This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: GweV9MUueTG1JfRwEXG5afXt3gc6vh09xNL2O0GLIwU= Subject key identifier: 00:E1:FE:61:78:84:14:FD:01:9A:4A:78:D5:2A:11:B4:1C:D9:F6:38 Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 69EE2AAB4B84DFB9FCDBB72DF629EEE995EE0A8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 0195 Signing time: Mon 01 Dec 2025 17:31:46 +0000 Manifest this update: Mon 01 Dec 2025 17:26:46 +0000 Manifest next update: Fri 05 Dec 2025 02:47:46 +0000 Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: 6LOGBCF5zTr7iAtxuc25TGgWiHmJgXAtcLTxMujO3no=) 2: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: +fqszIXw0Q4q8LTJXzpKRLIRkitM2YnZnmpNrQgK/CA=) 3: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: uLA8drzoTGDdLRLknWkZIaOJdJxpC+UKHzjWLF3FpOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ee:2a:ab:4b:84:df:b9:fc:db:b7:2d:f6:29:ee:e9:95:ee:0a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Dec 1 17:26:46 2025 GMT Not After : Dec 5 02:47:46 2025 GMT Subject: CN=00E1FE61788414FD019A4A78D52A11B41CD9F638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:e2:c1:9b:8a:6e:d0:00:c0:72:0d:0c:72: 5a:a6:f6:37:b7:64:e0:7a:c7:39:e6:4a:d3:91:dc: 7b:4a:76:d8:d8:5a:b7:d0:e1:2b:a1:ae:3d:d9:30: 03:79:f8:48:9b:66:83:90:ed:be:ea:3a:00:45:f5: 3f:aa:3e:fd:39:17:22:7d:51:4d:03:3c:2c:72:63: 37:26:25:c1:8e:54:4d:69:ee:a3:8b:b5:a3:28:b9: 92:06:f5:7a:c3:3d:7e:2f:1e:ec:08:6f:a3:3b:40: a6:73:8f:86:3f:a8:95:7c:b6:6a:7e:35:9b:a5:f3: 34:dd:2d:57:4f:2d:cd:8c:72:b6:88:05:79:2c:51: 57:32:3d:4a:f6:b8:cb:66:1a:70:d9:3f:2e:99:ab: a7:ce:b5:cf:ba:cc:12:5d:91:66:00:7e:9d:ff:73: 31:db:2b:bb:7a:a7:53:6b:b9:38:e6:83:54:f4:b9: 7c:56:ac:33:8e:14:8c:81:b2:4c:dd:e8:2c:0b:42: aa:f8:89:79:e0:43:00:f8:b7:98:67:3e:89:82:d9: bc:b2:92:fa:2a:bf:5a:bb:19:3b:be:59:59:37:66: 9a:b0:94:df:5c:69:f5:ea:ab:74:59:9c:3c:5f:a6: a7:91:c0:2b:36:62:c4:80:f8:af:84:df:76:62:69: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E1:FE:61:78:84:14:FD:01:9A:4A:78:D5:2A:11:B4:1C:D9:F6:38 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b0:09:5d:1d:15:f1:74:7e:7b:87:4c:43:be:9e:ab:2c:21: c7:c7:71:b9:ca:4d:a1:59:01:b9:98:3f:b2:66:4b:b9:11:f6: ad:a5:8e:b3:1c:22:24:1e:ff:a6:53:9e:d1:37:c9:a3:18:2a: 0f:a2:de:84:96:9c:05:cf:4e:da:07:98:66:ea:51:23:3d:ad: b2:af:75:e5:30:4d:6b:2c:27:b9:d4:12:f2:25:a3:af:84:b7: 12:67:a7:b0:4f:d0:9f:cd:82:93:01:ff:1b:35:11:8e:17:34: c0:09:05:a6:c6:07:5c:ae:b7:2c:c0:30:b4:84:7e:49:af:07: 6c:dc:84:6e:12:31:93:a4:dd:ad:ff:bd:da:0c:40:f1:a0:dd: 6f:a5:5e:4a:b2:5a:25:a3:31:53:01:93:ae:36:26:64:92:04: f1:b5:6d:8a:79:e3:66:52:ec:63:72:c4:1a:c4:0e:20:1a:0e: 16:1e:1d:ae:6d:9e:9a:d0:17:b0:1d:40:41:98:dc:d1:dc:e2: 5a:2f:c0:28:c4:d7:b0:6d:22:db:cb:9a:8c:08:4c:6a:7e:f8: e2:e5:7b:d4:86:e8:51:15:b7:e1:62:27:51:4c:3c:48:6f:b7: b5:9e:e4:f2:8a:f7:5a:a8:1b:90:3c:ab:52:30:42:91:37:47: 22:a2:41:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUae4qq0uE37n827ct9inu6ZXuCoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNTEyMDExNzI2NDZaFw0yNTEyMDUwMjQ3NDZaMDMxMTAvBgNV BAMTKDAwRTFGRTYxNzg4NDE0RkQwMTlBNEE3OEQ1MkExMUI0MUNEOUY2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7p+LBm4pu0ADAcg0Mclqm9je3 ZOB6xznmStOR3HtKdtjYWrfQ4Suhrj3ZMAN5+EibZoOQ7b7qOgBF9T+qPv05FyJ9 UU0DPCxyYzcmJcGOVE1p7qOLtaMouZIG9XrDPX4vHuwIb6M7QKZzj4Y/qJV8tmp+ NZul8zTdLVdPLc2McraIBXksUVcyPUr2uMtmGnDZPy6Zq6fOtc+6zBJdkWYAfp3/ czHbK7t6p1NruTjmg1T0uXxWrDOOFIyBskzd6CwLQqr4iXngQwD4t5hnPomC2byy kvoqv1q7GTu+WVk3ZpqwlN9cafXqq3RZnDxfpqeRwCs2YsSA+K+E33ZiaapPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAOH+YXiEFP0Bmkp41SoRtBzZ9jgwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKwCV0dFfF0fnuHTEO+nqssIcfHcbnKTaFZ AbmYP7JmS7kR9q2ljrMcIiQe/6ZTntE3yaMYKg+i3oSWnAXPTtoHmGbqUSM9rbKv deUwTWssJ7nUEvIlo6+EtxJnp7BP0J/NgpMB/xs1EY4XNMAJBabGB1yutyzAMLSE fkmvB2zchG4SMZOk3a3/vdoMQPGg3W+lXkqyWiWjMVMBk642JmSSBPG1bYp542ZS 7GNyxBrEDiAaDhYeHa5tnprQF7AdQEGY3NHc4lovwCjE17BtItvLmowITGp++OLl e9SG6FEVt+FiJ1FMPEhvt7We5PKK91qoG5A8q1IwQpE3RyKiQWc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:25 2025 by rpki-client