This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: YFVq2E7RROaw4fURZiYlSkvu6kjoIanzmCC1p7mq7bM= Subject key identifier: A7:A9:03:A8:3B:4F:A2:CA:BF:FB:A3:84:4C:29:E9:9D:F8:00:E7:EE Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 77D2CA01B6BF36A5BCBDB5CA90E0BE38734FB699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 022B Signing time: Thu 04 Dec 2025 18:42:29 +0000 Manifest this update: Thu 04 Dec 2025 18:37:29 +0000 Manifest next update: Mon 08 Dec 2025 01:59:29 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: 81uXkqs4n8gaTx/KOFptZXMvXK4VLwoaeVqXYCTwcXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d2:ca:01:b6:bf:36:a5:bc:bd:b5:ca:90:e0:be:38:73:4f:b6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Dec 4 18:37:29 2025 GMT Not After : Dec 8 01:59:29 2025 GMT Subject: CN=A7A903A83B4FA2CABFFBA3844C29E99DF800E7EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a8:58:06:34:a4:b0:66:2a:68:ee:20:33:43: 5f:bd:8b:67:be:b5:8b:29:8e:b5:66:cb:7c:15:72: 05:76:10:51:53:95:37:18:75:e5:89:c1:3c:f4:2d: 9e:1a:b1:b3:f2:bb:e9:7c:0a:80:ed:5d:77:45:bf: d6:67:47:f4:ee:b5:d6:d2:a9:60:74:17:0a:26:e6: fe:4d:67:aa:da:c2:86:44:41:62:d3:ab:e7:a4:84: 3c:22:2a:71:12:1d:e5:13:ca:c5:61:8a:ee:70:84: 48:ee:c7:c3:7f:5a:04:cf:38:97:4a:74:10:0d:8e: 1c:05:d1:0d:ad:36:d0:f1:b7:39:dc:8e:47:f4:4c: ff:c3:26:a4:67:65:a7:3a:97:60:6a:76:1e:ea:34: d3:d1:b7:2f:91:0a:5b:17:ce:8b:72:dd:31:8e:ea: 4a:e8:86:c7:28:ed:ce:69:a4:1d:e0:e5:04:2d:2e: b6:b4:ce:41:96:66:81:92:aa:31:98:11:f3:1d:e3: c5:fe:e0:39:1b:c4:97:1c:58:86:3b:6a:5f:f1:5e: 5b:6a:79:ea:d2:ee:89:ab:15:18:36:d0:47:bb:3c: e9:8a:eb:68:0c:73:ca:7d:4e:15:c3:86:92:e3:ba: 93:18:56:bf:c7:c6:57:2d:4f:55:3e:5f:a9:52:e2: d4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A9:03:A8:3B:4F:A2:CA:BF:FB:A3:84:4C:29:E9:9D:F8:00:E7:EE X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:24:f1:e8:b6:a3:b2:c9:59:89:96:d7:c5:df:4a:7b:d0:a1: 4c:75:92:8d:6e:ba:14:ad:bb:cb:b7:99:7a:76:ad:c3:2f:15: 3a:39:15:3f:fb:0c:85:95:27:7b:9b:8e:db:75:36:03:0f:16: a6:b9:36:c6:80:47:74:1e:94:c6:3a:29:eb:c8:89:75:c3:ae: d5:d1:36:30:36:2e:03:eb:b0:bd:74:5d:33:44:15:9e:67:ee: 7a:7b:82:7f:86:d6:d9:3a:ab:66:48:47:4c:8a:fe:04:72:0e: 14:17:6a:bd:a0:dd:07:de:a6:37:ce:f6:fb:8f:ea:2f:50:29: e6:86:ab:cf:c3:46:6b:ea:50:9a:5a:46:76:35:9f:23:c0:2b: 5e:4c:47:a4:4b:4f:11:a0:79:3b:c6:68:a2:6e:ef:17:ae:20: 1d:be:4e:b5:c0:c0:c4:c1:ea:02:bb:27:cf:d3:a2:87:88:7c: 2d:fa:9d:ec:5d:bc:f4:7d:9a:bb:f7:47:ab:bb:a1:8a:00:52: e8:2c:1f:66:1c:88:a0:a4:24:4c:94:dc:32:38:30:42:43:e1: b8:75:70:9f:4f:65:57:0e:c0:b2:be:71:41:ab:34:b6:66:03: 9c:51:92:15:6b:02:5d:55:da:67:6d:07:e5:a6:4b:fd:ad:61: 37:dd:1a:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9LKAba/NqW8vbXKkOC+OHNPtpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTEyMDQxODM3MjlaFw0yNTEyMDgwMTU5MjlaMDMxMTAvBgNV BAMTKEE3QTkwM0E4M0I0RkEyQ0FCRkZCQTM4NDRDMjlFOTlERjgwMEU3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqFgGNKSwZipo7iAzQ1+9i2e+ tYspjrVmy3wVcgV2EFFTlTcYdeWJwTz0LZ4asbPyu+l8CoDtXXdFv9ZnR/TutdbS qWB0Fwom5v5NZ6rawoZEQWLTq+ekhDwiKnESHeUTysVhiu5whEjux8N/WgTPOJdK dBANjhwF0Q2tNtDxtzncjkf0TP/DJqRnZac6l2Bqdh7qNNPRty+RClsXzoty3TGO 6krohsco7c5ppB3g5QQtLra0zkGWZoGSqjGYEfMd48X+4DkbxJccWIY7al/xXltq eerS7omrFRg20Ee7POmK62gMc8p9ThXDhpLjupMYVr/HxlctT1U+X6lS4tTPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6kDqDtPosq/+6OETCnpnfgA5+4wHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUk8ei2o7LJWYmW18XfSnvQoUx1ko1uuhSt u8u3mXp2rcMvFTo5FT/7DIWVJ3ubjtt1NgMPFqa5NsaAR3QelMY6KevIiXXDrtXR NjA2LgPrsL10XTNEFZ5n7np7gn+G1tk6q2ZIR0yK/gRyDhQXar2g3QfepjfO9vuP 6i9QKeaGq8/DRmvqUJpaRnY1nyPAK15MR6RLTxGgeTvGaKJu7xeuIB2+TrXAwMTB 6gK7J8/TooeIfC36nexdvPR9mrv3R6u7oYoAUugsH2YciKCkJEyU3DI4MEJD4bh1 cJ9PZVcOwLK+cUGrNLZmA5xRkhVrAl1V2mdtB+WmS/2tYTfdGso= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:34 2025 by rpki-client