This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: Oa70Rs7T8d4pDCw/1szNCtFt3N3TCyqsymJKlvbkBbg= Subject key identifier: AF:1E:AF:37:F7:50:02:1F:97:0B:59:ED:67:77:5E:4B:A3:F9:64:24 Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 6D433605D97215EBEDF3CBC69CF82BB85F9F4B32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 052C Signing time: Tue 02 Dec 2025 12:20:54 +0000 Manifest this update: Tue 02 Dec 2025 12:15:54 +0000 Manifest next update: Fri 05 Dec 2025 19:26:54 +0000 Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) 2: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: Pe2DttKVQlgKUk1PfL2J0qhzbch8cNZWERTW+edfC10=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:43:36:05:d9:72:15:eb:ed:f3:cb:c6:9c:f8:2b:b8:5f:9f:4b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Dec 2 12:15:54 2025 GMT Not After : Dec 5 19:26:54 2025 GMT Subject: CN=AF1EAF37F750021F970B59ED67775E4BA3F96424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:39:6b:6b:ef:6f:38:66:56:8f:5d:4f:ea: 8a:c0:bd:56:0f:cc:92:4d:90:8b:f5:36:0a:24:a4: 74:ac:5e:c2:77:ae:11:f1:0c:27:30:ec:22:90:5f: 84:a3:b9:6d:9a:43:d2:86:92:39:2d:f7:24:8f:a0: e2:5c:8d:b4:a0:53:6d:fc:15:e0:2d:a7:0b:cc:b8: 59:4e:8b:a2:33:26:60:f1:4d:bb:e8:1c:54:02:83: bb:2c:4a:d6:08:be:ff:b6:9a:2e:11:de:a4:07:7c: 23:ef:44:42:4f:ef:05:c3:80:61:5c:9c:2f:e9:d1: 30:6e:c8:8e:aa:01:72:f9:2d:61:61:bb:48:cc:6a: 0c:7f:d8:38:b6:f8:78:24:b5:9d:54:9b:09:ef:a4: cf:1b:eb:1c:d4:2f:c2:49:fd:99:6e:52:55:7e:ea: 83:e7:0f:b1:80:3c:2f:66:b3:cd:ee:ea:2b:0f:69: 31:03:d8:c7:8f:e6:27:f0:f3:09:43:a8:ea:e7:87: ed:db:a1:d0:a3:0a:24:ab:d8:99:a0:30:b9:b3:c4: 96:3c:cc:3e:55:c4:fa:0d:6c:56:dd:0e:d7:48:43: c0:3e:42:a6:94:de:db:ef:d8:78:28:2f:84:cc:40: f9:d4:1e:aa:8c:ca:12:cd:20:10:38:47:f6:fe:17: 18:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1E:AF:37:F7:50:02:1F:97:0B:59:ED:67:77:5E:4B:A3:F9:64:24 X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:6d:9d:cf:5b:27:d2:a9:1b:51:56:ec:03:ee:98:4a:f5:35: ea:60:71:0e:18:39:a5:1d:bf:d2:98:5a:a9:6c:1f:58:f4:c4: de:2c:e6:83:89:d4:9d:50:68:c4:a3:1f:5e:4c:ae:16:65:cc: cc:19:b5:e3:88:c0:22:90:00:ab:40:22:c6:2a:fb:11:8b:5d: ae:95:99:d9:50:2f:2c:7a:6e:20:6d:c8:c6:fb:a1:b6:22:ce: 82:ed:b9:32:6e:af:7b:c0:09:f5:f2:a5:cb:17:3d:03:54:fd: ea:ae:27:8a:65:06:6b:fd:bb:83:3d:00:07:3b:59:d4:e5:70: 19:2d:59:40:54:ca:c7:a1:78:07:19:57:cb:6f:cb:71:f4:fe: 86:4f:a3:4c:8b:c8:73:53:19:e2:f5:2c:62:b4:3c:7c:12:51: 4f:39:5c:7d:0f:44:b7:3f:ee:c8:a3:cc:89:36:f4:61:c1:3d: ed:c3:de:f0:ac:96:e0:5b:74:e6:fe:dd:1e:8b:e1:3b:e5:86: 98:37:37:38:0b:4c:79:31:52:1c:2e:ad:32:a5:bc:4e:ba:79: 6b:98:ad:71:b7:c4:85:fd:4b:f3:92:14:c2:0c:e1:94:da:e0: eb:ac:fb:0f:b5:ee:79:6d:15:78:f5:02:24:6d:f5:24:b7:2a: 60:52:5f:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUM2BdlyFevt88vGnPgruF+fSzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNTEyMDIxMjE1NTRaFw0yNTEyMDUxOTI2NTRaMDMxMTAvBgNV BAMTKEFGMUVBRjM3Rjc1MDAyMUY5NzBCNTlFRDY3Nzc1RTRCQTNGOTY0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYTlra+9vOGZWj11P6orAvVYP zJJNkIv1NgokpHSsXsJ3rhHxDCcw7CKQX4SjuW2aQ9KGkjkt9ySPoOJcjbSgU238 FeAtpwvMuFlOi6IzJmDxTbvoHFQCg7ssStYIvv+2mi4R3qQHfCPvREJP7wXDgGFc nC/p0TBuyI6qAXL5LWFhu0jMagx/2Di2+HgktZ1UmwnvpM8b6xzUL8JJ/ZluUlV+ 6oPnD7GAPC9ms83u6isPaTED2MeP5ifw8wlDqOrnh+3bodCjCiSr2JmgMLmzxJY8 zD5VxPoNbFbdDtdIQ8A+QqaU3tvv2HgoL4TMQPnUHqqMyhLNIBA4R/b+FxjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrx6vN/dQAh+XC1ntZ3deS6P5ZCQwHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRtnc9bJ9KpG1FW7APumEr1NepgcQ4YOaUd v9KYWqlsH1j0xN4s5oOJ1J1QaMSjH15MrhZlzMwZteOIwCKQAKtAIsYq+xGLXa6V mdlQLyx6biBtyMb7obYizoLtuTJur3vACfXypcsXPQNU/equJ4plBmv9u4M9AAc7 WdTlcBktWUBUyseheAcZV8tvy3H0/oZPo0yLyHNTGeL1LGK0PHwSUU85XH0PRLc/ 7sijzIk29GHBPe3D3vCsluBbdOb+3R6L4Tvlhpg3NzgLTHkxUhwurTKlvE66eWuY rXG3xIX9S/OSFMIM4ZTa4Ous+w+17nltFXj1AiRt9SS3KmBSX3E= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:16 2025 by rpki-client