This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: yQ/2cS3/FtjiHizgr+X7y+OcaPhfm7am882AjioOwZ0= Subject key identifier: CD:62:97:5A:F0:42:8D:9C:4E:74:CF:EE:83:DE:38:E8:14:64:DD:83 Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 1BA5ADBCC1E9AA7A1DD89B622BD4421BF221582B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 01D2 Signing time: Tue 02 Dec 2025 06:31:10 +0000 Manifest this update: Tue 02 Dec 2025 06:26:10 +0000 Manifest next update: Fri 05 Dec 2025 12:42:10 +0000 Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: LB1iMpJbVINN3s8Mv8jCkFo2XULx7WTby2+p/YnaYq8=) 2: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: o6xh9ZmeUkW54lbLFnSG54IoYTtHKw0vyrbfABLw2qM=) 3: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: 8ALFBF9HwCBiqRlbp4pItk5eubZkWUc5/ZoPPFKzTcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a5:ad:bc:c1:e9:aa:7a:1d:d8:9b:62:2b:d4:42:1b:f2:21:58:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Dec 2 06:26:10 2025 GMT Not After : Dec 5 12:42:10 2025 GMT Subject: CN=CD62975AF0428D9C4E74CFEE83DE38E81464DD83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:8f:ba:80:7a:bb:da:59:84:38:bb:b7:fd: ec:3f:ff:66:b5:c1:8c:1f:67:f0:e3:75:71:3b:ba: ca:14:4f:9a:6f:c4:25:69:41:ea:98:94:35:b8:5b: 4f:4c:68:29:18:2a:74:82:09:b2:40:e3:d8:16:88: 49:36:98:7b:77:cb:09:96:5a:c8:2e:fb:1d:23:17: 77:f5:a9:b0:6a:6b:d7:06:97:70:a0:56:3d:88:bd: 63:6e:3c:3d:94:3e:e4:60:4e:6f:5b:78:57:6f:df: 09:49:c2:13:c3:3e:35:66:26:29:b2:22:cb:84:48: d4:bb:c6:a5:2e:46:7f:e1:08:ed:7d:e0:6f:b9:10: 0e:43:18:19:55:d2:bc:38:44:f2:76:ec:c4:58:e1: 19:1a:b4:2a:94:19:61:0d:99:8d:4a:d0:cf:27:87: 6d:45:83:b3:40:ac:2a:ab:38:3c:34:a2:fe:14:58: 50:55:39:20:8b:45:12:8d:6d:f7:07:20:1a:9f:8b: fc:42:cc:49:ca:69:95:b7:9e:5e:3f:b4:ed:2e:82: 8f:3b:d2:78:cd:34:43:f6:45:c4:1f:66:65:f5:58: 04:49:1d:65:5f:0a:f4:25:e9:92:21:ab:d1:b7:92: 11:9c:6f:8f:bc:13:59:ff:55:f8:ea:77:38:ed:8e: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:62:97:5A:F0:42:8D:9C:4E:74:CF:EE:83:DE:38:E8:14:64:DD:83 X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:e0:ee:35:66:bf:e8:4c:9e:90:9a:85:da:dc:8a:98:1b:f7: 9a:f6:26:f4:63:f1:9d:11:9d:09:50:78:40:fc:40:5c:0a:ed: ea:18:f6:3a:3f:fc:0b:36:20:e3:1e:32:c9:e3:11:09:81:9a: f5:9f:36:2b:c6:32:d1:fe:91:18:44:6e:bd:9d:5a:04:c4:95: 58:83:0e:13:bd:f0:b4:f5:61:8d:8f:26:00:c6:3a:9a:73:2f: 91:dd:21:44:cc:f1:a3:4c:3a:78:17:36:6f:d0:20:e5:60:d6: cb:7e:12:35:5a:22:da:5d:5b:45:9e:da:c1:84:4b:e5:0c:42: 25:aa:3c:31:4a:14:92:56:96:f4:58:ef:3c:5b:21:33:57:96: 70:e6:18:ec:c3:0c:17:a3:8f:b4:e9:76:5a:86:0c:7e:a2:0a: 81:da:03:26:d6:00:7d:aa:76:9a:8a:04:31:0a:bf:27:fe:4b: 7f:2c:7d:88:88:a2:e5:c9:7f:b8:1d:ee:fc:d0:71:43:27:e9: 4d:92:ae:ad:e9:ff:ba:7f:35:9d:cc:42:96:3a:83:6a:2d:be: 29:18:3c:01:ab:e5:22:36:43:6f:74:80:0b:1b:2d:0e:7c:6a: 35:cd:15:93:fa:6c:06:a9:41:e6:0b:bd:cc:eb:8c:a5:3b:d5: a8:3d:96:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG6WtvMHpqnod2JtiK9RCG/IhWCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTEyMDIwNjI2MTBaFw0yNTEyMDUxMjQyMTBaMDMxMTAvBgNV BAMTKENENjI5NzVBRjA0MjhEOUM0RTc0Q0ZFRTgzREUzOEU4MTQ2NEREODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3o+6gHq72lmEOLu3/ew//2a1 wYwfZ/DjdXE7usoUT5pvxCVpQeqYlDW4W09MaCkYKnSCCbJA49gWiEk2mHt3ywmW Wsgu+x0jF3f1qbBqa9cGl3CgVj2IvWNuPD2UPuRgTm9beFdv3wlJwhPDPjVmJimy IsuESNS7xqUuRn/hCO194G+5EA5DGBlV0rw4RPJ27MRY4RkatCqUGWENmY1K0M8n h21Fg7NArCqrODw0ov4UWFBVOSCLRRKNbfcHIBqfi/xCzEnKaZW3nl4/tO0ugo87 0njNNEP2RcQfZmX1WARJHWVfCvQl6ZIhq9G3khGcb4+8E1n/VfjqdzjtjmAXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzWKXWvBCjZxOdM/ug9446BRk3YMwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvg7jVmv+hMnpCahdrcipgb95r2JvRj8Z0R nQlQeED8QFwK7eoY9jo//As2IOMeMsnjEQmBmvWfNivGMtH+kRhEbr2dWgTElViD DhO98LT1YY2PJgDGOppzL5HdIUTM8aNMOngXNm/QIOVg1st+EjVaItpdW0We2sGE S+UMQiWqPDFKFJJWlvRY7zxbITNXlnDmGOzDDBejj7TpdlqGDH6iCoHaAybWAH2q dpqKBDEKvyf+S38sfYiIouXJf7gd7vzQcUMn6U2Srq3p/7p/NZ3MQpY6g2otvikY PAGr5SI2Q290gAsbLQ58ajXNFZP6bAapQeYLvczrjKU71ag9loA= -----END CERTIFICATE-----Generated at Wed Dec 3 12:44:55 2025 by rpki-client