This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: 1ulpYbdKsdZX/vh3sBRVn8uuZVsRqH1mg2UuiaGXZhc= Subject key identifier: E6:25:0A:04:25:F4:F2:6B:17:10:60:22:61:D6:1C:31:0D:B0:CD:58 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 2F980BE6D3C71A5580CA08F4A281FDEDC9EA25C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 0225 Signing time: Tue 02 Dec 2025 16:20:56 +0000 Manifest this update: Tue 02 Dec 2025 16:15:56 +0000 Manifest next update: Fri 05 Dec 2025 23:43:56 +0000 Files and hashes: 1: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: fRUiYPpt5IOQKHHsuJkoVb4YbGQXkHeFoP+/+pevjLs=) 2: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:98:0b:e6:d3:c7:1a:55:80:ca:08:f4:a2:81:fd:ed:c9:ea:25:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Dec 2 16:15:56 2025 GMT Not After : Dec 5 23:43:56 2025 GMT Subject: CN=E6250A0425F4F26B1710602261D61C310DB0CD58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e4:79:a2:ee:8d:e7:8c:b5:08:c1:cf:04:21: b5:ef:df:49:1f:3c:9b:ab:6d:8b:91:40:b1:cb:df: ba:d1:d1:b6:e7:8e:02:f0:09:ed:5a:b7:a0:53:13: 1b:87:14:59:69:28:2a:93:81:ea:fb:9b:eb:a6:68: 6b:7c:23:f1:6b:94:01:ae:fe:c1:5c:3f:5c:7b:80: 26:53:e6:9b:97:47:a6:ff:05:9d:94:d1:ea:ef:78: 7b:ab:92:81:90:5d:19:fd:9e:ff:7a:7f:ee:d6:0c: 8b:43:ab:e8:05:d5:32:10:ca:aa:3a:1a:04:0f:6e: 3d:a3:27:93:4b:ca:64:8f:aa:b5:31:4d:6c:84:5a: e2:18:e2:06:f3:09:e1:3a:53:9b:48:5d:23:eb:d9: da:1e:2e:3c:63:76:81:4e:1a:2c:be:01:34:4f:46: 6d:ee:c6:6e:97:b2:5e:5c:22:db:9c:90:e2:2a:0e: ee:72:ff:9d:ce:a7:c6:cb:a2:7d:f4:98:3d:31:fb: 3a:47:1b:cd:dd:2a:61:30:67:89:c2:c6:5d:b1:2a: cb:68:e2:f9:8c:cb:c3:eb:94:83:64:f8:c5:10:0f: e8:27:c7:9c:fc:b7:6f:a9:85:bb:4e:bd:10:4d:66: 1c:91:a9:fe:40:9f:a8:c8:f8:15:2a:b6:88:af:1e: a1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:25:0A:04:25:F4:F2:6B:17:10:60:22:61:D6:1C:31:0D:B0:CD:58 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:68:78:56:3b:7e:f5:06:84:4e:49:e8:b3:aa:e6:ac:d4:cd: 0b:6b:13:4a:11:cb:01:6d:5f:af:42:04:db:2a:f7:d7:65:22: fd:9f:3a:03:41:c9:f5:0c:49:58:9e:d3:8e:04:71:48:7b:5e: 34:ee:f0:5f:9a:19:ea:6f:cc:2c:d7:7c:e5:e1:d6:cc:6e:72: 9f:08:25:08:45:e6:e0:b5:99:28:ea:ee:c8:87:c9:58:63:99: 7b:05:b6:3d:8e:65:ca:43:41:59:96:70:b6:bf:38:8a:10:d7: 3c:94:21:d1:9f:87:30:5c:46:ae:e6:81:c5:67:d7:16:92:3a: 1f:aa:72:f0:a9:29:9b:50:68:66:a3:10:1b:af:07:ce:52:b7: 1f:07:c8:9a:11:4b:af:eb:70:74:3e:62:d3:42:52:a2:58:b8: b7:30:09:ed:fe:10:c1:69:dd:3a:03:11:7e:53:7a:8c:cc:77: 75:4a:66:d6:00:51:f8:e9:45:6a:89:e8:46:53:63:5e:b8:eb: 4b:18:5f:a0:e4:9b:42:d6:5e:6e:a7:80:c7:c1:40:7f:76:68: 0a:be:c1:d0:36:85:5c:96:d3:ba:f9:65:29:32:a1:42:ea:2b: 95:e2:c6:ea:52:3f:5e:bd:99:63:57:ed:78:ab:d7:9f:f0:3d: 87:c8:e8:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5gL5tPHGlWAygj0ooH97cnqJcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTEyMDIxNjE1NTZaFw0yNTEyMDUyMzQzNTZaMDMxMTAvBgNV BAMTKEU2MjUwQTA0MjVGNEYyNkIxNzEwNjAyMjYxRDYxQzMxMERCMENENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5Hmi7o3njLUIwc8EIbXv30kf PJurbYuRQLHL37rR0bbnjgLwCe1at6BTExuHFFlpKCqTger7m+umaGt8I/FrlAGu /sFcP1x7gCZT5puXR6b/BZ2U0erveHurkoGQXRn9nv96f+7WDItDq+gF1TIQyqo6 GgQPbj2jJ5NLymSPqrUxTWyEWuIY4gbzCeE6U5tIXSPr2doeLjxjdoFOGiy+ATRP Rm3uxm6Xsl5cItuckOIqDu5y/53Op8bLon30mD0x+zpHG83dKmEwZ4nCxl2xKsto 4vmMy8PrlINk+MUQD+gnx5z8t2+phbtOvRBNZhyRqf5An6jI+BUqtoivHqEVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5iUKBCX08msXEGAiYdYcMQ2wzVgwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRoeFY7fvUGhE5J6LOq5qzUzQtrE0oRywFt X69CBNsq99dlIv2fOgNByfUMSVie044EcUh7XjTu8F+aGepvzCzXfOXh1sxucp8I JQhF5uC1mSjq7siHyVhjmXsFtj2OZcpDQVmWcLa/OIoQ1zyUIdGfhzBcRq7mgcVn 1xaSOh+qcvCpKZtQaGajEBuvB85Stx8HyJoRS6/rcHQ+YtNCUqJYuLcwCe3+EMFp 3ToDEX5TeozMd3VKZtYAUfjpRWqJ6EZTY16460sYX6Dkm0LWXm6ngMfBQH92aAq+ wdA2hVyW07r5ZSkyoULqK5XixupSP169mWNX7Xir15/wPYfI6O4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:32 2025 by rpki-client