This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: EebMxcaoT0kFCyW5WPm1aTPhUgyUq4w1vEHBgxBVDCc= Subject key identifier: 2E:EA:81:9B:2D:13:81:92:5D:69:8D:FD:BB:78:27:CA:2B:34:20:CA Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 5734803289A0464F713E53B2F12D90C171D20AC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: F4 Signing time: Sun 07 Dec 2025 03:20:41 +0000 Manifest this update: Sun 07 Dec 2025 03:15:41 +0000 Manifest next update: Wed 10 Dec 2025 10:14:41 +0000 Files and hashes: 1: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) 2: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: tkCBwdzAa4zlrXA7VjFwOnbSvDA/5h3vVIlmARlo+XA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:34:80:32:89:a0:46:4f:71:3e:53:b2:f1:2d:90:c1:71:d2:0a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Dec 7 03:15:41 2025 GMT Not After : Dec 10 10:14:41 2025 GMT Subject: CN=2EEA819B2D1381925D698DFDBB7827CA2B3420CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:27:75:82:ce:8d:ff:8b:09:85:7b:38:4e: ba:f6:a5:cd:fd:8a:73:0e:37:62:af:87:0f:86:15: dc:51:6c:14:dc:f4:99:e2:59:a1:6f:a0:60:1d:8f: a2:e7:24:b8:85:89:5d:9b:73:e7:75:d6:83:98:b4: 76:9a:ee:87:ee:c3:90:a1:95:29:82:fc:ad:22:56: 77:89:2a:91:ac:8d:86:0d:fa:98:5c:22:d9:0d:3e: 38:3b:ef:e0:24:ae:66:97:40:81:1c:3c:92:5e:c5: 90:85:03:5a:cd:5c:fb:de:1e:f1:10:0e:22:0c:fa: ba:10:6c:58:4f:fa:cd:3f:ca:34:b7:f5:a2:87:2b: f4:9c:c5:0b:61:d4:95:a4:c9:d2:e2:87:58:de:ab: 11:03:37:e2:6d:47:c2:88:d7:68:5a:7f:2b:07:c3: f7:bf:6a:26:e1:cd:d6:9a:a1:ff:e8:d7:f7:be:c9: 27:11:ac:cf:7b:47:23:d1:60:47:a2:16:39:69:4d: c0:9f:07:8d:48:66:5e:29:92:6d:47:a5:aa:97:7f: 7d:19:26:c2:51:7a:b5:8c:f7:73:e0:8f:fa:f6:3a: 71:19:b7:e3:46:e1:9a:c9:91:ed:6a:ce:69:88:41: fc:1f:5f:af:d8:e9:f2:c6:a4:a8:87:3d:73:a5:95: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EA:81:9B:2D:13:81:92:5D:69:8D:FD:BB:78:27:CA:2B:34:20:CA X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:66:1a:d2:8a:28:f8:4b:64:79:72:7f:e1:33:ec:d5:7c:31: 67:8f:05:63:a8:f0:96:43:c6:dc:b1:86:5a:67:cb:7a:00:cd: 9d:b4:14:f1:13:f4:d0:9f:44:c0:6d:e4:ac:18:9e:43:04:01: 6b:4e:10:12:42:21:7c:7b:3a:95:2b:1c:50:ca:9f:7d:6f:5b: 1a:9b:93:8a:8d:b7:48:79:de:10:08:09:b9:25:65:40:7c:9c: ce:ea:4c:a3:b0:4e:a5:fb:7f:5d:e3:17:57:32:5d:19:4e:a5: 46:68:fb:bc:e9:81:ae:ba:ea:7d:d3:7c:31:5e:13:e6:42:7e: 37:86:a1:ca:87:1f:f3:ae:df:49:a0:6d:9a:13:a6:d5:33:dc: 23:97:fe:96:03:d0:76:d1:c3:de:45:1d:4b:12:58:5d:4b:33: 1b:e0:a0:cf:f6:b0:58:9d:27:c7:56:be:c0:c3:4a:d6:68:75: 73:dc:d7:84:30:06:e0:00:88:dc:07:69:c0:78:37:c0:d8:99: 04:74:48:2b:c9:f7:0c:f5:d9:cb:27:8e:8d:cd:86:cc:b1:da: fb:fb:69:ff:8f:a0:50:2f:04:b1:a9:db:f2:23:77:12:bd:14: 95:de:59:af:56:a9:68:8f:e7:dc:5e:20:97:64:ea:7b:97:07: 89:1d:61:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzSAMomgRk9xPlOy8S2QwXHSCsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNTEyMDcwMzE1NDFaFw0yNTEyMTAxMDE0NDFaMDMxMTAvBgNV BAMTKDJFRUE4MTlCMkQxMzgxOTI1RDY5OERGREJCNzgyN0NBMkIzNDIwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Uid1gs6N/4sJhXs4Trr2pc39 inMON2Kvhw+GFdxRbBTc9JniWaFvoGAdj6LnJLiFiV2bc+d11oOYtHaa7ofuw5Ch lSmC/K0iVneJKpGsjYYN+phcItkNPjg77+AkrmaXQIEcPJJexZCFA1rNXPveHvEQ DiIM+roQbFhP+s0/yjS39aKHK/ScxQth1JWkydLih1jeqxEDN+JtR8KI12hafysH w/e/aibhzdaaof/o1/e+yScRrM97RyPRYEeiFjlpTcCfB41IZl4pkm1HpaqXf30Z JsJRerWM93Pgj/r2OnEZt+NG4ZrJke1qzmmIQfwfX6/Y6fLGpKiHPXOllYYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULuqBmy0TgZJdaY39u3gnyis0IMowHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVmGtKKKPhLZHlyf+Ez7NV8MWePBWOo8JZD xtyxhlpny3oAzZ20FPET9NCfRMBt5KwYnkMEAWtOEBJCIXx7OpUrHFDKn31vWxqb k4qNt0h53hAICbklZUB8nM7qTKOwTqX7f13jF1cyXRlOpUZo+7zpga666n3TfDFe E+ZCfjeGocqHH/Ou30mgbZoTptUz3COX/pYD0HbRw95FHUsSWF1LMxvgoM/2sFid J8dWvsDDStZodXPc14QwBuAAiNwHacB4N8DYmQR0SCvJ9wz12csnjo3Nhsyx2vv7 af+PoFAvBLGp2/IjdxK9FJXeWa9WqWiP59xeIJdk6nuXB4kdYTw= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:47 2025 by rpki-client