This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: Ywhh8aFKgPJhRe06XrQLBeTLCLHgs2N5mORfWQNEhyo= Subject key identifier: C4:38:62:98:33:01:8F:35:E7:92:1B:62:EE:6B:6C:5B:A9:24:86:F2 Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 75FF684E2A08C2C1521ECDF1DE7FB3860AA3EAB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 01D8 Signing time: Mon 15 Dec 2025 23:31:13 +0000 Manifest this update: Mon 15 Dec 2025 23:26:13 +0000 Manifest next update: Fri 19 Dec 2025 01:00:13 +0000 Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: uvzZ0HS8bbzt/xylejxVlyzpindtg8ghiHuugGYSBBk=) 2: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: 8ALFBF9HwCBiqRlbp4pItk5eubZkWUc5/ZoPPFKzTcY=) 3: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: o6xh9ZmeUkW54lbLFnSG54IoYTtHKw0vyrbfABLw2qM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 01:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ff:68:4e:2a:08:c2:c1:52:1e:cd:f1:de:7f:b3:86:0a:a3:ea:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Dec 15 23:26:13 2025 GMT Not After : Dec 19 01:00:13 2025 GMT Subject: CN=C438629833018F35E7921B62EE6B6C5BA92486F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:17:ad:2c:3d:91:5b:94:8e:56:d3:2b:f0: c4:79:00:59:02:6e:13:20:24:87:f0:21:ee:c2:00: bf:fd:e8:d8:25:ca:15:47:e7:50:b1:1f:50:50:d1: ec:67:f6:11:fe:dc:54:04:4e:a3:1a:8d:66:b2:ff: 74:38:d4:cd:24:9a:09:cb:2f:be:77:77:60:00:f8: 63:45:cc:2a:be:f4:c4:e6:15:91:3f:4a:dc:83:a2: 26:c2:a6:a1:d2:c7:ae:24:86:d2:35:89:2b:57:fd: b0:d7:74:e4:1b:49:c5:3f:b9:d5:bf:9e:66:87:9b: 09:e8:34:c2:02:5c:87:86:cb:bb:c9:66:3a:6b:3c: d8:ce:24:44:9a:c5:7e:27:5e:2f:c6:4c:4b:f8:92: 3d:36:82:05:2c:71:fd:d9:66:76:fa:33:69:1c:6c: 8d:30:8a:03:b6:e3:f3:a9:89:89:d1:da:26:19:32: 43:f4:7e:6f:6f:32:17:9f:15:f3:88:e8:ba:66:03: 15:72:18:8c:ea:c9:c7:05:3c:41:9e:12:4f:51:bb: 0f:5c:63:2c:d3:1c:7f:b0:d6:be:a4:31:41:8f:05: 96:55:ab:36:f8:7d:99:fa:9b:5b:53:f7:48:c5:59: b8:12:e2:ad:63:3d:dc:df:e5:15:2f:53:a5:6b:39: 39:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:38:62:98:33:01:8F:35:E7:92:1B:62:EE:6B:6C:5B:A9:24:86:F2 X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c2:45:e5:3d:df:87:70:97:06:04:57:f2:a7:7e:e6:db:9e: 3e:5f:d8:81:43:ff:82:ed:e8:57:6f:ca:d4:a7:63:30:fe:24: 65:de:1e:88:27:31:65:ee:e0:f5:8f:de:70:af:9d:47:49:24: 8a:a1:20:4c:43:7f:d0:8b:a6:5a:ed:c3:44:0c:db:fd:51:92: d7:83:88:36:f9:03:e6:87:68:a6:ef:7b:a6:a9:9a:7c:5e:96: 12:e7:e1:c3:28:a9:36:c1:a7:c8:1d:30:81:28:e4:14:43:cc: 0b:38:99:e1:c9:dd:78:cc:26:3c:c4:51:50:7e:82:d1:75:48: e6:d4:66:0e:35:81:3e:b9:4d:2b:5e:c5:83:75:3b:c1:e5:f9: 6a:e7:0a:f0:21:18:c7:d1:94:fc:e6:a1:9c:52:f9:ee:12:b5: 94:78:14:29:d9:66:43:51:02:73:cc:05:ad:79:8b:40:af:52: ca:7d:9f:ca:da:78:34:31:89:69:1d:ef:2a:79:a8:fe:09:bb: 0f:59:05:ca:2f:ac:59:54:00:19:07:08:57:80:e7:4f:28:f6: ec:ca:d1:b9:0b:38:41:c3:fd:b5:50:6e:5d:57:44:11:6f:16: 42:26:6f:55:18:e8:3f:95:64:3a:1d:ca:9a:d1:3f:ed:23:ba: f2:e8:e8:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdf9oTioIwsFSHs3x3n+zhgqj6rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTEyMTUyMzI2MTNaFw0yNTEyMTkwMTAwMTNaMDMxMTAvBgNV BAMTKEM0Mzg2Mjk4MzMwMThGMzVFNzkyMUI2MkVFNkI2QzVCQTkyNDg2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgBetLD2RW5SOVtMr8MR5AFkC bhMgJIfwIe7CAL/96NglyhVH51CxH1BQ0exn9hH+3FQETqMajWay/3Q41M0kmgnL L753d2AA+GNFzCq+9MTmFZE/StyDoibCpqHSx64khtI1iStX/bDXdOQbScU/udW/ nmaHmwnoNMICXIeGy7vJZjprPNjOJESaxX4nXi/GTEv4kj02ggUscf3ZZnb6M2kc bI0wigO24/OpiYnR2iYZMkP0fm9vMhefFfOI6LpmAxVyGIzqyccFPEGeEk9Ruw9c YyzTHH+w1r6kMUGPBZZVqzb4fZn6m1tT90jFWbgS4q1jPdzf5RUvU6VrOTmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxDhimDMBjzXnkhti7mtsW6kkhvIwHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvCReU934dwlwYEV/Knfubbnj5f2IFD/4Lt 6FdvytSnYzD+JGXeHognMWXu4PWP3nCvnUdJJIqhIExDf9CLplrtw0QM2/1RkteD iDb5A+aHaKbve6apmnxelhLn4cMoqTbBp8gdMIEo5BRDzAs4meHJ3XjMJjzEUVB+ gtF1SObUZg41gT65TStexYN1O8Hl+WrnCvAhGMfRlPzmoZxS+e4StZR4FCnZZkNR AnPMBa15i0CvUsp9n8raeDQxiWkd7yp5qP4Juw9ZBcovrFlUABkHCFeA508o9uzK 0bkLOEHD/bVQbl1XRBFvFkImb1UY6D+VZDodyprRP+0juvLo6K8= -----END CERTIFICATE-----Generated at Tue Dec 16 10:59:20 2025 by rpki-client