This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: j7oAkzJI33XsNyIkJl4gJk/UIgT8toLbdRYZdtgby4I= Subject key identifier: 29:17:DB:D4:A6:6D:C3:37:25:A5:B1:AB:06:A4:1F:61:2C:B0:67:DE Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 71C1A86B248F1BD2956C1FA07BC013F317233E5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 026F Signing time: Fri 05 Dec 2025 22:22:16 +0000 Manifest this update: Fri 05 Dec 2025 22:17:16 +0000 Manifest next update: Tue 09 Dec 2025 10:10:16 +0000 Files and hashes: 1: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: qZWIznLbVE+S4TPJM5nXTBeNCPO9n8tojDFuJqMx1qU=) 2: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: +6hr9I24K4H44FcYhHYBXgx5KKaUgX1+M7GrBEyUPNA=) 3: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: i+MoEz8eS3RKxf5DE+oBdBXLAZikYN1wJCHUVs+azh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c1:a8:6b:24:8f:1b:d2:95:6c:1f:a0:7b:c0:13:f3:17:23:3e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Dec 5 22:17:16 2025 GMT Not After : Dec 9 10:10:16 2025 GMT Subject: CN=2917DBD4A66DC33725A5B1AB06A41F612CB067DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b2:2d:d1:07:f0:c3:0d:c7:50:0d:3c:90:ce: 02:9b:18:31:c6:77:70:39:92:5c:43:03:5b:e1:03: b2:4e:7a:c0:c6:48:6c:8d:7f:b7:85:dd:73:88:4f: 51:cb:28:2d:c6:4f:81:62:cb:1f:f1:f8:6b:01:de: 03:2a:53:f5:38:d4:4d:e5:bf:19:a7:71:55:ed:13: c4:2d:fd:97:cb:bf:97:ca:67:de:f6:16:18:15:fe: 2e:fa:63:1c:56:b2:e8:ee:2f:89:28:97:22:3a:81: 11:dc:e2:e6:d4:f7:2c:d4:d3:fd:aa:f8:0e:dd:f1: cf:a5:ad:dc:16:2f:a2:e4:67:c7:2c:7d:b1:a7:52: 72:bf:45:43:44:db:97:8f:9f:35:da:b6:f8:77:79: 16:51:2f:9d:f4:07:6a:42:85:f4:c8:a9:d9:ad:98: 36:4b:e1:c9:8a:73:71:13:b4:51:9a:73:50:79:6c: 62:d1:cb:55:0c:8f:4f:fe:ff:75:34:03:88:ac:e5: e1:2a:99:52:15:08:6f:49:26:64:ad:8a:fc:e7:b5: 4c:d0:1b:80:77:26:35:e8:f8:da:d7:ed:f9:24:67: a6:37:25:0c:98:c9:6b:cf:e2:87:59:68:ab:bc:75: cc:de:57:13:9f:4f:55:a2:1c:93:2e:c3:ba:f3:7b: 4f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:17:DB:D4:A6:6D:C3:37:25:A5:B1:AB:06:A4:1F:61:2C:B0:67:DE X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7b:53:6f:86:e9:39:ee:6d:1c:22:2e:82:da:27:ae:35:16: c4:cd:66:83:b0:09:14:13:3c:92:93:71:8e:64:2d:f1:ce:53: b6:ca:df:5d:eb:02:28:57:4f:fe:a3:0a:f0:f4:a2:df:90:b3: 50:32:be:d5:6a:f4:15:e3:ea:24:28:9a:5b:21:ac:e7:02:2b: a0:fd:a8:d8:f6:d1:54:fb:dc:16:89:60:82:ed:29:6a:fe:91: 00:e3:c0:5b:ae:fc:e1:74:87:25:2e:d0:f1:55:65:85:7d:ce: 5a:9d:38:53:57:29:c0:ec:b7:fc:e7:2d:02:02:cb:ae:99:87: 22:f4:2b:12:82:0d:57:3c:95:00:b8:95:8c:43:52:b8:60:e2: 0d:c1:58:ee:da:8b:59:00:03:62:f7:56:0f:d3:b4:7a:e7:76: 18:b7:29:e4:20:c2:76:a4:4d:d1:3a:9f:0f:0d:7c:ae:06:51: 45:26:10:07:a2:85:10:1c:e2:87:90:70:16:f5:d7:bd:dc:be: a0:21:1b:de:13:da:c2:aa:30:a9:01:62:b9:c2:5a:fd:07:60: 39:f9:95:bf:b4:69:c6:74:e9:96:eb:cb:31:3a:0b:42:76:c5: 51:97:be:5c:56:4f:70:da:0a:dc:b6:17:03:ca:ad:3e:4c:10: 38:f2:55:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccGoaySPG9KVbB+ge8AT8xcjPl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTEyMDUyMjE3MTZaFw0yNTEyMDkxMDEwMTZaMDMxMTAvBgNV BAMTKDI5MTdEQkQ0QTY2REMzMzcyNUE1QjFBQjA2QTQxRjYxMkNCMDY3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDusi3RB/DDDcdQDTyQzgKbGDHG d3A5klxDA1vhA7JOesDGSGyNf7eF3XOIT1HLKC3GT4Fiyx/x+GsB3gMqU/U41E3l vxmncVXtE8Qt/ZfLv5fKZ972FhgV/i76YxxWsujuL4kolyI6gRHc4ubU9yzU0/2q +A7d8c+lrdwWL6LkZ8csfbGnUnK/RUNE25ePnzXatvh3eRZRL530B2pChfTIqdmt mDZL4cmKc3ETtFGac1B5bGLRy1UMj0/+/3U0A4is5eEqmVIVCG9JJmStivzntUzQ G4B3JjXo+NrX7fkkZ6Y3JQyYyWvP4odZaKu8dczeVxOfT1WiHJMuw7rze0+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRfb1KZtwzclpbGrBqQfYSywZ94wHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ7U2+G6TnubRwiLoLaJ641FsTNZoOwCRQT PJKTcY5kLfHOU7bK313rAihXT/6jCvD0ot+Qs1AyvtVq9BXj6iQomlshrOcCK6D9 qNj20VT73BaJYILtKWr+kQDjwFuu/OF0hyUu0PFVZYV9zlqdOFNXKcDst/znLQIC y66ZhyL0KxKCDVc8lQC4lYxDUrhg4g3BWO7ai1kAA2L3Vg/TtHrndhi3KeQgwnak TdE6nw8NfK4GUUUmEAeihRAc4oeQcBb1173cvqAhG94T2sKqMKkBYrnCWv0HYDn5 lb+0acZ06ZbryzE6C0J2xVGXvlxWT3DaCty2FwPKrT5MEDjyVcs= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:10 2025 by rpki-client