This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: yJXvT2ONvj1OurT9lXAvm/KL+cLNn/e1CvhoOQZdmv0= Subject key identifier: E8:AB:52:A1:94:DA:9C:3F:62:06:D3:CB:24:CE:E3:77:FA:00:58:20 Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 5399A0E7C90EFDDEBF648137F8BB77CBB7607F5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 0259 Signing time: Mon 15 Dec 2025 14:52:22 +0000 Manifest this update: Mon 15 Dec 2025 14:47:22 +0000 Manifest next update: Thu 18 Dec 2025 16:39:22 +0000 Files and hashes: 1: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: 1ohXfgQVLOVqfzLUY6nq2zHsOKGWcr19CJg3R6qlyZU=) 2: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: UsaoHBrIcp6CVrlWDLS6dvUXEuDRCktjytTMcsdGa0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 16:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:99:a0:e7:c9:0e:fd:de:bf:64:81:37:f8:bb:77:cb:b7:60:7f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Dec 15 14:47:22 2025 GMT Not After : Dec 18 16:39:22 2025 GMT Subject: CN=E8AB52A194DA9C3F6206D3CB24CEE377FA005820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:c4:b6:a7:18:72:9e:8f:c3:66:41:eb:f4: 82:7a:d2:63:d9:a0:20:2b:63:bb:2d:63:a3:71:b3: 51:58:ec:58:8c:97:13:1d:69:9f:eb:49:6f:e5:3c: 53:69:57:f1:3a:35:7e:38:c6:eb:5a:f2:11:27:3b: 0c:27:db:16:f0:0c:b3:9f:0e:78:bf:98:e0:c9:d3: 27:d4:29:3c:a8:3e:15:ba:b8:17:29:14:af:ce:2e: 6a:17:92:ae:db:e0:89:55:82:c5:f3:65:34:08:4e: a8:19:78:e5:44:b6:af:04:6a:8d:6c:e9:08:18:1a: fd:a7:f5:02:c0:04:ec:87:33:8b:c4:40:67:f7:24: 6e:b6:ef:d9:51:f1:65:16:65:ae:90:43:24:f8:20: d2:0b:4a:2b:21:52:fe:54:6f:90:da:c8:46:f8:be: 4b:e3:26:6a:82:7e:fb:e8:78:cc:bc:f2:ca:18:04: 7f:e4:e8:10:55:9c:2b:d1:3e:64:5c:68:8c:14:e7: 00:83:3e:20:ea:81:b7:dc:8f:0c:61:8e:36:c8:ca: 52:08:21:93:52:b8:50:3e:f0:5f:06:95:5d:c2:2a: 12:a7:c5:88:ad:5e:39:5b:ec:fc:65:82:c2:1c:16: 39:a6:4c:83:d1:35:7c:04:8b:31:31:7b:7a:25:d4: 58:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AB:52:A1:94:DA:9C:3F:62:06:D3:CB:24:CE:E3:77:FA:00:58:20 X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:89:68:fc:30:2d:6a:d5:10:e5:9e:b8:05:7b:57:59:d2:60: 55:4c:35:3a:d5:c9:94:88:09:4c:46:af:0a:0b:08:05:5f:13: df:36:59:46:17:7f:a5:d8:c7:ea:ea:75:73:f6:f1:99:ab:b1: 64:2f:ec:69:2e:7a:ec:89:ef:ac:79:15:b7:31:cc:a5:b7:54: 29:91:18:01:07:46:b9:5e:2d:72:60:49:b3:63:c0:c5:e6:c1: 62:18:69:02:a4:6a:dc:7c:0c:34:ee:75:53:6d:f2:cd:0c:50: f7:c3:10:53:e9:ce:1e:2d:f3:7e:73:b5:d3:64:39:76:44:bf: 3f:d9:eb:12:76:2f:02:e4:ee:7a:5c:da:ac:09:fd:4a:e2:a6: 19:39:de:be:13:2b:e0:ac:bc:7e:5a:75:ae:4c:09:4a:7e:2f: 56:a9:53:b5:4d:58:6a:42:a3:c0:a8:ad:19:33:2b:9a:e7:2e: a1:ab:c8:69:db:08:bc:4c:d8:f8:5b:d8:9d:8b:9b:50:85:3b: ae:ef:02:46:46:ae:91:4b:62:b2:0f:5d:5d:ed:b4:d2:41:d2: 46:a8:43:ab:b4:3f:1f:40:61:10:01:6b:af:ab:2a:10:02:91: 4a:ab:f6:4d:83:d9:d0:15:fb:1a:57:39:a8:89:0f:5b:88:f4: 67:d2:8f:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5mg58kO/d6/ZIE3+Lt3y7dgf10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNTEyMTUxNDQ3MjJaFw0yNTEyMTgxNjM5MjJaMDMxMTAvBgNV BAMTKEU4QUI1MkExOTREQTlDM0Y2MjA2RDNDQjI0Q0VFMzc3RkEwMDU4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl08S2pxhyno/DZkHr9IJ60mPZ oCArY7stY6Nxs1FY7FiMlxMdaZ/rSW/lPFNpV/E6NX44xuta8hEnOwwn2xbwDLOf Dni/mODJ0yfUKTyoPhW6uBcpFK/OLmoXkq7b4IlVgsXzZTQITqgZeOVEtq8Eao1s 6QgYGv2n9QLABOyHM4vEQGf3JG6279lR8WUWZa6QQyT4INILSishUv5Ub5DayEb4 vkvjJmqCfvvoeMy88soYBH/k6BBVnCvRPmRcaIwU5wCDPiDqgbfcjwxhjjbIylII IZNSuFA+8F8GlV3CKhKnxYitXjlb7PxlgsIcFjmmTIPRNXwEizExe3ol1FhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6KtSoZTanD9iBtPLJM7jd/oAWCAwHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiJaPwwLWrVEOWeuAV7V1nSYFVMNTrVyZSI CUxGrwoLCAVfE982WUYXf6XYx+rqdXP28ZmrsWQv7GkueuyJ76x5FbcxzKW3VCmR GAEHRrleLXJgSbNjwMXmwWIYaQKkatx8DDTudVNt8s0MUPfDEFPpzh4t835ztdNk OXZEvz/Z6xJ2LwLk7npc2qwJ/Uriphk53r4TK+CsvH5ada5MCUp+L1apU7VNWGpC o8CorRkzK5rnLqGryGnbCLxM2Phb2J2Lm1CFO67vAkZGrpFLYrIPXV3ttNJB0kao Q6u0Px9AYRABa6+rKhACkUqr9k2D2dAV+xpXOaiJD1uI9GfSj3s= -----END CERTIFICATE-----Generated at Mon Dec 15 20:21:23 2025 by rpki-client