This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft File: 2FEC60739EF087F0D4F947C7230A725109EC6178.mft (raw, json) Hash identifier: dabMSlzSvWdlGmU1GRyG2tia1QHxKjpb1b1qLKrjfiA= Subject key identifier: 55:FA:76:D4:F0:70:6C:B2:77:49:6D:45:43:33:83:1D:74:D4:F2:BB Authority key identifier: 2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 Certificate issuer: /CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Certificate serial: 32FEA336FF8E5E00BDC4DF011C8D058F41DA80EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft Manifest number: 01DD Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:56:03 +0000 Manifest next update: Tue 09 Dec 2025 06:59:03 +0000 Files and hashes: 1: 323030313a6466303a323930303a3a2f34382d3438203d3e20313336303731.roa (hash: UnWzJ48Nx645Ud0DTEThTJUyGBI60lPLzC3swH45IOM=) 2: 3130332e38312e3231382e302f32342d3234203d3e20313336303731.roa (hash: u24qYoTDSSf50eb2UAzUvgkQ1jglRQOcxfkd25DPbNc=) 3: 2FEC60739EF087F0D4F947C7230A725109EC6178.crl (hash: r5oncRUNJamLTAXsMPuxJ/2AExJID5ID+g4mrz59AJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fe:a3:36:ff:8e:5e:00:bd:c4:df:01:1c:8d:05:8f:41:da:80:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FEC60739EF087F0D4F947C7230A725109EC6178 Validity Not Before: Dec 6 03:56:03 2025 GMT Not After : Dec 9 06:59:03 2025 GMT Subject: CN=55FA76D4F0706CB277496D454333831D74D4F2BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:ab:5a:dc:62:52:2d:ec:c6:97:bd:db:7f: ed:ae:88:8a:ae:42:f5:b4:0e:08:28:74:e8:8a:84: b3:72:c6:ac:ef:0b:22:93:53:ad:f5:4e:ac:8f:e3: 37:42:64:9c:2e:03:49:bd:79:0d:08:57:a0:c1:9d: 19:83:ee:f4:4f:ca:be:87:08:5d:a6:c4:a0:64:bf: 07:da:74:a5:51:e6:16:58:63:e2:7c:08:a7:c2:3b: 11:34:8a:52:cf:24:cb:69:f1:68:08:f6:f3:dc:da: ad:a7:89:19:88:6a:80:f5:d7:7c:03:61:1a:f4:a9: 34:61:0d:3d:2e:15:cc:d4:6f:48:9c:05:50:b1:ad: c5:12:e8:c6:1d:65:d0:d2:24:b1:49:05:cf:18:dd: eb:72:d4:2e:b7:e7:06:d4:97:05:74:15:b7:ff:91: d4:68:d2:a0:f6:61:b5:0f:28:b1:95:5e:e6:61:03: 78:9b:c0:40:80:e6:98:50:a3:0b:ee:82:cc:89:50: 2f:e7:d1:56:af:32:38:17:ad:13:ec:40:cf:de:ef: 6c:4a:d1:b2:da:fb:ae:19:02:4a:d3:55:7c:b5:d1: 65:e5:9c:1e:88:d2:c0:df:ee:fa:04:82:d9:d9:b0: e5:ad:97:3b:fa:69:ae:06:07:1e:bc:9b:02:b9:23: ce:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FA:76:D4:F0:70:6C:B2:77:49:6D:45:43:33:83:1D:74:D4:F2:BB X509v3 Authority Key Identifier: keyid:2F:EC:60:73:9E:F0:87:F0:D4:F9:47:C7:23:0A:72:51:09:EC:61:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FEC60739EF087F0D4F947C7230A725109EC6178.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7517e2fa-2f68-452e-a404-8e7ccb687215/0/2FEC60739EF087F0D4F947C7230A725109EC6178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:3d:95:08:e4:27:fc:77:88:dc:92:cd:62:af:c6:43:e0:ed: b5:f9:97:45:c7:30:53:b0:ad:d7:7c:c6:5f:6c:39:e0:46:66: 88:ef:51:1f:db:b4:b2:64:d3:6b:55:ed:41:e4:e2:cd:12:53: bb:8d:29:15:48:25:dd:79:35:e6:bf:6c:6c:52:aa:c1:49:df: fb:ee:0d:a9:11:40:b0:03:12:07:88:70:97:72:a3:6c:af:7f: 59:62:0a:50:44:f6:e0:0c:35:ca:71:0a:1c:53:e9:42:82:33: 20:ba:a3:55:2a:97:9f:f1:1e:d5:4a:b5:0f:74:20:28:b4:c1: 4f:fc:18:58:20:73:5e:f7:2b:0e:ef:63:07:f4:30:e0:e6:24: f3:31:db:a9:77:cf:0a:9c:fe:cc:d1:d4:c8:f2:b4:db:44:9a: 36:3c:a0:11:4c:69:39:4f:4a:1b:b4:53:e0:2c:6a:db:f1:be: 03:f3:7f:fc:75:ef:3b:33:b5:65:f6:c8:6b:f4:d0:f3:ee:8b: f4:78:c9:6d:69:d1:d9:35:7f:5b:14:d8:e0:38:a6:69:5f:49: 17:74:1b:19:10:5f:dc:b1:35:f8:1d:62:8b:b1:cb:a1:c4:15: 92:ee:47:f5:25:25:d5:9b:5b:10:bf:9d:9d:8a:b7:0e:23:7f: 0d:9e:16:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMv6jNv+OXgC9xN8BHI0Fj0HagOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEw OUVDNjE3ODAeFw0yNTEyMDYwMzU2MDNaFw0yNTEyMDkwNjU5MDNaMDMxMTAvBgNV BAMTKDU1RkE3NkQ0RjA3MDZDQjI3NzQ5NkQ0NTQzMzM4MzFENzRENEYyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxata3GJSLezGl73bf+2uiIqu QvW0DggodOiKhLNyxqzvCyKTU631TqyP4zdCZJwuA0m9eQ0IV6DBnRmD7vRPyr6H CF2mxKBkvwfadKVR5hZYY+J8CKfCOxE0ilLPJMtp8WgI9vPc2q2niRmIaoD113wD YRr0qTRhDT0uFczUb0icBVCxrcUS6MYdZdDSJLFJBc8Y3ety1C635wbUlwV0Fbf/ kdRo0qD2YbUPKLGVXuZhA3ibwECA5phQowvugsyJUC/n0VavMjgXrRPsQM/e72xK 0bLa+64ZAkrTVXy10WXlnB6I0sDf7voEgtnZsOWtlzv6aa4GBx68mwK5I845AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVfp21PBwbLJ3SW1FQzODHXTU8rswHwYDVR0j BBgwFoAUL+xgc57wh/DU+UfHIwpyUQnsYXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTE3ZTJmYS0yZjY4LTQ1MmUtYTQwNC04ZTdjY2I2ODcyMTUvMC8yRkVDNjA3MzlF RjA4N0YwRDRGOTQ3QzcyMzBBNzI1MTA5RUM2MTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcyNTEwOUVD NjE3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzUxN2UyZmEtMmY2OC00NTJlLWE0 MDQtOGU3Y2NiNjg3MjE1LzAvMkZFQzYwNzM5RUYwODdGMEQ0Rjk0N0M3MjMwQTcy NTEwOUVDNjE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANY9lQjkJ/x3iNySzWKvxkPg7bX5l0XHMFOw rdd8xl9sOeBGZojvUR/btLJk02tV7UHk4s0SU7uNKRVIJd15Nea/bGxSqsFJ3/vu DakRQLADEgeIcJdyo2yvf1liClBE9uAMNcpxChxT6UKCMyC6o1Uql5/xHtVKtQ90 ICi0wU/8GFggc173Kw7vYwf0MODmJPMx26l3zwqc/szR1MjytNtEmjY8oBFMaTlP Shu0U+AsatvxvgPzf/x17zsztWX2yGv00PPui/R4yW1p0dk1f1sU2OA4pmlfSRd0 GxkQX9yxNfgdYouxy6HEFZLuR/UlJdWbWxC/nZ2Ktw4jfw2eFrU= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:19 2025 by rpki-client