This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: s50pzQyZUzCuRT+vP9tkFemlelyM0uMQ48QqMSdE7DU= Subject key identifier: C1:E2:03:80:E5:81:20:08:C2:F5:3D:0C:0C:14:5D:9B:BF:8E:83:0E Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 4B2A0B07F5DE9ADB8FAE0A97A963A26777AF22B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: FF Signing time: Wed 17 Dec 2025 00:31:46 +0000 Manifest this update: Wed 17 Dec 2025 00:26:46 +0000 Manifest next update: Sat 20 Dec 2025 10:45:46 +0000 Files and hashes: 1: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) 3: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: eY4tvuCEeYoplo5DX4BkUODYeDnz3aWSS7dWV/Dgof8=) 4: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2a:0b:07:f5:de:9a:db:8f:ae:0a:97:a9:63:a2:67:77:af:22:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Dec 17 00:26:46 2025 GMT Not After : Dec 20 10:45:46 2025 GMT Subject: CN=C1E20380E5812008C2F53D0C0C145D9BBF8E830E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:57:fa:20:dc:30:f3:f9:2d:35:7a:14:e3:86: 22:9c:46:a3:be:fc:d3:7d:16:59:6a:fa:1a:19:4c: 38:f0:36:08:a6:24:19:5c:36:11:20:9f:8b:bd:0c: dd:a7:1b:96:b0:c0:1d:b5:da:ed:ae:30:d3:19:ca: 09:c7:89:56:c5:e3:fe:00:7e:ca:3a:e8:8c:66:8b: 10:38:3d:bd:b1:69:a9:11:4a:e0:70:15:b9:04:d1: bd:9e:7e:7e:5c:46:3a:d9:5c:47:48:18:ae:ed:56: c0:a6:42:44:8d:85:8b:18:0f:65:7b:9a:0d:8e:64: 06:e7:6a:74:39:5d:33:fa:96:02:2e:01:93:24:6c: 47:92:ef:83:9b:68:9d:cb:ac:24:69:40:83:24:78: 08:48:0f:99:82:9f:30:ea:cd:f1:67:c5:9b:81:8d: 4d:70:35:71:4f:f7:96:ed:31:01:0c:79:96:bd:e7: 1d:bf:92:84:67:66:ee:ce:d6:3e:81:df:64:e6:76: 3f:08:15:8a:45:c1:e2:d9:49:e7:7a:3f:73:57:59: f3:5b:b9:de:fc:ff:65:43:b1:d1:38:7c:ad:a8:9f: 20:bc:50:9e:4a:b7:1d:c8:9d:58:4e:ca:60:78:21: dc:37:56:67:8d:35:47:5d:ec:4d:33:9a:f0:4d:b4: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E2:03:80:E5:81:20:08:C2:F5:3D:0C:0C:14:5D:9B:BF:8E:83:0E X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:29:86:35:b1:5f:c6:78:f8:a7:e3:21:8f:aa:c0:81:76:15: 3a:90:f0:5a:db:cd:b4:fb:1d:c2:da:74:0a:70:8d:aa:a7:c2: f7:05:6e:63:3a:9c:e9:00:b6:c8:b3:76:a1:d6:b0:79:e0:ac: 96:26:db:fe:60:05:7d:18:23:60:d7:cc:78:fc:4a:3d:63:39: a4:6c:b3:21:42:bc:ff:fd:99:08:3c:38:db:f2:ff:de:0f:56: f6:8e:4a:df:f9:d7:58:24:bb:8d:ac:9b:04:e2:cd:c0:03:97: f6:46:8d:8a:65:fc:99:94:f2:2d:88:c1:68:33:03:ce:55:93: 96:d1:d1:1f:52:97:2d:73:e1:20:5b:9c:81:e3:9d:6e:da:3a: 0b:0b:24:55:07:74:60:38:a6:f3:89:6e:f9:de:dc:61:eb:b5: 64:39:c3:3b:bf:17:d1:44:37:4a:8a:94:ab:6f:ba:06:e8:87: 0d:ec:22:2a:ae:26:ac:75:04:c6:86:c6:4e:65:70:58:68:61: c6:09:19:8a:6b:db:a5:39:4a:67:a8:65:05:47:76:c7:06:46: 80:ef:45:db:89:66:59:3b:28:60:03:c2:89:78:db:a2:46:3f: 56:de:f1:2e:f1:25:0e:72:cc:f6:25:22:bd:59:9b:62:4a:44: 37:3f:68:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyoLB/XemtuPrgqXqWOiZ3evIrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNTEyMTcwMDI2NDZaFw0yNTEyMjAxMDQ1NDZaMDMxMTAvBgNV BAMTKEMxRTIwMzgwRTU4MTIwMDhDMkY1M0QwQzBDMTQ1RDlCQkY4RTgzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFV/og3DDz+S01ehTjhiKcRqO+ /NN9Fllq+hoZTDjwNgimJBlcNhEgn4u9DN2nG5awwB212u2uMNMZygnHiVbF4/4A fso66IxmixA4Pb2xaakRSuBwFbkE0b2efn5cRjrZXEdIGK7tVsCmQkSNhYsYD2V7 mg2OZAbnanQ5XTP6lgIuAZMkbEeS74ObaJ3LrCRpQIMkeAhID5mCnzDqzfFnxZuB jU1wNXFP95btMQEMeZa95x2/koRnZu7O1j6B32Tmdj8IFYpFweLZSed6P3NXWfNb ud78/2VDsdE4fK2onyC8UJ5Ktx3InVhOymB4Idw3VmeNNUdd7E0zmvBNtN6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUweIDgOWBIAjC9T0MDBRdm7+Ogw4wHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkphjWxX8Z4+KfjIY+qwIF2FTqQ8FrbzbT7 HcLadApwjaqnwvcFbmM6nOkAtsizdqHWsHngrJYm2/5gBX0YI2DXzHj8Sj1jOaRs syFCvP/9mQg8ONvy/94PVvaOSt/511gku42smwTizcADl/ZGjYpl/JmU8i2IwWgz A85Vk5bR0R9Sly1z4SBbnIHjnW7aOgsLJFUHdGA4pvOJbvne3GHrtWQ5wzu/F9FE N0qKlKtvugbohw3sIiquJqx1BMaGxk5lcFhoYcYJGYpr26U5SmeoZQVHdscGRoDv RduJZlk7KGADwol426JGP1be8S7xJQ5yzPYlIr1Zm2JKRDc/aP0= -----END CERTIFICATE-----Generated at Thu Dec 18 23:17:10 2025 by rpki-client