This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: jFMPKd1XWxzlmSPejm4+RI8rx0wF3Q3JM310jp3FzrI= Subject key identifier: EA:02:E5:E0:2F:4B:EC:CC:15:8B:E1:CC:44:31:E3:24:B4:EA:FA:6E Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 6B6E05F67175F9B6CE29444BC42C608243E8499D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 0219 Signing time: Mon 01 Dec 2025 07:40:41 +0000 Manifest this update: Mon 01 Dec 2025 07:35:41 +0000 Manifest next update: Thu 04 Dec 2025 17:22:41 +0000 Files and hashes: 1: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: fbMC3foKpfnHAAX7CqNwv+8CUIBKmVdM4iWFdYY2w+c=) 2: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: h0i6o1md9zXeZ9ZcSa+PGKss268qYszF+iOxTtMdu4E=) 3: 2985976A4B3081770748882703E16497964D05A6.crl (hash: X9l/kUDjSlJWJs4298FBl8EzqaZCQfi4R0hVKHyu3To=) 4: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: 6DmXkqMFBwmOgmu7GrU8MAR3khWhl6gAoERCQcW2kCE=) 5: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: s3jB5rGy3ygjsQ7KSNEtfVl4k8P8QCufhhtVBzaX2IQ=) 6: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: RrW5I2lzLuA+7ZMS1LEMZMinrm7Ftg4PYDdGcwSGY08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6e:05:f6:71:75:f9:b6:ce:29:44:4b:c4:2c:60:82:43:e8:49:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: Dec 1 07:35:41 2025 GMT Not After : Dec 4 17:22:41 2025 GMT Subject: CN=EA02E5E02F4BECCC158BE1CC4431E324B4EAFA6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:2e:c4:82:57:24:ad:a4:6e:8f:a3:9a:9a: ea:53:f7:95:c6:b2:85:ee:ff:f7:c6:27:b3:dd:31: 47:d7:6d:f5:41:06:21:ad:ff:d0:ac:d4:f9:3f:21: f4:ef:4f:cb:75:49:e3:60:c3:ec:c2:19:1f:02:22: 0c:33:06:28:01:fd:3e:2c:d3:2a:64:6b:d8:c6:54: b9:38:f2:fe:d9:f8:3a:0a:4c:2a:54:a2:6a:a2:99: d3:d7:ed:86:a2:9c:6f:e9:6c:ae:41:39:61:44:63: ca:bf:1d:7a:38:1e:02:d3:2f:d7:1f:8a:0e:81:5a: 91:e2:ec:a4:4b:90:02:bb:56:7b:4b:3b:35:71:f3: ce:1d:a4:23:69:29:19:f2:77:38:4a:9a:ee:45:fa: 93:e0:34:ea:d4:26:b3:c4:a7:ae:8b:36:fa:b0:1e: 0e:5d:b6:56:6e:20:45:6d:ce:a8:c4:d6:18:d0:c6: 88:bc:9f:ac:49:42:08:63:e2:13:7d:28:9d:a1:e1: 84:56:ed:cc:4f:01:4b:4a:a7:0c:da:9f:7e:a3:5f: e2:6b:c5:60:b4:9b:a7:52:50:15:a2:24:4b:bb:c6: 37:86:f9:2a:9c:89:ae:93:2b:ac:cf:4c:ea:b1:77: 1f:c4:bd:38:15:67:cc:d2:d9:af:b9:41:97:0a:f1: 3c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:02:E5:E0:2F:4B:EC:CC:15:8B:E1:CC:44:31:E3:24:B4:EA:FA:6E X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:63:ed:b7:fd:a8:10:05:75:f6:fb:8b:97:7b:15:d9:01:7b: e2:68:66:bc:b0:22:7a:53:8b:d8:88:67:e9:bc:45:a9:c8:b0: 2a:ae:23:eb:ff:eb:7b:4a:3f:27:bb:c4:c7:b2:df:f7:a5:89: 14:8d:83:a9:eb:e6:6f:39:da:f5:ae:42:7a:18:91:b1:10:a0: c8:58:a6:10:3d:da:65:78:7d:9b:35:46:c7:97:bf:e1:10:dc: 4d:33:47:00:0f:50:57:1e:f5:f1:1e:60:3d:4d:a8:d0:48:47: 05:d7:a1:82:e1:b6:8c:ea:1c:73:cd:9e:01:5a:e0:56:b1:e4: 61:12:35:3e:f1:34:09:c6:7f:ba:2c:e3:0f:bd:f7:a2:3a:35: 40:66:ba:95:62:88:e2:63:5c:35:3b:5c:bd:aa:31:bb:d9:79: 76:64:e0:44:f5:e4:fb:a4:51:98:cc:57:f0:03:8c:3d:04:66: 99:29:04:3b:c2:0c:65:3f:08:a0:e9:08:b2:e0:ed:ea:38:38: db:22:d9:8f:2f:2a:5f:d1:43:53:8d:af:9d:68:62:48:97:8c: fd:94:5b:bc:67:ff:30:52:ac:70:52:2a:58:d0:55:47:80:35: b3:2b:24:c5:ff:96:b6:e7:00:d9:57:84:1b:f2:5b:9b:9b:0c: 8e:75:b8:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa24F9nF1+bbOKURLxCxggkPoSZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNTEyMDEwNzM1NDFaFw0yNTEyMDQxNzIyNDFaMDMxMTAvBgNV BAMTKEVBMDJFNUUwMkY0QkVDQ0MxNThCRTFDQzQ0MzFFMzI0QjRFQUZBNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQi7EglckraRuj6OamupT95XG soXu//fGJ7PdMUfXbfVBBiGt/9Cs1Pk/IfTvT8t1SeNgw+zCGR8CIgwzBigB/T4s 0ypka9jGVLk48v7Z+DoKTCpUomqimdPX7YainG/pbK5BOWFEY8q/HXo4HgLTL9cf ig6BWpHi7KRLkAK7VntLOzVx884dpCNpKRnydzhKmu5F+pPgNOrUJrPEp66LNvqw Hg5dtlZuIEVtzqjE1hjQxoi8n6xJQghj4hN9KJ2h4YRW7cxPAUtKpwzan36jX+Jr xWC0m6dSUBWiJEu7xjeG+Sqcia6TK6zPTOqxdx/EvTgVZ8zS2a+5QZcK8TzTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gLl4C9L7MwVi+HMRDHjJLTq+m4wHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZj7bf9qBAFdfb7i5d7FdkBe+JoZrywInpT i9iIZ+m8RanIsCquI+v/63tKPye7xMey3/eliRSNg6nr5m852vWuQnoYkbEQoMhY phA92mV4fZs1RseXv+EQ3E0zRwAPUFce9fEeYD1NqNBIRwXXoYLhtozqHHPNngFa 4Fax5GESNT7xNAnGf7os4w+996I6NUBmupViiOJjXDU7XL2qMbvZeXZk4ET15Puk UZjMV/ADjD0EZpkpBDvCDGU/CKDpCLLg7eo4ONsi2Y8vKl/RQ1ONr51oYkiXjP2U W7xn/zBSrHBSKljQVUeANbMrJMX/lrbnANlXhBvyW5ubDI51uK0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:00 2025 by rpki-client