This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: XzLSOuyD+tSH8tNEny7mnDKV7EuVlcjau5PLi+qBRxI= Subject key identifier: DB:76:4C:7D:BC:29:27:7C:0B:99:EE:C7:F8:79:A7:6D:9B:A9:54:07 Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 03BD55637B7426689F39A7389330E73AA6F66B35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 0534 Signing time: Thu 18 Dec 2025 02:41:26 +0000 Manifest this update: Thu 18 Dec 2025 02:36:26 +0000 Manifest next update: Sun 21 Dec 2025 03:19:26 +0000 Files and hashes: 1: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) 2: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: s0XEMtWYCqY9J5mWNMWKEX5608pAr8363D8v0fB5rvA=) 3: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: /ZqmuN0x+ZwpTTLsOK93bf5aWydgNNzXSi3NS4bqhi0=) 4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: bV9xBqFWWdQNpl4xPPj/IRLaOQzWewk+JeafEOq6H8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bd:55:63:7b:74:26:68:9f:39:a7:38:93:30:e7:3a:a6:f6:6b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Dec 18 02:36:26 2025 GMT Not After : Dec 21 03:19:26 2025 GMT Subject: CN=DB764C7DBC29277C0B99EEC7F879A76D9BA95407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2b:07:87:4b:0b:7a:f9:70:27:2e:34:06:7f: a7:15:fb:45:94:e4:39:c3:97:5c:9d:a8:4e:a2:f9: 6e:74:0c:02:f9:09:02:f0:01:21:bf:90:f7:c8:68: be:2a:a0:26:e4:ee:08:09:29:6b:b4:1f:ce:fc:df: a9:9a:30:e7:1a:1b:82:0c:a7:c3:25:5d:2e:fb:1e: f4:33:6f:42:fe:42:97:2d:53:94:cd:7d:4e:57:6c: fa:07:95:aa:57:ef:6d:71:45:7e:dc:de:50:3e:a5: 50:19:67:a9:5e:e3:b5:20:96:8d:35:c0:db:fa:4b: 24:34:bd:fb:80:65:48:06:ed:20:35:dd:fd:19:ed: 3b:ec:3b:4e:08:28:c3:ef:ac:b5:b1:9f:53:04:2e: ad:31:57:21:72:60:64:12:e1:0e:e4:2c:37:f4:aa: 2c:20:67:9b:76:d2:90:3a:fe:04:cb:31:d9:91:e5: 42:f9:3e:1d:61:0c:48:ef:ff:fb:30:cc:65:a9:82: 9a:5b:4b:e4:34:27:8a:72:78:00:5e:04:d0:7e:68: 87:ee:75:82:d8:de:7f:f2:8a:6a:62:02:b7:37:3e: 29:ea:25:02:b9:b7:b0:f3:8f:f1:9d:fb:9e:ce:45: 7c:4c:eb:0d:e8:1d:e3:34:43:08:6d:9c:06:76:d8: a9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:76:4C:7D:BC:29:27:7C:0B:99:EE:C7:F8:79:A7:6D:9B:A9:54:07 X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ee:eb:ce:44:2f:58:2a:82:9d:4d:f9:e4:f9:bd:2c:f3:d5: 0b:b9:13:43:4c:11:63:43:4f:13:9a:b4:e3:02:40:17:3c:38: 6d:7a:b8:98:4c:24:20:3e:ff:d5:1a:63:68:95:02:d0:15:82: 08:dc:52:07:f2:ee:00:87:53:5e:3c:78:0e:37:6a:7a:72:f6: 15:c6:2b:93:46:53:09:4b:55:ac:30:1a:45:99:f5:2c:68:29: 58:b2:b8:7e:1f:db:18:5a:e9:bc:fd:f8:04:3a:c7:ee:54:3e: 04:a4:ad:a9:06:54:b8:64:fa:a4:a9:e9:fc:50:c0:9d:85:3a: 6b:cf:a4:62:bf:90:40:33:5d:26:d0:0b:b2:bb:bd:90:38:04: ea:18:0a:e1:55:c8:91:5e:ae:97:04:aa:ff:d6:ec:05:ca:92: 16:a7:30:e5:a6:dc:3b:89:38:de:9d:45:5e:ff:12:c1:e3:fa: fa:96:af:7e:d1:df:10:68:09:5e:66:27:52:0a:f0:8e:f3:ee: d0:26:2c:98:7e:8f:26:9c:82:4b:cc:50:f3:77:53:e2:c8:28: 19:ae:ec:4c:75:96:73:8a:70:96:74:74:5d:99:38:6a:4d:32: 22:0b:39:7a:0b:a3:8f:95:9c:8e:90:cb:19:94:f5:44:e5:33: 02:54:fb:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA71VY3t0JmifOac4kzDnOqb2azUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNTEyMTgwMjM2MjZaFw0yNTEyMjEwMzE5MjZaMDMxMTAvBgNV BAMTKERCNzY0QzdEQkMyOTI3N0MwQjk5RUVDN0Y4NzlBNzZEOUJBOTU0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrKweHSwt6+XAnLjQGf6cV+0WU 5DnDl1ydqE6i+W50DAL5CQLwASG/kPfIaL4qoCbk7ggJKWu0H87836maMOcaG4IM p8MlXS77HvQzb0L+QpctU5TNfU5XbPoHlapX721xRX7c3lA+pVAZZ6le47Uglo01 wNv6SyQ0vfuAZUgG7SA13f0Z7TvsO04IKMPvrLWxn1MELq0xVyFyYGQS4Q7kLDf0 qiwgZ5t20pA6/gTLMdmR5UL5Ph1hDEjv//swzGWpgppbS+Q0J4pyeABeBNB+aIfu dYLY3n/yimpiArc3PinqJQK5t7Dzj/Gd+57ORXxM6w3oHeM0QwhtnAZ22KnhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU23ZMfbwpJ3wLme7H+HmnbZupVAcwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJju685EL1gqgp1N+eT5vSzz1Qu5E0NMEWND TxOatOMCQBc8OG16uJhMJCA+/9UaY2iVAtAVggjcUgfy7gCHU148eA43anpy9hXG K5NGUwlLVawwGkWZ9SxoKViyuH4f2xha6bz9+AQ6x+5UPgSkrakGVLhk+qSp6fxQ wJ2FOmvPpGK/kEAzXSbQC7K7vZA4BOoYCuFVyJFerpcEqv/W7AXKkhanMOWm3DuJ ON6dRV7/EsHj+vqWr37R3xBoCV5mJ1IK8I7z7tAmLJh+jyacgkvMUPN3U+LIKBmu 7Ex1lnOKcJZ0dF2ZOGpNMiILOXoLo4+VnI6QyxmU9UTlMwJU+88= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:47 2025 by rpki-client