This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: TkpSSw/2RGOc8I5OBfo/XhoryxEJdsi64uz2bcT9P8Y= Subject key identifier: 4D:30:67:33:51:12:38:FE:83:04:01:B8:89:23:C8:ED:C6:03:B9:CC Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 5BE300F349F74B19F11A21C27117E93075698409 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 022A Signing time: Tue 02 Dec 2025 09:32:02 +0000 Manifest this update: Tue 02 Dec 2025 09:27:02 +0000 Manifest next update: Fri 05 Dec 2025 18:39:02 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: O0l12NltVdjA19zRhEfqKkFHk4SguieU/KIbLaUqLI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:39:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e3:00:f3:49:f7:4b:19:f1:1a:21:c2:71:17:e9:30:75:69:84:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Dec 2 09:27:02 2025 GMT Not After : Dec 5 18:39:02 2025 GMT Subject: CN=4D306733511238FE830401B88923C8EDC603B9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:c3:6c:29:ab:ac:11:78:e2:68:3c:5f:28: 19:ee:14:b0:c6:58:37:90:66:14:a6:ed:40:5f:ee: 1a:4d:9e:1b:23:6a:e2:f5:f4:df:d2:bc:5d:bc:c0: 15:b5:22:40:d0:37:23:30:e5:77:38:64:2f:7e:7e: 58:c9:f7:e1:c3:8b:b6:3c:43:d7:71:33:2a:e6:25: d6:fb:d4:52:e0:ef:ea:b0:68:c7:3b:df:be:08:86: 60:3b:25:fc:12:78:d6:2a:a0:f8:a3:07:9b:36:18: 11:5a:ca:8e:2a:ce:01:68:9a:bb:4a:11:0b:1f:83: 46:96:b6:87:9d:b2:a0:0f:5e:0d:93:67:24:0a:d3: e6:92:0e:a3:45:a4:1d:99:09:87:9d:dd:11:ae:32: 25:67:1a:d2:30:81:1a:e6:82:d8:ab:1a:e9:ef:db: 62:61:8d:17:be:64:ec:3b:38:56:ef:ff:b5:ca:4b: 24:db:35:0f:29:57:07:19:a5:af:54:53:82:ba:d2: ce:96:db:d9:69:14:9e:f5:5b:cc:01:13:11:30:c4: 06:5c:37:4c:d0:d1:7d:87:54:28:6d:2c:18:e9:64: 07:29:10:fb:96:61:42:82:a5:62:4e:58:87:18:da: 23:ab:f6:0b:0e:79:20:8d:75:d7:29:df:83:74:40: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:30:67:33:51:12:38:FE:83:04:01:B8:89:23:C8:ED:C6:03:B9:CC X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f6:8d:0a:b9:5b:0d:fc:fb:a1:e0:5c:2d:3a:c7:65:28:b7: ab:35:a1:07:f2:f1:e6:45:b8:b5:34:ea:df:cd:2d:20:27:34: 1d:99:f7:3b:85:fa:ef:fc:8c:02:a1:ec:30:94:57:3f:35:74: 29:af:4e:b4:5f:94:8a:2b:6d:22:85:44:7b:37:d7:5e:c1:bf: a1:0a:e4:d8:5b:bc:3c:13:6b:be:c4:0b:db:af:39:26:17:48: 00:88:0a:dc:2c:cc:e8:f3:b6:34:40:e3:3e:92:af:9d:b1:c6: ad:05:5d:ea:f5:1f:bf:1a:41:5a:7d:91:6b:82:cf:b2:68:1f: 24:05:f7:ff:84:be:04:29:55:f4:83:7a:45:5e:5c:4d:1b:60: 52:93:c0:29:49:4a:4c:e4:1c:42:80:08:85:df:6e:bc:61:d6: d7:90:1d:f3:7c:76:62:c4:b7:4a:f2:91:7a:59:20:c3:71:94: 5f:57:b5:e3:af:17:e9:c5:9d:3d:d0:c6:21:ca:0e:40:a3:8c: a7:d6:dd:f1:77:97:2a:2e:85:86:cc:ec:2f:86:99:7f:6c:c6: 80:26:a9:e6:63:03:04:2f:3f:1b:6d:a9:b8:bc:f8:e1:37:3b: bc:54:47:6d:e0:4a:d7:0a:42:a8:c6:5a:d8:d8:17:f7:5d:bb: 1b:3a:7e:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+MA80n3SxnxGiHCcRfpMHVphAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTEyMDIwOTI3MDJaFw0yNTEyMDUxODM5MDJaMDMxMTAvBgNV BAMTKDREMzA2NzMzNTExMjM4RkU4MzA0MDFCODg5MjNDOEVEQzYwM0I5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLG8NsKausEXjiaDxfKBnuFLDG WDeQZhSm7UBf7hpNnhsjauL19N/SvF28wBW1IkDQNyMw5Xc4ZC9+fljJ9+HDi7Y8 Q9dxMyrmJdb71FLg7+qwaMc7374IhmA7JfwSeNYqoPijB5s2GBFayo4qzgFomrtK EQsfg0aWtoedsqAPXg2TZyQK0+aSDqNFpB2ZCYed3RGuMiVnGtIwgRrmgtirGunv 22JhjRe+ZOw7OFbv/7XKSyTbNQ8pVwcZpa9UU4K60s6W29lpFJ71W8wBExEwxAZc N0zQ0X2HVChtLBjpZAcpEPuWYUKCpWJOWIcY2iOr9gsOeSCNddcp34N0QJFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTBnM1ESOP6DBAG4iSPI7cYDucwwHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACP2jQq5Ww38+6HgXC06x2Uot6s1oQfy8eZF uLU06t/NLSAnNB2Z9zuF+u/8jAKh7DCUVz81dCmvTrRflIorbSKFRHs3117Bv6EK 5NhbvDwTa77EC9uvOSYXSACICtwszOjztjRA4z6Sr52xxq0FXer1H78aQVp9kWuC z7JoHyQF9/+EvgQpVfSDekVeXE0bYFKTwClJSkzkHEKACIXfbrxh1teQHfN8dmLE t0rykXpZIMNxlF9XteOvF+nFnT3QxiHKDkCjjKfW3fF3lyouhYbM7C+GmX9sxoAm qeZjAwQvPxttqbi8+OE3O7xUR23gStcKQqjGWtjYF/dduxs6flk= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:00 2025 by rpki-client