This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft File: C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json) Hash identifier: g3CWwx3LMt7MyTW7JMSiKQaa0PwXqDYiTa/yg5NM3Us= Subject key identifier: C7:90:DD:6F:41:E7:B3:7F:9E:C3:57:FF:6A:EA:17:00:61:50:00:79 Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 Certificate issuer: /CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Certificate serial: 1B92FCC4C3C77ABEC548912D943857C43818A10F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft Manifest number: 014E Signing time: Sat 06 Dec 2025 16:41:46 +0000 Manifest this update: Sat 06 Dec 2025 16:36:46 +0000 Manifest next update: Tue 09 Dec 2025 23:10:46 +0000 Files and hashes: 1: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: dATjFz2GgCuZI7do22WaaBEM9mGMyqKI+2l7xnlR/rA=) 2: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: A+PWo9PhJVLnH9qn7ml4MIy+kuaTagQHEvYwXg8cxto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:92:fc:c4:c3:c7:7a:be:c5:48:91:2d:94:38:57:c4:38:18:a1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Validity Not Before: Dec 6 16:36:46 2025 GMT Not After : Dec 9 23:10:46 2025 GMT Subject: CN=C790DD6F41E7B37F9EC357FF6AEA170061500079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:55:19:34:14:cf:a0:92:dd:3c:a7:6d:1f:4b: 38:92:da:75:1d:f3:73:56:4c:00:d8:00:fe:49:16: 48:e5:a1:9f:63:20:d4:22:0c:ac:31:03:7c:3a:19: 58:7c:59:05:f6:25:19:21:cb:67:a2:5a:1e:4d:44: 0d:7a:9c:c3:f3:3a:c8:ef:1c:68:1a:d1:60:11:f9: 32:6e:54:ae:86:5c:f7:e0:f5:e1:a4:6d:47:2b:9d: 39:00:28:87:1d:1e:f2:8c:2a:83:1b:a8:98:bf:4d: c9:1c:a9:c0:f8:ed:34:db:68:6c:49:e4:de:b9:96: 5f:70:d5:67:6f:30:14:ab:72:0c:92:8a:fc:48:77: 69:4e:6e:52:44:94:74:3e:79:f5:66:f5:bd:d4:88: 4a:e4:a9:78:60:4a:8f:96:7d:c2:d9:65:5d:84:48: cb:d3:ed:76:85:47:4a:0d:59:41:f5:99:a2:b4:12: 3e:8c:c2:c2:07:e2:97:d3:e0:c2:00:c1:e0:16:fd: fc:c0:94:9b:10:0c:83:d7:91:02:58:0c:2e:6e:f7: 6b:b4:8a:57:c1:6c:92:2f:6f:6e:43:ed:3a:88:f9: 39:0c:e4:f6:9f:19:40:1b:75:21:ea:70:22:88:69: 25:05:c5:37:f7:39:a5:4d:f7:13:8e:fb:5b:af:44: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:90:DD:6F:41:E7:B3:7F:9E:C3:57:FF:6A:EA:17:00:61:50:00:79 X509v3 Authority Key Identifier: keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c9:e0:ab:7f:25:50:9c:09:79:d6:55:39:56:37:79:43:4a: f5:c4:ed:ea:e4:58:d7:04:4f:85:df:2c:88:c8:f7:22:68:c0: 27:9a:70:ef:8a:1b:0b:53:89:8f:4e:e8:9a:c8:d7:3d:a2:73: 11:4d:a3:54:e7:ee:85:6e:85:99:35:b1:30:af:fe:02:84:62: d0:e0:8d:83:97:52:10:7f:84:31:05:e2:d0:e4:36:81:7d:e3: 0e:cf:06:2a:1c:a1:79:18:ba:54:8a:e9:ed:27:44:81:31:5f: 08:5a:25:09:93:53:95:48:61:6b:18:65:01:b3:f3:7f:a4:68: 16:19:ef:da:0f:24:1d:3c:4e:48:d8:05:7e:c1:8f:12:50:ee: 77:9a:15:a4:0e:7c:15:55:6f:39:f8:71:e7:11:b7:d8:8d:12: ed:93:9b:14:52:42:4b:40:32:8a:99:3d:67:02:d7:ee:a3:a8: 4c:5c:5f:b0:2e:ee:20:2d:3b:9e:b2:36:74:12:3b:3c:69:ce: 4e:63:e6:60:d1:89:0a:f2:a3:e9:a9:35:d5:3e:f1:b1:65:2d: 81:23:7b:3a:b3:96:92:b8:b9:2e:a9:db:00:6a:cb:d5:9d:dd: cf:bc:df:87:cc:37:d2:17:5b:e6:d8:93:4f:d3:16:e6:c3:a8: d9:b5:fd:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5L8xMPHer7FSJEtlDhXxDgYoQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFF Q0FDMjdEMjAeFw0yNTEyMDYxNjM2NDZaFw0yNTEyMDkyMzEwNDZaMDMxMTAvBgNV BAMTKEM3OTBERDZGNDFFN0IzN0Y5RUMzNTdGRjZBRUExNzAwNjE1MDAwNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVRk0FM+gkt08p20fSziS2nUd 83NWTADYAP5JFkjloZ9jINQiDKwxA3w6GVh8WQX2JRkhy2eiWh5NRA16nMPzOsjv HGga0WAR+TJuVK6GXPfg9eGkbUcrnTkAKIcdHvKMKoMbqJi/TckcqcD47TTbaGxJ 5N65ll9w1WdvMBSrcgySivxId2lOblJElHQ+efVm9b3UiErkqXhgSo+WfcLZZV2E SMvT7XaFR0oNWUH1maK0Ej6MwsIH4pfT4MIAweAW/fzAlJsQDIPXkQJYDC5u92u0 ilfBbJIvb25D7TqI+TkM5PafGUAbdSHqcCKIaSUFxTf3OaVN9xOO+1uvRDhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5Ddb0Hns3+ew1f/auoXAGFQAHkwHwYDVR0j BBgwFoAUwukp37BfgbkYgLyAgVQ2WuysJ9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDZmZmFkMi0yMGJjLTQyNDYtODI5My00NDY2NmNlMWNmZTAvMC9DMkU5MjlERkIw NUY4MUI5MTg4MEJDODA4MTU0MzY1QUVDQUMyN0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFFQ0FD MjdEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2 NUFFQ0FDMjdEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDJ4Kt/JVCcCXnWVTlWN3lDSvXE7erkWNcE T4XfLIjI9yJowCeacO+KGwtTiY9O6JrI1z2icxFNo1Tn7oVuhZk1sTCv/gKEYtDg jYOXUhB/hDEF4tDkNoF94w7PBiocoXkYulSK6e0nRIExXwhaJQmTU5VIYWsYZQGz 83+kaBYZ79oPJB08TkjYBX7BjxJQ7neaFaQOfBVVbzn4cecRt9iNEu2TmxRSQktA MoqZPWcC1+6jqExcX7Au7iAtO56yNnQSOzxpzk5j5mDRiQryo+mpNdU+8bFlLYEj ezqzlpK4uS6p2wBqy9Wd3c+834fMN9IXW+bYk0/TFubDqNm1/QE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:48 2025 by rpki-client