This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: xSbl2geRWt0ydnIf21vu14dFHMwx+Lqm+2XgWHe5558= Subject key identifier: E5:BA:4F:43:B5:BF:D8:19:D8:5C:00:9E:2D:EB:89:50:D3:E1:CA:91 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 566FB7FFA13348C250343FE345EB0736D7AF6F45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: 0119 Signing time: Wed 03 Dec 2025 02:20:55 +0000 Manifest this update: Wed 03 Dec 2025 02:15:55 +0000 Manifest next update: Sat 06 Dec 2025 08:44:55 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: 2XPTgHlxIwwFRAa/idTFA6x5v+bW3M66qBwI7KhcOTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:6f:b7:ff:a1:33:48:c2:50:34:3f:e3:45:eb:07:36:d7:af:6f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Dec 3 02:15:55 2025 GMT Not After : Dec 6 08:44:55 2025 GMT Subject: CN=E5BA4F43B5BFD819D85C009E2DEB8950D3E1CA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:8e:5a:a8:0f:f1:0f:a5:2a:47:84:1f:7f: 1b:bd:42:8c:aa:7b:ab:a3:ed:d4:f6:23:85:b2:11: a6:57:e5:4d:20:c2:41:2f:6d:f2:45:bb:ab:97:64: 87:c6:f2:08:6c:78:2d:df:78:5a:c0:8f:63:c2:8e: da:33:6e:53:12:a7:43:b0:0b:5f:2a:77:b6:26:90: e8:91:77:79:2e:3c:6f:5b:47:c7:e5:98:7c:27:47: c8:a5:fb:1a:6b:78:34:d9:f9:46:8e:eb:07:97:03: 42:d5:b5:6f:0e:48:13:1d:83:38:68:b4:31:0a:e4: 19:15:5b:04:11:31:0d:d9:e4:70:52:a2:eb:2c:66: d1:9f:bd:e6:67:75:57:57:4b:24:99:6b:1c:d5:42: 99:1a:b3:ca:00:d1:ec:23:ad:11:34:4b:21:ac:17: 33:51:99:2a:17:17:c0:57:1c:42:42:df:af:6a:01: db:01:be:c2:e2:ae:c8:21:6f:c8:8b:3e:e9:75:f4: c0:fe:31:2e:ec:bb:e1:64:41:a2:2d:60:1d:8e:52: bc:0d:cd:d5:af:b1:ed:22:91:9b:af:48:43:82:3b: de:06:6e:4c:f1:8e:85:40:0d:de:4b:66:d5:16:07: 66:37:ea:f9:ad:83:38:fb:1f:f1:7f:3d:b2:53:dc: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:BA:4F:43:B5:BF:D8:19:D8:5C:00:9E:2D:EB:89:50:D3:E1:CA:91 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cc:dd:6e:5e:79:da:46:1f:15:65:2a:5b:aa:fa:31:56:4e: 71:76:04:09:19:63:e4:2b:9d:99:f8:90:6b:1c:d6:e5:46:2d: a9:74:c0:34:a4:d5:94:8f:23:66:cb:b3:94:18:54:28:55:d1: 06:39:dd:c1:b9:c1:ef:96:92:23:f8:7d:8c:15:35:b0:56:a7: c8:0b:8d:b8:bb:0b:73:26:6b:07:65:e6:ec:64:b8:3e:e0:59: e3:5c:68:73:4f:6e:c8:bb:0b:01:46:6a:79:29:6d:73:64:93: 6c:f3:68:7a:40:18:87:ea:ff:18:e6:5a:c3:08:f9:95:54:94: b8:49:1f:6a:b1:42:1c:21:68:7a:d1:c3:09:36:c8:98:77:00: 7e:1d:57:55:03:bb:bf:d0:b9:7a:d3:ee:30:ee:8c:c8:1e:3c: 81:34:b5:67:bb:dd:67:59:3d:a2:44:6b:18:03:5a:6b:c0:47: a1:4a:ae:2c:91:0d:da:96:3f:7f:9e:a0:e4:e6:dd:7a:a8:4a: 49:7f:8f:1c:57:93:76:05:76:b1:a3:1e:3a:87:33:1e:3e:23: de:ff:ae:63:44:cf:99:a9:48:9e:e3:ff:be:6a:9e:33:0e:56: 41:38:d3:1c:d6:58:eb:aa:5b:9f:69:58:fc:84:c0:a1:45:49: 45:2b:8e:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVm+3/6EzSMJQND/jResHNtevb0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTEyMDMwMjE1NTVaFw0yNTEyMDYwODQ0NTVaMDMxMTAvBgNV BAMTKEU1QkE0RjQzQjVCRkQ4MTlEODVDMDA5RTJERUI4OTUwRDNFMUNBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FI5aqA/xD6UqR4Qffxu9Qoyq e6uj7dT2I4WyEaZX5U0gwkEvbfJFu6uXZIfG8ghseC3feFrAj2PCjtozblMSp0Ow C18qd7YmkOiRd3kuPG9bR8flmHwnR8il+xpreDTZ+UaO6weXA0LVtW8OSBMdgzho tDEK5BkVWwQRMQ3Z5HBSoussZtGfveZndVdXSySZaxzVQpkas8oA0ewjrRE0SyGs FzNRmSoXF8BXHEJC369qAdsBvsLirsghb8iLPul19MD+MS7su+FkQaItYB2OUrwN zdWvse0ikZuvSEOCO94GbkzxjoVADd5LZtUWB2Y36vmtgzj7H/F/PbJT3KTbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5bpPQ7W/2BnYXACeLeuJUNPhypEwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnM3W5eedpGHxVlKluq+jFWTnF2BAkZY+Qr nZn4kGsc1uVGLal0wDSk1ZSPI2bLs5QYVChV0QY53cG5we+WkiP4fYwVNbBWp8gL jbi7C3Mmawdl5uxkuD7gWeNcaHNPbsi7CwFGankpbXNkk2zzaHpAGIfq/xjmWsMI +ZVUlLhJH2qxQhwhaHrRwwk2yJh3AH4dV1UDu7/QuXrT7jDujMgePIE0tWe73WdZ PaJEaxgDWmvAR6FKriyRDdqWP3+eoOTm3XqoSkl/jxxXk3YFdrGjHjqHMx4+I97/ rmNEz5mpSJ7j/75qnjMOVkE40xzWWOuqW59pWPyEwKFFSUUrjts= -----END CERTIFICATE-----Generated at Wed Dec 3 16:10:58 2025 by rpki-client