This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft File: D00472C77B42BC0E23D929360AA568BBAE2AA668.mft (raw, json) Hash identifier: vC3iHtor/7cYmkysKl1v6Uba8m59LwQzGDVdnmv/vqM= Subject key identifier: AA:24:68:D2:6C:2D:8F:3B:A4:90:1E:92:99:E5:BA:0D:FB:64:47:2A Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 Certificate issuer: /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Certificate serial: 4044A3014523FE319BEE7D34D0328C0967332C1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft Manifest number: 0250 Signing time: Wed 03 Dec 2025 00:20:05 +0000 Manifest this update: Wed 03 Dec 2025 00:15:05 +0000 Manifest next update: Sat 06 Dec 2025 04:47:05 +0000 Files and hashes: 1: 3130332e3138352e3235342e302f32332d3234203d3e20313439363838.roa (hash: 6gEpief7n0b1o5LDXUhCiEL/rkB2mrhMUs19uxqg/vs=) 2: D00472C77B42BC0E23D929360AA568BBAE2AA668.crl (hash: zMPUKImUHbUx7kk92d0Qic+x016kDZqY3ySFvjQRrE8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:47:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:44:a3:01:45:23:fe:31:9b:ee:7d:34:d0:32:8c:09:67:33:2c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Validity Not Before: Dec 3 00:15:05 2025 GMT Not After : Dec 6 04:47:05 2025 GMT Subject: CN=AA2468D26C2D8F3BA4901E9299E5BA0DFB64472A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:69:57:f4:eb:4b:df:4d:85:84:e1:f4:fb: e1:ab:fb:e9:51:3d:8c:42:5d:63:d5:51:0d:bc:59: c3:1f:f2:4a:88:6f:e7:79:f5:25:16:65:db:f6:6b: 50:aa:73:5e:81:30:b6:b5:88:1c:69:24:09:2f:ac: 1a:a7:3d:f1:40:ae:72:aa:16:03:e5:fc:36:f2:2b: fa:b9:5e:e1:6d:50:74:e1:b3:bc:7f:a8:eb:f7:c7: 31:04:fb:a1:4e:3d:11:2a:11:d2:14:65:01:e2:87: 50:a0:91:a1:7d:d9:3e:f5:ee:c9:ba:cf:e5:35:34: 7c:9f:0a:c4:e2:1a:9e:fb:3d:ad:be:30:25:ff:ef: 50:ac:24:d7:21:47:78:55:df:71:d2:39:8a:85:16: 8a:31:cc:2d:42:4e:de:ba:bb:04:e2:37:5c:af:34: 6e:26:7f:de:30:80:af:67:6c:1e:fb:3f:43:ea:b9: d6:c9:c5:2c:dd:23:4b:71:2f:ad:4d:ba:5a:bc:e6: 1b:31:9a:32:88:cf:41:ae:08:6c:af:ea:84:61:74: 35:b5:57:4d:7b:7b:37:58:a6:e9:59:66:b2:5c:f4: 68:0d:e0:b1:a7:95:e0:ed:64:b3:48:23:57:3a:b0: a7:ba:26:58:d6:5c:6d:bf:a0:f8:dd:f5:13:59:64: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:24:68:D2:6C:2D:8F:3B:A4:90:1E:92:99:E5:BA:0D:FB:64:47:2A X509v3 Authority Key Identifier: keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e3:49:28:db:a8:d6:5c:c5:99:b3:ec:07:46:e8:0f:dd:58: 32:1b:da:20:26:b5:d6:ac:b1:ed:7d:25:19:cc:d2:c9:cb:0a: 9e:62:9e:90:55:e8:98:c5:f9:5f:82:ed:c4:3b:a4:39:76:a2: 1a:31:6f:95:ea:bc:87:b4:55:75:cf:f2:ce:15:ab:c9:42:40: 79:ec:78:cb:99:3f:4b:08:5e:ab:35:e4:5c:9e:46:37:bb:2c: 11:d4:96:e4:92:91:cb:b9:30:24:ac:83:94:fc:a1:26:9e:d1: 22:f5:f7:10:81:60:2e:0e:5b:a7:8d:3d:2b:56:5f:ad:6d:f0: f2:81:b8:59:cf:9e:a7:78:1b:a1:96:59:8b:36:d5:48:46:93: fd:fc:eb:3b:c7:9a:a6:58:a4:3f:a3:fb:01:c0:fa:cc:d8:4e: 2f:21:2b:5e:e8:35:a6:fd:50:c3:36:4a:b2:3b:a0:64:1e:94: a2:11:b5:a6:59:75:7c:9e:db:8d:4b:18:e2:6e:fe:67:fe:7b: 57:b4:09:ca:ed:17:fa:84:b3:e7:a8:65:7e:ea:f1:09:00:81: 8d:6b:55:28:d4:4a:bf:30:4a:9d:e1:bd:84:a6:d4:84:e0:12: e0:c5:26:26:88:07:ac:e2:41:87:1f:18:94:c6:35:5c:53:e5: ac:94:de:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQESjAUUj/jGb7n000DKMCWczLB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJB RTJBQTY2ODAeFw0yNTEyMDMwMDE1MDVaFw0yNTEyMDYwNDQ3MDVaMDMxMTAvBgNV BAMTKEFBMjQ2OEQyNkMyRDhGM0JBNDkwMUU5Mjk5RTVCQTBERkI2NDQ3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5k2lX9OtL302FhOH0++Gr++lR PYxCXWPVUQ28WcMf8kqIb+d59SUWZdv2a1Cqc16BMLa1iBxpJAkvrBqnPfFArnKq FgPl/DbyK/q5XuFtUHThs7x/qOv3xzEE+6FOPREqEdIUZQHih1CgkaF92T717sm6 z+U1NHyfCsTiGp77Pa2+MCX/71CsJNchR3hV33HSOYqFFooxzC1CTt66uwTiN1yv NG4mf94wgK9nbB77P0PqudbJxSzdI0txL61Nulq85hsxmjKIz0GuCGyv6oRhdDW1 V017ezdYpulZZrJc9GgN4LGnleDtZLNII1c6sKe6JljWXG2/oPjd9RNZZF8TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqiRo0mwtjzukkB6SmeW6DftkRyowHwYDVR0j BBgwFoAU0ARyx3tCvA4j2Sk2CqVou64qpmgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE3MzY5YS1iY2MxLTQyYmMtYjhiMi1mOTZkNTBkMzc0OWQvMC9EMDA0NzJDNzdC NDJCQzBFMjNEOTI5MzYwQUE1NjhCQkFFMkFBNjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJBRTJB QTY2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4 QkJBRTJBQTY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfjSSjbqNZcxZmz7AdG6A/dWDIb2iAmtdas se19JRnM0snLCp5inpBV6JjF+V+C7cQ7pDl2ohoxb5XqvIe0VXXP8s4Vq8lCQHns eMuZP0sIXqs15FyeRje7LBHUluSSkcu5MCSsg5T8oSae0SL19xCBYC4OW6eNPStW X61t8PKBuFnPnqd4G6GWWYs21UhGk/386zvHmqZYpD+j+wHA+szYTi8hK17oNab9 UMM2SrI7oGQelKIRtaZZdXye241LGOJu/mf+e1e0CcrtF/qEs+eoZX7q8QkAgY1r VSjUSr8wSp3hvYSm1ITgEuDFJiaIB6ziQYcfGJTGNVxT5ayU3r8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:39 2025 by rpki-client