This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: By5vTTN3Eb3tn/Z26xK892doDrlbVYMp4jccQAMGoj0= Subject key identifier: 3E:55:F0:06:89:D7:31:95:FA:EE:73:23:AF:96:3E:53:3C:30:F4:C2 Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 3E67AD0D8E0737DB6EDF2CA0A0E2A314BD25983C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 01D3 Signing time: Sat 06 Dec 2025 03:40:44 +0000 Manifest this update: Sat 06 Dec 2025 03:35:44 +0000 Manifest next update: Tue 09 Dec 2025 06:48:44 +0000 Files and hashes: 1: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: 2L7DCJfQuXYmkUJUsfdFqwDAT1SsF8x6dqI0f/qoYAI=) 2: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: OTgatd3eoWt3UR4Ss5gVfiSTYhAaI2e8jCmssLvZNmw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:67:ad:0d:8e:07:37:db:6e:df:2c:a0:a0:e2:a3:14:bd:25:98:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Dec 6 03:35:44 2025 GMT Not After : Dec 9 06:48:44 2025 GMT Subject: CN=3E55F00689D73195FAEE7323AF963E533C30F4C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:7f:ca:3f:73:42:ee:42:69:9c:b7:b8:79: ac:35:7a:df:f0:31:b3:f2:c9:65:0e:d2:1a:db:69: 52:d3:ee:8c:a2:9f:33:85:31:d4:6e:a1:cd:34:0c: 01:5c:5d:6c:db:38:20:ac:66:90:f2:2a:73:dd:ef: ba:eb:36:bd:e3:c7:02:3a:f6:fd:d0:0e:be:31:b0: c8:63:43:ce:7d:17:e1:4d:3b:a7:f2:c8:e7:a0:97: ed:66:7b:8d:75:e9:9b:52:58:8a:d6:2e:1a:0d:81: b6:47:24:92:fb:9e:24:af:59:66:64:3b:32:e2:3a: e5:8b:ff:69:41:55:09:ff:d2:d1:c8:b3:25:ea:92: ab:7d:12:17:d0:1b:2c:00:fe:6c:f8:f6:98:f8:24: 94:b1:e9:6f:dc:dd:6f:99:96:9d:36:18:44:29:ba: 69:ba:cb:c0:7e:2d:96:57:8c:c4:0d:7e:11:bf:b0: 29:62:2f:27:e3:ab:72:81:64:a4:10:a2:5f:e6:32: 58:13:b7:6b:87:e3:69:70:e6:10:98:98:c6:51:1c: f1:e8:de:5a:80:d4:1a:bf:a3:a4:72:e3:a4:ec:52: c7:10:17:c5:77:55:3c:ac:1a:23:f8:fe:db:47:3a: be:c1:0c:39:5a:0c:16:75:dc:f4:a9:b0:10:f6:f1: 97:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:55:F0:06:89:D7:31:95:FA:EE:73:23:AF:96:3E:53:3C:30:F4:C2 X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:46:a5:8b:b9:ad:f7:aa:ba:ec:4d:a7:1c:6d:64:0a:6e:ba: da:ad:ac:75:31:7a:c3:b1:99:f7:65:03:2f:d2:79:a7:96:05: 31:07:93:ee:7a:fa:4a:a1:eb:c1:57:2a:4b:19:cb:85:6d:21: 03:19:a1:85:da:d1:2e:52:f1:a5:3d:98:e3:a8:84:f1:fe:a1: b1:d6:b5:14:dd:8d:34:95:bb:32:e7:8d:1d:da:a8:0f:e6:32: c0:8b:e5:2a:23:b3:2d:68:ed:af:03:7f:6b:6d:cf:9a:6a:15: cb:46:d7:42:67:74:c5:f1:27:f7:03:50:a0:ed:81:06:68:9e: 1f:4c:96:be:12:ac:7c:a1:dd:42:46:ca:25:4a:7a:66:fc:56: 8f:e6:d6:6a:00:8c:d7:19:93:de:09:09:54:4a:e0:f1:ed:83: 81:d1:d9:41:13:8a:91:f7:cc:b1:7f:ff:36:79:39:8a:65:eb: 3a:6e:6e:0f:bc:5a:b3:a3:a1:d7:30:76:3f:9c:85:f3:2e:b5: 43:06:9d:49:85:8c:40:a1:6b:c9:77:10:7c:93:ca:b0:50:c5: c5:b9:f9:a7:8b:84:93:00:d0:d0:01:d5:01:b8:b7:68:70:8f: e7:34:2f:e7:f3:70:8f:45:ea:37:2e:df:8c:19:b2:33:b7:78: 66:84:f8:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmetDY4HN9tu3yygoOKjFL0lmDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTEyMDYwMzM1NDRaFw0yNTEyMDkwNjQ4NDRaMDMxMTAvBgNV BAMTKDNFNTVGMDA2ODlENzMxOTVGQUVFNzMyM0FGOTYzRTUzM0MzMEY0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmn/KP3NC7kJpnLe4eaw1et/w MbPyyWUO0hrbaVLT7oyinzOFMdRuoc00DAFcXWzbOCCsZpDyKnPd77rrNr3jxwI6 9v3QDr4xsMhjQ859F+FNO6fyyOegl+1me4116ZtSWIrWLhoNgbZHJJL7niSvWWZk OzLiOuWL/2lBVQn/0tHIsyXqkqt9EhfQGywA/mz49pj4JJSx6W/c3W+Zlp02GEQp umm6y8B+LZZXjMQNfhG/sCliLyfjq3KBZKQQol/mMlgTt2uH42lw5hCYmMZRHPHo 3lqA1Bq/o6Ry46TsUscQF8V3VTysGiP4/ttHOr7BDDlaDBZ13PSpsBD28Zd1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPlXwBonXMZX67nMjr5Y+Uzww9MIwHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERGpYu5rfequuxNpxxtZApuutqtrHUxesOx mfdlAy/SeaeWBTEHk+56+kqh68FXKksZy4VtIQMZoYXa0S5S8aU9mOOohPH+obHW tRTdjTSVuzLnjR3aqA/mMsCL5Sojsy1o7a8Df2ttz5pqFctG10JndMXxJ/cDUKDt gQZonh9Mlr4SrHyh3UJGyiVKemb8Vo/m1moAjNcZk94JCVRK4PHtg4HR2UETipH3 zLF//zZ5OYpl6zpubg+8WrOjodcwdj+chfMutUMGnUmFjECha8l3EHyTyrBQxcW5 +aeLhJMA0NAB1QG4t2hwj+c0L+fzcI9F6jcu34wZsjO3eGaE+HM= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:50 2025 by rpki-client