This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft File: 129285A478A166EE0B54DBCDA60771DA54C4F65F.mft (raw, json) Hash identifier: KG2iEhbxVe3zutOof8u5PrWco1cw8S1YO5Klx/cFZaY= Subject key identifier: F3:03:F4:A1:92:90:1B:35:7F:F1:57:EC:57:4D:BC:8E:B1:5B:A3:CF Authority key identifier: 12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F Certificate issuer: /CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Certificate serial: 2D95507F261DE6D4D5274E793369044FA201994A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft Manifest number: 053A Signing time: Sun 07 Dec 2025 03:40:39 +0000 Manifest this update: Sun 07 Dec 2025 03:35:39 +0000 Manifest next update: Wed 10 Dec 2025 12:38:39 +0000 Files and hashes: 1: 3130332e3132352e3138342e302f32342d3234203d3e20313338313134.roa (hash: IVCqBdFN38jWB6ahE4bcDTBKo48M7ALZxNEE15iGilE=) 2: 3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (hash: noI2jWxEeYAXqaAE/PBFmQAfbP3FU/DH8uqnt/6EwU8=) 3: 129285A478A166EE0B54DBCDA60771DA54C4F65F.crl (hash: iRtPjZ8FMXgSFgAGmikkpvrnWqfzuslycuoq2yS7u+Y=) 4: 323030313a6466373a326630303a3a2f34382d3438203d3e20313338313134.roa (hash: Bb/OkwwJmJHe8/z9Qp5PTG+7pV0l1ZMHq6rEYToHVas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:95:50:7f:26:1d:e6:d4:d5:27:4e:79:33:69:04:4f:a2:01:99:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129285A478A166EE0B54DBCDA60771DA54C4F65F Validity Not Before: Dec 7 03:35:39 2025 GMT Not After : Dec 10 12:38:39 2025 GMT Subject: CN=F303F4A192901B357FF157EC574DBC8EB15BA3CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2d:d0:47:31:ae:80:e4:71:78:b3:1e:2e:6f: cb:33:8b:d3:b0:35:22:25:d2:c9:95:ef:0a:cd:aa: 91:d8:89:ac:ed:d5:37:99:c7:2b:40:ff:80:a2:f9: 3c:c4:5b:0c:a0:df:d2:94:84:c5:cb:91:d8:db:3c: 39:64:f5:26:4a:a3:d4:3e:b6:fd:93:2c:29:e0:4a: af:52:3a:6e:75:ed:db:fd:d3:ea:16:cd:33:c7:45: 66:2e:fe:e5:de:a8:32:ca:d5:29:f5:c1:5e:87:29: 63:06:fb:b9:37:b2:f2:09:28:d4:6b:5f:d8:89:dc: b1:01:f4:51:85:d7:2a:e9:11:cb:0a:e2:41:a0:cb: 29:c0:a5:67:04:14:fd:03:7d:d2:ef:d7:7d:33:b6: 3f:bd:88:c3:95:fb:c3:bf:57:e4:ff:f2:01:d7:9a: dd:5d:54:19:c3:d6:7b:71:4d:00:1f:01:6a:66:3b: 63:e7:02:68:bb:e3:d5:1d:ed:9c:7a:70:1e:ea:1f: 42:52:23:a8:44:0a:b3:bd:20:6c:6f:72:68:1d:e3: 89:62:7b:fd:41:fd:57:f1:de:5a:15:a3:f7:12:b7: 36:9d:5a:78:ea:e0:22:ee:50:ef:e5:02:7f:01:f6: fb:3c:e0:5d:af:ad:54:76:23:ca:e2:24:12:97:0b: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:03:F4:A1:92:90:1B:35:7F:F1:57:EC:57:4D:BC:8E:B1:5B:A3:CF X509v3 Authority Key Identifier: keyid:12:92:85:A4:78:A1:66:EE:0B:54:DB:CD:A6:07:71:DA:54:C4:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129285A478A166EE0B54DBCDA60771DA54C4F65F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/129285A478A166EE0B54DBCDA60771DA54C4F65F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:40:eb:24:27:ea:b5:60:7f:55:7b:61:a8:ee:9c:91:e5:fa: ac:a8:6f:3b:fc:34:60:6b:02:80:e8:96:92:3d:ad:af:de:d4: e1:5c:ad:b7:b1:23:f9:95:81:44:ac:92:4b:35:6e:50:ba:8f: e2:4d:d1:21:3d:6a:c6:3d:02:85:f6:6b:4b:96:08:ab:34:c9: f8:9c:b3:ba:92:50:4a:57:3a:31:69:4b:19:34:cf:a2:9a:71: 82:11:87:77:23:c4:ef:6b:aa:f9:3b:82:28:69:55:36:18:1e: 1f:0e:52:ba:b0:b8:04:94:0b:da:ec:b7:42:8d:2a:ac:88:13: 87:8c:fe:70:eb:ec:c1:8f:9f:ae:c4:c9:28:96:48:b6:53:49: 34:a2:8e:67:ff:e4:b8:48:aa:c1:46:e7:da:71:ad:61:f3:8c: 30:52:df:04:1c:0b:1d:4a:27:ef:f1:36:04:d1:cc:67:aa:82: 9b:db:d9:af:92:a0:3d:61:80:69:d0:cf:85:7a:fa:62:ed:25: ff:ac:f6:e6:40:0e:f4:97:66:c0:0e:0a:62:7f:3f:ad:25:e8: 57:22:16:86:42:db:fa:86:c2:21:5f:28:79:50:41:ed:a8:9e: e1:ad:9a:5c:89:55:74:0f:05:b5:c6:ea:57:32:5e:ba:fb:c5: d2:81:f0:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZVQfyYd5tTVJ055M2kET6IBmUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1 NEM0RjY1RjAeFw0yNTEyMDcwMzM1MzlaFw0yNTEyMTAxMjM4MzlaMDMxMTAvBgNV BAMTKEYzMDNGNEExOTI5MDFCMzU3RkYxNTdFQzU3NERCQzhFQjE1QkEzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLdBHMa6A5HF4sx4ub8szi9Ow NSIl0smV7wrNqpHYiazt1TeZxytA/4Ci+TzEWwyg39KUhMXLkdjbPDlk9SZKo9Q+ tv2TLCngSq9SOm517dv90+oWzTPHRWYu/uXeqDLK1Sn1wV6HKWMG+7k3svIJKNRr X9iJ3LEB9FGF1yrpEcsK4kGgyynApWcEFP0DfdLv130ztj+9iMOV+8O/V+T/8gHX mt1dVBnD1ntxTQAfAWpmO2PnAmi749Ud7Zx6cB7qH0JSI6hECrO9IGxvcmgd44li e/1B/Vfx3loVo/cStzadWnjq4CLuUO/lAn8B9vs84F2vrVR2I8riJBKXC3u3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8wP0oZKQGzV/8VfsV028jrFbo88wHwYDVR0j BBgwFoAUEpKFpHihZu4LVNvNpgdx2lTE9l8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 M2Q5MjY4Yi01ZTYxLTQzYjItYTYyNC00MWIwMWQ3ZDc2YjIvMC8xMjkyODVBNDc4 QTE2NkVFMEI1NERCQ0RBNjA3NzFEQTU0QzRGNjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcxREE1NEM0 RjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTNkOTI2OGItNWU2MS00M2IyLWE2 MjQtNDFiMDFkN2Q3NmIyLzAvMTI5Mjg1QTQ3OEExNjZFRTBCNTREQkNEQTYwNzcx REE1NEM0RjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhA6yQn6rVgf1V7YajunJHl+qyobzv8NGBr AoDolpI9ra/e1OFcrbexI/mVgUSskks1blC6j+JN0SE9asY9AoX2a0uWCKs0yfic s7qSUEpXOjFpSxk0z6KacYIRh3cjxO9rqvk7gihpVTYYHh8OUrqwuASUC9rst0KN KqyIE4eM/nDr7MGPn67EySiWSLZTSTSijmf/5LhIqsFG59pxrWHzjDBS3wQcCx1K J+/xNgTRzGeqgpvb2a+SoD1hgGnQz4V6+mLtJf+s9uZADvSXZsAOCmJ/P60l6Fci FoZC2/qGwiFfKHlQQe2onuGtmlyJVXQPBbXG6lcyXrr7xdKB8Lw= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:20 2025 by rpki-client