This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: lSrTWysoYqdB59atVMULqcpKw8tq1+4y7afbODPMMi4= Subject key identifier: E2:9E:E2:30:F2:AE:AF:AC:54:22:AE:EC:49:E1:E0:F5:44:58:0E:A0 Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 6141FBEE98A1A4DC4D07F688C080350E7CC9A9D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 052B Signing time: Wed 03 Dec 2025 04:00:03 +0000 Manifest this update: Wed 03 Dec 2025 03:55:03 +0000 Manifest next update: Sat 06 Dec 2025 10:25:03 +0000 Files and hashes: 1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) 2: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: +1fXc5mDrG3bZZehURGKIO63o58NP6m5j2NAOMICp+k=) 3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:41:fb:ee:98:a1:a4:dc:4d:07:f6:88:c0:80:35:0e:7c:c9:a9:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Dec 3 03:55:03 2025 GMT Not After : Dec 6 10:25:03 2025 GMT Subject: CN=E29EE230F2AEAFAC5422AEEC49E1E0F544580EA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:1f:a1:a7:d3:8d:a2:b5:c2:35:dc:ff:e5: 59:58:e7:99:af:31:01:77:49:54:65:0e:e0:12:1a: 63:77:cf:97:92:23:99:56:22:7a:ab:32:96:bf:8a: 64:a9:bc:70:02:05:48:3b:08:3c:ee:74:d2:7a:b9: 5d:4f:8e:bb:e5:06:4d:06:da:4d:25:1f:52:9f:60: f8:7e:6c:71:47:09:9a:fc:25:fb:53:38:86:7d:00: 33:54:01:f3:a2:3b:fe:54:96:ca:a3:66:57:10:94: 4c:b4:3b:b7:83:88:76:0c:69:82:93:94:0e:4d:6b: 39:a0:48:1b:b5:6d:7f:b4:38:2d:c3:81:a3:cf:87: bb:97:26:87:cc:a6:21:ef:33:6c:07:2b:a4:4f:43: 83:3b:9a:86:f2:ed:7e:52:c7:cb:67:fa:d9:a3:ef: ca:07:39:80:c2:63:0b:c6:5a:ca:72:9d:9a:00:81: ae:6e:ae:a2:dd:c4:13:e0:61:a4:93:ef:ea:a4:41: 06:c4:e8:91:b9:d2:87:d8:63:23:1b:58:47:c7:82: 67:30:fc:0e:86:b0:98:bd:a5:69:90:82:07:af:fc: ff:ac:83:ba:a6:77:8f:c9:a9:a8:08:34:35:2c:48: af:71:a5:6a:bb:e3:0c:0c:94:61:fc:d9:f5:be:d8: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9E:E2:30:F2:AE:AF:AC:54:22:AE:EC:49:E1:E0:F5:44:58:0E:A0 X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3d:9d:d7:a8:5b:00:0b:0d:ab:7c:f3:1a:3b:46:8f:37:76: 5f:3d:20:53:ed:36:99:7f:6e:48:bb:3f:db:93:57:bf:c3:58: d2:fa:ff:a0:80:ef:cd:c5:24:ed:78:43:98:ec:25:ba:bc:db: d0:bf:20:6a:ba:f8:72:18:ab:a7:c9:0b:31:a7:1c:9b:ee:6e: 4c:c9:f7:95:55:79:6a:b4:f5:b5:1e:68:eb:c1:7b:ae:33:82: 0d:e3:d4:18:6d:12:f0:83:da:6a:94:52:1c:f8:15:0e:b7:06: a3:03:cd:b1:fb:92:de:04:68:af:70:db:11:c4:9e:93:3c:69: fd:c1:c4:05:86:2a:63:46:de:49:87:23:59:d9:cb:a9:00:fd: b5:85:85:92:8e:b7:ad:9b:d5:6c:b1:17:54:9f:93:85:0b:d3: 06:a6:f1:c0:8d:28:df:6d:5f:58:13:37:3c:c8:3c:ea:30:12: 04:8f:ab:b7:e9:62:61:4b:a4:b2:37:ee:ce:35:aa:e1:62:38: 2d:f3:95:74:2e:fd:fe:72:a0:b4:be:45:f2:10:c2:87:2c:f9: 51:28:72:08:04:8a:ff:ff:87:5e:33:33:42:4b:19:a8:15:1e: d0:c9:f5:9d:5e:f5:4f:7d:4e:b9:1b:77:35:d5:d6:8b:3d:96: 6b:93:cb:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUH77pihpNxNB/aIwIA1DnzJqdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTEyMDMwMzU1MDNaFw0yNTEyMDYxMDI1MDNaMDMxMTAvBgNV BAMTKEUyOUVFMjMwRjJBRUFGQUM1NDIyQUVFQzQ5RTFFMEY1NDQ1ODBFQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WR+hp9ONorXCNdz/5VlY55mv MQF3SVRlDuASGmN3z5eSI5lWInqrMpa/imSpvHACBUg7CDzudNJ6uV1PjrvlBk0G 2k0lH1KfYPh+bHFHCZr8JftTOIZ9ADNUAfOiO/5UlsqjZlcQlEy0O7eDiHYMaYKT lA5NazmgSBu1bX+0OC3DgaPPh7uXJofMpiHvM2wHK6RPQ4M7moby7X5Sx8tn+tmj 78oHOYDCYwvGWspynZoAga5urqLdxBPgYaST7+qkQQbE6JG50ofYYyMbWEfHgmcw /A6GsJi9pWmQggev/P+sg7qmd4/JqagINDUsSK9xpWq74wwMlGH82fW+2BMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4p7iMPKur6xUIq7sSeHg9URYDqAwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC49ndeoWwALDat88xo7Ro83dl89IFPtNpl/ bki7P9uTV7/DWNL6/6CA783FJO14Q5jsJbq829C/IGq6+HIYq6fJCzGnHJvubkzJ 95VVeWq09bUeaOvBe64zgg3j1BhtEvCD2mqUUhz4FQ63BqMDzbH7kt4EaK9w2xHE npM8af3BxAWGKmNG3kmHI1nZy6kA/bWFhZKOt62b1WyxF1Sfk4UL0wam8cCNKN9t X1gTNzzIPOowEgSPq7fpYmFLpLI37s41quFiOC3zlXQu/f5yoLS+RfIQwocs+VEo cggEiv//h14zM0JLGagVHtDJ9Z1e9U99TrkbdzXV1os9lmuTyxM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:13 2025 by rpki-client