This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: kf0qwPhX3p8EDFb0PflgD87yTQD06tOwm2tS3FHE5iI= Subject key identifier: A4:78:8E:8A:D3:31:29:83:3F:2F:A4:E2:21:45:19:13:DB:EC:37:EF Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 46CC09BC58D26C09BE8C5ECFF3A9410320E6D91C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: 012F Signing time: Sat 06 Dec 2025 01:22:30 +0000 Manifest this update: Sat 06 Dec 2025 01:17:30 +0000 Manifest next update: Tue 09 Dec 2025 01:58:30 +0000 Files and hashes: 1: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: bpEdGaau57Ls0LX+FXCrBVL5qcwulWWQkMdNRaMhV9U=) 2: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: 1mosUOoje/VYhMHyo/Xip8ApzioUgKCBiRLj61bPc1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:cc:09:bc:58:d2:6c:09:be:8c:5e:cf:f3:a9:41:03:20:e6:d9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Dec 6 01:17:30 2025 GMT Not After : Dec 9 01:58:30 2025 GMT Subject: CN=A4788E8AD33129833F2FA4E221451913DBEC37EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:32:f8:6f:1e:9d:97:16:9d:03:44:7e:94:02: 3c:3c:52:4a:b6:33:a4:44:93:50:99:36:cd:98:2f: 9f:1f:6f:26:74:f3:e1:df:be:4f:44:57:48:39:fe: 98:e1:2d:65:f2:c7:f9:76:8f:b0:34:82:d8:b2:18: 63:07:fa:85:00:5a:bf:2e:26:65:3f:0e:68:a7:77: 81:38:49:b7:d0:49:88:cc:7a:38:00:3c:76:67:a2: 05:08:66:3d:5b:7f:8e:f8:06:d9:e3:64:68:75:3c: b0:45:9f:a8:e9:1d:1c:ee:47:c4:cc:74:af:1f:95: 85:ae:c4:7f:6b:b0:bb:0b:a8:97:5c:b1:b7:9e:f8: d6:25:b1:f3:2c:a7:89:13:f4:57:56:01:88:22:5f: 0f:42:d3:54:a3:4d:ea:fd:f5:fa:31:fb:7f:a6:70: c0:e5:e9:7f:42:1e:57:d5:6b:bd:48:9a:a1:15:74: 1a:b4:15:f0:78:84:f0:90:da:08:22:52:63:36:b9: 46:bb:f7:eb:c4:0d:2d:40:f8:45:33:b9:f4:83:6e: 1f:9f:26:59:d6:74:37:5d:2a:67:4d:88:75:91:d6: d5:d5:c2:57:5b:12:e2:7b:9a:a7:25:1b:3c:d4:8a: cc:5c:da:ae:1c:99:29:d9:ec:0e:41:92:ee:00:d2: af:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:78:8E:8A:D3:31:29:83:3F:2F:A4:E2:21:45:19:13:DB:EC:37:EF X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:7e:10:82:c9:83:5d:bf:82:c0:91:d0:d2:72:d1:78:9a:31: 39:52:29:f4:d7:cc:16:cc:40:72:c6:c3:99:4a:25:67:96:7c: 93:d1:18:eb:6b:da:48:f5:04:f9:9a:b3:df:2b:f5:f6:dc:62: 0b:e5:7c:88:cf:b9:ad:9e:38:6f:e8:a4:2d:95:49:9d:dc:14: e4:d2:78:94:55:e7:71:f9:d1:39:00:00:c6:0b:80:15:27:ce: 81:c0:1d:0a:ac:c4:1b:f3:c7:9e:8b:de:4e:81:cd:30:57:94: 10:96:64:38:2b:9b:d6:bb:7a:f0:e9:cc:4f:51:55:0b:3a:f5: a2:00:7b:98:1e:bd:70:92:4e:46:34:91:c9:b6:55:54:ac:43: c1:f6:fa:40:6c:6d:9a:53:21:8c:6a:72:2c:28:d9:1b:f1:3e: a5:71:86:ac:f0:ea:ee:03:90:25:22:6f:24:17:23:c4:90:b7: 96:80:b9:a4:96:2a:9d:26:e3:72:56:dc:1e:a2:bd:7e:2c:c3: 4e:9e:e3:aa:8d:42:95:15:08:7c:9b:2b:ff:4a:3d:9f:84:ea: 9f:9d:87:c7:2b:51:8b:76:5d:fe:9c:0f:1c:47:f7:f6:2d:fe: 72:66:ad:29:f9:4c:d3:79:39:a6:a9:c9:d6:a4:af:96:0b:ca: 7f:5a:07:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURswJvFjSbAm+jF7P86lBAyDm2RwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTEyMDYwMTE3MzBaFw0yNTEyMDkwMTU4MzBaMDMxMTAvBgNV BAMTKEE0Nzg4RThBRDMzMTI5ODMzRjJGQTRFMjIxNDUxOTEzREJFQzM3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuMvhvHp2XFp0DRH6UAjw8Ukq2 M6REk1CZNs2YL58fbyZ08+Hfvk9EV0g5/pjhLWXyx/l2j7A0gtiyGGMH+oUAWr8u JmU/Dmind4E4SbfQSYjMejgAPHZnogUIZj1bf474BtnjZGh1PLBFn6jpHRzuR8TM dK8flYWuxH9rsLsLqJdcsbee+NYlsfMsp4kT9FdWAYgiXw9C01SjTer99fox+3+m cMDl6X9CHlfVa71ImqEVdBq0FfB4hPCQ2ggiUmM2uUa79+vEDS1A+EUzufSDbh+f JlnWdDddKmdNiHWR1tXVwldbEuJ7mqclGzzUisxc2q4cmSnZ7A5Bku4A0q+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHiOitMxKYM/L6TiIUUZE9vsN+8wHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACx+EILJg12/gsCR0NJy0XiaMTlSKfTXzBbM QHLGw5lKJWeWfJPRGOtr2kj1BPmas98r9fbcYgvlfIjPua2eOG/opC2VSZ3cFOTS eJRV53H50TkAAMYLgBUnzoHAHQqsxBvzx56L3k6BzTBXlBCWZDgrm9a7evDpzE9R VQs69aIAe5gevXCSTkY0kcm2VVSsQ8H2+kBsbZpTIYxqciwo2RvxPqVxhqzw6u4D kCUibyQXI8SQt5aAuaSWKp0m43JW3B6ivX4sw06e46qNQpUVCHybK/9KPZ+E6p+d h8crUYt2Xf6cDxxH9/Yt/nJmrSn5TNN5Oaapydakr5YLyn9aB0A= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:15 2025 by rpki-client