This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft (raw, json) Hash identifier: H88eW/pyi/CEhwUM2mEoYz1hmDDf6DYrXp9NQIJqjcM= Subject key identifier: 3A:44:09:17:7E:F1:D9:DD:A2:DE:18:08:57:A8:C2:B8:E0:71:47:58 Authority key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Certificate issuer: /CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Certificate serial: 1095CBBC29DB61AC092A9DE55D2C6E3D49FAFDD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft Manifest number: 0242 Signing time: Fri 05 Dec 2025 10:51:22 +0000 Manifest this update: Fri 05 Dec 2025 10:46:22 +0000 Manifest next update: Mon 08 Dec 2025 20:03:22 +0000 Files and hashes: 1: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl (hash: h3KWXp/d2Sk5Kc4bQz+ZxUuDEg3KVi0SHn9C9OFa7Bs=) 2: 3130332e39312e33322e302f32322d3234203d3e203338343936.roa (hash: lG93mDy8mZJ1KYLzkUSHtFdOp3jxkVuITP5q7tld/tA=) 3: 3132332e3235332e3235322e302f32322d3234203d3e20313339333937.roa (hash: 1PlLZ70/l1XO167EbfOMkFAS5NVNN52M28JEV2n5Nfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:95:cb:bc:29:db:61:ac:09:2a:9d:e5:5d:2c:6e:3d:49:fa:fd:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Validity Not Before: Dec 5 10:46:22 2025 GMT Not After : Dec 8 20:03:22 2025 GMT Subject: CN=3A4409177EF1D9DDA2DE180857A8C2B8E0714758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:c2:d6:ba:38:2d:a3:22:75:fc:11:52:0a: 28:0d:85:56:78:52:ed:c6:f4:9b:50:31:cd:15:d3: 07:3d:ec:f4:1f:34:68:eb:a3:b1:7c:2c:8d:f8:25: 2b:96:55:b4:38:06:bc:24:be:9b:35:c5:9a:19:ad: 18:59:8e:91:d2:06:da:60:1e:83:72:ec:32:14:36: 4e:01:dd:d6:c4:ac:ad:4e:09:a8:91:2c:d9:35:5a: 3a:77:46:9a:64:e4:9d:5b:d6:ff:49:99:93:b1:94: 87:f2:9b:2c:5b:67:b0:73:73:fb:7d:2c:4e:2d:c4: e6:f0:18:f4:c2:18:6b:f1:e3:9a:8b:57:cf:ee:7d: ce:f2:5a:ef:89:c2:43:42:bb:6e:c1:76:02:26:e4: c9:75:17:af:8a:7c:63:11:b6:bf:3a:0a:ef:21:ce: 63:0f:52:db:35:4b:81:df:d2:93:32:36:0e:f8:91: c8:0c:59:c1:6c:97:74:44:3a:70:9b:23:b6:17:02: 17:54:f2:b9:8c:97:3f:93:0e:e1:fe:69:03:66:bf: 6c:f3:c1:45:ae:04:c7:2f:4f:fc:b1:de:52:72:e2: 74:09:e6:26:4d:2a:19:24:bd:ab:65:c2:62:cf:b9: 04:b3:70:dd:1a:b4:9b:f2:1a:70:ad:92:ba:ef:e6: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:44:09:17:7E:F1:D9:DD:A2:DE:18:08:57:A8:C2:B8:E0:71:47:58 X509v3 Authority Key Identifier: keyid:2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:64:77:c6:70:3c:2d:74:0d:9f:3d:a7:17:c4:79:d4:eb:6a: 51:55:5d:fe:d2:23:cd:24:d1:35:d1:bd:78:de:e6:f2:72:ea: 69:f6:f4:42:95:66:36:f1:54:bd:9b:db:ae:1d:75:24:f2:50: 33:29:1b:16:16:fa:a3:dc:bb:2a:fa:33:c0:42:b5:1a:ae:74: 5b:85:15:44:58:39:44:ba:5a:7f:80:7f:a5:5f:2d:33:fb:48: 4a:9b:90:3c:d6:a7:fb:5e:60:21:3a:92:82:f7:cc:97:26:07: b7:5b:10:86:5c:47:5a:ae:01:cd:9d:a8:39:7a:c9:50:22:6c: 9a:d5:bc:34:14:09:e6:23:d8:c2:48:d7:3e:ae:70:75:c1:fc: e8:df:4f:40:0a:e4:d4:30:5f:0f:f6:d1:8f:61:3f:ce:18:b1: bd:28:4f:74:05:e9:2d:66:44:3e:f4:06:af:c8:b3:65:ca:ba: c2:d1:78:75:77:da:71:e8:b8:57:1f:fb:25:0d:84:7d:06:39: e7:f2:8e:9a:27:60:e9:3a:55:64:df:b9:5b:91:ba:18:42:e3: f6:5c:0f:72:03:b4:40:b6:b5:00:58:a0:55:7d:ac:9a:5a:73: 01:82:64:1d:45:e6:b9:d3:08:39:bf:71:b6:eb:c3:17:e9:4d: 09:9b:93:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJXLvCnbYawJKp3lXSxuPUn6/dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVE QUJENDVGMDAeFw0yNTEyMDUxMDQ2MjJaFw0yNTEyMDgyMDAzMjJaMDMxMTAvBgNV BAMTKDNBNDQwOTE3N0VGMUQ5RERBMkRFMTgwODU3QThDMkI4RTA3MTQ3NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQK8LWujgtoyJ1/BFSCigNhVZ4 Uu3G9JtQMc0V0wc97PQfNGjro7F8LI34JSuWVbQ4Brwkvps1xZoZrRhZjpHSBtpg HoNy7DIUNk4B3dbErK1OCaiRLNk1Wjp3Rppk5J1b1v9JmZOxlIfymyxbZ7Bzc/t9 LE4txObwGPTCGGvx45qLV8/ufc7yWu+JwkNCu27BdgIm5Ml1F6+KfGMRtr86Cu8h zmMPUts1S4Hf0pMyNg74kcgMWcFsl3REOnCbI7YXAhdU8rmMlz+TDuH+aQNmv2zz wUWuBMcvT/yx3lJy4nQJ5iZNKhkkvatlwmLPuQSzcN0atJvyGnCtkrrv5k3PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOkQJF37x2d2i3hgIV6jCuOBxR1gwHwYDVR0j BBgwFoAULoOxeT+i4YpBN6ZqCSFj9dq9RfAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMC8yRTgzQjE3OTNG QTJFMThBNDEzN0E2NkEwOTIxNjNGNURBQkQ0NUYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYzRjVEQUJE NDVGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FlY2IwMDItMjRhNC00OTU1LWEz MzMtMDAyZmRiNzQ1NTNmLzAvMkU4M0IxNzkzRkEyRTE4QTQxMzdBNjZBMDkyMTYz RjVEQUJENDVGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApkd8ZwPC10DZ89pxfEedTralFVXf7SI80k 0TXRvXje5vJy6mn29EKVZjbxVL2b264ddSTyUDMpGxYW+qPcuyr6M8BCtRqudFuF FURYOUS6Wn+Af6VfLTP7SEqbkDzWp/teYCE6koL3zJcmB7dbEIZcR1quAc2dqDl6 yVAibJrVvDQUCeYj2MJI1z6ucHXB/OjfT0AK5NQwXw/20Y9hP84Ysb0oT3QF6S1m RD70Bq/Is2XKusLReHV32nHouFcf+yUNhH0GOefyjponYOk6VWTfuVuRuhhC4/Zc D3IDtEC2tQBYoFV9rJpacwGCZB1F5rnTCDm/cbbrwxfpTQmbk38= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:03 2025 by rpki-client