This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: BXNw60lerybxzxZHMuVVo73zVrYDpsMJJfPRkdWiDTo= Subject key identifier: 69:B7:9A:F0:DC:74:E6:00:E6:3E:DF:80:05:93:60:FE:94:D7:BD:AD Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 22A3CE89B55413960508A4A19813CD2C9A2AAE22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 035E Signing time: Sat 06 Dec 2025 20:12:07 +0000 Manifest this update: Sat 06 Dec 2025 20:07:07 +0000 Manifest next update: Wed 10 Dec 2025 03:01:07 +0000 Files and hashes: 1: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) 2: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: 0G8nQ8XmFpQa8eCFNj7waSGkS5+AG3GvRh+e6wgxLMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a3:ce:89:b5:54:13:96:05:08:a4:a1:98:13:cd:2c:9a:2a:ae:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Dec 6 20:07:07 2025 GMT Not After : Dec 10 03:01:07 2025 GMT Subject: CN=69B79AF0DC74E600E63EDF80059360FE94D7BDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e0:70:ac:b5:7b:f9:c0:f8:cf:fb:37:43:5b: 9b:d5:ca:ec:5a:2a:61:fd:4e:3e:e1:b6:ae:7f:d6: 97:93:b1:90:00:39:66:43:31:57:cf:9e:0c:fe:41: 79:ff:e0:91:f0:4a:5f:ee:ee:52:4b:a7:15:d9:98: d5:33:72:76:a1:f5:a2:a9:56:62:4d:f4:c2:63:0a: 4c:6d:64:63:49:3c:94:83:3b:09:8e:7e:a6:ad:a2: 22:ff:09:de:09:ae:79:25:46:bb:72:3d:fd:01:a5: 5b:89:0a:38:0a:9a:31:b6:ce:65:cc:f7:d7:d0:16: 22:59:a0:75:6b:6b:12:32:2d:37:6f:89:e5:54:c2: d0:61:ad:6e:2a:d4:1f:e9:bf:aa:b9:c8:fe:43:db: 06:cf:89:13:4d:ab:e5:c1:6d:b9:bf:c9:10:bb:68: f7:8f:67:fd:e7:4a:48:55:5e:c3:f3:f6:62:1e:f6: cd:79:c7:51:5d:46:c1:64:18:dd:ce:6a:87:bc:ad: ea:fb:78:a5:d1:f4:dd:3a:26:8c:ee:68:cc:69:9e: 44:ce:02:42:48:54:6c:52:36:f3:49:79:67:16:bc: 55:53:b2:a7:78:a4:39:3e:22:07:50:9a:3a:1e:6d: a4:f3:fd:f7:27:70:3e:f6:95:8c:ae:83:c0:fa:5f: 80:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B7:9A:F0:DC:74:E6:00:E6:3E:DF:80:05:93:60:FE:94:D7:BD:AD X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d6:06:13:0e:dd:74:7f:40:7a:6a:1a:b3:f0:38:60:5c:c1: de:d5:74:af:80:89:7b:05:a9:04:cc:a3:46:2f:4f:fc:4d:81: 36:1e:74:f7:49:1b:32:50:e1:91:bf:70:2d:14:35:a4:49:b7: e6:94:b6:3a:ee:d1:91:9f:66:6d:b7:23:12:75:6a:7b:11:61: e1:ec:13:d4:0a:b8:4a:0e:81:72:a2:93:ea:24:57:32:20:a3: 0e:16:ab:e6:36:de:5e:e8:90:4c:13:b4:a5:be:72:b7:b6:27: 03:83:d6:63:97:23:70:42:2b:6e:64:6d:dd:a7:f6:e6:98:26: 27:01:d9:83:e2:d0:0a:c3:92:ff:ea:fe:ba:d1:af:26:32:62: 39:82:89:8e:92:cf:33:03:0f:ba:d2:62:e3:8b:e4:81:9f:25: 69:95:29:6a:af:fa:d4:5a:22:b1:7d:5a:5d:9b:e4:74:ab:f2: da:d3:26:93:9c:25:d3:2b:7b:90:7d:56:3f:15:31:da:8f:de: 54:12:b1:c9:94:b6:5e:16:d0:c4:f1:53:04:e4:d9:9a:8d:79: 17:e9:c8:8a:31:d5:ba:77:48:4c:38:ae:4c:c8:6a:21:a1:9a: ff:36:a7:b2:79:a7:7f:94:56:3c:77:7a:34:84:89:8d:9e:19: ea:9a:22:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqPOibVUE5YFCKShmBPNLJoqriIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNTEyMDYyMDA3MDdaFw0yNTEyMTAwMzAxMDdaMDMxMTAvBgNV BAMTKDY5Qjc5QUYwREM3NEU2MDBFNjNFREY4MDA1OTM2MEZFOTREN0JEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs4HCstXv5wPjP+zdDW5vVyuxa KmH9Tj7htq5/1peTsZAAOWZDMVfPngz+QXn/4JHwSl/u7lJLpxXZmNUzcnah9aKp VmJN9MJjCkxtZGNJPJSDOwmOfqatoiL/Cd4JrnklRrtyPf0BpVuJCjgKmjG2zmXM 99fQFiJZoHVraxIyLTdvieVUwtBhrW4q1B/pv6q5yP5D2wbPiRNNq+XBbbm/yRC7 aPePZ/3nSkhVXsPz9mIe9s15x1FdRsFkGN3Oaoe8rer7eKXR9N06JozuaMxpnkTO AkJIVGxSNvNJeWcWvFVTsqd4pDk+IgdQmjoebaTz/fcncD72lYyug8D6X4A/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUabea8Nx05gDmPt+ABZNg/pTXva0wHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHWBhMO3XR/QHpqGrPwOGBcwd7VdK+AiXsF qQTMo0YvT/xNgTYedPdJGzJQ4ZG/cC0UNaRJt+aUtjru0ZGfZm23IxJ1ansRYeHs E9QKuEoOgXKik+okVzIgow4Wq+Y23l7okEwTtKW+cre2JwOD1mOXI3BCK25kbd2n 9uaYJicB2YPi0ArDkv/q/rrRryYyYjmCiY6SzzMDD7rSYuOL5IGfJWmVKWqv+tRa IrF9Wl2b5HSr8trTJpOcJdMre5B9Vj8VMdqP3lQSscmUtl4W0MTxUwTk2ZqNeRfp yIox1bp3SEw4rkzIaiGhmv82p7J5p3+UVjx3ejSEiY2eGeqaIp8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:09 2025 by rpki-client