This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft File: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json) Hash identifier: EUf+EUYsWMK9OfkOttGeOk60YQoEmao4hZdsOrpR1e0= Subject key identifier: B2:77:7C:24:E3:AD:5B:71:FD:50:6B:06:88:33:75:6C:FF:D1:3D:AA Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 0321529C449843F6E714AC2065894B5FF489B610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft Manifest number: 0500 Signing time: Fri 05 Dec 2025 04:02:09 +0000 Manifest this update: Fri 05 Dec 2025 03:57:09 +0000 Manifest next update: Mon 08 Dec 2025 05:40:09 +0000 Files and hashes: 1: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: KM8/S7ppj7ZKlH6USkUrolBabWldEufGdSYVIuPo7YA=) 2: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: KRbdEJvKURW+VgG7P6m8/xbRP6/xVRqHAh+GE/ZxmJg=) 3: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: D6GCo3ceVvJhAX1b+afxEUHTBD9rmTcpfSp7SCURViA=) 4: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: 3p6KpA6/uKsXu1iiVTHxP1H1aKBvRxURT7LJ3HzRuNw=) 5: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: LrRa5/YbMQIirnwavEqQmjlSXIv4GPDAL8XSH/RPz2k=) 6: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: pAsXLpsnvtFY9CiLQfO4MgBTQXdXjfq9fjmjjZL7V7Y=) 7: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: 1MuWl4R2LfAc9czxG6/QjtCE9g5QKK5BETiXC4FMLHs=) 8: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: Cf4F1dHsLMAEwRXj/sLvggNAyN9aUktmarNyz8vl8uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:21:52:9c:44:98:43:f6:e7:14:ac:20:65:89:4b:5f:f4:89:b6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Dec 5 03:57:09 2025 GMT Not After : Dec 8 05:40:09 2025 GMT Subject: CN=B2777C24E3AD5B71FD506B068833756CFFD13DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ee:df:8d:8e:d5:ba:be:df:40:4b:0d:3c:23: b8:30:04:1e:40:37:89:4e:15:e0:e0:81:b0:59:98: fa:62:3f:ea:3c:aa:07:34:d9:7e:dc:3f:88:38:78: 8b:f0:c2:f8:f5:f3:79:c0:54:d4:7b:6d:36:d4:24: d6:3e:0a:27:5d:ef:57:dd:5a:63:21:81:42:09:72: 69:a6:e8:96:19:02:ba:c6:02:d8:da:73:6d:18:e7: 86:b0:ec:2e:b4:17:a8:c1:bb:ee:80:93:83:cd:c8: 76:75:2e:09:39:fb:cc:90:66:2e:fd:95:f3:83:32: 05:82:04:a3:23:01:fd:9f:eb:33:f0:3d:3d:7a:4c: 1a:dc:1a:22:43:48:38:f5:2e:ca:f4:ff:a7:ed:9b: 1e:ed:7c:c1:c0:49:aa:e0:11:13:fd:64:ee:b3:21: 97:cc:42:cf:79:01:58:3e:f3:2e:4d:79:0e:40:c3: 34:cd:8a:ca:ec:df:a8:5b:87:33:34:7f:7b:e5:28: c3:c4:0f:03:56:63:bc:26:57:6a:ef:24:62:ba:a5: 59:2a:e9:43:bd:de:13:12:8e:8d:6d:7d:c0:69:8b: e9:56:4d:8a:06:5a:d8:df:be:4c:d6:4b:c8:30:82: 53:cb:0e:a8:76:c8:4a:d9:91:40:26:8c:1e:90:e4: 66:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:77:7C:24:E3:AD:5B:71:FD:50:6B:06:88:33:75:6C:FF:D1:3D:AA X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:6f:41:c9:c7:c0:c2:b5:57:36:4b:53:3a:e2:8f:ad:8a:ef: f7:f3:1b:f4:55:66:f0:69:5b:93:75:95:18:13:d2:ec:28:6f: 32:7b:73:08:94:34:21:9b:62:2f:89:01:c4:96:eb:6c:8e:e9: 8d:e1:78:10:75:4e:8a:bd:d4:83:98:92:41:7d:69:87:79:85: 09:1a:39:7e:8d:01:33:c4:f5:67:0d:65:be:97:96:10:b3:32: 37:7e:ba:09:76:1e:cc:ca:20:33:60:f4:18:e1:a5:10:16:80: 98:cb:c1:bf:68:98:bd:4d:41:bb:61:91:1e:93:1d:bd:5f:25: 94:d7:f7:b1:35:a2:76:be:e9:ea:37:c3:70:cb:e7:9b:5b:d6: 36:a1:5b:b4:6e:e3:99:b8:87:46:2f:63:6a:8c:85:f7:04:17: 46:53:84:ea:54:be:20:6c:3a:58:6c:d2:c2:94:51:cd:ed:9b: e1:d6:d6:05:b7:8e:ee:26:c6:68:63:f9:75:e5:f6:e0:f9:ef: 7e:ee:a3:7e:84:a3:1e:a8:5d:99:40:6b:3e:b6:92:e0:d1:9e: 45:7b:19:cd:9a:88:7d:44:4b:19:c1:19:e0:1b:56:47:71:7f: 76:14:93:70:bf:81:85:eb:59:d7:dd:dc:da:2a:d8:ac:0d:02: ac:3b:bc:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyFSnESYQ/bnFKwgZYlLX/SJthAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNTEyMDUwMzU3MDlaFw0yNTEyMDgwNTQwMDlaMDMxMTAvBgNV BAMTKEIyNzc3QzI0RTNBRDVCNzFGRDUwNkIwNjg4MzM3NTZDRkZEMTNEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw7t+NjtW6vt9ASw08I7gwBB5A N4lOFeDggbBZmPpiP+o8qgc02X7cP4g4eIvwwvj183nAVNR7bTbUJNY+Cidd71fd WmMhgUIJcmmm6JYZArrGAtjac20Y54aw7C60F6jBu+6Ak4PNyHZ1Lgk5+8yQZi79 lfODMgWCBKMjAf2f6zPwPT16TBrcGiJDSDj1Lsr0/6ftmx7tfMHASargERP9ZO6z IZfMQs95AVg+8y5NeQ5AwzTNisrs36hbhzM0f3vlKMPEDwNWY7wmV2rvJGK6pVkq 6UO93hMSjo1tfcBpi+lWTYoGWtjfvkzWS8gwglPLDqh2yErZkUAmjB6Q5GbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsnd8JOOtW3H9UGsGiDN1bP/RPaowHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2 QjVERDc4QzVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlvQcnHwMK1VzZLUzrij62K7/fzG/RVZvBp W5N1lRgT0uwobzJ7cwiUNCGbYi+JAcSW62yO6Y3heBB1Toq91IOYkkF9aYd5hQka OX6NATPE9WcNZb6XlhCzMjd+ugl2HszKIDNg9BjhpRAWgJjLwb9omL1NQbthkR6T Hb1fJZTX97E1ona+6eo3w3DL55tb1jahW7Ru45m4h0YvY2qMhfcEF0ZThOpUviBs Olhs0sKUUc3tm+HW1gW3ju4mxmhj+XXl9uD5737uo36Eox6oXZlAaz62kuDRnkV7 Gc2aiH1ESxnBGeAbVkdxf3YUk3C/gYXrWdfd3Noq2KwNAqw7vEU= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:26 2025 by rpki-client