This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft File: 024ABFF2959A6144CC4889C70F77F968FA410EF1.mft (raw, json) Hash identifier: dyFxbwnKEQegST8Yvn8071zHoZJi58kWqrWpvQf5j/Y= Subject key identifier: DC:67:4B:5A:8D:42:F4:7F:2C:65:AD:0A:AE:DA:F9:14:D4:95:90:CF Authority key identifier: 02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 Certificate issuer: /CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Certificate serial: 4E908210085DFB71D8BC361E88D585A9164E8129 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft Manifest number: 02EA Signing time: Tue 02 Dec 2025 22:51:16 +0000 Manifest this update: Tue 02 Dec 2025 22:46:16 +0000 Manifest next update: Sat 06 Dec 2025 10:40:16 +0000 Files and hashes: 1: 024ABFF2959A6144CC4889C70F77F968FA410EF1.crl (hash: y7JRTflG3MHCgx1ayREmZPBSvdzwLN6qX+SoIuY1Rus=) 2: 3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (hash: QO9yzDb4CC7G7ZrOt9x3m3LlZY080vHY8ADNw1G145c=) 3: 3130332e3137362e34342e302f32342d3234203d3e20313437313238.roa (hash: Dc4qfVtP8INNtKjh1IR53nYnK3S3BQyGrJeyd5Z5XHM=) 4: 3130332e3137362e34342e302f32332d3233203d3e20313437313238.roa (hash: QdIixnzSq8N8sCH+dxKebIKtXdrr8qVttS8Xci0wB7M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:40:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:90:82:10:08:5d:fb:71:d8:bc:36:1e:88:d5:85:a9:16:4e:81:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024ABFF2959A6144CC4889C70F77F968FA410EF1 Validity Not Before: Dec 2 22:46:16 2025 GMT Not After : Dec 6 10:40:16 2025 GMT Subject: CN=DC674B5A8D42F47F2C65AD0AAEDAF914D49590CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:9e:bb:37:99:70:1a:93:fd:1d:0d:ec:a7: d0:7a:8d:7e:92:81:50:b8:19:08:bc:f1:0c:3b:a2: 39:ee:fe:c1:6a:b2:39:d3:f3:e8:a0:f5:08:d8:1e: 55:11:0b:49:ba:8f:42:a8:c0:af:f1:bd:a1:43:a8: 68:9a:98:23:93:64:b5:1a:da:7a:57:ed:6e:73:a0: b6:b5:ae:11:df:b9:9f:e0:44:c2:f4:19:a5:2e:bf: 53:76:7b:14:a0:8b:9f:5a:dc:f1:da:e9:fe:fb:27: 62:1d:90:fc:00:d3:6c:6b:46:cc:b0:93:cb:71:09: 3d:8b:df:aa:a2:08:1e:cc:56:10:05:88:ca:e4:13: 1c:0e:71:22:01:be:1e:ad:af:b2:72:64:cf:29:4b: ba:a1:be:7c:b6:7d:b2:78:5a:87:8a:85:7b:23:e2: 1f:15:63:b8:5f:97:72:39:3a:a5:1b:71:58:e3:ac: 31:9d:ec:f7:ec:46:0a:e4:03:29:81:2b:a2:b2:a2: 5f:13:ab:22:9c:22:cb:fd:d2:fc:20:82:95:70:d8: 55:ff:50:c3:72:ed:b6:69:92:2e:fe:49:e5:27:d9: a3:9e:f8:d9:e9:59:ce:c0:38:01:f7:cf:c6:e9:78: 3b:90:a2:fc:d4:44:7e:d9:bd:cd:96:07:a8:ca:12: 89:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:67:4B:5A:8D:42:F4:7F:2C:65:AD:0A:AE:DA:F9:14:D4:95:90:CF X509v3 Authority Key Identifier: keyid:02:4A:BF:F2:95:9A:61:44:CC:48:89:C7:0F:77:F9:68:FA:41:0E:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/024ABFF2959A6144CC4889C70F77F968FA410EF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/024ABFF2959A6144CC4889C70F77F968FA410EF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a3:3e:50:12:b0:cf:84:f0:84:60:d8:eb:72:c8:31:83:80: 86:d4:0b:d1:34:18:75:0f:28:98:61:13:8d:bf:9f:7b:54:3e: a4:2b:86:4e:6d:97:7d:25:63:97:fc:06:c8:a2:c1:1d:1b:b8: 04:d5:67:df:47:f9:fb:e5:26:41:d0:4c:c1:c2:0b:0d:05:16: 7a:6c:06:49:3b:29:04:36:a3:86:9a:7e:b6:29:db:b2:99:49: 30:5a:fb:16:ee:29:c6:ec:ee:18:6a:37:53:2f:a3:36:6e:f0: a9:e8:c5:e5:3f:0f:c9:25:22:07:57:8b:9f:2e:59:45:f3:0e: 7a:b3:80:ef:d0:fd:23:ce:5f:b7:4c:fe:89:58:a0:f9:7a:64: cf:6b:ae:95:04:ac:6c:bf:47:36:b3:f4:95:d5:75:e5:08:07: e4:6e:6d:79:e9:49:53:fc:e8:23:24:bb:e6:f5:39:92:97:b0: 63:f9:08:4b:bd:2b:27:e3:48:e1:55:8e:d4:26:49:18:ed:8f: 88:d3:55:15:1a:3e:89:04:42:fb:0d:53:68:a5:06:a7:23:db: 8c:0d:e6:80:b0:fd:40:c3:9a:fe:1c:b2:69:77:b8:0d:07:9e: 98:cf:29:09:59:d2:21:51:03:f1:34:6c:9f:0a:c9:d9:2e:95: c6:7e:19:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpCCEAhd+3HYvDYeiNWFqRZOgSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhG QTQxMEVGMTAeFw0yNTEyMDIyMjQ2MTZaFw0yNTEyMDYxMDQwMTZaMDMxMTAvBgNV BAMTKERDNjc0QjVBOEQ0MkY0N0YyQzY1QUQwQUFFREFGOTE0RDQ5NTkwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoZ67N5lwGpP9HQ3sp9B6jX6S gVC4GQi88Qw7ojnu/sFqsjnT8+ig9QjYHlURC0m6j0KowK/xvaFDqGiamCOTZLUa 2npX7W5zoLa1rhHfuZ/gRML0GaUuv1N2exSgi59a3PHa6f77J2IdkPwA02xrRsyw k8txCT2L36qiCB7MVhAFiMrkExwOcSIBvh6tr7JyZM8pS7qhvny2fbJ4WoeKhXsj 4h8VY7hfl3I5OqUbcVjjrDGd7PfsRgrkAymBK6Kyol8TqyKcIsv90vwggpVw2FX/ UMNy7bZpki7+SeUn2aOe+NnpWc7AOAH3z8bpeDuQovzURH7Zvc2WB6jKEomTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3GdLWo1C9H8sZa0Krtr5FNSVkM8wHwYDVR0j BBgwFoAUAkq/8pWaYUTMSInHD3f5aPpBDvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzFhOTQyNi0zYzM1LTQ3MGUtYmYzNC0zMGU3ZTQxNjAyY2IvMC8wMjRBQkZGMjk1 OUE2MTQ0Q0M0ODg5QzcwRjc3Rjk2OEZBNDEwRUYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5NjhGQTQx MEVGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDMxYTk0MjYtM2MzNS00NzBlLWJm MzQtMzBlN2U0MTYwMmNiLzAvMDI0QUJGRjI5NTlBNjE0NENDNDg4OUM3MEY3N0Y5 NjhGQTQxMEVGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKejPlASsM+E8IRg2OtyyDGDgIbUC9E0GHUP KJhhE42/n3tUPqQrhk5tl30lY5f8BsiiwR0buATVZ99H+fvlJkHQTMHCCw0FFnps Bkk7KQQ2o4aafrYp27KZSTBa+xbuKcbs7hhqN1MvozZu8KnoxeU/D8klIgdXi58u WUXzDnqzgO/Q/SPOX7dM/olYoPl6ZM9rrpUErGy/Rzaz9JXVdeUIB+RubXnpSVP8 6CMku+b1OZKXsGP5CEu9KyfjSOFVjtQmSRjtj4jTVRUaPokEQvsNU2ilBqcj24wN 5oCw/UDDmv4csml3uA0HnpjPKQlZ0iFRA/E0bJ8KydkulcZ+GWU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:17 2025 by rpki-client