0EzxjJFbxMZWi+Pz4DhhnxC1YSrpRw0BOAT6harhV7EEesKBb7Szm/8+9pTp0p HGklBFac78Df3tzxTFcVLRriUG6mqw3b9BJjG7dA4/EjhPumnPo= -----END CERTIFICATE-----Generated at Sun Jan 25 22:11:54 2026 by rpki-client