This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: R8GOGncueXU7NZLlyMj5vnc9vSDMix5XGi99Ptblzkc= Subject key identifier: 16:36:D7:2B:C7:33:D4:56:71:1F:87:78:75:B4:ED:BD:EE:9F:E0:E1 Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 7CB6A23E603064161EBB9897173430D963BCCC89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: FF Signing time: Tue 02 Dec 2025 06:10:39 +0000 Manifest this update: Tue 02 Dec 2025 06:05:39 +0000 Manifest next update: Fri 05 Dec 2025 09:27:39 +0000 Files and hashes: 1: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: Qk1aebZH6HpsmbRtyw6Zbd7LsZDQbi5L/mrlB31+AsU=) 2: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: 2ZYDFg/dw0boh+G7g+1m6rgokssx14ZC1BCQUTHY8E4=) 3: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: s05NUxO3OCK6ljSM126JzvbuefrUbP5vbV9fxoiHqUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b6:a2:3e:60:30:64:16:1e:bb:98:97:17:34:30:d9:63:bc:cc:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Dec 2 06:05:39 2025 GMT Not After : Dec 5 09:27:39 2025 GMT Subject: CN=1636D72BC733D456711F877875B4EDBDEE9FE0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:6c:41:3b:99:d4:84:25:d3:f8:d6:7e:9f: 2e:11:b3:9b:6b:ad:f3:a3:6e:1c:69:6a:f3:7e:be: ff:53:83:46:75:88:5e:1c:e8:33:1d:fe:13:d5:da: 5c:fe:92:ba:86:a9:30:67:ba:89:63:16:e9:f6:5d: 4f:41:d1:69:f6:96:e0:6f:12:ee:a6:33:07:62:84: 4d:14:61:11:81:11:65:db:6f:ed:2c:dc:e3:29:c4: 54:26:48:d4:59:1d:04:c5:57:ff:cc:cf:fb:0a:ce: 08:4b:9d:78:5c:01:31:38:26:3d:b4:37:66:d7:b3: 45:be:6a:31:75:71:e3:55:80:e9:52:b8:fc:15:7c: 26:19:e1:4c:81:04:73:ef:c0:dd:5e:63:74:f5:b2: 54:44:7a:a5:bb:f5:60:c5:49:43:60:d1:2e:b5:e4: 3b:07:be:c9:7e:b2:fa:9b:6b:12:1e:8d:10:9d:57: af:e6:20:74:df:de:93:b3:53:28:e2:67:d2:e8:a7: da:de:c0:3f:3c:57:62:44:61:24:08:d8:33:c9:4e: f8:56:a0:56:23:96:18:00:e8:34:d7:e4:94:a9:c0: bb:85:75:87:48:7d:92:0c:a1:f7:c3:58:9f:43:56: 79:1b:21:fa:2e:73:f3:78:7c:52:b5:21:79:ed:c3: 6c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:36:D7:2B:C7:33:D4:56:71:1F:87:78:75:B4:ED:BD:EE:9F:E0:E1 X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:04:5c:d5:e1:d6:b6:f6:1c:44:52:62:56:35:4c:d7:16:03: 2e:d6:6c:6f:db:91:12:98:7f:9a:e7:a8:1b:3b:10:ba:ec:68: eb:77:f1:ef:58:a6:66:f1:e8:16:24:3d:e7:3a:e4:39:ff:1f: ba:ae:c2:0b:e2:2e:d0:3d:80:ad:cf:5b:a6:c9:32:b1:1c:f1: 6f:9f:14:3e:66:ba:22:9d:6a:9e:bf:18:18:fd:04:ee:b6:9d: 90:a7:f9:45:38:fd:45:16:01:a5:38:85:ce:39:57:51:4e:4f: 35:11:be:c5:0d:eb:3e:41:72:2e:ac:6c:0f:5e:3d:c3:e6:aa: ed:9b:c3:a8:d1:91:b7:aa:94:34:1a:24:4c:88:4e:9e:4f:19: df:c2:9b:3c:f6:23:db:06:b3:13:94:b9:47:db:21:55:98:47: 2f:0f:e0:54:f2:ad:bf:45:8b:77:53:9a:50:76:59:3a:4e:33: 43:98:18:92:02:36:78:41:db:6c:ca:d0:a3:38:99:f0:7b:56: 7f:1f:5f:56:8c:60:55:e1:bd:9d:87:24:60:61:58:36:1f:a0: d6:74:7a:f4:0e:d1:70:db:ef:28:60:6e:9e:a1:00:57:67:27: de:90:b0:85:f2:4f:3b:be:ac:b2:14:de:f2:2b:76:5e:e1:07: 88:ca:de:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfLaiPmAwZBYeu5iXFzQw2WO8zIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNTEyMDIwNjA1MzlaFw0yNTEyMDUwOTI3MzlaMDMxMTAvBgNV BAMTKDE2MzZENzJCQzczM0Q0NTY3MTFGODc3ODc1QjRFREJERUU5RkUwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXK2xBO5nUhCXT+NZ+ny4Rs5tr rfOjbhxpavN+vv9Tg0Z1iF4c6DMd/hPV2lz+krqGqTBnuoljFun2XU9B0Wn2luBv Eu6mMwdihE0UYRGBEWXbb+0s3OMpxFQmSNRZHQTFV//Mz/sKzghLnXhcATE4Jj20 N2bXs0W+ajF1ceNVgOlSuPwVfCYZ4UyBBHPvwN1eY3T1slREeqW79WDFSUNg0S61 5DsHvsl+svqbaxIejRCdV6/mIHTf3pOzUyjiZ9Lop9rewD88V2JEYSQI2DPJTvhW oFYjlhgA6DTX5JSpwLuFdYdIfZIMoffDWJ9DVnkbIfouc/N4fFK1IXntw2wnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjbXK8cz1FZxH4d4dbTtve6f4OEwHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcEXNXh1rb2HERSYlY1TNcWAy7WbG/bkRKY f5rnqBs7ELrsaOt38e9Ypmbx6BYkPec65Dn/H7quwgviLtA9gK3PW6bJMrEc8W+f FD5muiKdap6/GBj9BO62nZCn+UU4/UUWAaU4hc45V1FOTzURvsUN6z5Bci6sbA9e PcPmqu2bw6jRkbeqlDQaJEyITp5PGd/Cmzz2I9sGsxOUuUfbIVWYRy8P4FTyrb9F i3dTmlB2WTpOM0OYGJICNnhB22zK0KM4mfB7Vn8fX1aMYFXhvZ2HJGBhWDYfoNZ0 evQO0XDb7yhgbp6hAFdnJ96QsIXyTzu+rLIU3vIrdl7hB4jK3io= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:03 2025 by rpki-client