This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
File: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json)
Hash identifier: 7mwFrzeS4KqZjM7CefLD/0Tk4vjXhHdrxHKcPZN+Wdo=
Subject key identifier: 34:06:C4:C6:37:EF:B5:BE:55:7C:40:A1:40:09:9E:43:CA:DB:B7:00
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial: 3BEE28AD0F9F65BDF90EBC9FDB9FF363242DECC4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
Manifest number: 052B
Signing time: Fri 05 Dec 2025 17:21:57 +0000
Manifest this update: Fri 05 Dec 2025 17:16:57 +0000
Manifest next update: Mon 08 Dec 2025 18:46:57 +0000
Files and hashes: 1: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=)
2: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=)
3: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=)
4: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=)
5: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=)
6: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=)
7: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=)
8: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: wtaRoIG6X/vWuzY4jjjNZDVQ3Ogc2Y5gIgyiWg3zQws=)
9: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=)
10: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=)
11: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=)
12: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=)
13: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=)
14: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=)
15: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=)
16: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=)
17: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=)
18: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=)
19: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=)
20: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=)
21: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=)
22: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=)
23: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: oVmfGlTp0DWOtWPGyWCK/51mm8QlFMAOkDDm7W0JfnE=)
24: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=)
25: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=)
26: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=)
27: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=)
28: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=)
29: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 18:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:ee:28:ad:0f:9f:65:bd:f9:0e:bc:9f:db:9f:f3:63:24:2d:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Validity
Not Before: Dec 5 17:16:57 2025 GMT
Not After : Dec 8 18:46:57 2025 GMT
Subject: CN=3406C4C637EFB5BE557C40A140099E43CADBB700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:39:9d:43:31:80:2f:f3:7f:4a:fd:45:13:
ac:90:18:b2:ab:37:9e:40:4f:21:8e:80:3c:e5:f2:
fe:a9:5f:1b:92:72:35:25:4c:25:74:e9:38:b6:37:
ae:18:6b:1b:88:98:12:de:1b:52:e3:bd:78:b7:2f:
67:85:50:ea:9c:c3:e1:a2:14:f3:6d:1a:80:63:95:
51:00:ac:92:22:bb:b1:0a:d5:ff:e0:d2:51:eb:ef:
00:f9:40:9d:a6:d7:a5:b3:2f:a9:f7:8e:7a:87:82:
5b:2e:26:95:1c:84:8d:71:32:99:92:dd:82:e3:0a:
20:a4:0b:99:9d:aa:42:84:22:79:e5:79:28:5b:89:
21:3e:93:3a:1a:11:ef:49:56:ec:95:ee:d6:a2:f0:
35:dc:ee:9b:0b:8b:e7:cd:1b:d9:b4:99:44:1f:1b:
1c:0a:91:9e:0e:4b:79:b0:c4:b5:e5:a3:ab:04:37:
5c:4c:63:a4:f1:a2:db:fa:43:68:71:17:f9:7b:50:
85:e3:be:bf:fd:b0:49:de:9d:c5:c7:9e:ef:8e:20:
60:b4:8b:aa:5a:8c:18:95:f6:44:f4:4a:91:8d:fb:
f7:dc:79:5e:af:81:e3:0e:f2:25:8b:df:4d:6a:f6:
36:bb:be:21:92:ae:1b:4f:84:28:0e:d1:03:78:17:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:C4:C6:37:EF:B5:BE:55:7C:40:A1:40:09:9E:43:CA:DB:B7:00
X509v3 Authority Key Identifier:
keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:28:c3:95:dc:73:22:dc:a8:ce:0b:2b:5c:a4:2c:e9:f8:1a:
aa:f0:3d:ab:73:6a:84:06:6b:24:21:78:6a:3e:03:5a:46:51:
8b:1d:04:17:d1:2d:fb:2d:3c:dc:a4:ab:74:e3:81:e1:81:0b:
4a:3b:92:55:1e:4a:05:de:e5:ea:6c:86:d1:7d:a8:87:bd:8f:
6a:05:63:cf:7f:2e:98:7a:54:f1:1b:6a:05:10:d3:8f:30:3a:
bf:59:d2:8f:bb:be:41:75:6f:73:cc:04:bc:aa:55:fa:63:d9:
f6:60:df:d9:8f:bb:30:2e:b1:32:15:92:60:cb:ea:d3:f0:be:
15:4f:e9:73:1a:93:50:0c:9b:6b:fb:55:de:cf:a4:87:db:4f:
e8:5f:b8:29:4f:2b:a3:c5:b3:a3:fb:a5:db:a2:99:10:a3:2c:
be:db:d1:46:c2:d0:b5:d8:0c:f7:92:5e:c6:3d:c7:95:3d:41:
6f:08:2b:8d:25:0a:75:d5:72:22:94:ee:a0:93:65:37:1a:bc:
7a:d7:ae:b9:99:39:8c:60:03:b4:00:bf:f3:fe:21:b1:1a:4e:
88:8e:5a:c5:25:7a:ea:57:ae:9d:d9:18:43:ef:1b:52:e8:5e:
95:42:87:6e:d1:6c:ab:8b:61:7b:13:12:ad:ff:cb:64:1c:aa:
86:66:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:34 2025 by rpki-client