This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: bJlTLjdYR3zWvMeZvpQwRz7QajkiHTVIERdSYqWIxjg= Subject key identifier: 64:40:98:99:B5:25:D9:AB:5D:A9:34:AD:CB:2F:F2:EB:09:C7:F8:7E Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 203BBB91C3A13AE3506EA8A191BD2499F16CB371 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 034E Signing time: Sun 07 Dec 2025 00:31:24 +0000 Manifest this update: Sun 07 Dec 2025 00:26:24 +0000 Manifest next update: Wed 10 Dec 2025 10:14:24 +0000 Files and hashes: 1: AS10217.roa (hash: AKpcdslpGED1vOq8rbDyvewGD3kNp+be//qHRk5p0rQ=) 2: AS147168.roa (hash: m6TF7dm4Aqdk4zR0G6oigljVF/cLTycPFdBhQNDMJbA=) 3: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) 4: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: JGfHcj0/fvUuRYhIAnAy7sdZND1piNxwAxjHc+cwVXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3b:bb:91:c3:a1:3a:e3:50:6e:a8:a1:91:bd:24:99:f1:6c:b3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Dec 7 00:26:24 2025 GMT Not After : Dec 10 10:14:24 2025 GMT Subject: CN=64409899B525D9AB5DA934ADCB2FF2EB09C7F87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:50:f9:1a:74:dd:27:b9:80:87:6f:98:fa: 59:ca:0b:b6:c0:59:cc:98:63:34:27:b5:8c:5f:31: 6a:f0:2d:27:26:4e:e4:9a:6f:bf:e7:61:fc:fd:60: 5e:10:e9:88:1d:0c:18:5b:e0:fc:5c:bd:a8:78:11: a8:61:b3:cd:e6:de:ea:c4:d5:51:76:e3:d3:b7:96: 76:c6:23:f4:67:48:9a:3a:0e:f9:24:7c:26:4a:2b: 01:d0:f7:1e:21:19:e5:a0:65:38:42:cd:af:77:15: 84:95:74:31:63:a5:0f:58:c2:59:9c:24:b2:89:e4: da:14:75:66:52:44:19:5b:dc:33:e8:d6:1a:bf:6b: 1c:44:0a:27:78:a3:1a:12:98:e6:10:e8:c1:4a:a4: 01:fa:69:39:13:9a:75:f2:73:a6:d3:2a:9b:74:e3: dc:b0:b6:05:97:2a:3c:15:cb:43:0d:e4:9f:ce:1e: e6:4a:f0:04:26:aa:af:54:82:65:e8:be:49:4b:b7: d0:9a:07:92:44:8b:3e:c5:40:a0:e6:28:d2:5a:80: 3c:35:4b:23:5e:09:b9:c3:81:9e:49:32:10:b9:ca: df:fd:a0:74:5b:9a:0d:16:3b:9a:a1:4a:a6:25:88: dd:ef:c1:e4:7d:26:ee:ba:29:71:09:63:b1:10:f4: 92:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:40:98:99:B5:25:D9:AB:5D:A9:34:AD:CB:2F:F2:EB:09:C7:F8:7E X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9c:27:d0:38:c4:58:e5:40:bc:f6:28:92:54:25:0f:90:36: de:0b:f0:81:1a:7f:7f:c2:25:75:7b:77:ec:d4:34:3d:c7:6f: 00:52:d0:09:81:2e:bd:44:4b:d2:c2:e7:13:51:8f:1d:cd:81: c6:e2:9f:b6:4f:72:92:f3:37:e3:7d:11:51:aa:72:fb:1f:96: d1:0c:cf:1a:5e:d8:ab:98:2c:2a:69:0e:19:9a:3c:57:11:41: f4:39:b5:7c:ad:75:4f:fa:37:bc:2a:7b:4f:6e:2e:ec:1d:1f: 3a:31:3f:f7:60:d7:3f:7b:9b:a0:9f:33:8a:d9:20:ec:22:e5: 2f:7a:4a:67:6c:4c:77:fa:63:40:31:61:0f:2b:f4:25:13:e6: 22:58:76:39:6b:d3:79:8e:57:e9:6c:af:58:40:04:67:fb:6f: 5e:89:01:23:05:b4:7b:be:2c:42:32:5f:b1:c0:3f:53:e8:d4: d0:1e:03:29:92:25:41:73:ec:f7:33:17:1e:32:d6:00:0d:ad: 92:67:fa:d5:99:03:63:32:04:c2:cc:de:6e:e1:3a:5e:8a:64: e6:d1:24:d0:fd:f7:92:65:41:fa:e0:4b:ef:5f:50:c4:ae:02: 51:ce:8d:c6:b8:79:87:95:ce:07:fe:ae:91:7a:39:cd:cb:d8: 99:9e:97:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDu7kcOhOuNQbqihkb0kmfFss3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTEyMDcwMDI2MjRaFw0yNTEyMTAxMDE0MjRaMDMxMTAvBgNV BAMTKDY0NDA5ODk5QjUyNUQ5QUI1REE5MzRBRENCMkZGMkVCMDlDN0Y4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKFD5GnTdJ7mAh2+Y+lnKC7bA WcyYYzQntYxfMWrwLScmTuSab7/nYfz9YF4Q6YgdDBhb4Pxcvah4Eahhs83m3urE 1VF249O3lnbGI/RnSJo6DvkkfCZKKwHQ9x4hGeWgZThCza93FYSVdDFjpQ9Ywlmc JLKJ5NoUdWZSRBlb3DPo1hq/axxECid4oxoSmOYQ6MFKpAH6aTkTmnXyc6bTKpt0 49ywtgWXKjwVy0MN5J/OHuZK8AQmqq9UgmXovklLt9CaB5JEiz7FQKDmKNJagDw1 SyNeCbnDgZ5JMhC5yt/9oHRbmg0WO5qhSqYliN3vweR9Ju66KXEJY7EQ9JI1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZECYmbUl2atdqTStyy/y6wnH+H4wHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADicJ9A4xFjlQLz2KJJUJQ+QNt4L8IEaf3/C JXV7d+zUND3HbwBS0AmBLr1ES9LC5xNRjx3Ngcbin7ZPcpLzN+N9EVGqcvsfltEM zxpe2KuYLCppDhmaPFcRQfQ5tXytdU/6N7wqe09uLuwdHzoxP/dg1z97m6CfM4rZ IOwi5S96SmdsTHf6Y0AxYQ8r9CUT5iJYdjlr03mOV+lsr1hABGf7b16JASMFtHu+ LEIyX7HAP1Po1NAeAymSJUFz7PczFx4y1gANrZJn+tWZA2MyBMLM3m7hOl6KZObR JND995JlQfrgS+9fUMSuAlHOjca4eYeVzgf+rpF6Oc3L2Jmel0s= -----END CERTIFICATE-----Generated at Sun Dec 7 07:45:30 2025 by rpki-client