This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft File: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft (raw, json) Hash identifier: dSK/sYAabwkIStDXFZMP6lPHSYHlftLGFsLBw0wZoSw= Subject key identifier: 05:DB:CE:9C:FD:B4:EC:9C:14:38:17:CE:4F:80:07:61:73:93:99:49 Authority key identifier: 2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF Certificate issuer: /CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Certificate serial: 1E46CF12D8B1E37141A5F134999D1563FBB71139 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft Manifest number: 0255 Signing time: Sat 06 Dec 2025 17:02:26 +0000 Manifest this update: Sat 06 Dec 2025 16:57:26 +0000 Manifest next update: Tue 09 Dec 2025 20:27:26 +0000 Files and hashes: 1: 2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl (hash: gjRBhPWlRXRtlnMcNZZUWExf7OffysSAbOtsRFEf4NY=) 2: 3130332e3138342e3138322e302f32342d3234203d3e20313439363736.roa (hash: 1ohXfgQVLOVqfzLUY6nq2zHsOKGWcr19CJg3R6qlyZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:46:cf:12:d8:b1:e3:71:41:a5:f1:34:99:9d:15:63:fb:b7:11:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF Validity Not Before: Dec 6 16:57:26 2025 GMT Not After : Dec 9 20:27:26 2025 GMT Subject: CN=05DBCE9CFDB4EC9C143817CE4F80076173939949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:da:5d:fc:cf:1d:e7:6e:e8:77:e7:ae:c4: f4:df:89:4a:0b:db:a4:f3:8c:f2:24:4e:5a:10:9b: 49:96:93:d8:e1:17:6a:39:88:cc:d0:6d:97:dc:e3: 97:0c:35:9b:35:71:15:a0:c0:66:50:8e:b2:40:7d: d1:d1:2a:af:a4:70:3f:d7:c3:4e:28:4b:5f:61:b5: c3:51:37:34:07:c0:49:a3:96:59:56:4b:76:8b:87: 07:1f:24:23:f9:b7:e4:63:f2:ae:6c:8d:96:73:cd: 6c:12:4f:04:2a:59:f2:d0:cf:aa:75:75:ce:c3:d5: f1:3d:0c:d7:b1:2c:d5:51:68:7b:44:be:64:40:c7: b9:16:76:80:e0:76:b7:f8:b0:bf:89:ad:a6:62:cb: 0e:a1:2e:5e:79:5e:3b:67:9b:a6:57:e3:80:c9:d8: 86:10:80:72:b1:43:37:b8:11:1c:94:31:31:19:cb: b9:b7:98:88:17:99:45:22:59:35:dc:7d:bc:79:2b: 28:07:33:c0:46:e6:2f:32:81:20:42:80:5a:0a:ea: 89:75:cd:45:e8:df:59:30:90:cd:97:59:f4:b9:f2: 77:27:0d:30:a8:db:63:d7:b6:de:e8:b3:22:33:c9: 83:c1:21:23:80:45:52:93:cd:cb:b0:1f:b4:e8:ac: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:CE:9C:FD:B4:EC:9C:14:38:17:CE:4F:80:07:61:73:93:99:49 X509v3 Authority Key Identifier: keyid:2E:29:F4:8B:C4:E2:FD:64:21:F1:2F:27:5B:FE:54:CB:5A:FC:4C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb25f0eb-3c4d-4fc7-b3a4-adb2297de6cf/0/2E29F48BC4E2FD6421F12F275BFE54CB5AFC4CBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:77:eb:b3:08:a4:10:3a:66:ed:a1:d9:b4:30:2f:c1:d7:01: 24:07:6c:cf:ce:38:ac:02:54:a5:6f:fa:7c:1a:82:6e:d9:6d: 44:12:35:4a:fd:14:db:62:89:67:e6:aa:b5:47:ed:43:f1:e2: 32:d4:9a:70:d1:7c:32:7c:e0:c0:3a:57:79:dc:66:ae:44:1e: 9c:5d:0c:31:e8:e0:15:97:9c:d5:ec:79:e2:98:86:55:50:56: ad:d5:98:b4:09:5b:67:b8:5d:5d:4b:82:70:10:4a:d2:64:1f: 26:8d:47:e1:77:cf:cd:78:57:e5:1b:23:cb:50:4f:86:cc:c2: 87:1d:c6:89:42:89:70:51:db:15:08:d0:22:9a:a9:ce:b1:d5: 5a:b7:06:80:2d:46:2a:b1:80:18:cd:a4:b5:f8:a2:22:27:01: 82:1d:2c:32:70:de:df:fd:a6:4a:a6:69:79:9e:60:b4:67:32: c6:85:e8:04:d4:73:ba:ce:d5:60:06:38:45:68:fc:5c:c6:83: c6:85:06:e3:c2:87:57:38:12:23:13:0a:3e:fc:a5:f3:86:33: 62:e8:65:25:c2:3e:75:ff:d6:c0:75:84:53:ba:02:7f:5d:60: 17:45:74:bb:d5:dc:16:35:fd:44:b1:d9:54:5d:4a:1a:ee:a7: 83:cf:fb:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkbPEtix43FBpfE0mZ0VY/u3ETkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1 QUZDNENCRjAeFw0yNTEyMDYxNjU3MjZaFw0yNTEyMDkyMDI3MjZaMDMxMTAvBgNV BAMTKDA1REJDRTlDRkRCNEVDOUMxNDM4MTdDRTRGODAwNzYxNzM5Mzk5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCglNpd/M8d527od+euxPTfiUoL 26TzjPIkTloQm0mWk9jhF2o5iMzQbZfc45cMNZs1cRWgwGZQjrJAfdHRKq+kcD/X w04oS19htcNRNzQHwEmjlllWS3aLhwcfJCP5t+Rj8q5sjZZzzWwSTwQqWfLQz6p1 dc7D1fE9DNexLNVRaHtEvmRAx7kWdoDgdrf4sL+JraZiyw6hLl55Xjtnm6ZX44DJ 2IYQgHKxQze4ERyUMTEZy7m3mIgXmUUiWTXcfbx5KygHM8BG5i8ygSBCgFoK6ol1 zUXo31kwkM2XWfS58ncnDTCo22PXtt7osyIzyYPBISOARVKTzcuwH7TorC1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdvOnP207JwUOBfOT4AHYXOTmUkwHwYDVR0j BBgwFoAULin0i8Ti/WQh8S8nW/5Uy1r8TL8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjI1ZjBlYi0zYzRkLTRmYzctYjNhNC1hZGIyMjk3ZGU2Y2YvMC8yRTI5RjQ4QkM0 RTJGRDY0MjFGMTJGMjc1QkZFNTRDQjVBRkM0Q0JGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0Q0I1QUZD NENCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIyNWYwZWItM2M0ZC00ZmM3LWIz YTQtYWRiMjI5N2RlNmNmLzAvMkUyOUY0OEJDNEUyRkQ2NDIxRjEyRjI3NUJGRTU0 Q0I1QUZDNENCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKp367MIpBA6Zu2h2bQwL8HXASQHbM/OOKwC VKVv+nwagm7ZbUQSNUr9FNtiiWfmqrVH7UPx4jLUmnDRfDJ84MA6V3ncZq5EHpxd DDHo4BWXnNXseeKYhlVQVq3VmLQJW2e4XV1LgnAQStJkHyaNR+F3z814V+UbI8tQ T4bMwocdxolCiXBR2xUI0CKaqc6x1Vq3BoAtRiqxgBjNpLX4oiInAYIdLDJw3t/9 pkqmaXmeYLRnMsaF6ATUc7rO1WAGOEVo/FzGg8aFBuPCh1c4EiMTCj78pfOGM2Lo ZSXCPnX/1sB1hFO6An9dYBdFdLvV3BY1/USx2VRdShrup4PP+1I= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:28 2025 by rpki-client