This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: 31NzTogsoWYxyHm0IdBTTKwv9SOba5YmEfMShb1Ps4E= Subject key identifier: 29:5F:63:6B:71:A4:42:2E:E8:29:1D:01:A9:16:AE:51:85:97:A3:BC Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 7E8CECA1F28CCA61E984E023E68690447A8F768B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: FF Signing time: Sun 14 Dec 2025 06:52:11 +0000 Manifest this update: Sun 14 Dec 2025 06:47:11 +0000 Manifest next update: Wed 17 Dec 2025 18:14:11 +0000 Files and hashes: 1: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: LUeyduWDrlfJ4b9gqk1n85olYMODjwJZKwV5dT2mTy8=) 2: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: bvQkvMV312x+cD6F+RgPImc6lo1lROIFQ1YOPKTkJvY=) 3: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8c:ec:a1:f2:8c:ca:61:e9:84:e0:23:e6:86:90:44:7a:8f:76:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Dec 14 06:47:11 2025 GMT Not After : Dec 17 18:14:11 2025 GMT Subject: CN=295F636B71A4422EE8291D01A916AE518597A3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:24:45:7c:df:31:9b:af:3d:df:7d:65:f4:82: 62:e4:f1:f3:d7:ba:4d:44:de:80:bb:e4:af:c8:10: 9e:a5:e3:a6:9c:8f:3f:ee:52:4a:db:a4:c0:08:44: 8a:16:71:05:fd:bb:e5:74:dd:23:ce:62:71:4c:fb: ba:ce:56:88:15:af:95:40:18:8a:11:bf:a0:33:61: 03:92:93:bc:24:28:b7:3d:6f:75:7c:1a:ea:f0:51: ba:83:92:03:8e:e2:48:0e:6c:78:53:e8:4f:9b:34: 15:49:ee:87:54:46:71:93:9e:65:d2:32:f7:7a:30: a5:79:08:c3:0b:0f:5e:a3:cf:2d:f9:b3:20:76:df: 3f:36:97:47:e2:9c:05:f2:37:26:6a:22:8e:b6:e0: 13:52:47:7e:6a:f6:e3:20:28:4e:25:91:23:b3:62: 21:5d:6d:fd:68:13:c4:54:d5:f5:f5:f0:1e:19:c8: 96:51:74:17:be:df:c8:1c:65:fb:99:4b:b0:72:f4: c0:75:76:69:bb:55:b3:b7:0f:43:46:ed:ca:ca:e1: 3e:36:a8:34:6a:6c:e1:84:6a:55:e0:d6:55:27:b2: d9:9f:7b:ae:84:1e:f5:3f:bf:e2:fa:17:f9:0b:70: 15:d7:10:87:0b:9f:41:10:3f:7c:50:2d:b7:37:e6: 21:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5F:63:6B:71:A4:42:2E:E8:29:1D:01:A9:16:AE:51:85:97:A3:BC X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5b:a4:53:ad:f4:24:fa:5e:ac:0f:aa:cf:e8:c3:b6:9d:c0: a6:52:bd:95:eb:51:7d:bf:4b:9b:6e:a0:73:f7:ec:19:a4:66: 08:91:ac:ca:98:9e:5a:81:21:b5:89:0e:10:76:30:17:b9:c5: c2:04:5b:ab:7e:cf:ad:43:7a:6d:09:f9:9d:60:68:61:7d:29: ec:fd:57:46:54:61:f0:61:0d:70:4b:10:2b:8c:e3:b5:77:1a: 18:fa:00:d0:65:b4:5b:7d:5e:17:fa:c5:93:ec:95:03:93:3f: 61:ac:53:3f:f5:93:14:51:56:f5:3f:db:b5:fd:12:c1:bb:18: 98:c0:a4:83:9f:26:2f:0b:aa:5e:53:8a:74:e9:53:e9:c2:9e: 57:8c:84:8c:07:83:5a:9c:30:0f:10:eb:89:8d:b3:fd:23:db: 09:ee:48:33:ae:a1:8c:80:87:7d:a4:c3:8c:10:e8:8c:ce:0d: 16:bd:f2:f5:50:18:eb:aa:f5:90:71:d4:68:61:d6:25:5c:78: e9:0e:af:ff:bf:e2:32:db:23:03:7c:cd:a8:76:d4:02:ad:e1: 93:1b:cf:4f:e7:1f:be:13:81:35:83:11:ad:97:63:64:e7:f7: 21:0c:29:19:38:52:46:c7:42:89:bc:4e:b1:6c:84:3e:97:a7: cc:1d:38:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfozsofKMymHphOAj5oaQRHqPdoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTEyMTQwNjQ3MTFaFw0yNTEyMTcxODE0MTFaMDMxMTAvBgNV BAMTKDI5NUY2MzZCNzFBNDQyMkVFODI5MUQwMUE5MTZBRTUxODU5N0EzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkJEV83zGbrz3ffWX0gmLk8fPX uk1E3oC75K/IEJ6l46acjz/uUkrbpMAIRIoWcQX9u+V03SPOYnFM+7rOVogVr5VA GIoRv6AzYQOSk7wkKLc9b3V8GurwUbqDkgOO4kgObHhT6E+bNBVJ7odURnGTnmXS Mvd6MKV5CMMLD16jzy35syB23z82l0finAXyNyZqIo624BNSR35q9uMgKE4lkSOz YiFdbf1oE8RU1fX18B4ZyJZRdBe+38gcZfuZS7By9MB1dmm7VbO3D0NG7crK4T42 qDRqbOGEalXg1lUnstmfe66EHvU/v+L6F/kLcBXXEIcLn0EQP3xQLbc35iFjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKV9ja3GkQi7oKR0BqRauUYWXo7wwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpbpFOt9CT6XqwPqs/ow7adwKZSvZXrUX2/ S5tuoHP37BmkZgiRrMqYnlqBIbWJDhB2MBe5xcIEW6t+z61Dem0J+Z1gaGF9Kez9 V0ZUYfBhDXBLECuM47V3Ghj6ANBltFt9Xhf6xZPslQOTP2GsUz/1kxRRVvU/27X9 EsG7GJjApIOfJi8Lql5TinTpU+nCnleMhIwHg1qcMA8Q64mNs/0j2wnuSDOuoYyA h32kw4wQ6IzODRa98vVQGOuq9ZBx1Ghh1iVceOkOr/+/4jLbIwN8zah21AKt4ZMb z0/nH74TgTWDEa2XY2Tn9yEMKRk4UkbHQom8TrFshD6Xp8wdOFA= -----END CERTIFICATE-----Generated at Tue Dec 16 00:14:44 2025 by rpki-client