This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: j9635EP3GiTCuul7JiTvFsL1huyEa2FEGfGfImiIOJk= Subject key identifier: C6:12:9F:3F:DB:41:C1:1C:FF:46:FC:FD:93:18:BD:4D:E2:63:AE:59 Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 6A1D52A179DE5E09D85BD03836ED9FFE277F9EB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 0253 Signing time: Tue 02 Dec 2025 12:22:25 +0000 Manifest this update: Tue 02 Dec 2025 12:17:25 +0000 Manifest next update: Fri 05 Dec 2025 12:35:25 +0000 Files and hashes: 1: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: 1ohXfgQVLOVqfzLUY6nq2zHsOKGWcr19CJg3R6qlyZU=) 2: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: Zy96XB2zrTV7TIFLpWAu9+q3TCxby4zeappZ6ekZCFc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1d:52:a1:79:de:5e:09:d8:5b:d0:38:36:ed:9f:fe:27:7f:9e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Dec 2 12:17:25 2025 GMT Not After : Dec 5 12:35:25 2025 GMT Subject: CN=C6129F3FDB41C11CFF46FCFD9318BD4DE263AE59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:99:a7:fd:f7:dd:4d:dd:a6:77:00:68:5b:54: 59:72:a8:db:93:95:4e:e4:81:61:d8:23:57:aa:71: 84:d8:1e:53:e1:d2:f8:85:b2:b8:02:fb:d6:9c:8e: 73:95:37:b7:05:af:88:91:76:e7:94:cd:b8:47:52: fe:bf:a3:46:79:2e:42:71:8e:c2:1b:61:e3:2a:0c: 0d:f2:ff:72:c9:c8:78:e1:00:57:0f:17:41:be:c9: ea:1f:26:46:37:0b:e2:e6:5d:49:7d:99:cd:5c:98: e3:30:2d:2d:f8:74:53:f8:40:4b:b5:b5:38:64:99: 2b:b4:e1:99:af:14:60:6f:51:ca:d8:8a:a5:1a:b2: 7a:9f:7b:a4:93:9c:6d:16:75:20:19:24:9a:d7:d1: bc:3d:f6:37:76:05:12:16:fd:1f:7f:01:cf:14:14: f5:8d:35:7f:2b:59:c0:dd:15:6c:fc:bd:da:46:8e: f9:95:1a:1a:77:2d:26:fc:13:14:69:75:5c:96:d7: 38:86:3a:b1:1b:43:1f:fa:d8:c9:45:1e:df:95:06: 18:61:98:59:1f:0b:7c:fe:66:9f:40:d3:65:bf:13: 75:bc:06:d2:7a:04:6b:b2:db:52:45:a9:68:cb:86: 08:a6:57:c1:21:22:65:02:a0:f9:15:fb:b1:bf:0a: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:12:9F:3F:DB:41:C1:1C:FF:46:FC:FD:93:18:BD:4D:E2:63:AE:59 X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:2c:fe:f8:a4:63:61:bf:69:21:54:18:2e:74:02:11:1d:5d: 06:53:4a:eb:65:50:3e:98:32:b4:35:b2:63:06:69:fd:a1:42: 1e:d5:ee:62:a6:87:8a:69:74:84:e3:fc:1d:df:4b:17:dc:55: 7c:c6:03:07:75:f6:fb:04:26:22:93:95:2c:e4:7c:db:0f:c1: 01:e6:c7:b3:23:ff:6c:ee:ac:bd:39:00:05:a2:a7:68:29:22: 60:d4:33:c7:5e:78:ea:4c:75:8f:4e:8d:fe:09:f5:71:a0:85: eb:fc:ee:0b:ec:aa:59:4d:db:e9:4d:b7:28:92:cb:54:17:c7: 2f:6e:31:49:ea:20:a3:d8:6d:43:a0:be:2c:16:06:4f:94:0b: d9:b7:94:7b:60:b1:cb:98:6b:d5:38:ba:41:b6:d1:53:35:c4: da:18:98:64:e3:4e:47:f6:51:4f:32:79:ca:a1:9f:eb:fe:8f: b5:93:d8:10:ee:3f:4a:41:cb:81:c7:c7:8c:8b:93:a7:cd:c6: 8d:13:1b:02:a1:b1:a8:4a:c8:c7:0f:b6:be:c3:28:2d:97:b8: 33:6c:22:84:2d:bb:f1:19:95:92:73:78:42:8e:d7:ea:10:36: 52:62:57:d3:43:b6:d7:26:68:77:f3:6e:3c:03:29:fb:0a:7f: 48:af:ec:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUah1SoXneXgnYW9A4Nu2f/id/nrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNTEyMDIxMjE3MjVaFw0yNTEyMDUxMjM1MjVaMDMxMTAvBgNV BAMTKEM2MTI5RjNGREI0MUMxMUNGRjQ2RkNGRDkzMThCRDRERTI2M0FFNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGmaf9991N3aZ3AGhbVFlyqNuT lU7kgWHYI1eqcYTYHlPh0viFsrgC+9acjnOVN7cFr4iRdueUzbhHUv6/o0Z5LkJx jsIbYeMqDA3y/3LJyHjhAFcPF0G+yeofJkY3C+LmXUl9mc1cmOMwLS34dFP4QEu1 tThkmSu04ZmvFGBvUcrYiqUasnqfe6STnG0WdSAZJJrX0bw99jd2BRIW/R9/Ac8U FPWNNX8rWcDdFWz8vdpGjvmVGhp3LSb8ExRpdVyW1ziGOrEbQx/62MlFHt+VBhhh mFkfC3z+Zp9A02W/E3W8BtJ6BGuy21JFqWjLhgimV8EhImUCoPkV+7G/CudTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxhKfP9tBwRz/Rvz9kxi9TeJjrlkwHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFYs/vikY2G/aSFUGC50AhEdXQZTSutlUD6Y MrQ1smMGaf2hQh7V7mKmh4ppdITj/B3fSxfcVXzGAwd19vsEJiKTlSzkfNsPwQHm x7Mj/2zurL05AAWip2gpImDUM8deeOpMdY9Ojf4J9XGghev87gvsqllN2+lNtyiS y1QXxy9uMUnqIKPYbUOgviwWBk+UC9m3lHtgscuYa9U4ukG20VM1xNoYmGTjTkf2 UU8yecqhn+v+j7WT2BDuP0pBy4HHx4yLk6fNxo0TGwKhsahKyMcPtr7DKC2XuDNs IoQtu/EZlZJzeEKO1+oQNlJiV9NDttcmaHfzbjwDKfsKf0iv7L8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:53 2025 by rpki-client