This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: 6bYkDzkpieSuA/xsdUNE9q3IOOk8ksENM2y8d5x9+1M= Subject key identifier: 6F:8F:25:05:7E:0E:44:DE:8A:56:99:5E:34:C3:EE:60:AF:E9:AB:7C Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 51A8A184ECB87127EB4382DE83BBDE86DE2CD7EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: FC Signing time: Sun 07 Dec 2025 00:52:11 +0000 Manifest this update: Sun 07 Dec 2025 00:47:11 +0000 Manifest next update: Wed 10 Dec 2025 09:09:11 +0000 Files and hashes: 1: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) 2: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: 1tT8/6aEcqLaiuw4hpAqVvNC8NXn3QkJNJANUqw1kbA=) 3: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: bvQkvMV312x+cD6F+RgPImc6lo1lROIFQ1YOPKTkJvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a8:a1:84:ec:b8:71:27:eb:43:82:de:83:bb:de:86:de:2c:d7:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Dec 7 00:47:11 2025 GMT Not After : Dec 10 09:09:11 2025 GMT Subject: CN=6F8F25057E0E44DE8A56995E34C3EE60AFE9AB7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:ae:19:5e:25:c4:90:c6:9d:c6:ac:ab:75: a6:e2:e1:e5:ec:1e:e3:56:bd:85:19:3a:67:0f:70: 9e:7c:e6:e2:a0:31:00:0d:8c:3e:2f:43:d8:93:3b: ad:f3:50:b4:0b:fd:39:e7:10:02:6f:28:ad:d9:7b: d6:eb:65:84:62:59:02:c7:70:75:7b:da:fa:3f:c4: 63:db:c1:df:59:1f:83:01:62:e1:cf:a0:d9:2e:85: ad:14:86:23:9d:e4:92:bf:1d:07:0d:c8:5a:2a:ea: 01:4b:0f:6a:04:3d:e0:15:b2:24:c3:cc:99:ed:5e: 19:db:1d:a7:68:80:20:e6:aa:93:bc:1a:7f:0c:7f: d7:e3:f1:4f:13:fb:ab:5e:36:4a:98:cd:54:31:63: ca:93:18:4d:87:c2:ad:a4:7b:26:b1:d2:2c:e9:d7: 71:df:c5:17:d4:a1:07:25:b6:d7:52:65:f7:58:30: 42:8e:16:14:48:0b:d9:d9:05:d5:77:7d:d2:d7:48: 05:a4:17:0a:f4:e2:fc:7c:b0:c9:35:86:17:85:fd: 32:37:e0:15:55:da:29:2a:83:92:ac:96:c6:2c:2f: 7a:5e:51:24:ad:c0:70:a0:fd:89:bd:2d:14:17:0a: d8:cb:33:93:6d:82:91:ff:ff:1c:9e:f4:66:bc:5d: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:8F:25:05:7E:0E:44:DE:8A:56:99:5E:34:C3:EE:60:AF:E9:AB:7C X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a7:b0:54:30:74:59:96:64:21:20:b3:a1:0b:2e:af:9d:d5: b9:6d:5b:74:eb:09:7a:eb:da:ab:0d:e6:e9:c3:36:b1:51:99: 7b:97:dd:ea:ce:7d:37:75:8d:87:0c:cd:73:46:96:cb:59:8b: b8:72:22:5c:63:62:d2:fe:ab:ba:78:b6:6b:e8:f0:8e:77:38: d3:37:fd:28:fb:64:53:c9:b3:f3:35:12:55:25:c3:86:80:3e: c4:3f:4f:a1:dc:b3:b1:5c:20:08:9b:ed:21:17:ae:60:cd:10: cd:0f:72:57:66:68:66:a8:53:74:c5:ed:f7:62:f9:bf:bc:bc: df:f3:b8:fd:34:2a:59:1b:03:f5:cc:ed:3a:dd:bc:45:c3:e6: 55:ee:43:f7:41:09:c9:d3:3b:ea:70:2e:ba:2b:c9:71:2c:75: f4:38:b8:e1:70:be:bd:a9:4d:47:0b:5d:13:5a:c3:e9:6c:e3: 49:70:96:ec:03:47:bd:51:d2:65:78:4c:fc:19:39:28:a0:ef: 2c:2d:47:46:19:60:bb:e9:6d:3d:74:67:d6:6d:51:41:2a:00: 2c:fa:d3:f3:07:68:4b:1a:75:76:78:e7:56:94:15:fc:53:2b: 08:73:c5:d9:57:32:64:a2:2b:b8:05:aa:da:1e:3f:79:cc:dd: 18:e9:96:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUaihhOy4cSfrQ4Leg7veht4s1+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNTEyMDcwMDQ3MTFaFw0yNTEyMTAwOTA5MTFaMDMxMTAvBgNV BAMTKDZGOEYyNTA1N0UwRTQ0REU4QTU2OTk1RTM0QzNFRTYwQUZFOUFCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqyK4ZXiXEkMadxqyrdabi4eXs HuNWvYUZOmcPcJ585uKgMQANjD4vQ9iTO63zULQL/TnnEAJvKK3Ze9brZYRiWQLH cHV72vo/xGPbwd9ZH4MBYuHPoNkuha0UhiOd5JK/HQcNyFoq6gFLD2oEPeAVsiTD zJntXhnbHadogCDmqpO8Gn8Mf9fj8U8T+6teNkqYzVQxY8qTGE2Hwq2keyax0izp 13HfxRfUoQclttdSZfdYMEKOFhRIC9nZBdV3fdLXSAWkFwr04vx8sMk1hheF/TI3 4BVV2ikqg5KslsYsL3peUSStwHCg/Ym9LRQXCtjLM5NtgpH//xye9Ga8XW0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb48lBX4ORN6KVpleNMPuYK/pq3wwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWnsFQwdFmWZCEgs6ELLq+d1bltW3TrCXrr 2qsN5unDNrFRmXuX3erOfTd1jYcMzXNGlstZi7hyIlxjYtL+q7p4tmvo8I53ONM3 /Sj7ZFPJs/M1ElUlw4aAPsQ/T6Hcs7FcIAib7SEXrmDNEM0PcldmaGaoU3TF7fdi +b+8vN/zuP00KlkbA/XM7TrdvEXD5lXuQ/dBCcnTO+pwLroryXEsdfQ4uOFwvr2p TUcLXRNaw+ls40lwluwDR71R0mV4TPwZOSig7ywtR0YZYLvpbT10Z9ZtUUEqACz6 0/MHaEsadXZ451aUFfxTKwhzxdlXMmSiK7gFqtoeP3nM3Rjplqw= -----END CERTIFICATE-----Generated at Sun Dec 7 17:23:55 2025 by rpki-client