This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft File: C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json) Hash identifier: 7bZX7cTzBx3dKCcKUHgtQskKCDk7IhOkbCmK/14Bt6U= Subject key identifier: 03:7F:CE:96:68:EF:14:08:BE:6C:D1:A8:B3:FA:0F:3F:3F:95:83:C7 Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 Certificate issuer: /CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Certificate serial: 68294552045E1DB0B19240C7C1F8B97F1FA8ABE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft Manifest number: 014C Signing time: Tue 02 Dec 2025 00:21:47 +0000 Manifest this update: Tue 02 Dec 2025 00:16:47 +0000 Manifest next update: Fri 05 Dec 2025 07:36:47 +0000 Files and hashes: 1: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: dATjFz2GgCuZI7do22WaaBEM9mGMyqKI+2l7xnlR/rA=) 2: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: tyCc1f6G7VZFA0RAGQ7gxyjwp0GeGjmy6/Q3Y0UDEkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:29:45:52:04:5e:1d:b0:b1:92:40:c7:c1:f8:b9:7f:1f:a8:ab:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Validity Not Before: Dec 2 00:16:47 2025 GMT Not After : Dec 5 07:36:47 2025 GMT Subject: CN=037FCE9668EF1408BE6CD1A8B3FA0F3F3F9583C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:9a:ba:a3:68:59:bf:c5:0e:20:2a:ae:ae: 83:e9:91:3e:3d:32:78:44:5a:f5:51:07:7d:ed:b6: 34:e4:2b:3d:68:fe:8a:dc:b0:81:db:b0:56:94:3a: 4b:b4:9e:66:cb:92:7c:37:b3:02:38:37:02:3e:82: a2:b6:48:e2:72:26:ac:46:62:93:a2:c5:04:91:97: ec:19:b2:57:f0:93:9c:7a:84:e6:6a:61:ab:ab:57: 0d:b3:9b:27:34:b9:d1:20:29:0f:32:64:d3:a3:9f: a6:d7:d6:c3:0f:71:b3:06:73:fe:4c:f9:e0:cd:2d: ca:f2:5a:41:59:f8:04:ca:f2:4a:1c:cf:d6:f5:cf: e4:70:9c:ca:2c:1a:4f:09:a1:70:f6:a8:c6:cc:3e: 19:5e:37:a7:e3:14:a2:27:68:da:68:32:73:28:dd: 31:11:7c:c1:41:11:ed:5e:0b:49:eb:5b:e3:ec:2b: ba:b2:7e:7d:26:2f:23:fe:dd:7e:52:e6:a2:87:b1: d9:e3:4b:37:38:a3:19:28:48:4e:e9:c9:a9:9c:5d: 5a:70:16:9d:39:99:ff:90:96:e7:9a:49:e3:b5:d8: 52:da:fa:df:31:e6:c4:56:fa:83:e3:7f:61:0e:49: 1a:a3:a9:f4:28:cf:87:6f:91:79:1f:30:15:cb:f9: bc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:CE:96:68:EF:14:08:BE:6C:D1:A8:B3:FA:0F:3F:3F:95:83:C7 X509v3 Authority Key Identifier: keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a6:67:2e:d3:63:24:9d:ae:b6:1a:9b:7a:91:f4:52:01:9e: a0:2d:44:bd:92:c4:80:73:cc:d9:93:d1:9f:27:04:cc:5c:a8: e9:41:de:d5:1f:75:f4:0b:cf:a4:1e:0e:f5:90:50:6a:90:9b: a0:7b:f6:f1:ca:63:e6:c2:74:2c:df:5a:46:b3:d3:1f:0a:94: 61:2d:50:8f:c1:5e:21:01:d5:38:83:e1:0b:6c:03:fb:98:ba: 29:6a:1f:86:59:8e:c1:4e:12:0a:c7:18:7c:ce:90:75:05:f1: 00:e2:9f:1e:f8:e2:8f:6f:47:62:b5:4b:f8:69:3b:ab:7a:94: 0c:be:79:d4:c7:41:d7:46:5f:0c:6c:b8:80:4c:a0:8c:9e:c5: 41:27:b2:67:31:d3:ba:24:d5:ee:ad:0d:b1:11:c2:06:84:4f: 70:96:24:a3:16:1b:7a:89:39:27:4e:ba:eb:06:d4:e5:03:d6: a2:40:91:ed:6c:0c:0d:3c:ac:17:0c:07:28:6c:f4:c4:37:28: 09:8a:72:a2:4d:ff:0c:da:31:7f:5b:5a:6b:4a:9b:17:9d:4a: f0:9c:28:f0:46:d3:5f:05:2f:1c:b6:80:c7:84:86:53:42:e3: 7b:ca:8b:5c:84:3c:47:f8:02:aa:37:06:a0:5a:b6:63:ee:6b: 89:79:8b:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaClFUgReHbCxkkDHwfi5fx+oq+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFF Q0FDMjdEMjAeFw0yNTEyMDIwMDE2NDdaFw0yNTEyMDUwNzM2NDdaMDMxMTAvBgNV BAMTKDAzN0ZDRTk2NjhFRjE0MDhCRTZDRDFBOEIzRkEwRjNGM0Y5NTgzQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7pq6o2hZv8UOICquroPpkT49 MnhEWvVRB33ttjTkKz1o/orcsIHbsFaUOku0nmbLknw3swI4NwI+gqK2SOJyJqxG YpOixQSRl+wZslfwk5x6hOZqYaurVw2zmyc0udEgKQ8yZNOjn6bX1sMPcbMGc/5M +eDNLcryWkFZ+ATK8kocz9b1z+RwnMosGk8JoXD2qMbMPhleN6fjFKInaNpoMnMo 3TERfMFBEe1eC0nrW+PsK7qyfn0mLyP+3X5S5qKHsdnjSzc4oxkoSE7pyamcXVpw Fp05mf+QlueaSeO12FLa+t8x5sRW+oPjf2EOSRqjqfQoz4dvkXkfMBXL+bz1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA3/OlmjvFAi+bNGos/oPPz+Vg8cwHwYDVR0j BBgwFoAUwukp37BfgbkYgLyAgVQ2WuysJ9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDZmZmFkMi0yMGJjLTQyNDYtODI5My00NDY2NmNlMWNmZTAvMC9DMkU5MjlERkIw NUY4MUI5MTg4MEJDODA4MTU0MzY1QUVDQUMyN0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFFQ0FD MjdEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2 NUFFQ0FDMjdEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6mZy7TYySdrrYam3qR9FIBnqAtRL2SxIBz zNmT0Z8nBMxcqOlB3tUfdfQLz6QeDvWQUGqQm6B79vHKY+bCdCzfWkaz0x8KlGEt UI/BXiEB1TiD4QtsA/uYuilqH4ZZjsFOEgrHGHzOkHUF8QDinx744o9vR2K1S/hp O6t6lAy+edTHQddGXwxsuIBMoIyexUEnsmcx07ok1e6tDbERwgaET3CWJKMWG3qJ OSdOuusG1OUD1qJAke1sDA08rBcMByhs9MQ3KAmKcqJN/wzaMX9bWmtKmxedSvCc KPBG018FLxy2gMeEhlNC43vKi1yEPEf4Aqo3BqBatmPua4l5i8o= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:58 2025 by rpki-client