This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft File: 2E55483B906244D2DA357F014F9AFA606D95C345.mft (raw, json) Hash identifier: LmFyL2vcjnQYAVKdLTOxw5vNnTrNASozTECn5Rzu+vc= Subject key identifier: 33:B8:F2:5A:56:EB:69:34:71:A8:66:0D:B2:DA:59:52:C2:6D:0B:85 Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345 Certificate serial: 2788D7796388439941050510B17975D7F772CB5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft Manifest number: 0100 Signing time: Wed 03 Dec 2025 13:21:15 +0000 Manifest this update: Wed 03 Dec 2025 13:16:15 +0000 Manifest next update: Sat 06 Dec 2025 15:30:15 +0000 Files and hashes: 1: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: Du41YA1NCiK2HlEV88F/QDnyK1sLmVF33xCMfe54rMI=) 2: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: UMm8CVytUz3mnXPaURu9cvBWCMEG+/Kh9q1dvGzVdN0=) 3: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: d6+MpeOwnH/agtVVZkfqBxwK6cPDeJjFB6fgvTWTTwY=) 4: 2E55483B906244D2DA357F014F9AFA606D95C345.crl (hash: wvbBt/G6w5HUHfk8SG/eYE7N1rgOBIOLWXzHNqbgg0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:88:d7:79:63:88:43:99:41:05:05:10:b1:79:75:d7:f7:72:cb:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345 Validity Not Before: Dec 3 13:16:15 2025 GMT Not After : Dec 6 15:30:15 2025 GMT Subject: CN=33B8F25A56EB693471A8660DB2DA5952C26D0B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:eb:ea:3d:0c:71:5b:46:ac:cc:8f:82:b0: 45:4c:9d:da:05:53:dc:09:69:1d:c3:4b:6f:05:f8: 09:20:87:14:7c:26:23:e9:5b:b7:d0:7e:40:25:47: 45:e9:e5:a2:ac:b3:46:20:23:81:9a:0d:53:33:3e: 79:e5:5c:35:93:ad:b9:df:e5:16:02:8c:65:ab:53: 96:22:86:02:59:48:03:36:32:e2:ca:06:41:a7:b5: 77:bd:60:9f:6c:f3:20:4c:79:8b:0a:29:01:45:8e: 63:7f:a7:30:ce:03:cb:3a:ea:eb:d1:04:2a:5b:c1: 25:4d:38:0b:d5:be:13:41:c1:dc:ab:1c:b7:79:f1: df:e9:4b:7b:9f:67:03:b5:6c:d1:3b:62:07:52:44: dc:5e:f7:38:2d:37:df:aa:d8:64:64:f1:89:05:92: 2a:71:ac:d4:7e:58:cc:70:2f:c3:12:b6:c5:df:c4: cf:3a:0f:ef:f6:21:6a:0b:5e:ea:26:1b:01:fe:37: dd:53:6c:6d:af:80:61:38:f1:8d:18:4f:35:32:86: 8b:4a:2e:66:0d:e4:e0:3f:6a:97:4b:e3:f6:47:53: 11:89:4a:fb:c0:9d:65:ef:35:42:a7:a7:4e:0a:8a: 95:90:84:3e:b9:cc:59:24:0d:1d:41:83:cc:61:d3: a3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B8:F2:5A:56:EB:69:34:71:A8:66:0D:B2:DA:59:52:C2:6D:0B:85 X509v3 Authority Key Identifier: keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:20:d0:dd:d8:28:cc:3c:de:c1:95:2b:f8:a8:60:11:96:78: fc:a0:05:1f:22:66:27:1f:e9:bc:d8:59:30:28:73:5b:18:5e: 8b:9c:3f:f6:d1:24:d4:a9:b7:76:bb:1c:5f:8b:30:e1:fe:6b: d0:bc:23:eb:f5:86:ec:1d:37:1f:b9:f4:ec:18:ad:f6:88:90: 3c:3a:16:25:6b:28:16:31:fe:9d:98:3f:68:c3:99:d4:70:cb: fd:9d:ed:62:d2:71:79:17:0b:db:ee:1e:1d:87:7b:a4:88:e8: c0:48:4f:7a:06:66:c5:13:1c:0f:0f:d5:e7:fd:19:0a:93:c3: b0:cd:8c:cf:be:d9:a8:ef:16:42:e9:8c:d9:05:7e:99:48:33: af:a7:1e:c5:17:0f:d0:48:48:c4:22:4c:08:23:d8:4a:e7:6f: ac:8c:5c:60:ec:c4:66:e8:0a:0a:2e:b7:21:3b:da:5b:b0:85: ea:a1:13:00:65:4f:b9:88:9c:73:ee:5c:d7:eb:03:ca:9d:ce: c9:1d:57:b7:09:8a:59:61:7b:bf:1e:b0:18:62:53:bb:c8:1e: d0:67:30:6a:4b:92:ac:f5:ce:71:53:96:f2:f0:09:0e:e7:b3: 11:64:c0:04:99:a6:58:d6:7d:7f:50:58:70:63:11:62:f1:d8: 09:6c:05:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4jXeWOIQ5lBBQUQsXl11/dyy1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2 RDk1QzM0NTAeFw0yNTEyMDMxMzE2MTVaFw0yNTEyMDYxNTMwMTVaMDMxMTAvBgNV BAMTKDMzQjhGMjVBNTZFQjY5MzQ3MUE4NjYwREIyREE1OTUyQzI2RDBCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NuvqPQxxW0aszI+CsEVMndoF U9wJaR3DS28F+AkghxR8JiPpW7fQfkAlR0Xp5aKss0YgI4GaDVMzPnnlXDWTrbnf 5RYCjGWrU5YihgJZSAM2MuLKBkGntXe9YJ9s8yBMeYsKKQFFjmN/pzDOA8s66uvR BCpbwSVNOAvVvhNBwdyrHLd58d/pS3ufZwO1bNE7YgdSRNxe9zgtN9+q2GRk8YkF kipxrNR+WMxwL8MStsXfxM86D+/2IWoLXuomGwH+N91TbG2vgGE48Y0YTzUyhotK LmYN5OA/apdL4/ZHUxGJSvvAnWXvNUKnp04KipWQhD65zFkkDR1Bg8xh06ORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7jyWlbraTRxqGYNstpZUsJtC4UwHwYDVR0j BBgwFoAULlVIO5BiRNLaNX8BT5r6YG2Vw0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMC8yRTU1NDgzQjkw NjI0NEQyREEzNTdGMDE0RjlBRkE2MDZEOTVDMzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2RDk1 QzM0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi NmEtNGZkYzM4N2ViYzU4LzAvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZB NjA2RDk1QzM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsg0N3YKMw83sGVK/ioYBGWePygBR8iZicf 6bzYWTAoc1sYXoucP/bRJNSpt3a7HF+LMOH+a9C8I+v1huwdNx+59OwYrfaIkDw6 FiVrKBYx/p2YP2jDmdRwy/2d7WLScXkXC9vuHh2He6SI6MBIT3oGZsUTHA8P1ef9 GQqTw7DNjM++2ajvFkLpjNkFfplIM6+nHsUXD9BISMQiTAgj2Ernb6yMXGDsxGbo CgoutyE72luwheqhEwBlT7mInHPuXNfrA8qdzskdV7cJillhe78esBhiU7vIHtBn MGpLkqz1znFTlvLwCQ7nsxFkwASZpljWfX9QWHBjEWLx2AlsBeo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:15 2025 by rpki-client