This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft File: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft (raw, json) Hash identifier: imde2zx3636hkY4PDzOOxxlTFExMq3t6twDifNWd/Ko= Subject key identifier: 6D:47:42:68:8A:CD:B9:67:D7:1C:60:E0:83:43:29:F0:7F:6E:C5:9B Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 Certificate issuer: /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Certificate serial: 5AA394B66E66E0F3B82309412E5F87191594B9ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft Manifest number: 0249 Signing time: Thu 18 Dec 2025 19:10:57 +0000 Manifest this update: Thu 18 Dec 2025 19:05:57 +0000 Manifest next update: Mon 22 Dec 2025 05:46:57 +0000 Files and hashes: 1: 3130332e39312e302e302f32322d3234203d3e203338343936.roa (hash: wv8n7StfxDFbmD7Ly60Xxhfvtx0y7e5MyzLxrZhGA1A=) 2: 34352e3131332e3232382e302f32322d3234203d3e20313339333936.roa (hash: Vo/mboEbk69z19LDtpsICVZqO1i3uTxReKXu5TG16v8=) 3: 129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl (hash: PGC8eFxdSD//XzzD6rjfGSBMH7uWPFJfXxNBD/6ZXqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a3:94:b6:6e:66:e0:f3:b8:23:09:41:2e:5f:87:19:15:94:b9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9 Validity Not Before: Dec 18 19:05:57 2025 GMT Not After : Dec 22 05:46:57 2025 GMT Subject: CN=6D4742688ACDB967D71C60E0834329F07F6EC59B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:60:43:5a:67:a3:e9:d7:26:4d:0c:38:8f:87: fc:d2:31:6c:d5:51:d1:5e:b0:ab:86:64:34:dd:a5: dc:1e:eb:57:91:5c:c5:83:1b:35:0b:d4:dd:87:f3: 8b:d9:53:4c:62:20:ca:0f:8d:81:a8:0f:f6:72:6c: 66:90:46:a8:fd:3b:c7:c4:89:04:be:75:78:94:1d: 9e:84:4a:99:55:17:9c:03:53:8d:c3:2f:43:fe:81: 0e:11:96:a5:e7:af:f8:18:14:5b:5c:2a:91:13:af: 15:3c:29:d7:95:0e:78:74:e6:5d:fd:3e:b0:86:bf: b7:1f:ba:a8:65:18:b4:e5:80:b0:a2:92:f8:58:99: e3:0e:3c:0c:b8:1e:c8:a6:7b:54:a4:71:cb:6c:38: 11:1f:fa:ba:d3:aa:4b:a1:54:ac:17:90:c5:11:0f: 11:f1:34:48:a4:ab:a1:9e:0b:c6:da:3d:91:d7:97: e9:81:4c:9a:7c:35:44:6f:82:2d:4b:63:da:1e:6b: 3c:8b:4e:79:69:60:f8:35:95:ae:09:cf:93:bb:47: 70:4d:37:6d:cf:db:5f:65:ac:87:a7:3f:93:eb:5e: ce:0a:df:83:5f:65:11:49:04:b2:be:32:8f:d0:a8: ea:6d:37:56:24:c8:5b:89:52:d9:d3:60:82:f7:fe: e5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:42:68:8A:CD:B9:67:D7:1C:60:E0:83:43:29:F0:7F:6E:C5:9B X509v3 Authority Key Identifier: keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ad:8e:96:78:7d:d1:5d:85:46:4c:cf:48:ff:aa:fd:6c:12: e8:ba:ec:21:21:bd:8c:c6:26:56:cc:30:d4:cc:0e:94:bf:34: 13:dd:30:4b:4d:2e:b9:b7:7b:b3:89:09:5d:a9:46:5c:aa:4c: d6:64:54:a2:56:f0:ed:95:02:34:c4:d8:c8:91:aa:1c:a6:8a: 53:ef:6f:f9:3f:17:a6:08:6e:ad:52:2e:9f:bd:5a:5f:8c:24: b3:80:8b:60:a7:4d:35:0d:5b:be:a7:16:0d:e8:f5:9b:a5:a4: f5:4e:f4:4d:64:55:b6:eb:53:c7:92:5d:ea:5a:ac:b6:9b:65: 82:5c:b9:11:ab:52:fa:d4:fd:f3:93:e0:83:bb:62:90:73:4c: f4:a0:4d:4d:ba:67:29:83:92:0f:4a:64:1c:3d:5f:f8:59:99: b0:b0:fd:89:89:a3:9b:a5:1a:cc:d5:a0:20:9e:dc:e3:97:20: cc:2f:0e:c5:ad:ee:0a:b8:44:5d:cb:44:09:e8:34:a2:2b:d0: fc:31:38:2a:46:59:da:49:8b:fb:d0:62:cf:a1:21:c1:53:d1: 03:86:a8:0e:39:19:27:cb:4f:54:9f:1a:53:68:8e:85:34:e6: 98:94:8f:1f:27:6f:08:51:aa:eb:f9:82:a5:7a:11:48:51:ce: 3d:e9:92:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqOUtm5m4PO4IwlBLl+HGRWUue0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD M0NFNTdGOTAeFw0yNTEyMTgxOTA1NTdaFw0yNTEyMjIwNTQ2NTdaMDMxMTAvBgNV BAMTKDZENDc0MjY4OEFDREI5NjdENzFDNjBFMDgzNDMyOUYwN0Y2RUM1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYENaZ6Pp1yZNDDiPh/zSMWzV UdFesKuGZDTdpdwe61eRXMWDGzUL1N2H84vZU0xiIMoPjYGoD/ZybGaQRqj9O8fE iQS+dXiUHZ6ESplVF5wDU43DL0P+gQ4RlqXnr/gYFFtcKpETrxU8KdeVDnh05l39 PrCGv7cfuqhlGLTlgLCikvhYmeMOPAy4Hsime1SkcctsOBEf+rrTqkuhVKwXkMUR DxHxNEikq6GeC8baPZHXl+mBTJp8NURvgi1LY9oeazyLTnlpYPg1la4Jz5O7R3BN N23P219lrIenP5PrXs4K34NfZRFJBLK+Mo/QqOptN1YkyFuJUtnTYIL3/uUXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbUdCaIrNuWfXHGDgg0Mp8H9uxZswHwYDVR0j BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4 RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF NTdGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm YWYtMmI1YjkxNTNlNTJkLzAvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0 MERDM0NFNTdGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECtjpZ4fdFdhUZMz0j/qv1sEui67CEhvYzG JlbMMNTMDpS/NBPdMEtNLrm3e7OJCV2pRlyqTNZkVKJW8O2VAjTE2MiRqhymilPv b/k/F6YIbq1SLp+9Wl+MJLOAi2CnTTUNW76nFg3o9ZulpPVO9E1kVbbrU8eSXepa rLabZYJcuRGrUvrU/fOT4IO7YpBzTPSgTU26ZymDkg9KZBw9X/hZmbCw/YmJo5ul GszVoCCe3OOXIMwvDsWt7gq4RF3LRAnoNKIr0PwxOCpGWdpJi/vQYs+hIcFT0QOG qA45GSfLT1SfGlNojoU05piUjx8nbwhRquv5gqV6EUhRzj3pkpM= -----END CERTIFICATE-----Generated at Thu Dec 18 23:07:19 2025 by rpki-client