This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: NBV4YTYPmLp1DBI9PCk8pccMV20vZKE2AU2xsO4T2hM= Subject key identifier: 30:D2:11:68:8F:A2:B6:C3:CD:03:DA:D8:C5:68:74:35:E8:1D:E1:47 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 6A8776131FC75F7F6B56435BF060CE90B5B94B86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: FB Signing time: Wed 03 Dec 2025 06:00:44 +0000 Manifest this update: Wed 03 Dec 2025 05:55:44 +0000 Manifest next update: Sat 06 Dec 2025 07:43:44 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) 2: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) 3: 020EA2304929066809CA6F723574798639D77438.crl (hash: Zg1QdgmBQpZYfUH6TvHmWCz6Er3OWaWr0Mr/6JfcnJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:87:76:13:1f:c7:5f:7f:6b:56:43:5b:f0:60:ce:90:b5:b9:4b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Dec 3 05:55:44 2025 GMT Not After : Dec 6 07:43:44 2025 GMT Subject: CN=30D211688FA2B6C3CD03DAD8C5687435E81DE147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:fd:43:11:02:8d:e5:ae:d7:4b:f7:52:20: e3:4f:09:02:20:17:81:d3:6b:25:ce:6b:01:ad:5e: 3c:40:18:a8:50:9f:c4:c4:cc:36:53:86:78:21:8f: 5b:df:41:c5:72:4c:bc:a4:e6:27:45:31:76:c4:3b: d5:a5:c9:9a:5d:c5:67:1c:ad:42:a0:1f:60:24:41: a4:bf:ea:42:9d:e5:ca:3f:32:b4:fe:26:56:37:7b: e8:fd:b6:bc:0d:1f:18:fc:17:f3:85:4a:27:da:e0: 56:28:14:37:fd:7b:d5:47:11:76:e4:e2:aa:91:c2: cd:8d:78:6d:2c:58:00:1a:b4:3b:1f:33:5d:73:24: 30:5a:76:3d:7e:80:6f:8b:38:ba:77:44:a2:f7:c5: 95:fd:68:49:01:1e:2a:95:c6:41:1f:4b:2d:2a:e8: 9d:4f:71:e0:af:c2:6c:da:15:e1:46:12:fe:ac:48: e0:da:46:25:81:0c:40:95:91:68:d3:88:7c:a1:a8: a0:bc:d9:6a:5b:8e:6a:5d:04:fb:ad:4e:06:61:7f: 20:10:d2:e1:5d:52:5f:c8:80:c3:bc:a8:97:a1:23: af:a8:e6:c0:38:71:c7:0a:53:98:87:8e:ce:61:1e: ee:87:49:2d:a1:fb:a2:e6:13:bf:30:49:57:91:38: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D2:11:68:8F:A2:B6:C3:CD:03:DA:D8:C5:68:74:35:E8:1D:E1:47 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fc:db:43:ef:24:79:d0:e8:68:bf:83:96:1f:b1:04:b5:f9: 14:90:d2:65:f5:b0:dc:6b:95:c7:c6:da:2b:8d:37:1a:90:d0: bf:6c:42:85:b5:0a:33:68:e7:e4:6f:c8:2f:f3:93:c9:8b:12: 7c:61:bd:72:3f:c3:00:31:76:f5:85:87:a6:9b:46:85:aa:56: 66:a3:4a:a0:4e:96:88:03:1c:cc:10:d5:f1:1b:ec:f6:62:e3: ab:78:e1:0d:3a:1d:5c:80:6b:ed:f4:43:70:cc:77:9f:1b:9e: 14:9f:68:ae:09:8c:36:b9:3c:a5:9c:a6:85:b7:1c:fc:ed:78: 5d:23:1f:9a:18:81:24:95:6c:92:9a:c9:01:bb:fb:ed:c3:e3: 10:58:ed:b1:e7:0e:f9:85:22:f9:19:87:11:8f:a5:0e:1e:3a: 1d:75:46:89:7d:db:29:af:74:62:35:e9:66:8d:31:9e:92:d9: db:b9:90:ae:77:2c:6a:56:d2:22:fd:c8:16:57:c8:b8:15:28: 68:99:14:8e:3e:c5:0d:a5:31:78:dd:fa:74:e0:e1:dd:3b:dc: e8:87:ae:95:63:b1:17:93:7d:2a:1d:50:3c:08:17:16:13:0f: 40:82:76:96:6b:88:f5:f9:35:ee:a0:42:01:01:7a:4c:7d:a3: a3:e8:8d:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaod2Ex/HX39rVkNb8GDOkLW5S4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNTEyMDMwNTU1NDRaFw0yNTEyMDYwNzQzNDRaMDMxMTAvBgNV BAMTKDMwRDIxMTY4OEZBMkI2QzNDRDAzREFEOEM1Njg3NDM1RTgxREUxNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFnP1DEQKN5a7XS/dSIONPCQIg F4HTayXOawGtXjxAGKhQn8TEzDZThnghj1vfQcVyTLyk5idFMXbEO9WlyZpdxWcc rUKgH2AkQaS/6kKd5co/MrT+JlY3e+j9trwNHxj8F/OFSifa4FYoFDf9e9VHEXbk 4qqRws2NeG0sWAAatDsfM11zJDBadj1+gG+LOLp3RKL3xZX9aEkBHiqVxkEfSy0q 6J1PceCvwmzaFeFGEv6sSODaRiWBDECVkWjTiHyhqKC82WpbjmpdBPutTgZhfyAQ 0uFdUl/IgMO8qJehI6+o5sA4cccKU5iHjs5hHu6HSS2h+6LmE78wSVeRON13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNIRaI+itsPNA9rYxWh0Negd4UcwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3820PvJHnQ6Gi/g5YfsQS1+RSQ0mX1sNxr lcfG2iuNNxqQ0L9sQoW1CjNo5+RvyC/zk8mLEnxhvXI/wwAxdvWFh6abRoWqVmaj SqBOlogDHMwQ1fEb7PZi46t44Q06HVyAa+30Q3DMd58bnhSfaK4JjDa5PKWcpoW3 HPzteF0jH5oYgSSVbJKayQG7++3D4xBY7bHnDvmFIvkZhxGPpQ4eOh11Rol92ymv dGI16WaNMZ6S2du5kK53LGpW0iL9yBZXyLgVKGiZFI4+xQ2lMXjd+nTg4d073OiH rpVjsReTfSodUDwIFxYTD0CCdpZriPX5Ne6gQgEBekx9o6Pojak= -----END CERTIFICATE-----Generated at Thu Dec 4 08:23:25 2025 by rpki-client