This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: TsxEqvv2rrsge22yMqClAzG0a5/TwxmwWDUUmbyHcec= Subject key identifier: 8D:83:FD:D0:0C:71:C7:BE:5F:6D:2F:94:7C:53:E1:68:35:B8:C0:2E Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 26AB1CA4BA72B3E947CB03D81F2FB7A05A4789A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: E6 Signing time: Sat 06 Dec 2025 11:01:46 +0000 Manifest this update: Sat 06 Dec 2025 10:56:46 +0000 Manifest next update: Tue 09 Dec 2025 19:34:46 +0000 Files and hashes: 1: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: xkogq7rqTUziOyhDEvLFXk+zcnFbqLBr6pTMgoWzIRw=) 2: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: wjv3vvC2wj1y4C3rtdqqFi7D2mmhFfTdUSVuxIoWgnY=) 3: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: nkrR3Tm4zecmQeiHqfwMxCRUBt0WzU5fISYDqGodSKo=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 4i87PvQ/cfa5tJ8SET0F9sq3RG49EY5mNAVu0vrk8Es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ab:1c:a4:ba:72:b3:e9:47:cb:03:d8:1f:2f:b7:a0:5a:47:89:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Dec 6 10:56:46 2025 GMT Not After : Dec 9 19:34:46 2025 GMT Subject: CN=8D83FDD00C71C7BE5F6D2F947C53E16835B8C02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:8e:62:da:3f:19:73:96:c8:9a:1b:4f:da: 14:87:e5:1f:d7:ac:06:f8:43:05:5a:c4:6c:3f:71: 52:7a:db:d6:cb:13:4a:bc:88:3f:4e:4c:21:0d:67: 93:3b:6b:f8:ad:c3:47:5c:03:33:d0:56:b5:00:42: 15:53:e1:98:b9:7b:6b:e2:df:5e:7a:b2:6e:b4:7b: 58:c0:5d:2c:d3:8c:07:ce:1e:5f:a4:e0:66:b7:dd: d8:04:99:a5:b2:28:a8:ad:8d:bb:28:f2:aa:e1:b0: 3a:33:56:01:79:27:e4:15:17:73:f6:de:31:91:7d: 41:d4:5d:e6:14:a6:7e:4c:7d:e0:50:e4:74:c7:10: 03:ed:2c:e5:e3:a3:5c:e1:b9:e2:c4:9a:72:fb:03: 1c:f7:6d:5e:b2:00:e0:55:b1:df:bd:01:3f:3c:08: 20:ca:55:b7:5b:0f:08:08:8d:92:14:5b:db:92:18: 45:54:c2:cc:6b:1a:4b:b5:09:f0:d9:10:c0:e5:80: 4f:2d:b0:ac:47:f7:46:66:24:3c:47:94:da:5a:bf: d9:4d:6e:50:b0:28:28:96:4b:ae:9a:a5:fe:d0:3c: 55:73:10:10:20:3c:de:99:3c:7c:9a:27:87:ae:26: 46:ff:bd:26:c9:1e:dc:34:cd:ba:f7:d5:0f:5f:ba: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:83:FD:D0:0C:71:C7:BE:5F:6D:2F:94:7C:53:E1:68:35:B8:C0:2E X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4a:8c:02:6b:77:25:2d:4f:81:61:8b:0d:f0:7a:31:f6:f3: 21:51:a4:c5:0d:c6:4b:7b:90:af:33:b2:8e:65:b5:bd:8c:a5: 01:b7:e6:61:cb:5e:84:ea:0d:6b:88:6a:1d:7d:66:80:bc:b7: fe:87:e8:15:62:60:85:11:b7:31:78:4b:6d:b4:37:e2:42:14: b0:b8:f5:00:8a:0e:15:d8:d9:6e:2b:14:7d:7b:4e:b7:f0:2a: a8:56:f2:18:dc:91:8e:76:6e:a6:36:86:50:34:57:9d:89:e2: 8c:82:e4:fd:92:80:d1:0b:17:22:50:64:d1:72:85:b6:c2:88: f8:16:f8:c0:52:d3:09:8e:01:90:3b:7c:47:de:8d:32:64:72: 14:4f:c5:67:4f:a3:bd:7c:e3:e7:b0:cc:ce:23:1d:ba:45:18: d8:29:8b:1e:c8:1d:5c:ea:92:a5:b9:ce:92:34:0b:10:1d:c2: 87:c9:f0:3a:6e:84:d5:7f:52:69:e4:71:92:d1:b2:26:54:b5: df:fd:3e:07:3a:43:2e:a4:36:c8:52:49:21:17:9d:d6:3e:e0: 77:20:c4:0a:d1:62:fb:8d:b2:01:d7:0e:9f:22:3d:a2:29:ac: 57:f1:19:da:83:7a:f4:49:52:b9:b3:2c:06:6f:60:08:4d:f6: 45:1d:e2:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqscpLpys+lHywPYHy+3oFpHiaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNTEyMDYxMDU2NDZaFw0yNTEyMDkxOTM0NDZaMDMxMTAvBgNV BAMTKDhEODNGREQwMEM3MUM3QkU1RjZEMkY5NDdDNTNFMTY4MzVCOEMwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNfo5i2j8Zc5bImhtP2hSH5R/X rAb4QwVaxGw/cVJ629bLE0q8iD9OTCENZ5M7a/itw0dcAzPQVrUAQhVT4Zi5e2vi 3156sm60e1jAXSzTjAfOHl+k4Ga33dgEmaWyKKitjbso8qrhsDozVgF5J+QVF3P2 3jGRfUHUXeYUpn5MfeBQ5HTHEAPtLOXjo1zhueLEmnL7Axz3bV6yAOBVsd+9AT88 CCDKVbdbDwgIjZIUW9uSGEVUwsxrGku1CfDZEMDlgE8tsKxH90ZmJDxHlNpav9lN blCwKCiWS66apf7QPFVzEBAgPN6ZPHyaJ4euJkb/vSbJHtw0zbr31Q9fus6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYP90Axxx75fbS+UfFPhaDW4wC4wHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5KjAJrdyUtT4Fhiw3wejH28yFRpMUNxkt7 kK8zso5ltb2MpQG35mHLXoTqDWuIah19ZoC8t/6H6BViYIURtzF4S220N+JCFLC4 9QCKDhXY2W4rFH17TrfwKqhW8hjckY52bqY2hlA0V52J4oyC5P2SgNELFyJQZNFy hbbCiPgW+MBS0wmOAZA7fEfejTJkchRPxWdPo7184+ewzM4jHbpFGNgpix7IHVzq kqW5zpI0CxAdwofJ8DpuhNV/UmnkcZLRsiZUtd/9Pgc6Qy6kNshSSSEXndY+4Hcg xArRYvuNsgHXDp8iPaIprFfxGdqDevRJUrmzLAZvYAhN9kUd4gE= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:33 2025 by rpki-client