This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft File: 2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json) Hash identifier: NG6e5ZuuH8uGnkrWd2sZl1NCE1Iy0yJRvhaTtaU66V0= Subject key identifier: 2F:BE:B7:13:04:97:E0:E4:FF:E3:4D:DE:52:DC:56:33:B5:A5:6A:CC Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 Certificate issuer: /CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Certificate serial: 73FD9CDC5E911FB9F1A6FFFBA4E43EC6A56CDB7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft Manifest number: 01DB Signing time: Mon 01 Dec 2025 19:51:07 +0000 Manifest this update: Mon 01 Dec 2025 19:46:07 +0000 Manifest next update: Fri 05 Dec 2025 01:57:07 +0000 Files and hashes: 1: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: u24qYoTDSSf50eb2UAzUvgkQ1jglRQOcxfkd25DPbNc=) 2: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: UnWzJ48Nx645Ud0DTEThTJUyGBI60lPLzC3swH45IOM=) 3: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: LYT843XGx1Wqx/Va67L/NYXRwGel7/+nXHMxSNEVAFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:fd:9c:dc:5e:91:1f:b9:f1:a6:ff:fb:a4:e4:3e:c6:a5:6c:db:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Validity Not Before: Dec 1 19:46:07 2025 GMT Not After : Dec 5 01:57:07 2025 GMT Subject: CN=2FBEB7130497E0E4FFE34DDE52DC5633B5A56ACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:13:be:4e:5f:c0:27:f1:09:37:1e:55:1e: 48:83:d8:aa:76:c5:f8:d4:b0:3e:4f:48:22:c1:64: 22:c5:9f:7d:2e:11:09:92:8d:0d:15:84:eb:e5:54: 1c:5a:ea:a5:b9:2d:74:79:ca:9b:04:02:39:48:5e: 71:68:ed:23:da:56:af:09:c9:a7:8d:03:b3:d7:72: 9d:2f:8a:14:85:fc:52:0f:2b:86:76:e0:09:5f:1e: fe:ee:e5:a5:96:5c:59:0b:07:16:f2:37:7e:4f:28: 9a:05:d9:56:0b:e5:43:0f:3c:8e:b0:14:ca:9b:00: ad:91:ba:9a:a7:1e:04:99:0c:96:37:9c:52:24:80: 12:e6:23:91:34:28:37:b4:57:03:79:67:da:d5:ec: 9b:24:be:a0:39:56:ce:09:1a:49:70:0c:bf:80:8b: 9a:38:e5:8c:37:67:6d:cd:43:09:28:f5:41:ee:bb: 04:2e:87:c9:d2:10:4e:11:a2:65:b9:c5:ca:3a:2b: b7:65:b0:20:de:97:d3:fe:f2:26:47:31:98:7a:dd: c7:6e:57:24:45:a8:25:2b:44:ab:f5:1b:36:91:ab: 4f:b6:cc:8a:bb:33:2b:0e:00:75:8b:a0:fe:ba:79: 92:20:e7:de:10:e8:d3:93:89:7f:4e:04:69:d0:b9: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BE:B7:13:04:97:E0:E4:FF:E3:4D:DE:52:DC:56:33:B5:A5:6A:CC X509v3 Authority Key Identifier: keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1a:af:e5:dd:13:e2:03:43:c3:c1:bd:4e:ce:8d:80:15:35: c4:58:9e:ad:e2:cd:33:cb:4e:2b:e4:0d:b0:eb:f4:a0:23:62: fd:7c:09:44:72:1d:25:3a:fa:c6:a8:ad:d4:9c:f1:93:90:9c: 36:fe:69:7a:33:b4:75:a1:86:6a:b6:6c:95:65:25:65:18:e0: d3:f8:2a:60:65:16:5b:83:f8:53:33:1d:06:e9:5d:41:d7:a9: f4:3c:a7:79:6e:e3:22:51:4f:76:8e:02:52:17:e3:0a:da:a5: 2e:f0:6b:e1:17:f9:1b:d5:64:fb:16:05:27:e8:68:39:03:b6: 40:23:13:d6:cc:98:6b:8a:52:ba:2e:bb:6c:93:e1:eb:9a:cb: ec:a1:5b:1c:73:03:74:80:13:e9:f5:ef:7e:a5:5c:87:95:e3: 56:de:35:cf:48:85:ae:d2:8b:e0:96:23:2e:38:c1:4f:b3:5a: ca:4c:af:85:b7:9a:fd:51:9b:cb:c2:1e:0b:fc:8c:3e:ba:57: 51:09:3f:b6:b8:ff:f1:da:07:24:09:e9:8d:f2:2d:2d:d1:38: 72:a5:7e:25:a3:1e:8f:37:c3:39:1f:1e:d4:97:7b:8e:2d:97: 42:3f:87:e6:5e:31:5d:46:99:45:62:60:c0:fc:f2:c8:d8:99: e1:d0:9c:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/2c3F6RH7nxpv/7pOQ+xqVs23swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEw OUVDNjE3ODAeFw0yNTEyMDExOTQ2MDdaFw0yNTEyMDUwMTU3MDdaMDMxMTAvBgNV BAMTKDJGQkVCNzEzMDQ5N0UwRTRGRkUzNERERTUyREM1NjMzQjVBNTZBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3RO+Tl/AJ/EJNx5VHkiD2Kp2 xfjUsD5PSCLBZCLFn30uEQmSjQ0VhOvlVBxa6qW5LXR5ypsEAjlIXnFo7SPaVq8J yaeNA7PXcp0vihSF/FIPK4Z24AlfHv7u5aWWXFkLBxbyN35PKJoF2VYL5UMPPI6w FMqbAK2RupqnHgSZDJY3nFIkgBLmI5E0KDe0VwN5Z9rV7JskvqA5Vs4JGklwDL+A i5o45Yw3Z23NQwko9UHuuwQuh8nSEE4RomW5xco6K7dlsCDel9P+8iZHMZh63cdu VyRFqCUrRKv1GzaRq0+2zIq7MysOAHWLoP66eZIg594Q6NOTiX9OBGnQuVwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL763EwSX4OT/403eUtxWM7WlaswwHwYDVR0j BBgwFoAUL+xgc57wh/DU+UfHIwpyUQnsYXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE3ZTJmYS0yZjY4LTQ1MmUtYTQwNC04ZTdjY2I2ODcyMTUvMC8yRkVDNjA3MzlF RjA4N0YwRDRGOTQ3QzcyMzBBNzI1MTA5RUM2MTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEwOUVD NjE3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxN2UyZmEtMmY2OC00NTJlLWE0 MDQtOGU3Y2NiNjg3MjE1LzAvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcy NTEwOUVDNjE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUar+XdE+IDQ8PBvU7OjYAVNcRYnq3izTPL TivkDbDr9KAjYv18CURyHSU6+saordSc8ZOQnDb+aXoztHWhhmq2bJVlJWUY4NP4 KmBlFluD+FMzHQbpXUHXqfQ8p3lu4yJRT3aOAlIX4wrapS7wa+EX+RvVZPsWBSfo aDkDtkAjE9bMmGuKUrouu2yT4euay+yhWxxzA3SAE+n1736lXIeV41beNc9Iha7S i+CWIy44wU+zWspMr4W3mv1Rm8vCHgv8jD66V1EJP7a4//HaByQJ6Y3yLS3ROHKl fiWjHo83wzkfHtSXe44tl0I/h+ZeMV1GmUViYMD88sjYmeHQnOY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:58 2025 by rpki-client