This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: tKHFoVX9696UrEKxNnKlTrgM0kiQzrlR2aB65Zmu+og= Subject key identifier: B2:5C:C0:56:8E:33:C0:AE:60:92:07:3B:EA:8B:98:30:E6:21:16:EA Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 4DCA9CF2964AB4875BFA69CD819DCDF51CEF1DAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 01D8 Signing time: Wed 17 Dec 2025 07:50:43 +0000 Manifest this update: Wed 17 Dec 2025 07:45:43 +0000 Manifest next update: Sat 20 Dec 2025 11:45:43 +0000 Files and hashes: 1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: C7zadeEMfyl4JP0qyfPDo74uzfixCOsfpOYdL+Y8Yhg=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: 2L7DCJfQuXYmkUJUsfdFqwDAT1SsF8x6dqI0f/qoYAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ca:9c:f2:96:4a:b4:87:5b:fa:69:cd:81:9d:cd:f5:1c:ef:1d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Dec 17 07:45:43 2025 GMT Not After : Dec 20 11:45:43 2025 GMT Subject: CN=B25CC0568E33C0AE6092073BEA8B9830E62116EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:c7:0d:42:6e:f4:91:5d:ec:2d:7f:6a:14: 4d:d0:e7:6d:b5:64:7f:14:c9:2f:2f:9a:d3:e3:57: 71:46:8b:48:a1:b0:11:0e:8c:4f:80:3f:24:11:c2: d5:1a:72:0e:3a:c3:c2:00:88:26:1d:eb:c5:e7:50: 9d:6e:fb:41:09:d4:6a:1f:e9:32:58:28:0e:e8:04: 34:65:fe:6c:87:c7:0a:31:ae:33:a8:c5:a8:6d:1b: f2:2b:be:47:eb:b1:c9:f4:d8:f0:33:85:2d:2c:db: d8:eb:d6:7c:1a:66:7b:5a:eb:6e:a4:7c:f8:c9:b9: df:e5:35:25:a3:4a:03:46:0f:77:92:58:b1:43:cd: 96:f0:5a:d7:ac:70:ec:69:7e:7a:e8:1c:5a:6f:e3: d1:9b:ec:b5:9f:9b:c7:29:b5:91:21:79:c0:de:d4: 6e:b9:40:01:cf:93:cf:f0:16:85:d0:a0:a3:29:bf: de:31:f3:3b:96:d8:1b:02:d9:2b:93:67:85:d5:64: 0f:c7:f8:8a:da:ee:0b:a9:81:1e:10:c0:23:4e:be: 71:8f:f6:8e:b7:84:33:21:06:ea:91:38:72:dc:e3: 1d:ed:55:db:4b:4d:e0:88:85:4a:17:29:eb:b5:2f: 15:c1:3c:36:63:8c:21:11:82:68:02:ee:67:96:38: 68:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5C:C0:56:8E:33:C0:AE:60:92:07:3B:EA:8B:98:30:E6:21:16:EA X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e0:16:0f:23:b5:ca:5a:0a:33:de:a4:b1:5e:9f:cd:49:05: 39:88:ea:52:fb:83:d0:fb:a7:bf:6c:f9:df:38:2d:aa:26:0b: a5:be:63:83:2a:b6:fc:12:4e:0c:4c:02:39:12:30:d0:c9:6c: 83:00:b6:2b:a1:3a:c1:3d:c3:df:d5:0b:b9:76:71:10:20:05: 6a:9c:eb:c0:47:46:dc:4d:8c:e8:59:0e:d0:fb:58:b5:2f:b4: b1:1e:c3:33:1a:32:0a:c7:dd:e9:71:53:53:b8:92:09:e5:a6: 9b:de:4e:3b:df:45:29:91:da:9c:f5:36:f5:5d:fd:95:55:45: 96:9e:0a:22:1d:58:32:6e:66:49:c1:4b:54:e2:43:ad:33:5e: 73:20:f7:8a:80:ea:cb:45:fb:70:96:c0:9a:f4:d8:a4:c6:41: 9a:5b:5f:8f:3a:40:c5:2f:14:eb:61:8d:5d:e3:44:53:1f:d3: 85:04:38:c5:66:3f:fd:de:88:0e:e8:3b:e6:ea:31:3a:af:63: f6:21:8d:a0:97:a4:84:5f:bb:27:ef:de:14:ef:76:cb:20:64: fa:47:ff:87:17:66:97:78:83:26:92:f9:f1:95:2f:72:38:92: e7:13:7d:c5:a8:ef:8c:37:cb:d9:32:b7:b0:8b:e9:95:55:ee: 6d:9e:6d:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTcqc8pZKtIdb+mnNgZ3N9RzvHaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTEyMTcwNzQ1NDNaFw0yNTEyMjAxMTQ1NDNaMDMxMTAvBgNV BAMTKEIyNUNDMDU2OEUzM0MwQUU2MDkyMDczQkVBOEI5ODMwRTYyMTE2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLdMcNQm70kV3sLX9qFE3Q5221 ZH8UyS8vmtPjV3FGi0ihsBEOjE+APyQRwtUacg46w8IAiCYd68XnUJ1u+0EJ1Gof 6TJYKA7oBDRl/myHxwoxrjOoxahtG/Irvkfrscn02PAzhS0s29jr1nwaZnta626k fPjJud/lNSWjSgNGD3eSWLFDzZbwWtescOxpfnroHFpv49Gb7LWfm8cptZEhecDe 1G65QAHPk8/wFoXQoKMpv94x8zuW2BsC2SuTZ4XVZA/H+Ira7gupgR4QwCNOvnGP 9o63hDMhBuqROHLc4x3tVdtLTeCIhUoXKeu1LxXBPDZjjCERgmgC7meWOGhbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUslzAVo4zwK5gkgc76ouYMOYhFuowHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPgFg8jtcpaCjPepLFen81JBTmI6lL7g9D7 p79s+d84LaomC6W+Y4MqtvwSTgxMAjkSMNDJbIMAtiuhOsE9w9/VC7l2cRAgBWqc 68BHRtxNjOhZDtD7WLUvtLEewzMaMgrH3elxU1O4kgnlppveTjvfRSmR2pz1NvVd /ZVVRZaeCiIdWDJuZknBS1TiQ60zXnMg94qA6stF+3CWwJr02KTGQZpbX486QMUv FOthjV3jRFMf04UEOMVmP/3eiA7oO+bqMTqvY/YhjaCXpIRfuyfv3hTvdssgZPpH /4cXZpd4gyaS+fGVL3I4kucTfcWo74w3y9kyt7CL6ZVV7m2ebTw= -----END CERTIFICATE-----Generated at Thu Dec 18 12:48:50 2025 by rpki-client