This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft File: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft (raw, json) Hash identifier: SnUFnj4B/yOFfZgc8C8JstEne2yCYWZQ4LHi0aXswi8= Subject key identifier: C0:CA:BF:F5:89:E2:85:75:CD:68:9C:9E:BF:A9:15:F3:55:23:5E:68 Authority key identifier: 29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 Certificate issuer: /CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Certificate serial: 3EB9A987E62E07BC07E0BB6D88E3B11FB2F15F0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft Manifest number: 0226 Signing time: Thu 04 Dec 2025 23:50:56 +0000 Manifest this update: Thu 04 Dec 2025 23:45:56 +0000 Manifest next update: Mon 08 Dec 2025 05:51:56 +0000 Files and hashes: 1: 3130332e3139312e3137362e302f32332d3234203d3e2034383030.roa (hash: skxD93mSZPzFcHG9WbDQcpHQq3Kcwean+DkfNBxkL7o=) 2: 29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl (hash: ZDrPHTCoBheXnSJsZmD3VDRfnbRpKS0PebB5zRnMkj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b9:a9:87:e6:2e:07:bc:07:e0:bb:6d:88:e3:b1:1f:b2:f1:5f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29CF00DB5C2109C4B5090935368C9AC57C5BD2A4 Validity Not Before: Dec 4 23:45:56 2025 GMT Not After : Dec 8 05:51:56 2025 GMT Subject: CN=C0CABFF589E28575CD689C9EBFA915F355235E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2d:d0:e9:c0:36:73:ba:d1:1e:eb:7c:47:09: 26:bb:2d:9c:13:a6:2d:9e:12:e1:b3:1d:a4:6a:88: c2:de:20:7c:8e:12:40:71:c2:80:c6:b5:0a:96:db: 80:0a:4b:59:78:ad:0a:58:b6:3d:86:27:ab:94:eb: 74:b2:54:91:17:4e:94:a6:71:c2:4d:bb:c5:d4:c4: 52:f8:71:71:9b:11:5c:79:db:81:74:41:e1:f5:d1: cc:31:6c:24:23:20:55:a4:c5:de:01:87:50:e7:8a: 49:e5:ba:fe:86:11:e8:50:7c:8e:83:14:c7:dc:b1: 71:4b:76:aa:17:79:4d:60:37:56:1f:cd:b7:4f:f1: d8:53:52:f9:78:0c:c7:b6:f4:61:d8:58:32:34:12: 79:55:51:8f:6b:42:df:41:d3:bb:31:1c:6a:3d:8b: c9:cb:e9:af:df:12:2e:24:4c:10:4f:ea:89:a9:e8: 4f:1d:c2:67:ff:03:fb:26:ce:c5:83:00:73:b8:6b: 51:7b:82:54:40:78:e7:20:7f:e5:80:0b:3a:4c:aa: c7:c7:3e:6b:27:46:60:16:b6:86:f3:e3:41:c5:05: 90:33:7e:dc:04:bf:ec:5f:7b:e8:2b:60:74:ad:14: 8e:53:bb:27:d4:b0:a2:d0:67:df:dc:87:89:ba:de: bd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CA:BF:F5:89:E2:85:75:CD:68:9C:9E:BF:A9:15:F3:55:23:5E:68 X509v3 Authority Key Identifier: keyid:29:CF:00:DB:5C:21:09:C4:B5:09:09:35:36:8C:9A:C5:7C:5B:D2:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a22b4e2-26f6-41e8-8910-206bea783db9/0/29CF00DB5C2109C4B5090935368C9AC57C5BD2A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c7:29:c2:ad:c5:fd:6f:b4:a5:4a:70:a4:91:02:60:6f:b6: 2b:95:62:b8:7b:22:e2:be:21:18:e0:de:73:4f:31:6f:84:af: b1:49:fe:ba:e7:b9:c6:3b:90:0f:55:3e:2b:8a:2a:29:1f:cf: bf:e4:bd:8d:3a:25:88:a6:a7:83:04:98:ab:72:b8:a7:59:04: 37:d6:ee:ae:e6:d8:bf:77:2f:5c:79:8c:a6:2e:d9:1f:23:1f: ee:5b:62:aa:9b:3e:dc:55:67:b8:26:bc:d8:65:e5:f8:7f:ac: 2d:72:fb:c0:1b:1a:d3:94:16:43:44:7c:e6:68:3f:6d:91:c3: f4:09:87:b9:17:d9:65:b1:32:d1:a6:58:f6:c2:9f:c2:d4:b4: d6:1d:68:29:ec:45:b0:80:5e:43:99:47:ad:6d:1e:c6:8f:2b: 6a:30:da:1e:64:5a:17:be:9e:9f:fd:09:70:e4:22:80:d6:e0: 11:d0:da:02:11:19:c1:3c:5f:7c:08:08:29:dc:f4:6e:48:0a: 7f:86:5c:b5:63:2a:91:50:a7:1b:39:e6:b6:1b:33:a1:ed:74: 13:3d:4e:bd:aa:bc:c1:80:71:b6:99:af:74:14:75:fe:c5:8e: cc:f7:85:a5:84:74:08:ed:fd:2b:a8:85:73:0e:44:57:e3:22: 1f:8e:ca:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrmph+YuB7wH4LttiOOxH7LxXwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3 QzVCRDJBNDAeFw0yNTEyMDQyMzQ1NTZaFw0yNTEyMDgwNTUxNTZaMDMxMTAvBgNV BAMTKEMwQ0FCRkY1ODlFMjg1NzVDRDY4OUM5RUJGQTkxNUYzNTUyMzVFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDALdDpwDZzutEe63xHCSa7LZwT pi2eEuGzHaRqiMLeIHyOEkBxwoDGtQqW24AKS1l4rQpYtj2GJ6uU63SyVJEXTpSm ccJNu8XUxFL4cXGbEVx524F0QeH10cwxbCQjIFWkxd4Bh1Dniknluv6GEehQfI6D FMfcsXFLdqoXeU1gN1YfzbdP8dhTUvl4DMe29GHYWDI0EnlVUY9rQt9B07sxHGo9 i8nL6a/fEi4kTBBP6omp6E8dwmf/A/smzsWDAHO4a1F7glRAeOcgf+WACzpMqsfH PmsnRmAWtobz40HFBZAzftwEv+xfe+grYHStFI5TuyfUsKLQZ9/ch4m63r3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMq/9YnihXXNaJyev6kV81UjXmgwHwYDVR0j BBgwFoAUKc8A21whCcS1CQk1NoyaxXxb0qQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTIyYjRlMi0yNmY2LTQxZTgtODkxMC0yMDZiZWE3ODNkYjkvMC8yOUNGMDBEQjVD MjEwOUM0QjUwOTA5MzUzNjhDOUFDNTdDNUJEMkE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlBQzU3QzVC RDJBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyMmI0ZTItMjZmNi00MWU4LTg5 MTAtMjA2YmVhNzgzZGI5LzAvMjlDRjAwREI1QzIxMDlDNEI1MDkwOTM1MzY4QzlB QzU3QzVCRDJBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvHKcKtxf1vtKVKcKSRAmBvtiuVYrh7IuK+ IRjg3nNPMW+Er7FJ/rrnucY7kA9VPiuKKikfz7/kvY06JYimp4MEmKtyuKdZBDfW 7q7m2L93L1x5jKYu2R8jH+5bYqqbPtxVZ7gmvNhl5fh/rC1y+8AbGtOUFkNEfOZo P22Rw/QJh7kX2WWxMtGmWPbCn8LUtNYdaCnsRbCAXkOZR61tHsaPK2ow2h5kWhe+ np/9CXDkIoDW4BHQ2gIRGcE8X3wICCnc9G5ICn+GXLVjKpFQpxs55rYbM6HtdBM9 Tr2qvMGAcbaZr3QUdf7Fjsz3haWEdAjt/SuohXMORFfjIh+OyhA= -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:41 2025 by rpki-client