This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: SyP5xNWV38+KEPaFJZvWjqHwhe3KPCCrezWRjIMYmUM= Subject key identifier: 39:74:BD:36:01:63:C5:B4:CB:A7:EF:FA:0B:57:6C:2A:1F:5E:DC:AB Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 3028B77ADB346EB20F47600CE1B9C12C55600F0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 052F Signing time: Fri 05 Dec 2025 09:31:43 +0000 Manifest this update: Fri 05 Dec 2025 09:26:43 +0000 Manifest next update: Mon 08 Dec 2025 15:48:43 +0000 Files and hashes: 1: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) 2: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 3: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) 4: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: PYi8bow9RgdsB4JPrnmDEsXmR/d43Vq0/3HgbOetOWE=) 5: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:28:b7:7a:db:34:6e:b2:0f:47:60:0c:e1:b9:c1:2c:55:60:0f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Dec 5 09:26:43 2025 GMT Not After : Dec 8 15:48:43 2025 GMT Subject: CN=3974BD360163C5B4CBA7EFFA0B576C2A1F5EDCAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:de:3b:5e:21:2a:bf:c8:a6:cd:31:0d:f5: b1:92:45:5b:79:81:e3:ec:6e:3e:ea:5a:85:15:2c: de:1a:35:c5:92:bc:64:b5:a2:13:3a:89:55:cb:87: 95:e4:4c:77:bf:e6:2d:b6:1d:20:d8:d4:02:6c:a9: 89:07:55:6d:be:de:71:6e:56:cb:32:62:d3:db:f4: 92:0b:b5:b0:bf:73:0a:72:65:57:21:76:e9:4b:90: d9:0f:fa:86:7c:59:66:73:db:ee:be:f0:f2:4b:b7: 3c:de:36:f2:bc:96:0b:40:5c:3d:c9:73:0a:9a:6f: 70:39:93:3f:c1:7c:15:13:42:93:a7:8a:39:50:75: bd:54:af:e5:26:b7:fb:c1:b9:96:34:b6:4f:6e:99: 11:2c:0d:fa:76:b0:51:57:cd:85:bf:8c:10:42:02: db:46:7d:c8:23:d4:aa:50:57:66:90:05:75:29:8b: 8a:0b:30:b8:39:96:b3:ce:77:76:49:7d:c9:b5:d5: e8:33:23:29:31:ae:8d:00:c5:51:37:e7:56:a6:d3: bd:8f:a3:2f:a2:8d:6b:64:bd:48:71:6e:7b:c6:0f: 14:d7:99:8b:2c:63:54:f4:35:e8:f7:6f:39:0e:b5: c5:40:7e:47:9f:7a:96:13:40:55:c1:50:ff:4a:fc: 3e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:74:BD:36:01:63:C5:B4:CB:A7:EF:FA:0B:57:6C:2A:1F:5E:DC:AB X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:60:e1:96:3c:3d:05:2b:2d:fc:b7:7d:e3:de:44:b3:3d:28: 69:83:17:f6:64:1f:e8:bd:dd:f0:f1:36:69:79:ed:29:6b:2a: 69:04:4b:e8:de:f0:46:92:46:b1:be:d9:b8:1e:2f:a2:6a:7f: 12:dd:98:95:c9:3a:0d:f9:e5:c7:77:f3:6f:dc:a4:66:ae:7d: e7:70:86:c5:48:13:84:96:6e:29:4e:4f:3e:01:b2:1b:72:15: a1:e9:8c:c8:49:1a:fc:eb:11:26:01:62:90:36:20:14:a5:ec: d7:3f:fb:1c:31:c3:9b:e1:73:3d:bd:5a:ed:d3:54:bc:30:6e: bf:8a:c2:cb:fb:56:aa:ac:17:e9:cb:13:dd:9e:bc:27:94:45: 9c:34:16:e8:40:13:e1:2f:18:09:80:7d:78:d1:f2:50:73:59: 14:c7:32:ca:35:2c:f3:ce:2e:f8:b7:0d:d7:2a:8f:7a:6c:f9: a2:46:76:6f:b2:51:ce:97:5d:0c:65:06:6f:7f:8b:9e:63:71: f1:d5:ea:72:6f:cc:f0:32:6a:ba:bb:0a:9c:09:05:d5:5a:45: 65:7e:62:f8:9f:09:73:67:58:a1:c5:1e:b2:7b:52:9d:0f:5a: fa:cb:b7:9c:49:ff:40:89:ac:53:67:8c:70:ff:15:1b:4c:fa: af:77:8d:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCi3ets0brIPR2AM4bnBLFVgDwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNTEyMDUwOTI2NDNaFw0yNTEyMDgxNTQ4NDNaMDMxMTAvBgNV BAMTKDM5NzRCRDM2MDE2M0M1QjRDQkE3RUZGQTBCNTc2QzJBMUY1RURDQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1T947XiEqv8imzTEN9bGSRVt5 gePsbj7qWoUVLN4aNcWSvGS1ohM6iVXLh5XkTHe/5i22HSDY1AJsqYkHVW2+3nFu VssyYtPb9JILtbC/cwpyZVchdulLkNkP+oZ8WWZz2+6+8PJLtzzeNvK8lgtAXD3J cwqab3A5kz/BfBUTQpOnijlQdb1Ur+Umt/vBuZY0tk9umREsDfp2sFFXzYW/jBBC AttGfcgj1KpQV2aQBXUpi4oLMLg5lrPOd3ZJfcm11egzIykxro0AxVE351am072P oy+ijWtkvUhxbnvGDxTXmYssY1T0Nej3bzkOtcVAfkefepYTQFXBUP9K/D5TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOXS9NgFjxbTLp+/6C1dsKh9e3KswHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFg4ZY8PQUrLfy3fePeRLM9KGmDF/ZkH+i9 3fDxNml57SlrKmkES+je8EaSRrG+2bgeL6JqfxLdmJXJOg355cd382/cpGaufedw hsVIE4SWbilOTz4BshtyFaHpjMhJGvzrESYBYpA2IBSl7Nc/+xwxw5vhcz29Wu3T VLwwbr+Kwsv7VqqsF+nLE92evCeURZw0FuhAE+EvGAmAfXjR8lBzWRTHMso1LPPO Lvi3Ddcqj3ps+aJGdm+yUc6XXQxlBm9/i55jcfHV6nJvzPAyarq7CpwJBdVaRWV+ YvifCXNnWKHFHrJ7Up0PWvrLt5xJ/0CJrFNnjHD/FRtM+q93jbo= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:27 2025 by rpki-client