This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: r9iJ/RehkQGRjfvUEH66F0XVGaZg7mdmsOjbaZooNGc= Subject key identifier: 92:ED:DA:0D:D7:2E:DE:0F:EF:74:75:0E:13:4A:80:0C:AA:9B:F2:D3 Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 0D72FCA0F5F6C5CA808EEF14F0A17E0564332EF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0247 Signing time: Sun 14 Dec 2025 04:00:57 +0000 Manifest this update: Sun 14 Dec 2025 03:55:57 +0000 Manifest next update: Wed 17 Dec 2025 12:32:57 +0000 Files and hashes: 1: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) 2: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: llKNjnnAfQ/s39VnodLbWt7O2Iwgsq/9UB65OCQu5mE=) 3: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 12:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:72:fc:a0:f5:f6:c5:ca:80:8e:ef:14:f0:a1:7e:05:64:33:2e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Dec 14 03:55:57 2025 GMT Not After : Dec 17 12:32:57 2025 GMT Subject: CN=92EDDA0DD72EDE0FEF74750E134A800CAA9BF2D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fb:78:b6:48:29:57:04:6e:3c:d0:f0:95:35: a3:40:03:b7:f0:b7:b4:48:4a:81:63:9b:4a:cb:9b: 41:b9:de:f6:b9:c2:93:f5:7e:c6:a3:5b:05:cd:94: db:9b:46:01:db:f8:c4:65:0e:e0:9e:37:c4:aa:82: b7:97:37:27:5d:52:ae:20:2a:93:17:62:9d:6d:39: 04:10:97:27:d1:2b:8b:88:c3:6c:fe:cf:47:64:f7: d4:1a:91:d5:23:fb:6c:80:f2:3a:54:55:82:de:7d: 56:bf:69:f8:5c:77:e7:1d:e1:fd:38:36:4c:73:79: 6a:9f:d7:e8:60:0f:dc:c0:41:ae:ad:0f:ec:3a:07: 43:0f:fe:db:cc:ef:8f:e1:91:09:56:e5:ff:57:9d: 39:ea:dc:8d:0c:93:e1:99:f8:50:7c:93:1a:87:62: e1:78:2d:42:d6:de:0d:9f:70:40:59:0b:c3:43:84: 88:7d:bc:ec:dc:4f:3f:c6:a5:a3:0b:b3:1c:56:cf: 12:b6:5a:ef:e5:13:9b:8d:74:f5:45:2c:d7:d3:f1: 35:ae:62:a8:8a:4c:5e:9f:89:16:d9:0d:cc:56:08: 3c:5e:41:b6:4d:b6:48:86:00:00:73:31:fe:c2:07: e6:d2:01:3f:90:74:6c:3b:8a:6d:bd:83:26:54:03: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:ED:DA:0D:D7:2E:DE:0F:EF:74:75:0E:13:4A:80:0C:AA:9B:F2:D3 X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1a:2f:61:81:f8:72:49:ac:ad:97:db:f7:cb:da:77:a8:c2: 02:bd:4e:85:27:12:65:0f:98:92:f0:10:ed:c1:8a:e5:0f:3a: 8a:ca:25:fa:5e:44:cc:4f:94:ee:26:db:ab:50:d6:02:2d:52: 32:9e:75:ce:67:69:6b:59:7f:56:d4:8f:ac:18:40:81:8e:a0: 10:08:a7:fb:2b:87:5c:d5:a9:ff:1d:a4:42:16:53:a5:1e:0f: 57:ab:3d:01:2d:f5:a3:05:a1:4d:a4:88:6c:96:2d:64:c5:64: dc:4a:f3:16:21:5d:01:1a:65:91:09:37:1d:88:c7:b9:f1:b8: f7:b6:3e:87:55:2f:ed:0a:23:5d:ee:c2:6e:c7:d4:62:15:57: 73:8a:b4:d7:45:03:27:94:2d:30:5e:f7:e1:e5:38:a6:18:db: 4a:2d:65:90:98:ec:7f:a1:42:d0:ec:b1:d3:44:62:93:d2:54: c5:1a:78:27:07:5b:45:f9:41:6e:21:4b:4c:b1:3f:ef:39:63: fa:22:f2:b5:b1:95:83:e6:38:85:54:be:02:60:04:c0:05:f9: 83:95:7c:33:9d:f3:c9:72:c4:2f:d3:49:0e:2d:aa:05:1c:dd: 97:26:54:17:0e:65:a8:4b:80:34:6f:92:4d:5e:92:d2:35:94: d8:56:85:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXL8oPX2xcqAju8U8KF+BWQzLvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTEyMTQwMzU1NTdaFw0yNTEyMTcxMjMyNTdaMDMxMTAvBgNV BAMTKDkyRUREQTBERDcyRURFMEZFRjc0NzUwRTEzNEE4MDBDQUE5QkYyRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo+3i2SClXBG480PCVNaNAA7fw t7RISoFjm0rLm0G53va5wpP1fsajWwXNlNubRgHb+MRlDuCeN8SqgreXNyddUq4g KpMXYp1tOQQQlyfRK4uIw2z+z0dk99QakdUj+2yA8jpUVYLefVa/afhcd+cd4f04 NkxzeWqf1+hgD9zAQa6tD+w6B0MP/tvM74/hkQlW5f9XnTnq3I0Mk+GZ+FB8kxqH YuF4LULW3g2fcEBZC8NDhIh9vOzcTz/GpaMLsxxWzxK2Wu/lE5uNdPVFLNfT8TWu YqiKTF6fiRbZDcxWCDxeQbZNtkiGAABzMf7CB+bSAT+QdGw7im29gyZUA4bbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUku3aDdcu3g/vdHUOE0qADKqb8tMwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUaL2GB+HJJrK2X2/fL2neowgK9ToUnEmUP mJLwEO3BiuUPOorKJfpeRMxPlO4m26tQ1gItUjKedc5naWtZf1bUj6wYQIGOoBAI p/srh1zVqf8dpEIWU6UeD1erPQEt9aMFoU2kiGyWLWTFZNxK8xYhXQEaZZEJNx2I x7nxuPe2PodVL+0KI13uwm7H1GIVV3OKtNdFAyeULTBe9+HlOKYY20otZZCY7H+h QtDssdNEYpPSVMUaeCcHW0X5QW4hS0yxP+85Y/oi8rWxlYPmOIVUvgJgBMAF+YOV fDOd88lyxC/TSQ4tqgUc3ZcmVBcOZahLgDRvkk1ektI1lNhWhTg= -----END CERTIFICATE-----Generated at Mon Dec 15 21:27:33 2025 by rpki-client