This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: Zq7gXtJafGmKuXyO+PEAPxmNPdpTsVxiIPBramx295c= Subject key identifier: 3A:83:63:A4:0F:0B:60:08:38:86:60:5B:70:AB:03:96:45:53:13:08 Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 029D2B10EBBF079154D17B831B6224F7CBEB9128 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 5E Signing time: Mon 01 Dec 2025 06:01:03 +0000 Manifest this update: Mon 01 Dec 2025 05:56:03 +0000 Manifest next update: Thu 04 Dec 2025 15:45:03 +0000 Files and hashes: 1: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: NUavnbDAgzKWWMdKEdQlmQx7qOwzLhS7kC2XcYyznfM=) 2: 3130332e3134332e3132392e302f32342d3234203d3e20313339333933.roa (hash: 3wetidkcCavxQpjkiXbTz/VCnjcuje+VreUWREjQdgQ=) 3: 323430353a353163303a3a2f33322d3332203d3e20313339333933.roa (hash: xOhwGI2U+4AffMNiCyrvrejLk4Xi3+2L832MlZGbs+w=) 4: 3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (hash: WrbEtwkzEelam58TNUV4Bn/EuB71NKCGwrujJRp3Bd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:45:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9d:2b:10:eb:bf:07:91:54:d1:7b:83:1b:62:24:f7:cb:eb:91:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Dec 1 05:56:03 2025 GMT Not After : Dec 4 15:45:03 2025 GMT Subject: CN=3A8363A40F0B60083886605B70AB039645531308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:a2:ba:58:62:32:c7:9f:57:10:bf:71:3f: 79:45:f8:77:87:3c:15:38:ba:b6:ca:f9:b1:e7:d6: 01:0d:5f:13:87:fa:de:d5:5c:aa:30:a5:61:b5:fa: 8e:6a:89:78:f2:87:39:60:ce:99:94:2c:fc:3e:ee: 20:6a:f0:fe:17:1f:cd:e3:b4:54:d5:f6:9d:dc:1c: cc:1d:7b:30:6a:53:d4:4a:39:4e:d0:2f:cd:cc:9c: 5d:99:53:29:05:bd:ad:ac:35:06:72:1e:a3:58:91: 3f:25:02:78:ab:0c:84:20:e5:95:bc:8e:ed:16:90: 14:e9:ef:3f:08:27:85:82:4f:73:2d:db:ea:a5:5d: 71:e7:b0:14:8f:44:d0:7c:9f:c4:25:03:20:a3:a9: e2:fc:ad:c0:14:33:75:c1:c0:89:74:17:20:14:10: 2d:e0:3a:23:46:08:3f:4a:35:d4:35:dd:8b:7a:02: c3:93:e7:77:06:9c:34:11:06:f8:9f:63:0e:42:ff: 45:69:2d:dc:82:14:05:4d:7b:9f:a3:f4:45:f9:78: 95:8d:36:24:b9:39:fc:5e:27:c3:73:b7:16:18:09: 05:f9:ec:f7:48:17:4a:b3:19:e2:d4:c2:b7:25:62: 48:5e:bd:17:da:8a:40:10:b6:28:cb:f2:3a:c9:a4: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:83:63:A4:0F:0B:60:08:38:86:60:5B:70:AB:03:96:45:53:13:08 X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a0:a6:61:06:8f:ef:c9:f4:d2:a4:f8:4c:92:4d:97:ef:17: a0:2d:68:ab:3d:8c:17:56:a2:49:37:f6:c0:9f:f9:cb:73:0f: 3d:02:8b:87:e2:f7:a5:fe:21:bd:20:93:b1:a2:e0:e1:07:1d: c0:dd:eb:63:69:fb:81:ae:91:d6:6b:cd:34:a5:e4:e0:ec:49: 97:69:c5:34:91:28:fa:25:bd:f2:6a:09:b0:e1:cf:c4:15:2e: 72:46:9d:a0:be:08:c0:a1:ef:8d:2c:ca:6b:88:e0:c4:18:11: 2d:ba:0a:6a:5b:ea:07:24:e8:db:f6:3a:8d:99:1f:a4:45:ff: 28:87:c1:5d:56:0c:74:7d:e4:a6:59:52:79:8c:e5:33:65:d8: 77:a6:44:68:ea:d8:3d:43:6f:f5:05:80:a0:e3:5f:a4:d4:fd: f2:3a:45:3f:ab:f8:c5:d2:c3:89:e5:9e:ba:7d:6d:04:a7:e1: 8e:68:9f:e0:d8:cd:66:cd:fd:d7:dc:37:b7:ae:5c:05:21:c6: 9b:fa:06:68:6d:1d:cc:bf:74:3c:93:10:ae:8c:4f:33:6f:b6: 0b:bf:2a:8b:ec:0f:7c:3c:09:de:bb:a1:19:41:a6:2a:9a:a3: fa:af:45:d0:b2:a3:51:ef:90:da:cf:d4:eb:34:cc:bd:5a:b8: c3:ce:c4:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAp0rEOu/B5FU0XuDG2Ik98vrkSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNTEyMDEwNTU2MDNaFw0yNTEyMDQxNTQ1MDNaMDMxMTAvBgNV BAMTKDNBODM2M0E0MEYwQjYwMDgzODg2NjA1QjcwQUIwMzk2NDU1MzEzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzKK6WGIyx59XEL9xP3lF+HeH PBU4urbK+bHn1gENXxOH+t7VXKowpWG1+o5qiXjyhzlgzpmULPw+7iBq8P4XH83j tFTV9p3cHMwdezBqU9RKOU7QL83MnF2ZUykFva2sNQZyHqNYkT8lAnirDIQg5ZW8 ju0WkBTp7z8IJ4WCT3Mt2+qlXXHnsBSPRNB8n8QlAyCjqeL8rcAUM3XBwIl0FyAU EC3gOiNGCD9KNdQ13Yt6AsOT53cGnDQRBvifYw5C/0VpLdyCFAVNe5+j9EX5eJWN NiS5OfxeJ8NztxYYCQX57PdIF0qzGeLUwrclYkhevRfaikAQtijL8jrJpNoJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOoNjpA8LYAg4hmBbcKsDlkVTEwgwHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOgpmEGj+/J9NKk+EySTZfvF6AtaKs9jBdW okk39sCf+ctzDz0Ci4fi96X+Ib0gk7Gi4OEHHcDd62Np+4GukdZrzTSl5ODsSZdp xTSRKPolvfJqCbDhz8QVLnJGnaC+CMCh740symuI4MQYES26Cmpb6gck6Nv2Oo2Z H6RF/yiHwV1WDHR95KZZUnmM5TNl2HemRGjq2D1Db/UFgKDjX6TU/fI6RT+r+MXS w4nlnrp9bQSn4Y5on+DYzWbN/dfcN7euXAUhxpv6BmhtHcy/dDyTEK6MTzNvtgu/ KovsD3w8Cd67oRlBpiqao/qvRdCyo1HvkNrP1Os0zL1auMPOxBM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:10:53 2025 by rpki-client