This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: PgR5Fnc1lTmg4ibsEB4NM1brdBpyRAwvd/YC6NLRKRI= Subject key identifier: B0:F5:DF:15:76:E8:59:DC:36:C4:39:36:FA:CC:7E:8C:FD:5C:9F:1E Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 34B23835E77B45AB5B7A6B4CA34701EF485C3153 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: 011A Signing time: Fri 05 Dec 2025 08:50:55 +0000 Manifest this update: Fri 05 Dec 2025 08:45:55 +0000 Manifest next update: Mon 08 Dec 2025 20:00:55 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: oX2rRL4yj7u4AFId0yrPwmCzP4drZZYO3pu9upGhNCY=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: QtaMRJPCX4gzG+ouu0TGyvkkgMHCskw3MS9/rcQ0ec0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b2:38:35:e7:7b:45:ab:5b:7a:6b:4c:a3:47:01:ef:48:5c:31:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Dec 5 08:45:55 2025 GMT Not After : Dec 8 20:00:55 2025 GMT Subject: CN=B0F5DF1576E859DC36C43936FACC7E8CFD5C9F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:0f:a4:af:ac:6c:be:48:4e:a5:82:6e:8c: 31:14:47:73:d7:d0:68:dd:ad:a5:3e:5e:ab:89:7a: 40:22:fc:e2:2f:33:2e:f3:53:34:3c:48:79:c0:c5: ab:58:9e:b4:61:4b:67:ed:71:1a:48:7f:5e:ce:40: f9:87:9b:76:9b:b0:0c:b7:83:63:04:65:1c:9a:3b: 52:9c:0c:3a:98:70:2d:43:78:bd:7a:52:9b:65:9d: 67:74:a1:40:77:14:65:31:a7:fe:6a:53:f3:9e:e2: f6:e8:fe:83:3a:bf:49:08:27:cd:1c:00:1b:f8:20: 19:ed:2d:b3:c6:69:b6:ad:7f:76:59:0f:36:a1:63: 07:ea:25:e3:dd:f4:d9:75:1f:4e:cc:ce:8d:81:4f: 3a:87:c7:f5:96:01:6e:ed:a0:0d:ff:5a:af:e6:d2: 8f:9e:bd:af:ad:86:79:59:69:c1:25:35:d8:c7:91: 50:20:e0:ac:63:7a:6a:77:78:e4:22:fd:a2:0a:b6: 34:87:fc:5f:a1:30:be:bd:19:39:6b:eb:dc:24:0e: 8e:09:fa:8f:e8:54:3e:c5:1c:ea:22:e6:19:2d:5d: aa:a9:0e:fb:cf:c5:77:a6:71:ff:fd:3a:36:1e:a3: c6:d2:c8:15:35:71:64:8d:fe:e1:a9:49:31:6d:ff: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F5:DF:15:76:E8:59:DC:36:C4:39:36:FA:CC:7E:8C:FD:5C:9F:1E X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:86:56:a9:cf:0a:d6:dd:33:d4:f0:ce:8a:62:2b:ac:26:a1: d3:4d:72:f4:6b:e0:e9:ff:0f:aa:5f:ec:58:87:c4:8e:17:76: 41:6c:7f:b7:32:52:e1:17:a3:7a:7b:cf:bc:0b:a9:e5:cc:23: 0f:bf:a3:b2:54:a8:ad:0d:4b:6c:b5:17:91:1a:3d:c3:bf:69: ef:49:85:00:36:90:6c:a8:53:bb:ec:bf:63:fc:14:bc:77:72: 35:4d:00:4b:11:e2:1e:25:96:a3:f9:9a:6d:41:c1:3f:77:49: a2:30:11:2e:ed:92:08:82:25:92:93:58:72:d5:ec:13:d1:c2: 20:62:4e:c6:82:b4:35:9a:db:0a:57:1e:b7:80:c6:7e:fe:cc: da:e4:62:1f:a9:c5:95:26:a0:42:91:4a:af:d1:d4:ce:26:d1: 4d:98:82:23:ad:4f:ad:a0:51:25:0a:f1:5e:d8:44:a3:b2:11: 6c:aa:ae:43:82:70:38:b8:08:15:f9:11:35:e9:58:8b:95:49: c3:5a:11:c8:2b:03:f8:32:e8:cc:0e:c8:ca:9d:76:71:33:b3: 58:04:d2:35:36:ce:01:c5:db:aa:bb:53:52:14:29:36:5f:71: 6a:38:de:d0:5f:28:49:5e:37:00:a3:d8:8b:b8:eb:45:9a:b4: 56:7c:6f:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNLI4Ned7RatbemtMo0cB70hcMVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNTEyMDUwODQ1NTVaFw0yNTEyMDgyMDAwNTVaMDMxMTAvBgNV BAMTKEIwRjVERjE1NzZFODU5REMzNkM0MzkzNkZBQ0M3RThDRkQ1QzlGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVew+kr6xsvkhOpYJujDEUR3PX 0GjdraU+XquJekAi/OIvMy7zUzQ8SHnAxatYnrRhS2ftcRpIf17OQPmHm3absAy3 g2MEZRyaO1KcDDqYcC1DeL16UptlnWd0oUB3FGUxp/5qU/Oe4vbo/oM6v0kIJ80c ABv4IBntLbPGabatf3ZZDzahYwfqJePd9Nl1H07Mzo2BTzqHx/WWAW7toA3/Wq/m 0o+eva+thnlZacElNdjHkVAg4Kxjemp3eOQi/aIKtjSH/F+hML69GTlr69wkDo4J +o/oVD7FHOoi5hktXaqpDvvPxXemcf/9OjYeo8bSyBU1cWSN/uGpSTFt/9C7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsPXfFXboWdw2xDk2+sx+jP1cnx4wHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ6GVqnPCtbdM9TwzopiK6wmodNNcvRr4On/ D6pf7FiHxI4XdkFsf7cyUuEXo3p7z7wLqeXMIw+/o7JUqK0NS2y1F5EaPcO/ae9J hQA2kGyoU7vsv2P8FLx3cjVNAEsR4h4llqP5mm1BwT93SaIwES7tkgiCJZKTWHLV 7BPRwiBiTsaCtDWa2wpXHreAxn7+zNrkYh+pxZUmoEKRSq/R1M4m0U2YgiOtT62g USUK8V7YRKOyEWyqrkOCcDi4CBX5ETXpWIuVScNaEcgrA/gy6MwOyMqddnEzs1gE 0jU2zgHF26q7U1IUKTZfcWo43tBfKEleNwCj2Iu460WatFZ8b90= -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:39 2025 by rpki-client