This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft File: 2985976A4B3081770748882703E16497964D05A6.mft (raw, json) Hash identifier: GV+L59RkJbMwCF7mPkfh45a5ZvxoHxtrjNRY53IA0wI= Subject key identifier: 39:98:5F:D3:0D:F1:6A:64:34:FF:FC:26:2A:AD:29:41:43:1A:5D:ED Authority key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Certificate issuer: /CN=2985976A4B3081770748882703E16497964D05A6 Certificate serial: 6A1EE7AA2E95811CBFEB891CD491477264FCC128 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft Manifest number: 021B Signing time: Fri 05 Dec 2025 23:50:41 +0000 Manifest this update: Fri 05 Dec 2025 23:45:41 +0000 Manifest next update: Tue 09 Dec 2025 01:09:41 +0000 Files and hashes: 1: 323430333a38303a3a2f33322d3332203d3e20313334363233.roa (hash: 6DmXkqMFBwmOgmu7GrU8MAR3khWhl6gAoERCQcW2kCE=) 2: 3130332e3139372e39322e302f32342d3234203d3e20313334363233.roa (hash: s3jB5rGy3ygjsQ7KSNEtfVl4k8P8QCufhhtVBzaX2IQ=) 3: 3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (hash: h0i6o1md9zXeZ9ZcSa+PGKss268qYszF+iOxTtMdu4E=) 4: 2985976A4B3081770748882703E16497964D05A6.crl (hash: Qf8mXofwd/yrXKoSl52oDRIXXUhMu3Z9Mc8aKDUVod0=) 5: 3130332e3139372e39342e302f32342d3234203d3e20313334363233.roa (hash: fbMC3foKpfnHAAX7CqNwv+8CUIBKmVdM4iWFdYY2w+c=) 6: 3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (hash: RrW5I2lzLuA+7ZMS1LEMZMinrm7Ftg4PYDdGcwSGY08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1e:e7:aa:2e:95:81:1c:bf:eb:89:1c:d4:91:47:72:64:fc:c1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2985976A4B3081770748882703E16497964D05A6 Validity Not Before: Dec 5 23:45:41 2025 GMT Not After : Dec 9 01:09:41 2025 GMT Subject: CN=39985FD30DF16A6434FFFC262AAD2941431A5DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:0c:8f:c7:13:15:99:e5:3b:3b:40:54:b0: e5:12:4e:07:ad:24:d8:ce:dd:9e:8f:d7:b0:8c:fb: 2b:ed:fa:bf:d4:34:57:9d:07:ad:eb:42:d2:67:d1: 7d:5b:f6:86:61:f3:65:3e:42:fb:5c:2a:be:bf:b2: 5b:d2:be:6b:0f:17:9f:42:e2:42:54:6a:fc:20:9b: 42:d8:07:e6:7d:ea:ff:18:38:1c:e4:b3:2c:48:e4: 8a:d9:02:7d:83:d6:83:69:59:e0:42:4c:09:c4:95: 07:c4:8f:47:6f:0e:a8:ae:d3:1f:5c:1a:ec:6b:ae: dd:18:c7:01:3d:31:a5:02:d1:7c:6c:5c:f3:fb:c4: 99:3d:43:a0:68:93:46:ee:d0:c0:ec:c0:57:45:42: 22:36:4d:19:b0:ff:68:10:e9:be:ba:43:64:aa:2b: d7:f8:b4:2f:e8:4c:30:31:08:99:82:e7:fb:ea:61: 78:80:57:a4:9b:6f:7e:2f:08:c3:1a:6e:fe:eb:f7: 51:84:71:05:61:a4:df:aa:67:77:36:ad:d9:49:44: d9:21:3c:fc:83:b9:d5:07:fa:91:21:a2:97:e8:3b: c0:79:1b:2c:b7:0a:be:96:84:b4:19:7d:27:1d:f3: de:bf:db:9c:07:85:c3:72:29:f0:e6:a4:24:b3:c1: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:98:5F:D3:0D:F1:6A:64:34:FF:FC:26:2A:AD:29:41:43:1A:5D:ED X509v3 Authority Key Identifier: keyid:29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e6:b9:53:5d:a8:d4:12:e9:ad:fb:0b:34:15:07:64:21:03: 21:4c:55:32:27:86:1d:79:f1:ef:67:c1:58:98:0c:e2:42:0d: e4:b0:92:5c:13:70:fd:38:56:61:e8:6f:af:6f:ac:46:81:2a: 96:82:23:95:6c:e4:73:3b:df:61:9a:1c:2f:75:47:8c:be:1b: d0:5e:00:33:a8:39:70:70:cf:d5:78:b1:fd:88:89:11:90:90: 0e:d9:0d:54:cc:22:9b:63:fc:3f:29:bd:38:6d:c0:02:3f:8f: 17:6d:07:a0:13:93:da:e0:60:91:80:50:dc:e5:14:bd:6c:0c: ad:cf:4f:94:3c:bd:76:97:ac:1e:88:5f:57:45:6d:83:32:a9: 77:35:1c:c4:37:9b:9c:b0:a7:55:d0:ca:cb:b2:64:b3:1d:8d: de:4d:04:25:17:ec:9f:9e:95:fd:79:8e:b2:77:52:8c:10:3d: 67:69:2e:33:4c:94:f8:f5:3f:9e:2e:a4:38:0d:96:f7:a1:3f: ad:eb:dc:09:b5:5a:f4:1f:01:9c:10:a8:b7:9f:73:9a:4e:87: 25:5f:d6:fb:ae:70:1d:19:5a:16:aa:6a:b2:3f:90:bf:19:4b: cb:94:58:c3:00:64:2f:65:e4:8e:8d:00:e5:38:e7:69:c7:2d: 4c:d0:56:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUah7nqi6VgRy/64kc1JFHcmT8wSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5 NjREMDVBNjAeFw0yNTEyMDUyMzQ1NDFaFw0yNTEyMDkwMTA5NDFaMDMxMTAvBgNV BAMTKDM5OTg1RkQzMERGMTZBNjQzNEZGRkMyNjJBQUQyOTQxNDMxQTVERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vAyPxxMVmeU7O0BUsOUSTget JNjO3Z6P17CM+yvt+r/UNFedB63rQtJn0X1b9oZh82U+QvtcKr6/slvSvmsPF59C 4kJUavwgm0LYB+Z96v8YOBzksyxI5IrZAn2D1oNpWeBCTAnElQfEj0dvDqiu0x9c Guxrrt0YxwE9MaUC0XxsXPP7xJk9Q6Bok0bu0MDswFdFQiI2TRmw/2gQ6b66Q2Sq K9f4tC/oTDAxCJmC5/vqYXiAV6Sbb34vCMMabv7r91GEcQVhpN+qZ3c2rdlJRNkh PPyDudUH+pEhopfoO8B5Gyy3Cr6WhLQZfScd896/25wHhcNyKfDmpCSzwQtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOZhf0w3xamQ0//wmKq0pQUMaXe0wHwYDVR0j BBgwFoAUKYWXakswgXcHSIgnA+Fkl5ZNBaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMC8yOTg1OTc2QTRC MzA4MTc3MDc0ODg4MjcwM0UxNjQ5Nzk2NEQwNUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0OTc5NjRE MDVBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2VkMTAwZGYtMDQ0MS00MzgxLWEz ZmEtNTg3ZGI5ZTljMmYwLzAvMjk4NTk3NkE0QjMwODE3NzA3NDg4ODI3MDNFMTY0 OTc5NjREMDVBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7muVNdqNQS6a37CzQVB2QhAyFMVTInhh15 8e9nwViYDOJCDeSwklwTcP04VmHob69vrEaBKpaCI5Vs5HM732GaHC91R4y+G9Be ADOoOXBwz9V4sf2IiRGQkA7ZDVTMIptj/D8pvThtwAI/jxdtB6ATk9rgYJGAUNzl FL1sDK3PT5Q8vXaXrB6IX1dFbYMyqXc1HMQ3m5ywp1XQysuyZLMdjd5NBCUX7J+e lf15jrJ3UowQPWdpLjNMlPj1P54upDgNlvehP63r3Am1WvQfAZwQqLefc5pOhyVf 1vuucB0ZWhaqarI/kL8ZS8uUWMMAZC9l5I6NAOU452nHLUzQVqY= -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:46 2025 by rpki-client