This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: eGGw/XOFuo0kwtV7osw3QSY2lq8yvzADTj9P9RHxXFQ= Subject key identifier: CF:96:D8:B1:77:CF:42:0E:07:7B:AC:FF:2F:F1:32:7A:34:FC:C7:9B Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 702A99EA7BA6A10C51E274B205280AEFC224E26C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: 012D Signing time: Mon 01 Dec 2025 15:51:28 +0000 Manifest this update: Mon 01 Dec 2025 15:46:28 +0000 Manifest next update: Thu 04 Dec 2025 17:34:28 +0000 Files and hashes: 1: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: bpEdGaau57Ls0LX+FXCrBVL5qcwulWWQkMdNRaMhV9U=) 2: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: vR6gSOb1xQVUs9eK2RrsrOZt7QS/1erCOJYGWRfWT2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2a:99:ea:7b:a6:a1:0c:51:e2:74:b2:05:28:0a:ef:c2:24:e2:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Dec 1 15:46:28 2025 GMT Not After : Dec 4 17:34:28 2025 GMT Subject: CN=CF96D8B177CF420E077BACFF2FF1327A34FCC79B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:55:27:41:b2:43:21:60:33:7f:e7:86:01: 72:dd:e5:e4:f9:5e:cd:50:53:5a:5b:3a:d4:3b:32: 9b:35:9c:96:f6:39:30:9c:d8:38:f8:52:ab:e4:90: 64:7d:61:09:38:bd:ed:1c:4e:bb:d1:b6:f9:06:87: dd:34:41:85:9f:24:4a:46:dc:7c:48:4c:9c:fc:1b: 5a:ca:21:ac:03:7e:62:ab:c1:18:f9:d7:4d:0f:4a: 00:40:89:41:e2:40:9f:55:55:05:d6:f8:12:f4:e7: b8:0e:a5:16:fb:8e:49:4b:11:e4:c1:a5:1e:59:0b: 3c:68:8b:4a:6a:c0:be:9f:99:3f:ea:a5:b8:8f:62: b2:d1:87:d8:a3:bf:a4:53:57:9b:ec:ec:e4:36:6c: 83:7d:3f:9a:eb:c3:c5:a3:31:9e:90:5c:89:30:b5: 35:5b:08:91:be:2e:bc:39:29:dc:a1:5e:60:29:21: d9:75:38:f6:da:17:b2:22:ae:4f:e9:35:33:34:f6: 88:e1:93:6d:6f:16:ad:5c:be:77:c4:9a:b4:a3:2a: af:f8:a2:20:85:14:ac:cb:b8:04:73:17:ad:ac:11: 88:43:55:23:9c:64:c5:99:ec:50:48:4f:df:10:6c: 8d:ca:84:a7:37:68:99:a4:07:d9:bc:48:68:f6:a8: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:96:D8:B1:77:CF:42:0E:07:7B:AC:FF:2F:F1:32:7A:34:FC:C7:9B X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:99:66:65:e2:5d:e5:b1:13:d3:97:17:76:e9:74:a3:d0:f4: 28:72:b7:02:e1:79:80:51:dd:4e:e4:71:07:23:3a:a6:b9:9b: 32:2f:3f:2b:44:ee:03:4b:28:f9:b8:eb:10:2b:c9:b6:39:b5: 71:ea:ee:36:91:64:d9:93:41:5a:eb:07:b2:5a:8c:10:77:c7: d9:e5:f5:58:bc:26:9b:4d:0a:b0:e5:dc:2a:3c:2f:04:02:a0: 28:6c:8e:35:00:4b:8b:2d:d7:90:43:d4:d7:56:63:12:60:65: e0:e8:d3:c9:e5:db:a3:8e:3b:e9:e4:7c:f5:93:b6:70:69:9b: 7a:81:89:aa:85:c2:13:6b:6f:8f:80:8d:54:6d:00:f8:01:8f: 70:8e:91:b5:25:07:f6:f2:99:44:dc:1e:a2:5e:b0:59:e4:1e: 51:5a:5f:17:8a:70:29:17:f1:bb:3b:8d:8e:ab:16:8a:02:61: 2d:7d:96:4a:cf:80:57:43:f8:cd:fd:2c:2b:65:cc:6c:6c:c1: fc:f7:be:07:87:b9:d8:e2:cd:10:ff:4d:cb:90:71:67:e1:ea: c9:0b:ab:5c:18:4b:37:c3:fb:db:c2:25:7a:5c:65:92:a2:75: 68:47:d4:75:a0:07:0d:cd:36:2e:87:21:fb:94:10:b6:5e:db: d4:f8:4f:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCqZ6numoQxR4nSyBSgK78Ik4mwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTEyMDExNTQ2MjhaFw0yNTEyMDQxNzM0MjhaMDMxMTAvBgNV BAMTKENGOTZEOEIxNzdDRjQyMEUwNzdCQUNGRjJGRjEzMjdBMzRGQ0M3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hVUnQbJDIWAzf+eGAXLd5eT5 Xs1QU1pbOtQ7Mps1nJb2OTCc2Dj4UqvkkGR9YQk4ve0cTrvRtvkGh900QYWfJEpG 3HxITJz8G1rKIawDfmKrwRj5100PSgBAiUHiQJ9VVQXW+BL057gOpRb7jklLEeTB pR5ZCzxoi0pqwL6fmT/qpbiPYrLRh9ijv6RTV5vs7OQ2bIN9P5rrw8WjMZ6QXIkw tTVbCJG+Lrw5KdyhXmApIdl1OPbaF7Iirk/pNTM09ojhk21vFq1cvnfEmrSjKq/4 oiCFFKzLuARzF62sEYhDVSOcZMWZ7FBIT98QbI3KhKc3aJmkB9m8SGj2qL9TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz5bYsXfPQg4He6z/L/EyejT8x5swHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2ZZmXiXeWxE9OXF3bpdKPQ9ChytwLheYBR 3U7kcQcjOqa5mzIvPytE7gNLKPm46xArybY5tXHq7jaRZNmTQVrrB7JajBB3x9nl 9Vi8JptNCrDl3Co8LwQCoChsjjUAS4st15BD1NdWYxJgZeDo08nl26OOO+nkfPWT tnBpm3qBiaqFwhNrb4+AjVRtAPgBj3COkbUlB/bymUTcHqJesFnkHlFaXxeKcCkX 8bs7jY6rFooCYS19lkrPgFdD+M39LCtlzGxswfz3vgeHudjizRD/TcuQcWfh6skL q1wYSzfD+9vCJXpcZZKidWhH1HWgBw3NNi6HIfuUELZe29T4T5c= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:51 2025 by rpki-client