This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft File: 2A2E185B12379871494114828D5D5D713982E469.mft (raw, json) Hash identifier: Q+Pev54uyAXvB2O+/LW2TGTpFQmgFYX5mvDSJK+0x4Q= Subject key identifier: FB:13:3D:CC:DB:67:E5:FE:B1:E3:57:83:24:8B:DE:A3:F1:1B:1F:97 Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 Certificate issuer: /CN=2A2E185B12379871494114828D5D5D713982E469 Certificate serial: 7D8DC56DEBAC3FCA80B8403FB44D921D414F905E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft Manifest number: 0127 Signing time: Mon 01 Dec 2025 23:40:51 +0000 Manifest this update: Mon 01 Dec 2025 23:35:51 +0000 Manifest next update: Fri 05 Dec 2025 03:47:51 +0000 Files and hashes: 1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: V+YjkhbIydkZ+oGTevb+ipQYCKYryW/Ib0ruhbJynjY=) 2: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: 1//9PZLi6/dXvrxf8oU00rzWAuIy7ahrtLmD01Xa/yg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:47:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:8d:c5:6d:eb:ac:3f:ca:80:b8:40:3f:b4:4d:92:1d:41:4f:90:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2E185B12379871494114828D5D5D713982E469 Validity Not Before: Dec 1 23:35:51 2025 GMT Not After : Dec 5 03:47:51 2025 GMT Subject: CN=FB133DCCDB67E5FEB1E35783248BDEA3F11B1F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:52:9d:21:79:e0:ac:7a:76:c7:91:aa:9e: 51:67:ef:20:2f:55:89:54:fc:29:70:42:60:7a:c5: b0:f9:f3:b1:50:d3:a4:e5:f7:eb:0b:48:5c:5e:d6: 48:27:f5:a0:11:64:b7:f4:c1:38:c7:ac:05:61:e9: b2:78:cd:ce:56:08:25:63:6a:1f:eb:6d:31:89:34: a9:52:2e:a4:9f:a5:44:b9:bb:24:86:7a:6d:61:81: 50:b9:d8:a9:71:91:f5:be:b5:bf:12:64:18:b2:18: f1:5f:86:5b:49:0a:e2:a1:71:a1:81:41:ea:32:81: 5e:35:ab:a9:14:a9:b5:19:3b:c9:c8:f6:9b:48:15: 99:fc:96:2e:75:15:e8:09:d9:e0:8d:20:b3:cf:22: 65:7b:1b:f9:2d:21:20:5a:39:f8:50:59:07:ec:0c: 69:93:ca:5a:33:54:2f:dd:f5:b8:b6:01:fc:0b:e7: df:cc:ae:4b:86:17:81:7e:e2:53:94:b2:11:ff:67: 83:24:87:b6:4b:6b:19:e3:0f:ac:4b:17:65:1a:b7: c2:fd:49:b4:47:df:4c:86:31:78:7a:d4:ee:2d:0a: 14:62:f4:92:ec:ee:5a:4a:92:36:06:dd:22:93:f0: 9c:5f:f0:22:80:e7:7d:23:c0:14:34:58:f4:7a:5b: c8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:13:3D:CC:DB:67:E5:FE:B1:E3:57:83:24:8B:DE:A3:F1:1B:1F:97 X509v3 Authority Key Identifier: keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:12:ab:27:2a:0b:93:2e:60:9a:a0:5c:84:75:38:ee:28:20: 5c:ba:aa:b5:2e:39:1a:c7:eb:1a:3c:b4:d8:df:7c:75:91:98: 42:94:f2:84:a5:ac:bb:d4:29:4f:03:d3:fc:ca:2d:53:5a:85: 41:f3:9a:61:bb:19:31:8a:35:24:61:73:55:f2:df:0e:ab:ab: 6c:91:67:5a:ef:da:fc:94:5a:5f:0b:8d:e3:6e:ce:10:f6:82: 24:2b:24:6f:73:52:04:cd:d9:e1:26:61:0a:0e:dc:e3:47:ff: ec:5c:c7:50:56:d8:c5:17:a9:cb:84:1d:7b:33:42:56:26:a3: 56:bc:ca:4c:71:34:45:45:50:00:dc:b2:f9:a2:cc:f1:b5:2f: 48:09:7b:92:68:17:c6:5e:87:be:ba:f5:9c:01:e5:e5:43:02: 27:89:4e:eb:c7:f7:b8:54:0b:e8:17:b5:08:82:3e:1a:27:25: 54:20:73:50:88:7b:e8:a0:04:7b:dd:f7:6e:92:79:14:47:46: e2:a1:17:58:af:4e:09:f0:0e:68:12:f9:f6:20:f0:f0:52:68: a5:a2:38:67:b8:e5:0b:5e:8f:b3:e9:71:85:de:63:d2:e9:7e: ed:d1:64:f8:73:5a:45:f9:ef:52:5a:b9:c0:fa:1f:fc:5e:30: 9c:82:78:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfY3FbeusP8qAuEA/tE2SHUFPkF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEz OTgyRTQ2OTAeFw0yNTEyMDEyMzM1NTFaFw0yNTEyMDUwMzQ3NTFaMDMxMTAvBgNV BAMTKEZCMTMzRENDREI2N0U1RkVCMUUzNTc4MzI0OEJERUEzRjExQjFGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC501KdIXngrHp2x5GqnlFn7yAv VYlU/ClwQmB6xbD587FQ06Tl9+sLSFxe1kgn9aARZLf0wTjHrAVh6bJ4zc5WCCVj ah/rbTGJNKlSLqSfpUS5uySGem1hgVC52KlxkfW+tb8SZBiyGPFfhltJCuKhcaGB QeoygV41q6kUqbUZO8nI9ptIFZn8li51FegJ2eCNILPPImV7G/ktISBaOfhQWQfs DGmTylozVC/d9bi2AfwL59/MrkuGF4F+4lOUshH/Z4Mkh7ZLaxnjD6xLF2Uat8L9 SbRH30yGMXh61O4tChRi9JLs7lpKkjYG3SKT8Jxf8CKA530jwBQ0WPR6W8hfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+xM9zNtn5f6x41eDJIveo/EbH5cwHwYDVR0j BBgwFoAUKi4YWxI3mHFJQRSCjV1dcTmC5GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMC8yQTJFMTg1QjEy Mzc5ODcxNDk0MTE0ODI4RDVENUQ3MTM5ODJFNDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEzOTgy RTQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzAvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVE NzEzOTgyRTQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgSqycqC5MuYJqgXIR1OO4oIFy6qrUuORrH 6xo8tNjffHWRmEKU8oSlrLvUKU8D0/zKLVNahUHzmmG7GTGKNSRhc1Xy3w6rq2yR Z1rv2vyUWl8LjeNuzhD2giQrJG9zUgTN2eEmYQoO3ONH/+xcx1BW2MUXqcuEHXsz QlYmo1a8ykxxNEVFUADcsvmizPG1L0gJe5JoF8Zeh7669ZwB5eVDAieJTuvH97hU C+gXtQiCPhonJVQgc1CIe+igBHvd926SeRRHRuKhF1ivTgnwDmgS+fYg8PBSaKWi OGe45Qtej7PpcYXeY9Lpfu3RZPhzWkX571JaucD6H/xeMJyCeN0= -----END CERTIFICATE-----Generated at Wed Dec 3 18:15:53 2025 by rpki-client