This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: IruULg7fZaUK2/6nGXkWqYVirHa00C+mrVTJ0yy/il4= Subject key identifier: A6:03:4F:AD:C2:5C:4B:95:8E:20:AF:6C:6C:99:6C:C0:A5:2C:46:FD Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 470644852E8490F87AB9EBAF9C91A3A0302516EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 0329 Signing time: Fri 05 Dec 2025 17:02:07 +0000 Manifest this update: Fri 05 Dec 2025 16:57:07 +0000 Manifest next update: Mon 08 Dec 2025 17:54:07 +0000 Files and hashes: 1: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: zQUnajNJRQfKlcFx4L187loAds7l8DN53cX0+j+6YOk=) 2: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: 0b7ns7LWe1lh+q97xLHcz0n7NxFtE+fPLuYQJ8QmqSI=) 3: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=) 4: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:06:44:85:2e:84:90:f8:7a:b9:eb:af:9c:91:a3:a0:30:25:16:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Dec 5 16:57:07 2025 GMT Not After : Dec 8 17:54:07 2025 GMT Subject: CN=A6034FADC25C4B958E20AF6C6C996CC0A52C46FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:98:f9:75:c7:d1:c8:a7:83:d5:79:34:5e:6e: eb:5d:14:c9:a6:dd:83:4d:e4:e9:84:49:38:1f:9f: b2:e7:85:dc:3c:3a:bc:94:9a:11:cf:70:51:17:fc: 6d:f1:4b:14:96:62:eb:b5:01:39:e3:8d:52:a4:da: f0:79:22:1b:d2:e4:47:04:39:18:af:0c:ba:61:ed: 22:ac:81:28:fb:1f:3e:93:e7:b6:09:ac:a1:6a:07: 7f:7b:28:a1:d3:fc:85:8c:11:8f:ce:7a:30:fb:71: ec:69:b1:0e:70:34:ea:01:cc:be:8a:48:a7:23:4a: 37:70:ea:d8:50:91:bc:bf:da:fa:07:71:24:16:6a: ff:d7:e6:eb:d2:e1:b0:ea:2f:6e:dd:1a:cb:83:a4: 9b:fe:ce:1b:6a:63:b4:57:9f:47:61:dd:f9:53:3b: 63:13:fa:70:57:dd:0d:1c:b0:4d:de:9b:85:9a:07: 7f:12:38:0e:e8:93:6c:ff:c6:a6:f7:88:31:10:a7: 27:41:91:b0:74:86:fb:b4:76:3a:cd:61:5a:b2:77: 85:4f:19:44:d2:01:04:17:7d:f1:09:ec:34:09:05: d2:4a:a6:b5:09:90:e0:ab:c1:54:99:85:a0:15:da: 37:a4:de:3f:7d:e4:95:31:a3:ba:41:07:9a:25:38: 86:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:03:4F:AD:C2:5C:4B:95:8E:20:AF:6C:6C:99:6C:C0:A5:2C:46:FD X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:32:e9:ff:19:b6:98:0d:7f:6d:fc:dd:17:0b:67:60:cd:40: a6:5a:dc:a9:7a:4e:b4:03:25:e9:44:e3:64:8b:76:c5:14:2f: ef:ff:b9:74:5a:ea:1a:8e:82:70:94:dd:8d:f3:f7:d7:c2:18: 23:d5:70:84:9b:c8:31:09:3d:5d:e7:b8:07:6b:97:f0:28:a6: b7:f4:f0:e8:2c:84:6d:0b:56:70:81:1e:2f:eb:2a:5a:53:73: 6c:7d:8d:80:cd:5c:dc:a5:07:7d:f4:bc:f7:12:5c:0a:30:67: 4d:e8:b9:5e:fc:2d:e3:bc:34:23:ac:96:bb:dd:c3:15:94:0b: c4:34:21:32:be:f2:7b:94:25:a8:69:db:cd:96:bc:f5:db:a7: ea:09:09:9e:91:9d:d4:a5:9b:de:97:a3:81:cd:8e:81:02:e5: df:aa:aa:84:f0:1b:f0:57:72:ee:68:fe:30:9d:41:4b:4a:c8: 12:fb:f3:fa:e1:08:a5:1e:16:40:8d:d6:30:ca:87:8b:7d:c0: 87:5e:31:df:2d:45:94:aa:73:87:db:bf:57:9e:75:66:3e:a2: ba:e6:c8:b3:29:46:19:ee:44:a3:25:94:d2:6a:02:5b:42:b9: 8f:39:6e:49:c5:84:e7:e5:d4:8d:95:11:71:dd:7b:ee:2d:b7: d2:09:ac:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwZEhS6EkPh6ueuvnJGjoDAlFuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNTEyMDUxNjU3MDdaFw0yNTEyMDgxNzU0MDdaMDMxMTAvBgNV BAMTKEE2MDM0RkFEQzI1QzRCOTU4RTIwQUY2QzZDOTk2Q0MwQTUyQzQ2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTmPl1x9HIp4PVeTRebutdFMmm 3YNN5OmESTgfn7Lnhdw8OryUmhHPcFEX/G3xSxSWYuu1ATnjjVKk2vB5IhvS5EcE ORivDLph7SKsgSj7Hz6T57YJrKFqB397KKHT/IWMEY/OejD7cexpsQ5wNOoBzL6K SKcjSjdw6thQkby/2voHcSQWav/X5uvS4bDqL27dGsuDpJv+zhtqY7RXn0dh3flT O2MT+nBX3Q0csE3em4WaB38SOA7ok2z/xqb3iDEQpydBkbB0hvu0djrNYVqyd4VP GUTSAQQXffEJ7DQJBdJKprUJkOCrwVSZhaAV2jek3j995JUxo7pBB5olOIaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpgNPrcJcS5WOIK9sbJlswKUsRv0wHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4y6f8ZtpgNf2383RcLZ2DNQKZa3Kl6TrQD JelE42SLdsUUL+//uXRa6hqOgnCU3Y3z99fCGCPVcISbyDEJPV3nuAdrl/Aoprf0 8OgshG0LVnCBHi/rKlpTc2x9jYDNXNylB330vPcSXAowZ03ouV78LeO8NCOslrvd wxWUC8Q0ITK+8nuUJahp282WvPXbp+oJCZ6RndSlm96Xo4HNjoEC5d+qqoTwG/BX cu5o/jCdQUtKyBL78/rhCKUeFkCN1jDKh4t9wIdeMd8tRZSqc4fbv1eedWY+orrm yLMpRhnuRKMllNJqAltCuY85bknFhOfl1I2VEXHde+4tt9IJrHQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:48 2025 by rpki-client