This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: 9dY3r18mstX8Dlmr3YiO0L+YVawoHMLyn/ta26tY1+8= Subject key identifier: 67:33:F2:7A:C8:0A:A6:2B:38:02:E3:B6:6F:4B:CF:44:05:92:E5:95 Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 29AFEE3591A9F70DFCDD6A93A321F4F33737CC8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 03AB Signing time: Tue 02 Dec 2025 23:22:29 +0000 Manifest this update: Tue 02 Dec 2025 23:17:29 +0000 Manifest next update: Sat 06 Dec 2025 02:24:29 +0000 Files and hashes: 1: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: FzBI0yNUylKbZQdmdU2g3bNnUPPPopCiNrlf7zUhhMU=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:af:ee:35:91:a9:f7:0d:fc:dd:6a:93:a3:21:f4:f3:37:37:cc:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: Dec 2 23:17:29 2025 GMT Not After : Dec 6 02:24:29 2025 GMT Subject: CN=6733F27AC80AA62B3802E3B66F4BCF440592E595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:14:f4:91:01:fc:c1:51:f1:ff:d2:a8:d0: b9:e4:1a:e4:78:4f:62:cd:2c:82:a8:17:77:8e:a6: 59:2d:b1:2a:e6:ef:32:8a:61:9e:b1:fb:96:86:a0: 5e:d6:81:38:8f:47:7e:15:e3:da:d7:45:f9:58:ff: 93:42:5e:fe:1d:b4:30:88:55:82:d6:89:ef:99:27: b1:e4:8f:d0:96:2a:09:be:80:a1:70:35:6a:52:c6: b0:22:dc:e2:41:eb:7a:ef:18:39:f3:18:e0:a7:03: 8f:12:f5:5b:4e:71:81:1a:66:68:33:95:a4:14:3c: 20:eb:dd:7e:23:ad:36:e5:e8:12:f2:71:d2:e7:73: 2b:2b:e2:85:ea:c4:a7:ac:66:ba:a4:ec:f3:9d:44: 20:31:9f:29:09:4e:09:f9:8b:20:7a:3f:e7:03:2c: 98:44:78:56:45:51:d0:de:f7:68:2e:15:59:77:4a: 7b:db:e3:53:37:7c:74:26:cf:a0:49:d2:ed:9d:30: 34:a1:05:a9:57:c7:40:d9:7d:12:29:0a:24:c6:88: aa:0e:06:14:9e:2b:a4:1d:68:45:b7:dd:bc:9f:83: b9:be:9c:b3:0d:aa:cb:af:7c:ea:69:3b:c3:11:91: 50:00:51:09:85:c9:2a:53:a9:7b:97:4d:81:06:1d: 7f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:33:F2:7A:C8:0A:A6:2B:38:02:E3:B6:6F:4B:CF:44:05:92:E5:95 X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7c:f0:1f:6b:7c:da:c2:47:ec:ef:84:e9:a0:45:2c:a3:21: 0e:20:cd:75:66:82:5e:98:2b:31:06:96:6b:ec:e6:28:65:a6: 6d:a6:f6:e5:c8:ac:8a:fb:ad:48:d6:98:6c:76:b8:11:b9:b2: cf:80:4d:7b:07:fc:6b:e3:75:6f:67:c7:e7:59:9e:99:a3:a3: e0:a4:7f:a7:fc:37:b8:a5:08:36:35:3f:6a:5d:0f:5f:fe:16: c5:f6:9f:01:28:a3:f0:91:61:37:8d:2e:1c:93:f8:b5:d6:f4: ce:89:23:bd:8a:15:60:af:ea:9f:ea:4d:24:57:30:dc:ab:7d: 17:b9:fe:66:71:d4:de:b8:86:e2:21:f9:61:23:f2:fb:67:92: 62:d7:96:07:4e:35:78:6c:74:28:68:4d:3d:83:5d:53:c4:73: f7:22:c0:c4:5c:ad:f1:61:72:3c:60:8c:34:e3:e7:a7:2f:d1: 08:42:0f:62:4d:05:0c:b6:b4:b2:dc:ee:54:23:de:4a:97:c3: e3:af:21:8a:35:ed:0c:ab:2d:98:85:a6:ee:1e:1a:24:37:12: 97:80:33:1a:18:bb:8a:35:87:01:fb:42:5a:48:24:13:1d:4b: 10:c0:57:2c:fd:81:9f:f5:9e:06:26:85:05:0a:57:a5:ab:f9: b0:c4:74:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKa/uNZGp9w383WqToyH08zc3zIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNTEyMDIyMzE3MjlaFw0yNTEyMDYwMjI0MjlaMDMxMTAvBgNV BAMTKDY3MzNGMjdBQzgwQUE2MkIzODAyRTNCNjZGNEJDRjQ0MDU5MkU1OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArRT0kQH8wVHx/9Ko0LnkGuR4 T2LNLIKoF3eOplktsSrm7zKKYZ6x+5aGoF7WgTiPR34V49rXRflY/5NCXv4dtDCI VYLWie+ZJ7Hkj9CWKgm+gKFwNWpSxrAi3OJB63rvGDnzGOCnA48S9VtOcYEaZmgz laQUPCDr3X4jrTbl6BLycdLncysr4oXqxKesZrqk7POdRCAxnykJTgn5iyB6P+cD LJhEeFZFUdDe92guFVl3Snvb41M3fHQmz6BJ0u2dMDShBalXx0DZfRIpCiTGiKoO BhSeK6QdaEW33byfg7m+nLMNqsuvfOppO8MRkVAAUQmFySpTqXuXTYEGHX9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZzPyesgKpis4AuO2b0vPRAWS5ZUwHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA588B9rfNrCR+zvhOmgRSyjIQ4gzXVmgl6Y KzEGlmvs5ihlpm2m9uXIrIr7rUjWmGx2uBG5ss+ATXsH/GvjdW9nx+dZnpmjo+Ck f6f8N7ilCDY1P2pdD1/+FsX2nwEoo/CRYTeNLhyT+LXW9M6JI72KFWCv6p/qTSRX MNyrfRe5/mZx1N64huIh+WEj8vtnkmLXlgdONXhsdChoTT2DXVPEc/ciwMRcrfFh cjxgjDTj56cv0QhCD2JNBQy2tLLc7lQj3kqXw+OvIYo17QyrLZiFpu4eGiQ3EpeA MxoYu4o1hwH7QlpIJBMdSxDAVyz9gZ/1ngYmhQUKV6Wr+bDEdNk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:38 2025 by rpki-client