This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: +JMqc8uviF4oLgu42OccamjtXcLsiZXOUWLStmk9l+E= Subject key identifier: B3:60:04:64:5C:EF:B2:59:CB:24:24:A5:99:C5:35:66:85:03:A5:FC Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 0D51D39CE0D7ED4D87CF94F08B30702D818698E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0243 Signing time: Thu 04 Dec 2025 18:10:57 +0000 Manifest this update: Thu 04 Dec 2025 18:05:57 +0000 Manifest next update: Mon 08 Dec 2025 05:54:57 +0000 Files and hashes: 1: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: E+HLTdbjcaydgBv4RjmU5RHc0Wjqw5UKhtuK03w2yZw=) 2: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) 3: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:51:d3:9c:e0:d7:ed:4d:87:cf:94:f0:8b:30:70:2d:81:86:98:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Dec 4 18:05:57 2025 GMT Not After : Dec 8 05:54:57 2025 GMT Subject: CN=B36004645CEFB259CB2424A599C535668503A5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:f5:1d:4d:e8:40:f8:6f:29:76:27:af:e7: e9:8a:99:91:63:29:36:fe:38:cb:36:62:b4:74:02: 2b:63:db:93:77:7d:55:72:ec:d3:3e:9e:4c:de:f4: 11:93:e6:a9:17:b1:c5:99:35:97:3e:ef:c4:3f:57: ce:6d:2f:b5:49:89:93:89:12:98:51:5f:44:ff:76: c4:85:fa:b1:03:b7:d7:27:b5:42:7e:61:68:f9:73: 0a:d5:aa:8c:5b:ff:a8:66:18:6e:3d:88:b1:8e:18: 09:d6:e1:d3:c8:06:73:ac:7c:41:c3:94:7b:ae:f1: 36:b8:bb:5c:2f:b6:89:ce:61:ea:d7:d1:72:4b:e3: cc:58:1c:67:05:9e:77:35:44:db:7a:83:7d:99:69: 11:ec:f1:0b:70:96:0b:59:33:d7:b0:6c:2c:f0:14: 93:9a:a2:e6:e6:eb:47:7b:7c:39:0c:ee:4b:df:4a: cc:93:1e:61:b6:65:58:3b:7f:59:d0:79:91:20:ab: 21:5f:88:0e:87:20:d0:11:e7:d7:17:20:0d:95:e1: a9:da:7e:06:32:49:e8:03:af:c2:2a:19:8b:d2:5e: f1:98:4d:79:9c:0d:42:ce:4e:3a:92:0f:14:f4:b7: c7:7d:1f:a1:fa:6f:73:97:53:c3:4f:39:c2:74:30: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:60:04:64:5C:EF:B2:59:CB:24:24:A5:99:C5:35:66:85:03:A5:FC X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f2:a1:b6:db:11:c5:13:f8:00:31:88:bc:22:87:cc:2c:f6: 7b:d0:2c:a7:ad:e1:0b:85:0f:5b:4b:6d:19:7d:9e:7c:22:3e: db:42:0d:e7:6c:c5:37:af:04:69:50:cf:f6:d7:8d:4d:4c:a5: 4b:30:01:69:65:0e:44:01:96:c6:e9:0a:07:2b:31:e8:85:2b: 1a:db:8b:4c:05:fc:b3:b7:48:e4:02:c2:8c:02:17:00:88:48: 43:4a:d7:b3:17:55:2e:b5:9e:9f:58:dd:33:bc:a6:db:f2:83: 2d:b6:9b:98:25:99:21:8d:d0:c5:0e:6b:a8:e5:84:8f:a7:a9: b2:0e:e1:49:51:bb:2b:4c:11:4b:0b:13:42:8e:e2:42:20:06: 74:93:a9:89:4a:18:8d:6a:21:cb:7c:87:4e:83:94:91:df:e8: 28:f7:22:63:06:f4:1f:39:e5:ee:af:57:d6:3b:53:3a:89:d0: 0f:28:b4:18:3c:fa:78:05:7b:8e:01:f8:a6:5a:71:82:75:0a: d6:a3:0a:49:31:5a:d8:e1:fd:78:09:79:7d:11:4c:54:b7:fc: 4a:dd:45:96:42:b6:98:37:28:fd:62:ab:c0:52:5f:f3:ef:ac: ac:59:bb:4a:a8:79:a5:2f:81:54:25:a2:c9:29:a3:27:c5:ce: a0:81:31:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVHTnODX7U2Hz5TwizBwLYGGmOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTEyMDQxODA1NTdaFw0yNTEyMDgwNTU0NTdaMDMxMTAvBgNV BAMTKEIzNjAwNDY0NUNFRkIyNTlDQjI0MjRBNTk5QzUzNTY2ODUwM0E1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9/UdTehA+G8pdiev5+mKmZFj KTb+OMs2YrR0Aitj25N3fVVy7NM+nkze9BGT5qkXscWZNZc+78Q/V85tL7VJiZOJ EphRX0T/dsSF+rEDt9cntUJ+YWj5cwrVqoxb/6hmGG49iLGOGAnW4dPIBnOsfEHD lHuu8Ta4u1wvtonOYerX0XJL48xYHGcFnnc1RNt6g32ZaRHs8QtwlgtZM9ewbCzw FJOaoubm60d7fDkM7kvfSsyTHmG2ZVg7f1nQeZEgqyFfiA6HINAR59cXIA2V4ana fgYySegDr8IqGYvSXvGYTXmcDULOTjqSDxT0t8d9H6H6b3OXU8NPOcJ0MO+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs2AEZFzvslnLJCSlmcU1ZoUDpfwwHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDyobbbEcUT+AAxiLwih8ws9nvQLKet4QuF D1tLbRl9nnwiPttCDedsxTevBGlQz/bXjU1MpUswAWllDkQBlsbpCgcrMeiFKxrb i0wF/LO3SOQCwowCFwCISENK17MXVS61np9Y3TO8ptvygy22m5glmSGN0MUOa6jl hI+nqbIO4UlRuytMEUsLE0KO4kIgBnSTqYlKGI1qIct8h06DlJHf6Cj3ImMG9B85 5e6vV9Y7UzqJ0A8otBg8+ngFe44B+KZacYJ1CtajCkkxWtjh/XgJeX0RTFS3/Erd RZZCtpg3KP1iq8BSX/PvrKxZu0qoeaUvgVQloskpoyfFzqCBMeQ= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:43 2025 by rpki-client