This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: xfIM0D0U3NrcQ5/HnILve0DeZD95HxPq5tMNG1WiRuc= Subject key identifier: E1:2B:ED:22:6B:39:88:D2:39:18:8B:72:9A:56:B7:8B:AF:19:CD:5C Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 4A16C1DD8B03603E8F227A9F5712311749AE2A9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 01D0 Signing time: Sat 29 Nov 2025 20:30:44 +0000 Manifest this update: Sat 29 Nov 2025 20:25:44 +0000 Manifest next update: Tue 02 Dec 2025 21:22:44 +0000 Files and hashes: 1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: zLdqV/1Y5xdn3XOlV5N5/ZjoxyILukVGS+WM21wjP+Y=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: 2L7DCJfQuXYmkUJUsfdFqwDAT1SsF8x6dqI0f/qoYAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Dec 2025 21:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:16:c1:dd:8b:03:60:3e:8f:22:7a:9f:57:12:31:17:49:ae:2a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Nov 29 20:25:44 2025 GMT Not After : Dec 2 21:22:44 2025 GMT Subject: CN=E12BED226B3988D239188B729A56B78BAF19CD5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:79:47:18:6e:bd:71:db:60:ad:e0:89:54: 22:6c:4d:f6:47:59:d0:87:ba:d0:9d:68:1b:5d:a0: 63:52:cb:2f:7b:d7:9d:9a:a8:45:c5:68:e6:56:6e: 5d:dd:d2:8c:3f:18:19:88:af:67:e1:cd:f2:93:7f: fa:ef:5c:db:fe:80:1b:ac:c5:34:c3:86:ef:74:a2: 82:7d:3f:7a:8e:c7:23:87:6e:f4:93:15:ab:48:fc: 19:4e:81:10:3d:0c:2d:0c:c9:14:88:b0:70:76:37: fd:d3:27:5a:1a:54:5d:8b:59:f4:01:34:57:39:e9: 94:d4:30:2f:d3:74:7c:c5:0f:cc:a6:02:d5:3c:58: c4:40:6a:57:98:37:51:c2:88:10:df:39:84:97:18: 22:ba:45:30:ee:1e:63:7c:af:be:e2:ea:0c:16:2d: b0:1f:28:78:9d:a5:70:02:38:56:d3:7c:9c:97:dc: ff:82:3a:70:45:50:b5:cc:94:f0:32:de:81:47:34: 86:43:41:b1:ff:d5:e3:ff:e2:64:5e:77:87:3a:1e: a0:10:46:34:dc:2d:81:be:1f:7a:de:c7:e4:b5:9e: c2:ec:c0:1c:85:e6:77:93:83:be:75:be:6b:24:69: df:02:b2:21:fb:27:6a:87:0b:66:91:ba:b6:99:da: ff:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2B:ED:22:6B:39:88:D2:39:18:8B:72:9A:56:B7:8B:AF:19:CD:5C X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ca:f1:c8:cb:e2:f6:01:d7:90:b0:63:e9:f3:71:71:6e:ca: e3:c4:83:4e:68:93:6f:87:33:d0:00:50:65:ea:39:32:b8:06: 3a:b2:cb:e4:6d:96:b8:bd:be:55:ca:ee:26:29:bc:2d:7e:7f: 17:52:0c:7c:31:85:4d:7b:0b:7d:e8:2d:b1:2e:fd:97:80:fe: 50:99:89:2b:28:4a:48:f2:16:e2:9e:a5:1f:96:da:94:76:3c: 29:ce:a9:29:f0:0d:8c:45:2a:e7:70:ff:62:21:99:ce:51:48: fc:78:13:78:a0:63:56:2d:f5:6f:ad:9e:96:d1:37:f1:65:2c: 3a:5c:77:4f:de:95:df:c1:81:b3:78:19:cf:b5:e0:64:fa:90: 9e:45:a7:d7:f3:1a:c8:33:4e:91:1c:8e:91:e5:1f:9e:a6:ed: 98:33:5c:52:32:9a:f0:bb:6b:c5:d2:f1:cc:3d:4f:b4:77:8b: 92:a5:be:5d:4c:5f:a3:70:35:af:ec:3c:3f:fd:e3:5a:31:f8: 16:29:23:89:d2:e8:8c:8d:87:95:c7:4c:b8:a8:08:75:c1:e2: 69:91:7d:2c:15:e4:79:df:e3:ae:6c:b5:76:8f:8d:2c:2d:b5: 25:d5:50:2f:cb:a9:a4:97:42:a6:6d:8d:b1:dc:1f:43:0c:22: 68:11:36:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUShbB3YsDYD6PInqfVxIxF0muKpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTExMjkyMDI1NDRaFw0yNTEyMDIyMTIyNDRaMDMxMTAvBgNV BAMTKEUxMkJFRDIyNkIzOTg4RDIzOTE4OEI3MjlBNTZCNzhCQUYxOUNENUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzHlHGG69cdtgreCJVCJsTfZH WdCHutCdaBtdoGNSyy97152aqEXFaOZWbl3d0ow/GBmIr2fhzfKTf/rvXNv+gBus xTTDhu90ooJ9P3qOxyOHbvSTFatI/BlOgRA9DC0MyRSIsHB2N/3TJ1oaVF2LWfQB NFc56ZTUMC/TdHzFD8ymAtU8WMRAaleYN1HCiBDfOYSXGCK6RTDuHmN8r77i6gwW LbAfKHidpXACOFbTfJyX3P+COnBFULXMlPAy3oFHNIZDQbH/1eP/4mRed4c6HqAQ RjTcLYG+H3rex+S1nsLswByF5neTg751vmskad8CsiH7J2qHC2aRuraZ2v9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4SvtIms5iNI5GItymla3i68ZzVwwHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHK8cjL4vYB15CwY+nzcXFuyuPEg05ok2+H M9AAUGXqOTK4Bjqyy+Rtlri9vlXK7iYpvC1+fxdSDHwxhU17C33oLbEu/ZeA/lCZ iSsoSkjyFuKepR+W2pR2PCnOqSnwDYxFKudw/2Ihmc5RSPx4E3igY1Yt9W+tnpbR N/FlLDpcd0/eld/BgbN4Gc+14GT6kJ5Fp9fzGsgzTpEcjpHlH56m7ZgzXFIymvC7 a8XS8cw9T7R3i5Klvl1MX6NwNa/sPD/941ox+BYpI4nS6IyNh5XHTLioCHXB4mmR fSwV5Hnf465stXaPjSwttSXVUC/LqaSXQqZtjbHcH0MMImgRNjQ= -----END CERTIFICATE-----Generated at Sun Nov 30 06:41:51 2025 by rpki-client