This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: Dqyt7LukTK7aNLX5gGAouNfvbA1/VG2DLxVdjGXIyF0= Subject key identifier: B2:8C:EF:87:F3:72:B7:73:AC:A2:E1:FD:D8:AB:79:38:6D:4C:80:86 Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 7A5AD7434DAB467BE12E1991905E2D3D9BDE8887 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 0284 Signing time: Wed 17 Dec 2025 10:01:15 +0000 Manifest this update: Wed 17 Dec 2025 09:56:15 +0000 Manifest next update: Sat 20 Dec 2025 15:10:15 +0000 Files and hashes: 1: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: uSzBN61VjNugxnFtdmn55QCfTiv4UjZL/cWrBYUaKgE=) 2: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: g1kOsvzOksBPPwc2q0QgWISqhmIu4jimJZxytbBjHdM=) 3: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: T//zRmtqLINvFlblPvVcdCKW6AunVea7CBpb7QBQYXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:5a:d7:43:4d:ab:46:7b:e1:2e:19:91:90:5e:2d:3d:9b:de:88:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Dec 17 09:56:15 2025 GMT Not After : Dec 20 15:10:15 2025 GMT Subject: CN=B28CEF87F372B773ACA2E1FDD8AB79386D4C8086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:d1:f9:e0:7f:f7:b7:b6:b4:4d:56:f2:15: ce:2a:dc:ce:21:a0:12:3a:41:00:b8:ad:86:42:12: ac:46:bc:4c:dd:06:3e:5d:a8:62:4e:c3:f7:8c:46: 37:11:77:b1:c3:61:5a:7b:6a:12:6f:92:33:4e:47: b7:0a:06:38:31:95:cd:d4:fb:91:c9:47:9f:ed:e9: 83:d8:7f:2b:3a:6a:19:2e:09:4b:eb:40:12:2b:18: 6e:e9:e6:b8:66:45:21:61:09:75:ed:b2:7f:34:97: 8e:c7:74:c5:43:45:42:fd:b9:44:2d:b5:3e:79:b9: b9:55:0f:3b:62:2d:2a:a6:95:5f:b3:30:59:16:85: 54:dc:46:b7:9b:40:27:8d:10:7a:3e:a1:67:72:0b: 05:72:c7:4b:81:65:cf:48:69:8b:b1:96:ff:39:3b: 6b:21:09:f7:1b:30:65:e7:24:ec:76:44:b0:b2:b9: bb:5c:2b:93:e7:a5:60:24:06:e6:27:15:0c:19:52: c5:04:62:87:a9:e9:f0:4c:02:9a:76:db:64:bc:e0: ce:26:99:2d:5e:ab:04:fd:39:9d:8e:05:fc:1b:bd: a8:61:4d:80:1f:76:56:b0:c3:b2:7c:62:7c:da:aa: bf:14:57:2c:9a:45:46:e5:6d:4a:3f:c8:b4:fc:e0: 98:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8C:EF:87:F3:72:B7:73:AC:A2:E1:FD:D8:AB:79:38:6D:4C:80:86 X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:45:b5:ad:a1:30:66:00:61:48:61:ab:fd:dc:9b:f8:55:c3: 99:0b:45:86:cb:bc:d1:43:04:2e:52:a4:fb:70:27:1b:08:29: 9c:84:a5:11:f3:45:42:53:95:32:03:2c:b6:ee:ab:dc:10:de: 0f:5e:80:79:53:b8:74:f5:59:f3:90:f3:da:8a:a4:88:15:5c: f2:d6:fd:9c:24:0a:1c:b6:7d:8c:80:2f:bf:98:2f:26:9c:45: b4:77:cd:36:a0:d9:9b:fe:25:80:6c:ad:e1:f4:a5:5b:6a:4f: 82:30:52:56:59:63:b9:98:69:47:74:e5:a8:1e:d7:1a:f4:0a: a5:b1:98:03:b0:87:76:67:4c:fc:91:76:45:0a:7e:44:eb:98: 2a:d8:26:76:c5:da:ed:d3:b7:04:50:31:e4:44:e6:7f:fa:c1: 5e:e1:3d:74:57:5d:b0:0b:ac:a5:f9:37:94:0e:b8:16:8c:cd: 39:65:ca:96:8d:1f:21:6b:a5:3b:28:8d:e1:8e:6b:f8:3f:25: 8e:d6:c0:31:b8:8f:bc:82:46:04:c3:7c:46:1c:ba:d9:0b:ca: c1:21:e2:e7:28:c0:ba:e1:9b:ba:af:8e:7f:4a:c7:42:85:99: f7:9f:2c:2a:a2:9f:c1:16:cb:52:05:6f:6c:d3:49:a0:24:2a: 0d:f2:4f:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUelrXQ02rRnvhLhmRkF4tPZveiIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNTEyMTcwOTU2MTVaFw0yNTEyMjAxNTEwMTVaMDMxMTAvBgNV BAMTKEIyOENFRjg3RjM3MkI3NzNBQ0EyRTFGREQ4QUI3OTM4NkQ0QzgwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZxNH54H/3t7a0TVbyFc4q3M4h oBI6QQC4rYZCEqxGvEzdBj5dqGJOw/eMRjcRd7HDYVp7ahJvkjNOR7cKBjgxlc3U +5HJR5/t6YPYfys6ahkuCUvrQBIrGG7p5rhmRSFhCXXtsn80l47HdMVDRUL9uUQt tT55ublVDztiLSqmlV+zMFkWhVTcRrebQCeNEHo+oWdyCwVyx0uBZc9IaYuxlv85 O2shCfcbMGXnJOx2RLCyubtcK5PnpWAkBuYnFQwZUsUEYoep6fBMApp222S84M4m mS1eqwT9OZ2OBfwbvahhTYAfdlaww7J8Ynzaqr8UVyyaRUblbUo/yLT84JjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsozvh/Nyt3OsouH92Kt5OG1MgIYwHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5Fta2hMGYAYUhhq/3cm/hVw5kLRYbLvNFD BC5SpPtwJxsIKZyEpRHzRUJTlTIDLLbuq9wQ3g9egHlTuHT1WfOQ89qKpIgVXPLW /ZwkChy2fYyAL7+YLyacRbR3zTag2Zv+JYBsreH0pVtqT4IwUlZZY7mYaUd05age 1xr0CqWxmAOwh3ZnTPyRdkUKfkTrmCrYJnbF2u3TtwRQMeRE5n/6wV7hPXRXXbAL rKX5N5QOuBaMzTllypaNHyFrpTsojeGOa/g/JY7WwDG4j7yCRgTDfEYcutkLysEh 4ucowLrhm7qvjn9Kx0KFmfefLCqin8EWy1IFb2zTSaAkKg3yT1U= -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:07 2025 by rpki-client