This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: cjdDfrh1xWORPg8LGfUZuGusvakpWjrDMDwbDirJ408= Subject key identifier: 22:6E:B7:C4:B1:AD:29:17:27:74:D2:39:FD:9E:7D:75:80:CA:7D:E9 Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 4FB6ACC44772CD536BF72B3D4A59D1FC4D6C7408 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 048F Signing time: Fri 05 Dec 2025 05:41:14 +0000 Manifest this update: Fri 05 Dec 2025 05:36:14 +0000 Manifest next update: Mon 08 Dec 2025 10:06:14 +0000 Files and hashes: 1: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: lwvUB4JJ9WcFs6q0zJayHFVJWdbtwP5RLzCy5HJONHQ=) 2: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: 4Nyf95sTRdqoKN64WuRTyc5m5hoROhK6oFKdH03e8KY=) 3: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 9ih//U/iPAsPFZQIcxukFDIuvhJTLAD0tRGBXhc3tOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b6:ac:c4:47:72:cd:53:6b:f7:2b:3d:4a:59:d1:fc:4d:6c:74:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Dec 5 05:36:14 2025 GMT Not After : Dec 8 10:06:14 2025 GMT Subject: CN=226EB7C4B1AD29172774D239FD9E7D7580CA7DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:98:6f:eb:48:ef:55:29:c8:37:33:2e:e5: 5d:7c:89:be:a2:fa:a1:7d:f2:8c:c9:2b:5c:62:6b: 05:f7:3a:41:67:66:2f:bf:be:75:7a:3b:22:6b:d8: 96:4a:97:6f:7a:52:1d:e6:bf:18:5c:1f:40:f1:9a: 35:0d:e1:d7:d1:4e:cd:b0:4f:37:cf:8f:36:8c:97: e9:11:67:44:74:d7:24:8a:f1:84:6c:36:6f:5d:d4: e6:f6:3a:a8:d3:b8:cf:60:2d:6a:c4:87:4b:54:f0: c8:28:60:a1:fc:03:c8:f6:1e:8c:b3:7d:6e:a1:1e: 4d:e2:26:3d:7d:00:22:0d:8c:6d:c7:2d:c7:07:06: f2:0f:dd:7a:99:23:3c:45:4e:2c:c5:ab:1c:89:d6: 88:df:25:11:7e:3b:62:5d:7a:19:e2:75:f2:bc:3a: 2e:a0:a4:a2:9d:53:3e:70:c6:ee:7e:03:0d:e4:22: 37:81:32:c1:39:1b:c1:51:1d:10:49:24:a4:fe:81: d9:c5:d5:60:4e:96:19:46:d7:8e:aa:bd:c1:fa:c0: c3:bc:72:9e:8c:d5:f4:74:53:2f:14:53:7a:9e:61: 1f:13:0e:22:be:a8:2f:ca:48:3a:ed:1d:b7:e0:a1: a9:43:8c:03:be:c3:84:d4:0a:15:d0:cf:8b:db:4c: 31:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6E:B7:C4:B1:AD:29:17:27:74:D2:39:FD:9E:7D:75:80:CA:7D:E9 X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:28:ab:4a:ef:07:b3:42:c1:b1:37:09:04:1c:7f:65:b1:7b: 67:99:09:9c:e3:89:44:7e:b5:f3:07:53:26:23:9d:38:6a:b3: 16:bd:e4:a6:0f:a1:82:e9:2a:d9:b8:85:fa:52:29:ee:dd:73: aa:20:23:ce:bd:ea:f9:e9:21:68:7d:8b:64:b3:b7:1e:94:72: 92:d2:c8:70:37:f8:aa:04:bb:dd:26:48:e7:91:3b:96:70:c6: 4d:f1:6f:c9:b7:03:21:d5:50:0f:13:e1:9a:ff:44:fc:8c:a1: c9:00:10:04:ae:05:a4:1e:f1:d9:6b:fc:52:8d:b9:77:2d:d7: 30:98:b2:a9:70:53:ad:5d:fe:f3:7c:03:ab:23:39:de:12:12: 2a:61:5b:c3:0b:5f:23:b3:f5:bd:54:4b:00:61:df:87:c0:64: 80:4a:07:56:6a:36:2f:5e:52:ed:28:d8:04:72:1f:73:27:07: 8d:ba:35:54:d0:47:a4:0e:b6:58:96:5c:be:c0:7f:cd:d5:ae: 77:6a:be:f7:ae:21:57:b2:7d:be:7a:9e:29:f0:d7:b2:87:ec: 38:b2:29:d1:f8:f7:b8:1e:0a:c9:01:f9:ed:3c:8f:dc:42:b1: c6:15:13:3d:20:27:c7:8b:68:fb:15:8f:b1:ef:a4:29:29:14: b7:e0:cf:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7asxEdyzVNr9ys9SlnR/E1sdAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNTEyMDUwNTM2MTRaFw0yNTEyMDgxMDA2MTRaMDMxMTAvBgNV BAMTKDIyNkVCN0M0QjFBRDI5MTcyNzc0RDIzOUZEOUU3RDc1ODBDQTdERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgphv60jvVSnINzMu5V18ib6i +qF98ozJK1xiawX3OkFnZi+/vnV6OyJr2JZKl296Uh3mvxhcH0DxmjUN4dfRTs2w TzfPjzaMl+kRZ0R01ySK8YRsNm9d1Ob2OqjTuM9gLWrEh0tU8MgoYKH8A8j2Hoyz fW6hHk3iJj19ACINjG3HLccHBvIP3XqZIzxFTizFqxyJ1ojfJRF+O2JdehnidfK8 Oi6gpKKdUz5wxu5+Aw3kIjeBMsE5G8FRHRBJJKT+gdnF1WBOlhlG146qvcH6wMO8 cp6M1fR0Uy8UU3qeYR8TDiK+qC/KSDrtHbfgoalDjAO+w4TUChXQz4vbTDEJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIm63xLGtKRcndNI5/Z59dYDKfekwHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4oq0rvB7NCwbE3CQQcf2Wxe2eZCZzjiUR+ tfMHUyYjnThqsxa95KYPoYLpKtm4hfpSKe7dc6ogI8696vnpIWh9i2Sztx6UcpLS yHA3+KoEu90mSOeRO5Zwxk3xb8m3AyHVUA8T4Zr/RPyMockAEASuBaQe8dlr/FKN uXct1zCYsqlwU61d/vN8A6sjOd4SEiphW8MLXyOz9b1USwBh34fAZIBKB1ZqNi9e Uu0o2ARyH3MnB426NVTQR6QOtliWXL7Af83VrndqvveuIVeyfb56ninw17KH7Diy KdH497geCskB+e08j9xCscYVEz0gJ8eLaPsVj7HvpCkpFLfgz8E= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:04 2025 by rpki-client