This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: OHBCmpsNtwym6Hw3LsH8IgF0h4fbJz51KzABys7L1Bw= Subject key identifier: 06:7B:18:7E:0F:52:80:BD:EE:6B:B9:47:DE:97:13:DE:BB:A4:7F:A9 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 61F48F51F3AFB6309D1B24CA93549D3A8F833A93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 022B Signing time: Tue 16 Dec 2025 17:00:55 +0000 Manifest this update: Tue 16 Dec 2025 16:55:55 +0000 Manifest next update: Sat 20 Dec 2025 04:56:55 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: nQA7NQTR/r4Asln8dl0NVYtH7yac1Ik7W9mlVCqsv/o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:f4:8f:51:f3:af:b6:30:9d:1b:24:ca:93:54:9d:3a:8f:83:3a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Dec 16 16:55:55 2025 GMT Not After : Dec 20 04:56:55 2025 GMT Subject: CN=067B187E0F5280BDEE6BB947DE9713DEBBA47FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:13:d2:e4:8e:7a:3a:80:51:05:dc:13:31: c4:9b:44:c8:1c:6d:14:84:d4:5e:c8:2a:6e:79:82: 6c:c7:9a:e8:f0:26:c6:34:71:b3:5c:a3:ef:89:72: f9:07:63:da:ae:5c:17:31:fb:c2:16:6a:57:84:6d: 7d:03:01:3c:50:ae:4a:7e:0d:2f:79:d5:7e:b4:c4: 42:73:48:ee:61:4a:d3:a3:2c:8a:cf:7d:ac:2e:ed: 4d:1b:11:dc:10:dc:5f:3c:dc:8b:72:01:db:70:f2: 32:72:d3:50:94:41:f0:16:b0:e1:bb:d6:b3:cb:c0: 47:71:34:9f:89:c2:c3:8f:b7:e5:cf:80:30:d6:3a: c0:82:93:27:8b:5e:80:ee:02:c6:37:e0:f5:21:70: 89:7d:5a:1d:7e:ca:0c:9f:b4:3e:0d:94:e3:09:06: c8:6a:78:c5:74:10:06:b5:33:1e:06:4b:4d:8f:e0: 3f:bd:1b:27:83:c9:ea:3b:37:f8:81:97:3f:35:f2: 22:89:8b:73:b5:1b:aa:cc:22:08:fd:11:c8:59:fb: ba:95:74:34:ee:a3:7b:81:d1:dd:82:b8:66:74:1b: 0f:a8:af:af:c6:49:9f:14:63:5d:a0:bc:d2:e0:44: 56:e7:5d:ab:4c:82:5d:54:46:e4:3a:f7:88:6c:ee: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7B:18:7E:0F:52:80:BD:EE:6B:B9:47:DE:97:13:DE:BB:A4:7F:A9 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c9:c2:ae:e1:a4:8b:9b:8b:fd:79:99:d3:12:09:3c:75:c3: 2d:2e:51:0c:a2:f1:fa:45:40:c9:b4:72:0f:de:a3:04:56:93: 6e:15:2a:cb:df:60:08:74:0a:88:eb:10:ec:57:aa:f8:9a:5a: 85:c6:b3:d7:16:b5:7d:23:25:ce:94:4e:d9:3e:2d:c0:77:bc: 8c:7d:d8:87:4e:10:cd:1a:3b:47:b0:54:c5:33:d5:86:60:3a: c5:20:e0:68:ca:a1:3a:44:83:76:14:a9:8d:33:c2:31:32:a1: eb:aa:69:73:40:a6:76:f2:06:db:20:f2:a9:3f:ba:ed:2d:fa: df:1a:87:a0:a1:42:a1:af:1c:f9:a7:18:ac:2b:61:75:93:5b: 26:6c:d3:fd:e1:3f:32:57:1f:52:40:ec:9a:0f:29:32:46:1f: aa:ca:c9:20:c9:b2:21:f2:b4:0b:7b:09:44:f5:bd:72:1f:ab: 96:b7:e8:89:b4:4e:ee:2c:26:6c:07:d2:63:db:fd:1d:66:a3: 08:ad:8b:d3:2e:d7:3a:b4:cc:69:ef:e2:a7:40:cf:46:03:67: 2e:80:55:69:b7:5e:6d:27:75:bc:e1:19:24:72:7f:79:98:37: 9f:06:81:c8:3e:83:ce:35:9f:1a:86:6b:34:45:f6:f9:6f:1c: 47:29:b4:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfSPUfOvtjCdGyTKk1SdOo+DOpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTEyMTYxNjU1NTVaFw0yNTEyMjAwNDU2NTVaMDMxMTAvBgNV BAMTKDA2N0IxODdFMEY1MjgwQkRFRTZCQjk0N0RFOTcxM0RFQkJBNDdGQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7hPS5I56OoBRBdwTMcSbRMgc bRSE1F7IKm55gmzHmujwJsY0cbNco++JcvkHY9quXBcx+8IWaleEbX0DATxQrkp+ DS951X60xEJzSO5hStOjLIrPfawu7U0bEdwQ3F883ItyAdtw8jJy01CUQfAWsOG7 1rPLwEdxNJ+JwsOPt+XPgDDWOsCCkyeLXoDuAsY34PUhcIl9Wh1+ygyftD4NlOMJ BshqeMV0EAa1Mx4GS02P4D+9GyeDyeo7N/iBlz818iKJi3O1G6rMIgj9EchZ+7qV dDTuo3uB0d2CuGZ0Gw+or6/GSZ8UY12gvNLgRFbnXatMgl1URuQ694hs7qpfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBnsYfg9SgL3ua7lH3pcT3rukf6kwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALJwq7hpIubi/15mdMSCTx1wy0uUQyi8fpF QMm0cg/eowRWk24VKsvfYAh0CojrEOxXqviaWoXGs9cWtX0jJc6UTtk+LcB3vIx9 2IdOEM0aO0ewVMUz1YZgOsUg4GjKoTpEg3YUqY0zwjEyoeuqaXNApnbyBtsg8qk/ uu0t+t8ah6ChQqGvHPmnGKwrYXWTWyZs0/3hPzJXH1JA7JoPKTJGH6rKySDJsiHy tAt7CUT1vXIfq5a36Im0Tu4sJmwH0mPb/R1mowiti9Mu1zq0zGnv4qdAz0YDZy6A VWm3Xm0ndbzhGSRyf3mYN58Ggcg+g841nxqGazRF9vlvHEcptNM= -----END CERTIFICATE-----Generated at Fri Dec 19 02:00:07 2025 by rpki-client