This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft File: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json) Hash identifier: +bdO65RdYlU2U+Ar4aQgCKNe/8l0Ige8n6Mophr6XSk= Subject key identifier: E3:0B:B0:9A:C5:9D:4F:20:49:81:88:AE:7C:7E:FC:DF:AD:A2:DF:26 Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 4DB073CC7CB46CB477990F3B3647B1C7B54F85DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft Manifest number: 0508 Signing time: Thu 18 Dec 2025 06:41:27 +0000 Manifest this update: Thu 18 Dec 2025 06:36:27 +0000 Manifest next update: Sun 21 Dec 2025 08:50:27 +0000 Files and hashes: 1: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: Ymw3mKUJLuc3UElUh0Nq2GfPGIEzD27CcOXD4JJbHT8=) 2: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: L1riPWK1BOg40L7SbwUfQv1683+5TLk1v3PhuU/XPq0=) 3: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: mA/rP0hr8/EieVP2HKsGbfcjdkP2Kd8or4Jc67/Y7I0=) 4: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: jd8RzIV4pb6xOSx8M2iJByCvMa7m6mddhFLRaUaFvoI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b0:73:cc:7c:b4:6c:b4:77:99:0f:3b:36:47:b1:c7:b5:4f:85:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Dec 18 06:36:27 2025 GMT Not After : Dec 21 08:50:27 2025 GMT Subject: CN=E30BB09AC59D4F20498188AE7C7EFCDFADA2DF26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:f3:23:dd:51:54:0c:f0:9f:3a:7a:26:ea: 40:95:67:d0:ba:d6:2f:0e:74:a3:d3:0b:9e:81:cd: 28:20:e8:4a:ef:66:68:25:48:50:73:20:d1:19:de: ac:81:24:7a:f4:f8:8d:41:2b:5e:ea:f1:1b:4a:97: 76:47:fa:96:53:43:74:37:6e:be:c6:56:34:e6:e8: a4:a5:fc:54:a2:6a:75:b9:c8:30:23:f3:13:d4:74: 96:c6:e0:c2:3b:e3:38:3c:bf:cd:bd:4a:4a:1a:90: 16:a8:14:62:e9:c1:d5:ab:73:c0:b8:23:0b:7c:64: ac:8f:eb:dc:b4:27:fc:c4:57:1d:eb:ea:0b:4a:22: f4:21:7e:3d:7c:a1:cb:f6:bb:37:5b:3d:ed:fa:22: b5:a3:91:76:e0:3f:0f:88:ff:7d:fc:da:6a:85:1a: d5:9e:2d:61:06:54:c1:bf:85:60:82:2f:2e:f6:94: 28:ac:19:ca:da:29:aa:5a:28:b9:5c:01:27:c6:0e: 4e:d1:26:ef:8e:53:32:c2:05:a2:1e:d3:08:b8:2d: f2:0c:2e:d9:e2:90:33:eb:d0:8d:dc:61:d7:01:89: 5f:03:25:df:65:03:4b:22:5d:b8:2c:b7:0b:c9:b8: 01:0f:af:35:a1:80:28:d8:ff:72:13:72:d1:7f:4f: 38:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0B:B0:9A:C5:9D:4F:20:49:81:88:AE:7C:7E:FC:DF:AD:A2:DF:26 X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:8a:a2:87:38:3a:18:71:c1:e8:09:0a:77:68:ae:0e:a7:7b: c7:00:68:33:97:82:6f:4f:64:5f:7c:94:7e:71:e5:2d:c9:76: 35:17:31:0e:39:22:55:be:ee:27:ba:f3:38:42:02:19:1d:85: c8:1b:7e:2b:f7:52:aa:96:8d:fb:cc:02:de:78:09:2b:68:e3: e4:92:23:f4:22:cd:6a:8a:00:6a:82:a0:0a:51:da:f3:88:16: dc:f7:98:17:69:d0:96:be:cf:2e:81:62:66:f0:b7:f2:00:dd: 9c:0d:23:24:8e:bf:22:4c:fa:00:0f:a4:ae:27:ad:6f:df:98: b6:ac:72:2b:68:ea:07:8f:29:47:81:66:34:72:c9:07:5e:e6: bc:19:22:08:14:d5:df:a4:d3:de:53:97:4b:1b:a4:37:68:79: 62:de:24:6f:c2:0e:46:81:31:15:49:8c:6e:d6:2d:f1:93:52: b3:66:8d:56:d5:f9:20:57:55:75:71:b9:b3:3a:b0:41:7b:0f: cd:e7:f5:01:f4:76:32:ad:d0:15:62:03:26:15:ab:d2:8b:e5: 21:89:d2:29:92:e7:77:10:49:c4:51:db:69:a4:fc:88:6d:b3: 49:d8:10:e3:df:38:ae:25:26:f8:16:2a:05:9d:2d:23:90:fd: 23:3d:0e:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbBzzHy0bLR3mQ87Nkexx7VPhdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNTEyMTgwNjM2MjdaFw0yNTEyMjEwODUwMjdaMDMxMTAvBgNV BAMTKEUzMEJCMDlBQzU5RDRGMjA0OTgxODhBRTdDN0VGQ0RGQURBMkRGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWq/Mj3VFUDPCfOnom6kCVZ9C6 1i8OdKPTC56BzSgg6ErvZmglSFBzINEZ3qyBJHr0+I1BK17q8RtKl3ZH+pZTQ3Q3 br7GVjTm6KSl/FSianW5yDAj8xPUdJbG4MI74zg8v829SkoakBaoFGLpwdWrc8C4 Iwt8ZKyP69y0J/zEVx3r6gtKIvQhfj18ocv2uzdbPe36IrWjkXbgPw+I/3382mqF GtWeLWEGVMG/hWCCLy72lCisGcraKapaKLlcASfGDk7RJu+OUzLCBaIe0wi4LfIM LtnikDPr0I3cYdcBiV8DJd9lA0siXbgstwvJuAEPrzWhgCjY/3ITctF/TzgHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4wuwmsWdTyBJgYiufH78362i3yYwHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4 NDM4M0E2MzNENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL6Kooc4OhhxwegJCndorg6ne8cAaDOXgm9P ZF98lH5x5S3JdjUXMQ45IlW+7ie68zhCAhkdhcgbfiv3UqqWjfvMAt54CSto4+SS I/QizWqKAGqCoApR2vOIFtz3mBdp0Ja+zy6BYmbwt/IA3ZwNIySOvyJM+gAPpK4n rW/fmLascito6gePKUeBZjRyyQde5rwZIggU1d+k095Tl0sbpDdoeWLeJG/CDkaB MRVJjG7WLfGTUrNmjVbV+SBXVXVxubM6sEF7D83n9QH0djKt0BViAyYVq9KL5SGJ 0imS53cQScRR22mk/Ihts0nYEOPfOK4lJvgWKgWdLSOQ/SM9Do8= -----END CERTIFICATE-----Generated at Fri Dec 19 13:12:48 2025 by rpki-client