This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft File: C629ACA160F978E31BC564E62FF22DBA802D0E87.mft (raw, json) Hash identifier: VQdVod1azHWtezMCCKY0Len+l4eQZN/EAe1WawekZXc= Subject key identifier: 15:C4:D1:A1:AE:4E:E6:BF:8A:AA:6F:15:02:11:88:3E:D2:C3:F5:08 Authority key identifier: C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 Certificate issuer: /CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Certificate serial: 74AEBE66158B12E2A50DDC11A9072B079B45DE94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft Manifest number: 01C2 Signing time: Sat 06 Dec 2025 06:12:22 +0000 Manifest this update: Sat 06 Dec 2025 06:07:22 +0000 Manifest next update: Tue 09 Dec 2025 07:32:22 +0000 Files and hashes: 1: 3130332e39342e3234382e302f32332d3234203d3e203633383738.roa (hash: I5XFMLy1652sQiuP2NYe3N0DFH8ezt6dmCznChXGVV4=) 2: C629ACA160F978E31BC564E62FF22DBA802D0E87.crl (hash: KEYoQCJNazOZQVaXmbGCz6LGWspuQVWSHbt8UToY7BE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ae:be:66:15:8b:12:e2:a5:0d:dc:11:a9:07:2b:07:9b:45:de:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C629ACA160F978E31BC564E62FF22DBA802D0E87 Validity Not Before: Dec 6 06:07:22 2025 GMT Not After : Dec 9 07:32:22 2025 GMT Subject: CN=15C4D1A1AE4EE6BF8AAA6F150211883ED2C3F508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:86:af:e6:00:33:c7:ae:c1:b1:06:73:f5: a9:d6:24:3a:44:3c:5c:38:a4:52:70:93:20:46:1c: 32:b9:8b:10:42:9f:65:41:86:8c:22:b2:57:e5:5e: 76:b6:aa:c5:d6:31:7d:0b:a4:02:fe:6d:38:57:d6: 48:a2:c6:08:7d:9a:98:b5:c5:dd:0d:d8:f9:d8:95: 69:36:26:37:5b:2a:d3:54:13:c3:ff:76:c5:e5:6a: 1b:2f:19:60:48:da:a9:c1:16:77:f2:fb:ba:3b:07: cc:b4:63:d9:79:8c:de:af:e6:8f:31:8b:f1:fb:87: 37:a7:af:02:9a:04:d2:50:83:76:1e:0f:18:92:0e: db:51:be:df:57:2d:1e:66:11:d0:39:6d:1f:70:fc: 61:48:22:25:f9:78:94:c8:a2:4a:ec:6c:d7:cd:24: 07:c5:7f:0f:93:4e:e4:21:fa:79:ee:ad:f9:7f:f3: 18:69:a9:d0:61:fa:92:85:ab:d6:d4:ce:d3:c9:3d: ec:56:9f:6f:e7:12:b3:80:f3:48:fd:18:f1:ce:6b: 8e:6b:9a:eb:71:25:08:40:f1:42:1b:56:6b:4c:4c: 33:08:4e:f8:72:07:2c:29:c5:97:91:23:49:c3:39: c8:42:cd:34:f4:5a:fc:58:c2:e5:49:12:61:d8:5f: ab:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C4:D1:A1:AE:4E:E6:BF:8A:AA:6F:15:02:11:88:3E:D2:C3:F5:08 X509v3 Authority Key Identifier: keyid:C6:29:AC:A1:60:F9:78:E3:1B:C5:64:E6:2F:F2:2D:BA:80:2D:0E:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C629ACA160F978E31BC564E62FF22DBA802D0E87.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28d6ca9b-584f-40f1-bd61-1858e7eba3ea/0/C629ACA160F978E31BC564E62FF22DBA802D0E87.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7e:f1:13:30:b3:88:dc:ce:52:de:0d:47:ee:2c:67:59:c5: 5c:9c:82:65:7a:bc:85:5c:89:ea:a3:ad:13:cb:4c:59:ec:0b: 85:1b:d3:15:98:74:7a:37:52:3a:83:3f:ae:8b:00:8d:a8:5d: 61:8f:7c:6a:92:4d:31:9d:85:9d:b4:f2:31:4b:89:09:d9:85: 2f:b1:87:76:75:92:6b:10:99:d8:cd:6a:2b:6c:98:23:95:ef: 85:88:bb:63:ad:f4:af:0e:28:61:2b:f9:92:9b:34:f6:c4:e8: 59:2f:3f:2b:45:17:36:f7:f2:d9:8c:e0:d5:49:e1:40:c3:1d: 41:0d:a7:56:50:c8:47:a5:07:04:8d:a1:3f:14:50:bd:6e:de: bd:d5:b3:1e:26:83:b6:f8:87:33:64:eb:fd:e4:ba:2e:e0:6c: 9f:e6:0f:37:c1:e9:bc:ca:e2:8d:e3:28:86:85:89:c5:80:d5: 86:b5:5f:3a:88:b9:e6:3a:3d:85:cd:9c:61:55:58:46:98:8e: fa:29:02:f1:ec:91:97:81:f6:ae:f9:d1:26:5e:22:22:eb:70: 14:09:3f:18:28:6f:70:25:81:cf:a2:fd:a2:dc:a7:40:c1:20: 89:3d:92:f9:5a:06:79:4e:2a:b9:46:8e:09:02:49:f7:79:d7: cc:14:33:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdK6+ZhWLEuKlDdwRqQcrB5tF3pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4 MDJEMEU4NzAeFw0yNTEyMDYwNjA3MjJaFw0yNTEyMDkwNzMyMjJaMDMxMTAvBgNV BAMTKDE1QzREMUExQUU0RUU2QkY4QUFBNkYxNTAyMTE4ODNFRDJDM0Y1MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/Yav5gAzx67BsQZz9anWJDpE PFw4pFJwkyBGHDK5ixBCn2VBhowislflXna2qsXWMX0LpAL+bThX1kiixgh9mpi1 xd0N2PnYlWk2JjdbKtNUE8P/dsXlahsvGWBI2qnBFnfy+7o7B8y0Y9l5jN6v5o8x i/H7hzenrwKaBNJQg3YeDxiSDttRvt9XLR5mEdA5bR9w/GFIIiX5eJTIokrsbNfN JAfFfw+TTuQh+nnurfl/8xhpqdBh+pKFq9bUztPJPexWn2/nErOA80j9GPHOa45r mutxJQhA8UIbVmtMTDMITvhyBywpxZeRI0nDOchCzTT0WvxYwuVJEmHYX6trAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFcTRoa5O5r+Kqm8VAhGIPtLD9QgwHwYDVR0j BBgwFoAUximsoWD5eOMbxWTmL/ItuoAtDocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGQ2Y2E5Yi01ODRmLTQwZjEtYmQ2MS0xODU4ZTdlYmEzZWEvMC9DNjI5QUNBMTYw Rjk3OEUzMUJDNTY0RTYyRkYyMkRCQTgwMkQwRTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJEQkE4MDJE MEU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhkNmNhOWItNTg0Zi00MGYxLWJk NjEtMTg1OGU3ZWJhM2VhLzAvQzYyOUFDQTE2MEY5NzhFMzFCQzU2NEU2MkZGMjJE QkE4MDJEMEU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx+8RMws4jczlLeDUfuLGdZxVycgmV6vIVc ieqjrRPLTFnsC4Ub0xWYdHo3UjqDP66LAI2oXWGPfGqSTTGdhZ208jFLiQnZhS+x h3Z1kmsQmdjNaitsmCOV74WIu2Ot9K8OKGEr+ZKbNPbE6FkvPytFFzb38tmM4NVJ 4UDDHUENp1ZQyEelBwSNoT8UUL1u3r3Vsx4mg7b4hzNk6/3kui7gbJ/mDzfB6bzK 4o3jKIaFicWA1Ya1XzqIueY6PYXNnGFVWEaYjvopAvHskZeB9q750SZeIiLrcBQJ Pxgob3Algc+i/aLcp0DBIIk9kvlaBnlOKrlGjgkCSfd518wUM6g= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:08 2025 by rpki-client