This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft File: AB2FF74AE26C6B3D3C718834D700985B9160087D.mft (raw, json) Hash identifier: y/kS18BUFVcm4A6xys4le+6KS4ioZt7E3raMUb6Jumo= Subject key identifier: F1:11:88:75:33:61:54:DA:37:BB:BD:5B:FC:2D:22:31:55:28:73:BC Authority key identifier: AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D Certificate issuer: /CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Certificate serial: 613408137BF5C413632F0CEE14F6EBDE8D4E4539 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft Manifest number: 0227 Signing time: Mon 01 Dec 2025 03:00:47 +0000 Manifest this update: Mon 01 Dec 2025 02:55:47 +0000 Manifest next update: Thu 04 Dec 2025 12:41:47 +0000 Files and hashes: 1: 3130332e3138372e3136352e302f32342d3234203d3e20313439383937.roa (hash: dgSXFEbFutIQLMHvwiuNx4TvCSZlmBK0qYA1AXK8tdM=) 2: AB2FF74AE26C6B3D3C718834D700985B9160087D.crl (hash: bboo5OrKEPndLJdz8jnYFRYjAQi3z6nsCj91qnat3EE=) 3: 3130332e3138372e3136342e302f32342d3234203d3e20313439383937.roa (hash: 1d1jglJQYamlwXmUTi2MB59pQxl/KjaHk7dpKNXOmuU=) 4: 3130332e3138372e3136342e302f32332d3233203d3e20313439383937.roa (hash: retIejZmjxqeZ5EcuYs/MJj74Hq3rSQEAaNJNEwhn2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 12:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:34:08:13:7b:f5:c4:13:63:2f:0c:ee:14:f6:eb:de:8d:4e:45:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB2FF74AE26C6B3D3C718834D700985B9160087D Validity Not Before: Dec 1 02:55:47 2025 GMT Not After : Dec 4 12:41:47 2025 GMT Subject: CN=F1118875336154DA37BBBD5BFC2D2231552873BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cf:ee:89:d4:db:af:93:7f:65:00:33:f4:f3: 66:4d:60:23:76:7f:71:3c:05:8c:38:84:89:d8:7e: eb:dd:0e:66:b4:40:12:57:a0:4b:3d:2f:f2:32:71: c6:63:68:da:b9:ed:42:03:44:04:ac:a9:09:79:26: 47:67:56:85:40:75:44:66:c4:3f:30:16:c4:56:d2: dd:33:02:8d:d9:2e:a0:f9:14:14:20:09:41:6a:52: fd:98:34:9a:40:fe:27:dc:e0:25:bd:b1:02:84:1e: 0c:fe:d0:a8:72:a1:26:02:29:28:ad:fb:90:28:da: 0b:d6:d3:e2:43:ea:c8:dd:42:c4:03:31:df:d2:cc: db:67:33:34:2e:5f:0a:78:99:20:b4:e5:c3:83:2a: b8:bb:72:0e:43:42:ee:e0:e5:5f:98:4b:89:13:07: 11:2a:c5:c7:c9:4e:94:21:6c:fd:ca:f3:8b:b5:3e: eb:96:15:f7:95:89:17:95:14:a2:12:59:e3:b1:55: da:c2:e8:85:14:b2:e4:50:99:34:17:13:98:fa:f8: 60:2b:df:ea:24:44:0a:62:8b:e9:dc:51:9f:0b:7b: 40:e5:90:99:ab:a9:27:c1:81:d9:c8:7b:fa:ee:80: 38:18:85:ba:47:a6:75:ce:c1:99:3d:43:56:74:9f: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:11:88:75:33:61:54:DA:37:BB:BD:5B:FC:2D:22:31:55:28:73:BC X509v3 Authority Key Identifier: keyid:AB:2F:F7:4A:E2:6C:6B:3D:3C:71:88:34:D7:00:98:5B:91:60:08:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB2FF74AE26C6B3D3C718834D700985B9160087D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/214bb4c8-6fcf-4fff-bdcc-fe1fccee1045/0/AB2FF74AE26C6B3D3C718834D700985B9160087D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:78:da:4b:31:d3:c3:b7:71:23:77:7b:46:6a:3b:5e:ce:94: 74:49:40:e4:ba:a7:8e:34:a5:a7:27:e0:c0:57:f3:87:a8:a8: 80:19:8b:26:06:dc:98:10:7c:4e:c4:40:89:20:f9:7e:f2:87: db:c3:60:3c:dc:19:4e:0d:c5:a4:6c:bf:85:b2:94:9f:5c:05: 9d:2e:5f:f7:b6:cb:fe:62:a7:b6:4b:6d:09:2f:0b:3a:b8:0d: f0:4b:41:df:b3:1c:15:84:a0:d9:ad:0e:f0:17:01:45:ef:8b: f5:e5:32:b8:7c:79:3b:95:15:37:9f:16:4c:e7:81:7c:e8:ee: c5:08:9d:27:b5:5a:ab:b6:b1:55:7a:55:4d:32:02:b9:f9:a1: b5:78:71:c0:ff:90:67:04:da:46:0a:be:0a:95:8e:52:55:a1: 58:0a:b7:aa:46:22:61:a9:e9:ae:2f:44:41:9d:bc:16:d3:35: 04:21:ec:70:b8:6f:de:fe:b3:20:ac:69:ed:b3:3e:a1:ec:c6: b3:b5:21:b8:d6:da:24:6b:39:fa:5b:68:a8:ab:cf:05:8e:e3: 1c:8b:43:4d:c8:34:c4:2d:dd:ba:6c:02:dd:36:7a:41:61:39: e1:a5:0d:47:a3:fc:f5:a6:e4:9f:56:fb:1d:28:f8:bf:20:92: 4f:9f:92:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYTQIE3v1xBNjLwzuFPbr3o1ORTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5 MTYwMDg3RDAeFw0yNTEyMDEwMjU1NDdaFw0yNTEyMDQxMjQxNDdaMDMxMTAvBgNV BAMTKEYxMTE4ODc1MzM2MTU0REEzN0JCQkQ1QkZDMkQyMjMxNTUyODczQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRz+6J1Nuvk39lADP082ZNYCN2 f3E8BYw4hInYfuvdDma0QBJXoEs9L/IyccZjaNq57UIDRASsqQl5JkdnVoVAdURm xD8wFsRW0t0zAo3ZLqD5FBQgCUFqUv2YNJpA/ifc4CW9sQKEHgz+0KhyoSYCKSit +5Ao2gvW0+JD6sjdQsQDMd/SzNtnMzQuXwp4mSC05cODKri7cg5DQu7g5V+YS4kT BxEqxcfJTpQhbP3K84u1PuuWFfeViReVFKISWeOxVdrC6IUUsuRQmTQXE5j6+GAr 3+okRApii+ncUZ8Le0DlkJmrqSfBgdnIe/rugDgYhbpHpnXOwZk9Q1Z0n+rFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8RGIdTNhVNo3u71b/C0iMVUoc7wwHwYDVR0j BBgwFoAUqy/3SuJsaz08cYg01wCYW5FgCH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTRiYjRjOC02ZmNmLTRmZmYtYmRjYy1mZTFmY2NlZTEwNDUvMC9BQjJGRjc0QUUy NkM2QjNEM0M3MTg4MzRENzAwOTg1QjkxNjAwODdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4NUI5MTYw MDg3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0YmI0YzgtNmZjZi00ZmZmLWJk Y2MtZmUxZmNjZWUxMDQ1LzAvQUIyRkY3NEFFMjZDNkIzRDNDNzE4ODM0RDcwMDk4 NUI5MTYwMDg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJ42ksx08O3cSN3e0ZqO17OlHRJQOS6p440 pacn4MBX84eoqIAZiyYG3JgQfE7EQIkg+X7yh9vDYDzcGU4NxaRsv4WylJ9cBZ0u X/e2y/5ip7ZLbQkvCzq4DfBLQd+zHBWEoNmtDvAXAUXvi/XlMrh8eTuVFTefFkzn gXzo7sUInSe1Wqu2sVV6VU0yArn5obV4ccD/kGcE2kYKvgqVjlJVoVgKt6pGImGp 6a4vREGdvBbTNQQh7HC4b97+syCsae2zPqHsxrO1IbjW2iRrOfpbaKirzwWO4xyL Q03INMQt3bpsAt02ekFhOeGlDUej/PWm5J9W+x0o+L8gkk+fkr0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:26 2025 by rpki-client