This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: rjvCGqWKzvnnMBFDao3NIh/2bXktRoNUS7de27Q650o= Subject key identifier: 03:32:B1:3C:E0:DA:AF:0C:F5:94:BF:37:11:8F:20:64:04:38:7B:83 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 3D72B5B1618676B024D3EAB841F447F766430C54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 0230 Signing time: Tue 02 Dec 2025 09:40:57 +0000 Manifest this update: Tue 02 Dec 2025 09:35:57 +0000 Manifest next update: Fri 05 Dec 2025 12:07:57 +0000 Files and hashes: 1: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: O5nc1rNu4uvcKgPXxkmq1k5eV6b26NWgnf9SpkwUTIU=) 2: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: sSH+72BWEr4MQc7BgNlbk4H5MkWrjKvE4wSUUqHwmBM=) 3: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: GKmBfpKDeFOAn/hth0t5+jc0CLfcCDiIkzuoYyGRF6A=) 4: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yYJNqR/G5sUAXMOF0IPap8wZFYolAZMC0i9H8SllRlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:72:b5:b1:61:86:76:b0:24:d3:ea:b8:41:f4:47:f7:66:43:0c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Dec 2 09:35:57 2025 GMT Not After : Dec 5 12:07:57 2025 GMT Subject: CN=0332B13CE0DAAF0CF594BF37118F206404387B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dc:c5:81:a8:9f:17:d6:26:10:5c:98:3d:d4: 73:67:38:5e:9d:68:48:28:38:a8:73:b9:4f:55:49: 11:41:24:fe:70:b9:f2:77:b3:d6:92:f9:d8:42:86: e3:aa:54:29:87:91:bc:91:25:b4:81:f9:02:07:ab: 92:ce:42:f3:38:56:40:2d:78:39:a1:00:9e:1c:c6: 8d:7b:a0:97:b9:9a:43:ae:2b:f5:91:00:06:56:c3: ac:24:bb:8d:9a:c1:bd:eb:8c:ea:6c:e5:32:95:89: e2:c1:cb:33:63:26:dd:c9:a5:c6:b1:55:33:de:6f: a4:7d:4b:be:e3:9d:17:1d:e6:ef:11:82:59:5f:44: e4:ca:99:69:78:51:b9:c4:2b:c6:c9:a5:c4:75:ec: 53:b2:25:7b:8a:f2:9a:c2:07:52:21:d0:d6:5c:e5: ed:96:7b:6f:d9:2f:7a:5f:a5:d6:28:22:18:d4:44: 6e:19:a7:81:85:4b:86:f9:77:08:1d:60:23:c9:c4: 45:5c:5e:3b:22:4b:eb:2d:27:0b:66:d4:22:20:0a: ac:d6:66:43:54:0f:22:70:0a:7f:58:8d:eb:42:a2: 21:7b:c2:53:b8:ac:c0:07:fe:8b:80:0f:76:5b:67: 8f:fb:38:17:c4:44:87:4b:aa:06:20:c7:8b:e3:53: b5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:32:B1:3C:E0:DA:AF:0C:F5:94:BF:37:11:8F:20:64:04:38:7B:83 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:14:7d:b4:af:d5:7a:30:70:f4:72:8a:c0:dc:54:01:48:d6: 22:e1:dc:16:2a:21:6b:66:a4:54:b9:73:40:47:83:c7:71:b0: 57:da:70:0a:48:31:50:d9:51:6c:16:d5:e3:4c:a2:88:cb:b8: 38:88:a0:4c:bc:a3:6b:01:97:ae:35:c6:13:83:0a:70:4f:ef: e2:fb:92:17:a1:b7:7a:2c:80:b7:7a:aa:ec:3a:0b:3e:fd:30: 49:35:15:9b:b3:d4:fb:69:70:fa:1e:51:19:bd:07:91:de:3a: bc:97:03:7f:bd:f5:f6:5e:40:70:c6:0f:65:6e:9f:d9:77:27: 6e:6a:98:b0:99:53:79:eb:16:a8:aa:75:7f:01:e9:f7:34:8b: 7a:ce:0a:2d:69:9f:e2:f2:dc:ea:cc:36:52:a8:0c:b9:28:aa: ab:2b:ba:79:3c:da:f2:df:ef:48:4e:26:e7:a0:cf:bc:ef:2b: 62:7f:d7:24:9e:d7:d6:66:5c:5c:a1:8f:6e:fc:56:32:c5:b5: 1f:fc:11:08:5f:2b:74:bc:3c:25:a1:8d:d6:00:b7:9a:02:34: 48:35:3a:7b:da:a9:36:69:5a:3f:ed:a9:9a:48:eb:54:33:e5: 81:46:34:cb:1e:70:2d:4f:51:80:d3:a2:01:af:6b:dc:b7:65: 07:b2:e5:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXK1sWGGdrAk0+q4QfRH92ZDDFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNTEyMDIwOTM1NTdaFw0yNTEyMDUxMjA3NTdaMDMxMTAvBgNV BAMTKDAzMzJCMTNDRTBEQUFGMENGNTk0QkYzNzExOEYyMDY0MDQzODdCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp3MWBqJ8X1iYQXJg91HNnOF6d aEgoOKhzuU9VSRFBJP5wufJ3s9aS+dhChuOqVCmHkbyRJbSB+QIHq5LOQvM4VkAt eDmhAJ4cxo17oJe5mkOuK/WRAAZWw6wku42awb3rjOps5TKVieLByzNjJt3Jpcax VTPeb6R9S77jnRcd5u8RgllfROTKmWl4UbnEK8bJpcR17FOyJXuK8prCB1Ih0NZc 5e2We2/ZL3pfpdYoIhjURG4Zp4GFS4b5dwgdYCPJxEVcXjsiS+stJwtm1CIgCqzW ZkNUDyJwCn9YjetCoiF7wlO4rMAH/ouAD3ZbZ4/7OBfERIdLqgYgx4vjU7XtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAzKxPODarwz1lL83EY8gZAQ4e4MwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEUfbSv1XowcPRyisDcVAFI1iLh3BYqIWtm pFS5c0BHg8dxsFfacApIMVDZUWwW1eNMoojLuDiIoEy8o2sBl641xhODCnBP7+L7 kheht3osgLd6quw6Cz79MEk1FZuz1PtpcPoeURm9B5HeOryXA3+99fZeQHDGD2Vu n9l3J25qmLCZU3nrFqiqdX8B6fc0i3rOCi1pn+Ly3OrMNlKoDLkoqqsrunk82vLf 70hOJuegz7zvK2J/1ySe19ZmXFyhj278VjLFtR/8EQhfK3S8PCWhjdYAt5oCNEg1 OnvaqTZpWj/tqZpI61Qz5YFGNMsecC1PUYDTogGva9y3ZQey5cw= -----END CERTIFICATE-----Generated at Wed Dec 3 16:37:17 2025 by rpki-client