This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft File: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json) Hash identifier: 9qaBe5FvlHjkR13lxJiDWdyCZrA72TlKgDSCGzqbt74= Subject key identifier: B0:74:51:C4:17:71:C1:96:94:7B:89:B6:26:58:D8:D5:1B:22:71:0F Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 2539A069B0DB2FBDE32E4540C63A4D32A82312B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft Manifest number: 0501 Signing time: Wed 03 Dec 2025 05:11:28 +0000 Manifest this update: Wed 03 Dec 2025 05:06:28 +0000 Manifest next update: Sat 06 Dec 2025 05:23:28 +0000 Files and hashes: 1: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: mA/rP0hr8/EieVP2HKsGbfcjdkP2Kd8or4Jc67/Y7I0=) 2: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: Ymw3mKUJLuc3UElUh0Nq2GfPGIEzD27CcOXD4JJbHT8=) 3: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: jd8RzIV4pb6xOSx8M2iJByCvMa7m6mddhFLRaUaFvoI=) 4: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: y0y6UuM40sbV2/yu8snHB6cXFtrDUjgfjZQOwv1Zz68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:39:a0:69:b0:db:2f:bd:e3:2e:45:40:c6:3a:4d:32:a8:23:12:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Dec 3 05:06:28 2025 GMT Not After : Dec 6 05:23:28 2025 GMT Subject: CN=B07451C41771C196947B89B62658D8D51B22710F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:44:bb:3e:89:f3:24:7d:67:60:13:69:91:a6: 19:1a:78:b7:20:50:5b:72:ed:2f:29:8c:f7:25:a7: ea:41:4c:07:e9:d8:d3:79:10:d5:f5:b6:59:a2:64: 71:7d:ee:67:bf:45:2f:12:28:79:05:96:cf:49:80: ff:6a:22:4a:e5:8a:49:11:5e:49:07:15:f6:fc:c0: 26:19:09:80:85:1b:f7:8d:d3:1e:0f:03:79:34:f7: d3:1b:8e:7d:3c:1c:7f:c3:ba:08:8c:a7:2b:7e:09: 02:ba:f8:9f:18:4b:08:d0:f5:17:70:fe:32:63:66: d9:22:6b:2f:48:33:34:09:32:31:38:1f:fa:f8:32: ae:eb:6c:ad:84:37:7d:ae:63:01:d3:b5:ef:31:ee: 23:bc:9c:85:99:95:1d:26:37:a7:57:ec:c4:a1:e3: 3a:14:1f:05:79:7e:0a:86:dc:9e:58:ad:64:ac:2d: da:6f:9c:12:84:ea:f9:90:45:9f:fd:b7:38:34:46: 74:40:d0:de:2a:6e:8e:70:73:25:b6:15:5c:fa:b3: 98:31:3e:f1:6e:72:fb:6c:66:14:f0:76:86:2c:b3: c9:d0:6b:63:e6:91:50:5f:43:fa:41:59:e2:32:57: bc:a3:c5:2b:21:95:24:82:e4:e7:37:19:19:ed:d4: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:74:51:C4:17:71:C1:96:94:7B:89:B6:26:58:D8:D5:1B:22:71:0F X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fa:03:ef:45:03:dc:88:85:79:62:00:c1:19:07:f9:2b:7d: d0:75:6e:85:2b:cb:04:83:41:a3:dc:1f:4a:36:b6:fc:82:6e: f2:75:58:b3:cf:e0:20:cd:f9:01:4d:c2:36:a9:40:a3:0c:15: 2a:e1:e1:9c:f1:43:05:6f:2a:0c:05:52:cf:0a:e4:a4:d9:20: 65:44:11:ac:0c:1e:e2:1c:7b:4d:73:ac:1b:8c:c4:88:a6:d3: af:87:45:9f:9f:11:28:40:a3:d0:cc:e1:0e:b8:eb:26:1f:7d: 0b:ab:63:17:f9:5b:1f:cb:d5:d0:fa:f8:f7:52:14:8c:a4:4f: 86:30:9c:f0:56:29:2a:69:70:c2:bc:b5:63:51:38:82:ce:73: 74:30:bf:a1:c1:a9:dc:27:ad:59:63:d7:c7:8c:0c:0f:83:9c: 11:c0:5c:5b:46:22:44:f1:df:0c:29:8e:5a:2d:c7:02:0a:97: 79:c3:0c:de:a9:6c:85:cf:01:a5:f1:e0:65:9a:1d:5d:55:21: 66:65:32:9b:36:4f:67:1e:7f:f4:8b:fa:88:c9:e6:0d:ed:af: 6f:9c:96:83:14:41:fe:ab:72:41:43:56:44:0e:4e:48:17:09: b7:e7:b1:24:ed:8f:8f:6a:41:86:21:ea:a0:eb:95:48:17:69: 7b:b4:71:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJTmgabDbL73jLkVAxjpNMqgjErUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNTEyMDMwNTA2MjhaFw0yNTEyMDYwNTIzMjhaMDMxMTAvBgNV BAMTKEIwNzQ1MUM0MTc3MUMxOTY5NDdCODlCNjI2NThEOEQ1MUIyMjcxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDORLs+ifMkfWdgE2mRphkaeLcg UFty7S8pjPclp+pBTAfp2NN5ENX1tlmiZHF97me/RS8SKHkFls9JgP9qIkrlikkR XkkHFfb8wCYZCYCFG/eN0x4PA3k099Mbjn08HH/DugiMpyt+CQK6+J8YSwjQ9Rdw /jJjZtkiay9IMzQJMjE4H/r4Mq7rbK2EN32uYwHTte8x7iO8nIWZlR0mN6dX7MSh 4zoUHwV5fgqG3J5YrWSsLdpvnBKE6vmQRZ/9tzg0RnRA0N4qbo5wcyW2FVz6s5gx PvFucvtsZhTwdoYss8nQa2PmkVBfQ/pBWeIyV7yjxSshlSSC5Oc3GRnt1CL9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsHRRxBdxwZaUe4m2JljY1RsicQ8wHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4 NDM4M0E2MzNENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACT6A+9FA9yIhXliAMEZB/krfdB1boUrywSD QaPcH0o2tvyCbvJ1WLPP4CDN+QFNwjapQKMMFSrh4ZzxQwVvKgwFUs8K5KTZIGVE EawMHuIce01zrBuMxIim06+HRZ+fEShAo9DM4Q646yYffQurYxf5Wx/L1dD6+PdS FIykT4YwnPBWKSppcMK8tWNROILOc3Qwv6HBqdwnrVlj18eMDA+DnBHAXFtGIkTx 3wwpjlotxwIKl3nDDN6pbIXPAaXx4GWaHV1VIWZlMps2T2cef/SL+ojJ5g3tr2+c loMUQf6rckFDVkQOTkgXCbfnsSTtj49qQYYh6qDrlUgXaXu0cZU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:55 2025 by rpki-client