This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: MSJw2wqraxlAHYdZaaFPRU89oLA0+Cv+TS3UBbEzFbI= Subject key identifier: 5A:B1:E8:3D:95:C5:C8:50:C3:EB:E3:71:CF:9E:D8:F0:C8:73:AC:BF Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 43BE2657E421322F2B5C067152D32A1BF16073FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 0269 Signing time: Wed 17 Dec 2025 08:41:05 +0000 Manifest this update: Wed 17 Dec 2025 08:36:05 +0000 Manifest next update: Sat 20 Dec 2025 20:24:05 +0000 Files and hashes: 1: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: jU8Zz722fKCK/KeOnGioPXS498wyaGgdlapRjka2N08=) 2: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: gJ4+RIzMU3sNK8zgeNrc/IFATPDJCmEd1aztpgZm3dA=) 3: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: wQ45tmfAW0vTrcP1CHqdkU4kV8VsIFLIOnBtD5fu+LU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:be:26:57:e4:21:32:2f:2b:5c:06:71:52:d3:2a:1b:f1:60:73:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Dec 17 08:36:05 2025 GMT Not After : Dec 20 20:24:05 2025 GMT Subject: CN=5AB1E83D95C5C850C3EBE371CF9ED8F0C873ACBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:06:60:9a:e2:8d:b0:18:6c:ac:af:37:97: c5:47:cb:46:9f:87:0a:63:f7:89:9e:4c:74:aa:d9: b9:5b:17:e9:9d:f7:88:3b:11:a7:b5:3a:ec:a5:41: 35:40:04:ca:76:04:2a:32:e7:c3:c1:7f:c4:b6:05: 0c:3c:48:b0:d3:dc:5f:7c:80:ca:78:2b:a6:21:0e: 74:f2:48:28:88:18:7a:a5:ee:4e:80:2c:fd:33:a3: a8:5b:96:12:51:c0:35:05:1f:76:81:6c:57:4c:87: d4:1a:93:6b:31:f1:7a:03:0d:91:f2:5a:59:3d:8f: 71:eb:fa:e6:e0:af:4c:71:2b:d9:62:da:07:7e:43: 41:01:f2:1f:9a:4e:f6:eb:ff:2b:d6:a5:c8:4b:45: 81:d1:1a:f8:6d:77:49:f9:a5:58:e1:d8:08:00:ab: 52:3b:94:d0:5d:66:87:77:85:03:ce:3d:05:30:86: 1b:81:7f:4e:fc:76:ac:c9:f3:19:aa:70:78:e1:89: 1d:ab:f2:3f:0b:3e:99:c4:04:15:93:04:d8:33:db: 6c:d5:7f:eb:5a:6c:b3:61:63:05:f3:5b:55:61:92: f1:19:e2:90:0e:33:36:ff:6b:94:1b:77:71:92:14: 12:e4:4f:fb:b8:52:45:28:28:99:a2:10:78:7e:5c: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B1:E8:3D:95:C5:C8:50:C3:EB:E3:71:CF:9E:D8:F0:C8:73:AC:BF X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1d:1f:16:79:79:1e:f7:27:fa:04:78:60:c9:3c:09:75:04: 30:ee:79:bc:e6:c9:9f:9b:78:d2:05:00:81:17:1c:ab:b5:cc: a4:b7:1c:80:f8:5d:1f:8f:18:26:96:62:9b:d2:d9:e9:07:9a: 8b:c5:2b:c4:25:61:d6:95:61:ce:e7:af:b0:dc:88:e0:70:2b: 73:55:f3:b8:26:41:4b:ac:64:1a:d6:36:6e:cd:09:b7:88:18: e4:19:ee:98:f5:19:4a:f2:86:dc:81:0f:05:ea:3b:0c:6f:87: e6:95:e3:02:63:66:67:0a:e1:98:42:e2:82:e1:b1:aa:55:7c: 25:12:d4:ce:fb:53:04:7a:fc:63:0f:33:c1:58:a8:12:74:4a: 56:17:40:56:81:08:0c:9f:77:7f:96:ea:a9:e8:3a:a2:ab:c0: 5b:44:e7:dc:d5:ce:87:c5:49:ed:c4:22:22:39:5a:61:22:9d: df:0b:4c:bf:f1:ef:f2:7b:0e:32:03:ca:f3:32:44:12:06:33: 7c:3d:1f:18:47:9d:7b:e4:a1:f1:93:54:43:65:59:d5:94:5d: 89:1b:9a:81:0d:1d:79:0c:f6:88:e5:d6:5f:8d:3d:42:e9:fa: 94:26:86:e4:65:64:6e:07:3f:f9:88:64:4f:29:ce:dc:1f:44: 0e:76:c6:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ74mV+QhMi8rXAZxUtMqG/Fgc/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTEyMTcwODM2MDVaFw0yNTEyMjAyMDI0MDVaMDMxMTAvBgNV BAMTKDVBQjFFODNEOTVDNUM4NTBDM0VCRTM3MUNGOUVEOEYwQzg3M0FDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJQZgmuKNsBhsrK83l8VHy0af hwpj94meTHSq2blbF+md94g7Eae1OuylQTVABMp2BCoy58PBf8S2BQw8SLDT3F98 gMp4K6YhDnTySCiIGHql7k6ALP0zo6hblhJRwDUFH3aBbFdMh9Qak2sx8XoDDZHy Wlk9j3Hr+ubgr0xxK9li2gd+Q0EB8h+aTvbr/yvWpchLRYHRGvhtd0n5pVjh2AgA q1I7lNBdZod3hQPOPQUwhhuBf078dqzJ8xmqcHjhiR2r8j8LPpnEBBWTBNgz22zV f+tabLNhYwXzW1VhkvEZ4pAOMzb/a5Qbd3GSFBLkT/u4UkUoKJmiEHh+XJhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWrHoPZXFyFDD6+Nxz57Y8MhzrL8wHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGcdHxZ5eR73J/oEeGDJPAl1BDDuebzmyZ+b eNIFAIEXHKu1zKS3HID4XR+PGCaWYpvS2ekHmovFK8QlYdaVYc7nr7DciOBwK3NV 87gmQUusZBrWNm7NCbeIGOQZ7pj1GUryhtyBDwXqOwxvh+aV4wJjZmcK4ZhC4oLh sapVfCUS1M77UwR6/GMPM8FYqBJ0SlYXQFaBCAyfd3+W6qnoOqKrwFtE59zVzofF Se3EIiI5WmEind8LTL/x7/J7DjIDyvMyRBIGM3w9HxhHnXvkofGTVENlWdWUXYkb moENHXkM9ojl1l+NPULp+pQmhuRlZG4HP/mIZE8pztwfRA52xuM= -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:41 2025 by rpki-client