This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft File: 2FD08E6755CF1CCAAF9D5834449797848A706B57.mft (raw, json) Hash identifier: Dj79MtT1lfKhbFq4qkl5lSvW7K1uUzIVbluCYbjSwnA= Subject key identifier: A6:9D:F5:5B:C9:F8:2E:CF:B0:55:2B:8C:AD:93:24:2F:6C:98:B1:99 Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 Certificate issuer: /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Certificate serial: 3C9DE99DBF06494F3B6AD6F310D79338864233ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft Manifest number: 03D2 Signing time: Mon 01 Dec 2025 20:22:07 +0000 Manifest this update: Mon 01 Dec 2025 20:17:07 +0000 Manifest next update: Fri 05 Dec 2025 06:42:07 +0000 Files and hashes: 1: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: XjGDHZwetIWHjLp7+uPq3/exRvIl0m5tUGNnQVZ+/fU=) 2: 2FD08E6755CF1CCAAF9D5834449797848A706B57.crl (hash: sPHrnzROvFTXZFz2rjhq0gq8vYJlicPPyrTHpphE+h8=) 3: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: QZlEVkF+HK3hEYAiWRapnYHmq7/bX0k5ZRTsDh0lSOE=) 4: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: 73VvZzU4m43+fgjvOlr3Vv7ZHMtLS9jm+/QTGsOwFck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9d:e9:9d:bf:06:49:4f:3b:6a:d6:f3:10:d7:93:38:86:42:33:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Validity Not Before: Dec 1 20:17:07 2025 GMT Not After : Dec 5 06:42:07 2025 GMT Subject: CN=A69DF55BC9F82ECFB0552B8CAD93242F6C98B199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:48:07:27:52:27:b4:61:bc:46:09:94:b0: b5:04:76:c8:e2:98:2f:df:19:2f:8f:1f:2b:ed:34: 30:f2:b3:c3:df:cc:a1:86:df:96:1e:3b:b1:f9:18: e3:70:5d:29:a0:0d:50:f1:96:53:50:06:d2:19:fb: e0:23:f8:49:8a:f6:ff:0e:4d:10:c5:90:00:1b:73: 7b:ab:61:aa:b9:46:f3:68:0b:ce:f8:36:ac:f6:c4: 78:e9:97:4e:71:58:ab:2c:c3:1f:7c:ce:10:a1:6f: 65:e0:af:2f:5f:c7:ab:1a:f0:f1:da:da:d1:2a:d2: d3:c4:ea:7b:b1:4e:15:71:f6:81:11:d8:87:3d:05: cd:0f:52:91:d9:04:2f:0d:3a:d7:7b:55:85:e1:a5: ae:ae:94:fd:6a:97:70:77:15:20:2e:16:37:c7:51: ef:0c:54:90:51:23:59:99:a2:f8:04:4a:35:96:af: 76:10:1c:76:5f:bb:89:5c:d7:91:c7:20:82:95:20: 68:c3:65:7e:c3:7d:8c:d6:d4:ce:9d:6b:26:27:c2: 43:03:17:a9:b0:74:7b:83:1c:4f:fe:2e:55:a8:bd: 64:ae:18:e8:bc:a0:eb:f1:f8:c0:e7:49:d1:4c:1b: 42:60:fd:2d:63:40:3c:26:91:0a:b2:95:77:04:98: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9D:F5:5B:C9:F8:2E:CF:B0:55:2B:8C:AD:93:24:2F:6C:98:B1:99 X509v3 Authority Key Identifier: keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:31:3f:c6:ef:e4:2f:d7:8c:08:6d:d9:bc:8d:6f:46:4f:45: 90:c5:98:00:0b:17:be:d0:1d:ba:60:12:47:8f:ed:c5:12:ed: 77:b5:d6:b1:2a:d5:7e:65:d6:11:42:d2:56:d0:77:2f:1d:d3: 48:47:3f:25:24:c0:d1:5e:68:7d:d5:6d:03:f9:0c:c2:c2:bc: 3a:e9:b0:2e:cb:fd:8b:ce:9a:a3:3f:40:ec:2b:a3:4b:bf:8a: cb:41:00:5d:82:98:82:c0:58:c7:34:f2:1a:03:d4:67:94:d4: 26:d8:0b:ec:0e:9f:29:0d:28:7d:06:24:26:6a:d2:84:f3:09: 89:aa:44:f4:30:07:5a:4d:30:b9:5b:f8:ed:6e:f1:c6:09:ed: 82:f7:ff:b6:05:61:28:39:c4:1f:ac:04:c3:61:f2:72:89:b1: 5f:14:15:5e:0b:ab:4e:f3:04:f5:04:83:bc:aa:12:93:bd:96: 4b:d9:58:c8:83:d0:12:3c:63:3c:b8:af:97:28:15:38:a2:01: 58:77:0b:10:d3:a1:b1:73:9b:f2:2a:54:3b:b1:ee:6f:e2:51: bb:68:a5:8d:de:61:56:36:18:fd:b5:51:a9:32:1b:1f:44:8e: 7b:0d:84:f7:4d:98:d2:ed:fd:7a:0a:dd:46:b2:a5:1b:47:aa: 50:be:a8:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJ3pnb8GSU87atbzENeTOIZCM+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4 QTcwNkI1NzAeFw0yNTEyMDEyMDE3MDdaFw0yNTEyMDUwNjQyMDdaMDMxMTAvBgNV BAMTKEE2OURGNTVCQzlGODJFQ0ZCMDU1MkI4Q0FEOTMyNDJGNkM5OEIxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuI0gHJ1IntGG8RgmUsLUEdsji mC/fGS+PHyvtNDDys8PfzKGG35YeO7H5GONwXSmgDVDxllNQBtIZ++Aj+EmK9v8O TRDFkAAbc3urYaq5RvNoC874Nqz2xHjpl05xWKsswx98zhChb2Xgry9fx6sa8PHa 2tEq0tPE6nuxThVx9oER2Ic9Bc0PUpHZBC8NOtd7VYXhpa6ulP1ql3B3FSAuFjfH Ue8MVJBRI1mZovgESjWWr3YQHHZfu4lc15HHIIKVIGjDZX7DfYzW1M6dayYnwkMD F6mwdHuDHE/+LlWovWSuGOi8oOvx+MDnSdFMG0Jg/S1jQDwmkQqylXcEmEf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpp31W8n4Ls+wVSuMrZMkL2yYsZkwHwYDVR0j BBgwFoAUL9COZ1XPHMqvnVg0RJeXhIpwa1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwZDdmYS1kNmY4LTRjMjItYjQ4YS01OGI4ZWQ4ZWRkYTcvMC8yRkQwOEU2NzU1 Q0YxQ0NBQUY5RDU4MzQ0NDk3OTc4NDhBNzA2QjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4QTcw NkI1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3 ODQ4QTcwNkI1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsxP8bv5C/XjAht2byNb0ZPRZDFmAALF77Q HbpgEkeP7cUS7Xe11rEq1X5l1hFC0lbQdy8d00hHPyUkwNFeaH3VbQP5DMLCvDrp sC7L/YvOmqM/QOwro0u/istBAF2CmILAWMc08hoD1GeU1CbYC+wOnykNKH0GJCZq 0oTzCYmqRPQwB1pNMLlb+O1u8cYJ7YL3/7YFYSg5xB+sBMNh8nKJsV8UFV4Lq07z BPUEg7yqEpO9lkvZWMiD0BI8Yzy4r5coFTiiAVh3CxDTobFzm/IqVDux7m/iUbto pY3eYVY2GP21UakyGx9EjnsNhPdNmNLt/XoK3UaypRtHqlC+qO8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:05 2025 by rpki-client