This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: 2xEWDAiwVlGXsPpXimZgm1vMR3XXjzSb3rmjnNRCOZ0= Subject key identifier: CE:9C:76:FC:CD:94:5A:4C:79:54:19:BB:B7:80:1A:AA:6C:BC:05:9B Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 3E3DBEEC29E15661FB465157C3DB81614883A2D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 0213 Signing time: Wed 17 Dec 2025 16:52:22 +0000 Manifest this update: Wed 17 Dec 2025 16:47:22 +0000 Manifest next update: Sun 21 Dec 2025 03:50:22 +0000 Files and hashes: 1: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: dcc/bwTW1oTsN+Z0h/Aw94q6mQUdzuyzIAdCoesD/EQ=) 2: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: u1/FWvhkUX8NdpjOfCEzIQ83rh9KfgiQw+mbq+Uaf5Y=) 3: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: 9H4P2m2Q86+wvaB6C5BWHbuw5/CMaL6D8SYn5Utxj3g=) 4: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: 8akbgTHcBzy09cH/zWkvU4LNiBkusQqjKfIeLuC7DA4=) 5: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: nyiH5XZRu3exSPXepkvkOwB2m2ULxFRKVzAk8qvL/Rg=) 6: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: MQCiIDyqzNBQYpoR0MRnkXubNFQEv31SOdbwjwRhFAI=) 7: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: /T3q0aKMlccwCqwpvQMGCHEcfpAgRAD32J67j3q+a2M=) 8: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: JCzAZhJKrjcnXPRUzXNAKrf8B2XJvFX+OCG60Nl0Dgk=) 9: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: 8FISrQYbnFOpjiQHBztskExqHRou9e+XROYZoHoylq0=) 10: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: ygGRDYUVM6qRBTds6yPc5gciMmT/BwnRuAylqqHnvo8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:50:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:3d:be:ec:29:e1:56:61:fb:46:51:57:c3:db:81:61:48:83:a2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Dec 17 16:47:22 2025 GMT Not After : Dec 21 03:50:22 2025 GMT Subject: CN=CE9C76FCCD945A4C795419BBB7801AAA6CBC059B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5a:d3:11:dd:00:43:71:5d:8d:6a:b7:35:cc: 8c:bc:9b:2e:fb:97:5c:be:7b:b4:b0:28:80:b3:04: 59:a7:51:3a:ec:23:b0:7e:17:7a:ed:42:eb:6b:90: 3c:c2:08:b1:16:40:00:a3:d7:4d:54:ca:92:64:42: 5b:aa:72:b8:9b:ea:d9:16:e3:ef:bc:38:cf:18:1b: 6b:8e:a4:6d:8d:68:1b:f0:8a:f7:70:1a:a5:aa:91: d4:8f:75:c0:2f:e3:40:3d:2b:50:ef:9c:e0:48:dc: 41:3e:cc:2a:05:7f:05:ae:0a:25:c1:c2:a1:82:32: 2a:44:fb:c3:63:6f:ad:1f:c0:3a:6c:89:27:3f:32: df:e8:92:2e:79:73:6e:3b:a0:7c:fc:f4:97:3f:bf: fd:93:34:10:ac:8c:53:60:06:b8:ea:48:ed:a1:cd: 70:5f:95:12:85:db:8f:f8:f8:13:2a:95:a1:2b:76: cf:ee:4b:c7:1d:58:de:03:2f:d9:65:dc:a4:f5:9c: a4:e0:fb:1a:47:8a:89:96:91:4e:77:4a:f0:6c:52: f6:b3:42:5d:29:ab:1a:48:b0:ed:76:ff:d4:18:43: d8:6a:a8:d9:a8:ab:a7:2d:33:dc:98:20:06:e2:33: 11:d0:f2:67:9d:e4:8d:8a:bc:75:69:95:5d:12:cc: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9C:76:FC:CD:94:5A:4C:79:54:19:BB:B7:80:1A:AA:6C:BC:05:9B X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8a:8c:a8:30:65:20:b5:c6:85:bb:ab:9e:2b:0f:0c:ce:9f: b8:7a:a7:af:0f:1d:dd:18:60:7c:ef:ba:cd:33:69:54:13:92: 31:5c:50:04:f7:33:a4:5c:9f:95:98:55:4a:e1:f0:e9:30:2e: e9:70:ce:17:db:81:94:01:e5:04:64:44:48:bc:4e:99:d9:72: f9:6a:76:87:9f:39:65:62:8c:6b:00:5f:b9:e7:c1:e8:13:8e: fe:89:5a:1b:9e:24:19:84:51:7f:79:e6:c0:c7:1f:44:c9:4b: cf:a7:82:87:63:02:c3:30:74:50:dd:4a:2c:fd:b3:48:68:81: 31:4a:68:6a:4c:e8:29:94:1c:64:42:d5:ed:6b:ca:a2:7d:58: 9b:a9:2e:af:68:50:f7:a0:f9:94:85:cd:4f:09:11:59:e7:ac: 4c:2c:a3:0d:7e:dc:af:47:2c:1f:ba:3c:3e:31:32:3c:75:1b: 0e:02:f5:a5:b9:1a:34:40:86:67:bd:59:44:71:e4:79:46:20: e6:14:b6:10:5a:cf:a5:bf:1a:19:ea:91:4a:e5:f8:83:cd:95: b5:fd:8b:47:ee:69:f8:68:8e:ee:b7:53:58:df:67:17:d5:79: 5f:1f:5c:59:b4:57:5f:96:0f:ac:b6:91:69:c9:da:44:96:99: 45:5e:0f:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPj2+7CnhVmH7RlFXw9uBYUiDotEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNTEyMTcxNjQ3MjJaFw0yNTEyMjEwMzUwMjJaMDMxMTAvBgNV BAMTKENFOUM3NkZDQ0Q5NDVBNEM3OTU0MTlCQkI3ODAxQUFBNkNCQzA1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWtMR3QBDcV2Narc1zIy8my77 l1y+e7SwKICzBFmnUTrsI7B+F3rtQutrkDzCCLEWQACj101UypJkQluqcrib6tkW 4++8OM8YG2uOpG2NaBvwivdwGqWqkdSPdcAv40A9K1DvnOBI3EE+zCoFfwWuCiXB wqGCMipE+8Njb60fwDpsiSc/Mt/oki55c247oHz89Jc/v/2TNBCsjFNgBrjqSO2h zXBflRKF24/4+BMqlaErds/uS8cdWN4DL9ll3KT1nKTg+xpHiomWkU53SvBsUvaz Ql0pqxpIsO12/9QYQ9hqqNmoq6ctM9yYIAbiMxHQ8med5I2KvHVplV0SzKtHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzpx2/M2UWkx5VBm7t4Aaqmy8BZswHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOKjKgwZSC1xoW7q54rDwzOn7h6p68PHd0Y YHzvus0zaVQTkjFcUAT3M6Rcn5WYVUrh8OkwLulwzhfbgZQB5QRkREi8TpnZcvlq doefOWVijGsAX7nnwegTjv6JWhueJBmEUX955sDHH0TJS8+ngodjAsMwdFDdSiz9 s0hogTFKaGpM6CmUHGRC1e1ryqJ9WJupLq9oUPeg+ZSFzU8JEVnnrEwsow1+3K9H LB+6PD4xMjx1Gw4C9aW5GjRAhme9WURx5HlGIOYUthBaz6W/GhnqkUrl+IPNlbX9 i0fuafhoju63U1jfZxfVeV8fXFm0V1+WD6y2kWnJ2kSWmUVeDxw= -----END CERTIFICATE-----Generated at Thu Dec 18 07:53:25 2025 by rpki-client