This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
File: 29A4AE587F980E73A344FD1ED55C47566E609511.mft (raw, json)
Hash identifier: Z3ZMnkewfJHMWXA0/NQtCAfKyGuvvP+F7Va0gsXct/A=
Subject key identifier: 48:32:69:8F:80:9F:5A:95:E6:F7:35:D0:25:E0:3A:15:C5:EF:60:DC
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Certificate issuer: /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial: 605B19DC441CB424249F3490D676F5A87F67C299
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
Manifest number: 01F8
Signing time: Sat 06 Dec 2025 22:30:59 +0000
Manifest this update: Sat 06 Dec 2025 22:25:59 +0000
Manifest next update: Wed 10 Dec 2025 04:16:59 +0000
Files and hashes: 1: 3231302e35372e3232322e302f32342d3234203d3e203338313432.roa (hash: LtP1kQmMGBD8rNYEzlai6KwmPf3m3u3XHD/epMWL5xk=)
2: 3231302e35372e3230382e302f32342d3234203d3e203338313432.roa (hash: 5KJPXKO+YgVPDp5/Lxph27ikYeC7tlibyzTKvb+xH+U=)
3: 3231302e35372e3231302e302f32342d3234203d3e203338313432.roa (hash: s4sdV2zqNMH3fGcBnDuis8aX3mvXYgrOkNmd2MBCpEo=)
4: 3231302e35372e3231332e302f32342d3234203d3e203338313432.roa (hash: vcvaF7qLrZfF67W9/bH4Pv9+bQ+VrLBZL/jJ0+fbzRQ=)
5: 3231302e35372e3232332e302f32342d3234203d3e203338313432.roa (hash: lpKbOrbrhT2vlvAJL98reUqD6vC4IeP7PUgmebV+YgY=)
6: 3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (hash: WS/P4TpGYsCeXm+bcL5xnvrovJjYUoIR2jeGTVeT3mU=)
7: 29A4AE587F980E73A344FD1ED55C47566E609511.crl (hash: FydcLmp4YxlpQcPZdw7n9jjGO6ABlWBivF8d4y6JkxA=)
8: 3231302e35372e3231342e302f32342d3234203d3e203338313432.roa (hash: CNjjCjswWd58cFSAK67rKA8R6XX41IvI3hykr65lfAk=)
9: 3231302e35372e3230382e302f32302d3234203d3e203338313432.roa (hash: kYJzUEQcWnyFZnM0+lqlLEcfPB6UOEcJYBSDjGHXeZQ=)
10: 3231302e35372e3232302e302f32342d3234203d3e203338313432.roa (hash: jQ9xqnz2BbrO2Re14MPLZ4EX0mN0DnJymhawCVrzhBE=)
11: 3231302e35372e3231382e302f32342d3234203d3e203338313432.roa (hash: ibgEML1LWV3GcYP6GRvOjjWRG6RzbhDfHX86QAq91qs=)
12: 3231302e35372e3231312e302f32342d3234203d3e203338313432.roa (hash: A2F1GbTYlcEIUwvBTPhQfv0VuBBIuBdZuIee8bvl4wQ=)
13: 3231302e35372e3230392e302f32342d3234203d3e203338313432.roa (hash: rcQy9K6A496g9N3vwW/BVEMEh81ubo325Yhstno8ULI=)
14: 3231302e35372e3231362e302f32342d3234203d3e203338313432.roa (hash: FYQ4GgoWT79qHp4XxDTgktT9zjmOHOsSmJwwOMQ1oFw=)
15: 3231302e35372e3231392e302f32342d3234203d3e203338313432.roa (hash: CtnAA9scsnBm9yBtcf3dh5QpYIx2D3sLFM+gjP0S/X0=)
16: 3231302e35372e3231352e302f32342d3234203d3e203338313432.roa (hash: EXLASj8PVKKJwsREbqBWd6a8fmdAbHcB/DzU2bmTOyA=)
17: 3231302e35372e3231372e302f32342d3234203d3e203338313432.roa (hash: OeDxmQiYfJ+Kuyw0E4mlOqMrTAjgkpNdl0ffvHuVyVk=)
18: 3231302e35372e3231322e302f32342d3234203d3e203338313432.roa (hash: duc90GFuNbL5017UYKgzCGWcF8U4EsnoqNIvTSG815o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:5b:19:dc:44:1c:b4:24:24:9f:34:90:d6:76:f5:a8:7f:67:c2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
Validity
Not Before: Dec 6 22:25:59 2025 GMT
Not After : Dec 10 04:16:59 2025 GMT
Subject: CN=4832698F809F5A95E6F735D025E03A15C5EF60DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:e8:78:b4:b3:ec:bb:64:9b:99:29:9c:9b:
37:fe:39:97:70:12:0a:a2:70:4b:63:8e:60:16:90:
0c:fc:5a:d0:4d:62:b8:dc:21:e2:c7:98:4a:72:e7:
ff:23:69:04:6c:02:e6:81:c1:fe:aa:42:51:ba:72:
a8:b8:f5:41:10:06:4d:4e:c7:c9:af:aa:e6:55:d7:
82:2c:ff:80:83:e4:a2:ba:55:b9:a1:de:7b:82:3e:
94:e2:8a:84:65:35:e8:30:3e:a5:81:a8:55:e1:df:
61:e3:3e:d5:9e:08:4c:3f:de:77:f5:41:c3:fb:61:
16:ab:bd:75:2c:76:f7:f0:c2:b2:d8:b6:de:d8:ad:
ab:59:23:08:f5:61:89:d9:60:22:c8:58:c8:d1:36:
28:9b:c0:38:ee:60:9d:76:2b:f3:b6:1f:c0:29:d4:
2b:c9:56:11:6f:dc:5b:46:b7:f0:4f:5e:85:ec:d8:
48:da:ae:35:3b:e1:bc:83:48:f8:69:c6:0f:78:92:
2d:02:d1:e9:3b:4d:3d:76:38:14:7b:f6:59:d4:e2:
d2:97:2c:d2:21:13:8f:29:7e:1f:d9:b7:2f:b9:e5:
a6:4e:4d:d6:f8:66:d5:87:8f:ff:15:bd:79:ec:b8:
4f:b9:ea:48:36:ef:c8:04:68:10:e2:fc:a2:46:55:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:32:69:8F:80:9F:5A:95:E6:F7:35:D0:25:E0:3A:15:C5:EF:60:DC
X509v3 Authority Key Identifier:
keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6c:6f:aa:6e:25:83:b4:c3:e2:a8:a6:54:04:5f:b1:fc:3c:
ea:d8:ed:88:d8:ca:f2:c0:28:b0:a5:78:7b:57:a7:0a:5f:10:
d0:0b:fc:3d:9f:25:9a:83:03:6c:ac:4d:89:fd:ca:58:9d:b7:
40:e8:fd:9e:94:11:a3:ce:5f:25:a2:8e:2d:03:bb:8a:d7:84:
87:bf:8a:e9:cd:dd:be:1a:3e:70:51:28:55:c5:f4:37:ca:6d:
ff:98:a9:b8:19:1c:b2:52:bb:d0:26:e9:4c:bb:8d:ca:23:44:
8c:48:e6:59:83:6b:d5:af:cf:a7:58:cc:ed:19:7f:f2:6e:88:
b2:18:fb:13:e6:26:4e:69:c2:41:2a:32:cb:14:9a:68:94:5e:
b2:e8:1b:3d:9b:36:52:4c:90:24:3d:8f:94:38:85:bb:e4:26:
ed:81:ff:5d:13:e7:b2:eb:30:c1:14:55:8d:bc:d2:e0:4a:6d:
48:37:1c:6b:ed:3a:ac:04:b2:54:78:c7:e6:f3:d8:80:54:31:
4c:a4:0c:54:61:97:cd:7b:79:13:77:8b:be:67:f6:c9:45:54:
36:8b:3c:08:e6:ee:33:60:99:07:6e:dc:2c:f6:04:87:5d:48:
03:c0:e9:06:e6:bf:d7:f2:a7:a9:77:78:32:8f:35:ec:80:eb:
7a:fe:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:25 2025 by rpki-client