This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: qfOUGGkcJueJiDpkbhm2HIu4JqA+xnNtO7LSpD7dYdo= Subject key identifier: 79:9A:9C:4B:25:5C:DB:36:86:0C:F0:86:6F:D0:8A:3E:4C:9E:00:37 Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 19A686147EE3D9ADEAD88D3B2F7AE532C87259EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: 0122 Signing time: Tue 02 Dec 2025 02:11:22 +0000 Manifest this update: Tue 02 Dec 2025 02:06:22 +0000 Manifest next update: Fri 05 Dec 2025 04:34:22 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: 6jJqqKB0HR8FE26/vVWzWsUB2ENtvhVULu2pe+tjaYM=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a6:86:14:7e:e3:d9:ad:ea:d8:8d:3b:2f:7a:e5:32:c8:72:59:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Dec 2 02:06:22 2025 GMT Not After : Dec 5 04:34:22 2025 GMT Subject: CN=799A9C4B255CDB36860CF0866FD08A3E4C9E0037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:e9:af:d9:ed:2e:03:26:68:0c:88:1b:1f: 3c:ad:09:67:60:c5:a1:65:b1:25:3f:67:72:a5:de: 4d:4d:98:5f:ee:a1:fd:ea:39:cf:4b:dc:0b:1e:47: d8:75:e1:82:b4:0a:f2:7a:7a:1f:b8:ff:9d:8d:9a: 57:3c:ff:4f:a9:b3:7c:99:69:85:57:8e:70:56:51: d9:4e:28:fc:51:34:f2:80:5c:c9:fb:65:88:51:aa: 08:59:b5:ec:cc:20:38:d9:fd:2d:27:5a:98:39:ce: 44:3a:d1:6c:03:31:18:e2:7b:55:a7:b4:24:b2:f5: 73:38:b4:92:b9:96:bb:b6:6b:65:8d:75:2c:91:6d: 8f:32:da:59:c5:c3:1f:c5:96:e8:6f:f6:d7:ac:f7: 62:35:5f:1e:95:51:94:3c:e3:f9:66:06:d2:29:46: 25:b8:f5:57:57:8f:2a:79:5d:e0:81:d5:86:73:c2: e6:9e:19:7d:1b:cd:a8:81:5e:81:4c:60:34:16:ba: 39:a5:f4:8d:a6:86:94:c5:75:53:0f:c0:9b:bf:77: bb:fe:8e:29:33:dc:a7:ea:b1:33:e8:a6:21:d9:77: e2:e9:21:9e:7a:78:3d:bd:35:e5:fa:a6:0d:56:ad: d7:9f:ca:e0:24:48:34:35:93:27:a9:7c:4f:24:35: 3b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9A:9C:4B:25:5C:DB:36:86:0C:F0:86:6F:D0:8A:3E:4C:9E:00:37 X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:41:38:e0:bd:e3:f4:92:87:fc:f0:11:e5:1c:85:b6:98:e6: a5:95:f0:24:bf:e7:66:d8:57:64:e4:ce:fa:a5:6d:a7:d3:26: 34:51:aa:28:5d:eb:43:55:43:19:1a:29:ea:5e:12:5b:d0:57: 32:6e:df:32:05:6d:f9:9e:14:1d:74:02:42:75:62:20:c0:db: f1:50:76:14:06:5c:b1:5e:c8:14:0b:5f:a5:e7:92:4a:32:86: 74:a3:16:87:80:d1:82:fb:b5:0c:fc:41:41:94:1a:90:fc:8e: bf:05:14:25:83:51:97:09:1d:3b:70:7b:7c:06:84:ae:18:7c: 56:3b:d4:3b:55:ea:f2:cf:5b:96:f2:e8:8d:70:4e:90:c0:5f: 6e:c6:4b:99:bd:01:e2:98:f5:3b:60:6e:07:1a:76:89:27:37: c8:e3:57:82:d6:b6:94:80:92:57:c8:99:1c:82:f8:0b:30:7d: 2a:0f:39:2b:eb:9e:5f:ac:62:15:6c:b6:08:ef:90:ae:be:6e: 25:43:ec:75:52:68:bb:be:c3:2c:9f:67:9c:ba:12:6e:78:9e: 5e:2c:b0:d0:4d:e1:e5:bd:9b:c1:7b:52:0f:1b:21:9b:df:af: a4:f8:88:9a:36:ce:a8:8e:03:f6:a9:37:1d:37:46:6c:84:e0: 81:bc:66:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaaGFH7j2a3q2I07L3rlMshyWeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTEyMDIwMjA2MjJaFw0yNTEyMDUwNDM0MjJaMDMxMTAvBgNV BAMTKDc5OUE5QzRCMjU1Q0RCMzY4NjBDRjA4NjZGRDA4QTNFNEM5RTAwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Yumv2e0uAyZoDIgbHzytCWdg xaFlsSU/Z3Kl3k1NmF/uof3qOc9L3AseR9h14YK0CvJ6eh+4/52Nmlc8/0+ps3yZ aYVXjnBWUdlOKPxRNPKAXMn7ZYhRqghZtezMIDjZ/S0nWpg5zkQ60WwDMRjie1Wn tCSy9XM4tJK5lru2a2WNdSyRbY8y2lnFwx/Fluhv9tes92I1Xx6VUZQ84/lmBtIp RiW49VdXjyp5XeCB1YZzwuaeGX0bzaiBXoFMYDQWujml9I2mhpTFdVMPwJu/d7v+ jikz3KfqsTPopiHZd+LpIZ56eD29NeX6pg1WrdefyuAkSDQ1kyepfE8kNTtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeZqcSyVc2zaGDPCGb9CKPkyeADcwHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZBOOC94/SSh/zwEeUchbaY5qWV8CS/52bY V2TkzvqlbafTJjRRqihd60NVQxkaKepeElvQVzJu3zIFbfmeFB10AkJ1YiDA2/FQ dhQGXLFeyBQLX6XnkkoyhnSjFoeA0YL7tQz8QUGUGpD8jr8FFCWDUZcJHTtwe3wG hK4YfFY71DtV6vLPW5by6I1wTpDAX27GS5m9AeKY9TtgbgcadoknN8jjV4LWtpSA klfImRyC+AswfSoPOSvrnl+sYhVstgjvkK6+biVD7HVSaLu+wyyfZ5y6Em54nl4s sNBN4eW9m8F7Ug8bIZvfr6T4iJo2zqiOA/apNx03RmyE4IG8Zs0= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:31 2025 by rpki-client