This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: zS12ZKK0v6IvoKk24E+vVRCNIpk6e0q1wiHJNi8zg7Y= Subject key identifier: 1E:55:1F:77:29:CD:93:2A:8D:37:BB:16:82:BB:E3:23:38:E1:8F:39 Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 415B672B5810EEFE93BB6B28DB9C32EC9746BB91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 0151 Signing time: Fri 05 Dec 2025 01:42:54 +0000 Manifest this update: Fri 05 Dec 2025 01:37:54 +0000 Manifest next update: Mon 08 Dec 2025 11:34:54 +0000 Files and hashes: 1: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: 3nrqW349wUkvJymTl7C2skkE54QzPpmoM0F8ApLFT0A=) 2: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: dNnoIXKVhmyapC9qepVTmmkVYB2sWKjzCXWE7DAeobc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5b:67:2b:58:10:ee:fe:93:bb:6b:28:db:9c:32:ec:97:46:bb:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Dec 5 01:37:54 2025 GMT Not After : Dec 8 11:34:54 2025 GMT Subject: CN=1E551F7729CD932A8D37BB1682BBE32338E18F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:c3:85:92:8e:01:3e:4e:a2:4a:b0:01:93: 30:82:3a:de:22:ad:df:e4:d8:64:63:45:78:9f:af: 92:01:53:ca:6c:40:44:80:7e:f7:fe:66:18:ef:6b: 0a:bd:fc:8f:d2:9d:f5:99:5e:7d:89:ed:85:ac:86: dc:4a:95:ca:26:0b:25:03:80:2c:1d:d8:5b:c1:5d: 68:ee:c1:f1:60:20:50:66:35:60:cd:83:7e:f8:ae: 2a:ba:2b:68:45:9d:8b:df:40:f8:7e:cf:df:f3:e2: 98:b4:91:57:8d:de:ff:a8:41:3e:d1:9f:7c:e3:42: d5:1b:6b:b4:c6:76:58:b3:5f:57:ef:92:26:c5:fd: ca:6d:b6:3e:ef:3b:39:a0:b2:37:cd:4b:ab:25:a1: 44:22:8f:de:6f:9c:3b:68:74:b7:aa:eb:bb:93:24: 01:cf:ae:c6:30:1c:24:85:8b:33:ec:50:15:06:bb: 20:79:d7:a1:f6:8f:54:30:3f:6c:81:1b:91:05:d7: 17:04:eb:a6:77:50:9f:2e:91:bd:ae:6c:bd:de:8c: 98:f6:64:18:4e:a3:df:47:53:71:99:eb:4d:b0:46: 72:40:6c:ce:18:86:06:9f:2b:22:41:07:21:92:41: a7:24:74:d1:66:85:1a:6d:3e:b2:07:90:9a:34:55: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:55:1F:77:29:CD:93:2A:8D:37:BB:16:82:BB:E3:23:38:E1:8F:39 X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8e:1a:d9:d2:d6:32:82:4b:83:62:ae:3c:a7:aa:58:f3:0b: 62:22:45:33:94:bb:b1:6a:de:21:b3:2a:34:ec:58:4c:65:86: 3f:87:6e:95:d4:63:c0:af:07:99:e7:bc:91:91:00:34:75:e7: 7b:80:8b:52:a0:bb:e5:2e:57:b1:e7:f8:e6:c1:32:60:16:71: bb:4e:8f:2f:93:a6:5c:ff:b1:cb:6b:1c:f7:65:26:8e:a6:a5: 74:62:48:7c:24:a3:94:17:e6:90:fb:5a:6e:0a:89:78:b6:eb: c4:3e:4c:98:ad:2b:be:00:76:ea:c0:8a:c6:9c:56:4f:53:a3: 59:1b:61:9d:f8:00:c7:76:b5:5a:6b:13:5c:f5:3e:50:32:cd: f3:5a:7b:51:37:3b:2b:b2:06:5a:73:17:2c:0e:a6:9e:7e:e4: 97:30:0c:7f:e9:2a:4f:fb:cb:14:0b:66:18:f9:af:00:40:b7: 44:8c:51:8a:5a:72:38:ae:f0:09:ad:2e:76:68:8b:72:e5:14: d8:fc:ae:94:1d:58:9c:72:4c:35:30:f7:b3:bb:82:31:0f:40: 32:6b:ae:a7:7c:e8:b5:da:ee:43:d2:d6:a3:52:a0:12:b9:1b: 7b:c4:fc:2c:ee:0f:f2:55:72:fb:fa:b6:e5:85:be:d6:25:4d: a9:f9:1c:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVtnK1gQ7v6Tu2so25wy7JdGu5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTEyMDUwMTM3NTRaFw0yNTEyMDgxMTM0NTRaMDMxMTAvBgNV BAMTKDFFNTUxRjc3MjlDRDkzMkE4RDM3QkIxNjgyQkJFMzIzMzhFMThGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBMOFko4BPk6iSrABkzCCOt4i rd/k2GRjRXifr5IBU8psQESAfvf+Zhjvawq9/I/SnfWZXn2J7YWshtxKlcomCyUD gCwd2FvBXWjuwfFgIFBmNWDNg374riq6K2hFnYvfQPh+z9/z4pi0kVeN3v+oQT7R n3zjQtUba7TGdlizX1fvkibF/cpttj7vOzmgsjfNS6sloUQij95vnDtodLeq67uT JAHPrsYwHCSFizPsUBUGuyB516H2j1QwP2yBG5EF1xcE66Z3UJ8ukb2ubL3ejJj2 ZBhOo99HU3GZ602wRnJAbM4YhgafKyJBByGSQackdNFmhRptPrIHkJo0VQmnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHlUfdynNkyqNN7sWgrvjIzjhjzkwHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC6OGtnS1jKCS4NirjynqljzC2IiRTOUu7Fq 3iGzKjTsWExlhj+HbpXUY8CvB5nnvJGRADR153uAi1Kgu+UuV7Hn+ObBMmAWcbtO jy+Tplz/sctrHPdlJo6mpXRiSHwko5QX5pD7Wm4KiXi268Q+TJitK74AdurAisac Vk9To1kbYZ34AMd2tVprE1z1PlAyzfNae1E3OyuyBlpzFywOpp5+5JcwDH/pKk/7 yxQLZhj5rwBAt0SMUYpacjiu8AmtLnZoi3LlFNj8rpQdWJxyTDUw97O7gjEPQDJr rqd86LXa7kPS1qNSoBK5G3vE/CzuD/JVcvv6tuWFvtYlTan5HEo= -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:47 2025 by rpki-client