This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: mErOTuoykyYQwoTm1MIAynUYzRvNblSQasDSG9g+JBw= Subject key identifier: 80:01:9C:B9:99:DB:72:9D:5A:B7:E3:6A:41:66:59:2A:1F:46:AE:8B Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 0FAE0581EBAF68B6712814EEE1C79B7D5C9446D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: 0103 Signing time: Sun 14 Dec 2025 00:10:42 +0000 Manifest this update: Sun 14 Dec 2025 00:05:42 +0000 Manifest next update: Wed 17 Dec 2025 09:48:42 +0000 Files and hashes: 1: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: UHeTd0gTgdlP3tBFERY7dHbrmXaS/5Gq1zzPv2O1X5k=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 16:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ae:05:81:eb:af:68:b6:71:28:14:ee:e1:c7:9b:7d:5c:94:46:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Dec 14 00:05:42 2025 GMT Not After : Dec 17 09:48:42 2025 GMT Subject: CN=80019CB999DB729D5AB7E36A4166592A1F46AE8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:4b:dd:9d:46:7b:4a:3a:13:be:df:6d:a9: c7:21:2f:17:97:f7:51:93:ef:6f:7b:76:9f:00:f8: 76:42:32:bc:d9:d9:6f:64:4d:1f:56:a2:73:60:39: a1:cc:35:0e:c5:92:0f:a9:76:32:b1:71:f4:c9:21: 68:93:a0:bb:c0:54:f8:97:1e:16:11:d8:93:e5:71: 27:6b:cf:a8:81:8a:74:82:28:16:10:d6:f7:c9:cd: 88:de:bb:5c:ae:3d:d1:1f:e8:a2:6b:48:14:9a:1d: 69:8c:e1:54:11:7c:cc:57:f6:46:37:8f:db:05:fa: a0:a6:c4:43:64:13:ff:7e:35:10:89:73:b3:8b:36: d9:cf:b5:83:6b:cf:9c:7b:7a:b1:66:58:4c:44:7a: 03:7b:cd:43:5d:15:5f:46:f7:17:8c:23:b7:6c:20: 16:5b:d2:3a:bf:0f:3a:ad:93:af:8d:27:4e:d5:12: 42:1c:54:56:26:e3:f7:41:f1:0f:8d:f2:25:b3:5a: 48:1c:61:e9:37:c1:9f:57:d2:68:f5:26:a7:d6:1a: e9:eb:13:8d:6a:7f:d6:86:bc:40:98:af:10:87:fe: cd:7a:d8:6b:52:37:80:31:ac:0a:0e:03:0f:af:af: 00:e8:22:ff:14:48:87:ef:c1:55:48:99:76:c5:e5: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:01:9C:B9:99:DB:72:9D:5A:B7:E3:6A:41:66:59:2A:1F:46:AE:8B X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:76:ee:70:6c:cb:ce:37:69:99:b9:99:b7:f4:24:71:16:ae: 5c:fc:2a:e4:38:cb:ec:22:0c:42:4b:00:6c:40:f7:30:a8:77: c0:ce:30:08:de:f1:13:a0:cc:37:1a:e0:19:a2:87:d9:06:d8: 49:d7:da:31:8c:06:dc:29:0a:7d:8e:0f:fe:d1:c6:1e:b3:1a: 00:3e:d2:c0:cd:ad:94:18:43:07:0f:14:dd:b2:c2:85:ce:94: b0:e4:30:53:66:ec:d0:12:82:2a:75:db:69:b5:0b:90:a1:d0: 4d:fc:cc:3f:f1:da:d6:45:ef:20:3d:ab:18:dd:d0:06:a2:39: b5:15:97:16:03:c3:4f:61:aa:b4:80:03:95:b4:ee:bb:de:bb: ee:8d:75:4c:9c:20:3a:26:1b:ce:9c:eb:6e:80:05:20:3f:49: 46:07:8b:0a:12:a7:69:25:47:d0:97:8c:69:4a:2d:12:51:24: f6:f5:c3:87:30:87:6f:c3:42:16:13:f7:61:e2:de:78:92:3d: 9a:40:e2:cc:d4:d6:b7:5b:de:98:bd:7e:88:a6:a8:0a:6a:77: 66:a5:63:30:27:90:2c:66:3a:8f:4a:30:0b:21:32:ca:8e:13: 26:36:85:91:3d:e2:05:d6:24:c0:8b:f1:33:a5:9e:5f:9a:80: 9e:73:7d:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD64FgeuvaLZxKBTu4cebfVyURtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNTEyMTQwMDA1NDJaFw0yNTEyMTcwOTQ4NDJaMDMxMTAvBgNV BAMTKDgwMDE5Q0I5OTlEQjcyOUQ1QUI3RTM2QTQxNjY1OTJBMUY0NkFFOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ekvdnUZ7SjoTvt9tqcchLxeX 91GT7297dp8A+HZCMrzZ2W9kTR9WonNgOaHMNQ7Fkg+pdjKxcfTJIWiToLvAVPiX HhYR2JPlcSdrz6iBinSCKBYQ1vfJzYjeu1yuPdEf6KJrSBSaHWmM4VQRfMxX9kY3 j9sF+qCmxENkE/9+NRCJc7OLNtnPtYNrz5x7erFmWExEegN7zUNdFV9G9xeMI7ds IBZb0jq/Dzqtk6+NJ07VEkIcVFYm4/dB8Q+N8iWzWkgcYek3wZ9X0mj1JqfWGunr E41qf9aGvECYrxCH/s162GtSN4AxrAoOAw+vrwDoIv8USIfvwVVImXbF5barAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgAGcuZnbcp1at+NqQWZZKh9GroswHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA527nBsy843aZm5mbf0JHEWrlz8KuQ4y+wi DEJLAGxA9zCod8DOMAje8ROgzDca4Bmih9kG2EnX2jGMBtwpCn2OD/7Rxh6zGgA+ 0sDNrZQYQwcPFN2ywoXOlLDkMFNm7NASgip122m1C5Ch0E38zD/x2tZF7yA9qxjd 0AaiObUVlxYDw09hqrSAA5W07rveu+6NdUycIDomG86c626ABSA/SUYHiwoSp2kl R9CXjGlKLRJRJPb1w4cwh2/DQhYT92Hi3niSPZpA4szU1rdb3pi9foimqApqd2al YzAnkCxmOo9KMAshMsqOEyY2hZE94gXWJMCL8TOlnl+agJ5zfbA= -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:09 2025 by rpki-client