This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: hlOv8n6d8+mlYFjFfSZn2JkmeClQmSo8L0uFOazuhYU= Subject key identifier: 8C:C6:06:13:11:EA:B2:72:E5:39:58:23:92:46:B0:FA:FB:35:03:22 Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 7DA9D9C7D6EED7684F734CBADEC3E6F6ED8D125D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 052F Signing time: Wed 03 Dec 2025 11:00:46 +0000 Manifest this update: Wed 03 Dec 2025 10:55:46 +0000 Manifest next update: Sat 06 Dec 2025 14:42:46 +0000 Files and hashes: 1: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=) 2: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 3: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) 4: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=) 5: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) 6: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: MOSBrFf/kMnB6oS4DKy2+4AzDjJ/3NGLasaIDNSETss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:a9:d9:c7:d6:ee:d7:68:4f:73:4c:ba:de:c3:e6:f6:ed:8d:12:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Dec 3 10:55:46 2025 GMT Not After : Dec 6 14:42:46 2025 GMT Subject: CN=8CC6061311EAB272E53958239246B0FAFB350322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:7f:ee:45:cc:98:55:1d:b6:ab:f7:55:36: 61:84:ee:84:b7:53:b5:29:c0:b3:1d:54:f1:cb:fb: b9:99:18:9b:f6:a5:e1:ee:21:71:73:7d:65:b2:1b: 02:2c:29:89:44:1a:a4:f5:3b:5f:57:7c:cc:b0:3e: 7d:1e:f2:32:0f:5c:a3:bf:f9:aa:6a:fe:6b:56:67: 34:8e:bc:23:17:42:94:81:9b:85:4b:dd:cc:93:be: 26:3b:2e:50:17:75:4e:14:9b:e4:2c:4a:a7:28:e1: 01:a2:23:bd:ff:d4:f0:47:7a:90:31:24:e7:66:ae: 1e:cc:a5:67:af:db:5f:d9:a1:b9:ca:33:ea:af:d5: 49:6e:bd:8b:c2:3f:b3:f9:c7:3e:b8:bb:61:66:ba: fa:77:3e:8f:fe:74:49:85:f0:93:e7:55:f6:34:96: 69:fb:a9:79:af:a0:9f:7c:7c:44:3b:aa:d4:9c:90: fc:9a:60:6e:83:5a:13:81:2f:0c:54:04:9a:34:7e: 15:d1:e8:b7:f8:53:94:95:64:dc:b3:06:14:e4:5e: 3d:c6:4e:86:14:b2:38:49:f3:97:60:a3:a3:79:78: 0e:c5:a3:90:26:06:3a:d5:c7:7d:bc:68:a4:61:3b: 03:4c:b2:89:6c:b0:a8:ac:c0:6d:ac:91:71:ca:08: b5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C6:06:13:11:EA:B2:72:E5:39:58:23:92:46:B0:FA:FB:35:03:22 X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6d:a5:94:4b:ff:9e:a4:22:43:43:47:c8:6e:a3:d9:6b:4b: 3d:16:a0:c8:84:fb:13:02:ff:47:0a:ab:3f:70:88:6e:36:5d: 37:7f:32:d1:af:9f:21:77:bd:ac:f2:45:f8:79:ea:d8:de:c1: 1a:c6:3f:f7:c5:19:24:15:05:05:55:68:60:2b:51:c7:36:45: 61:d0:6e:14:d5:8c:b0:c2:d7:40:70:4c:5d:2f:76:94:9f:7b: e5:61:9a:de:f9:69:7f:da:bd:03:6e:f5:d3:4a:84:62:d8:b4: d1:70:1a:f1:fc:74:0a:dd:93:63:dc:44:19:08:a7:75:68:6c: 9d:0b:37:1e:a8:74:c0:a4:4e:48:e6:04:1d:ef:26:32:cf:7b: 59:38:3e:a4:2b:a6:b8:83:b2:7e:d1:8f:ae:e9:d7:26:58:68: 23:35:ac:63:fb:bd:a6:51:d8:0c:7f:3c:0a:80:15:c3:f2:69: 85:23:e0:69:4e:e5:25:e2:17:31:9e:58:9f:a6:b2:4b:7f:c8: 73:f2:b8:47:46:3f:28:e5:69:dd:35:3c:79:9d:e1:83:e6:f5: 52:84:d5:47:80:9b:40:dc:c1:dd:5c:4b:9a:0f:34:bc:21:51: d6:2c:31:0e:be:6b:26:d2:72:77:61:50:e5:87:12:05:e3:a7: ee:e5:cd:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfanZx9bu12hPc0y63sPm9u2NEl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTEyMDMxMDU1NDZaFw0yNTEyMDYxNDQyNDZaMDMxMTAvBgNV BAMTKDhDQzYwNjEzMTFFQUIyNzJFNTM5NTgyMzkyNDZCMEZBRkIzNTAzMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyX/uRcyYVR22q/dVNmGE7oS3 U7UpwLMdVPHL+7mZGJv2peHuIXFzfWWyGwIsKYlEGqT1O19XfMywPn0e8jIPXKO/ +apq/mtWZzSOvCMXQpSBm4VL3cyTviY7LlAXdU4Um+QsSqco4QGiI73/1PBHepAx JOdmrh7MpWev21/ZobnKM+qv1UluvYvCP7P5xz64u2Fmuvp3Po/+dEmF8JPnVfY0 lmn7qXmvoJ98fEQ7qtSckPyaYG6DWhOBLwxUBJo0fhXR6Lf4U5SVZNyzBhTkXj3G ToYUsjhJ85dgo6N5eA7Fo5AmBjrVx328aKRhOwNMsolssKiswG2skXHKCLXvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjMYGExHqsnLlOVgjkkaw+vs1AyIwHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBtpZRL/56kIkNDR8huo9lrSz0WoMiE+xMC /0cKqz9wiG42XTd/MtGvnyF3vazyRfh56tjewRrGP/fFGSQVBQVVaGArUcc2RWHQ bhTVjLDC10BwTF0vdpSfe+Vhmt75aX/avQNu9dNKhGLYtNFwGvH8dArdk2PcRBkI p3VobJ0LNx6odMCkTkjmBB3vJjLPe1k4PqQrpriDsn7Rj67p1yZYaCM1rGP7vaZR 2Ax/PAqAFcPyaYUj4GlO5SXiFzGeWJ+mskt/yHPyuEdGPyjlad01PHmd4YPm9VKE 1UeAm0Dcwd1cS5oPNLwhUdYsMQ6+aybScndhUOWHEgXjp+7lzaw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:36 2025 by rpki-client