This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: tYEZoYAVjuiubg/ihDCoLufQSYeueRNA8ZRPv5fko3E= Subject key identifier: 57:E0:4C:3F:72:93:34:49:B3:37:20:28:1F:7D:BD:EC:31:5A:C3:23 Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 10918C9193EA6D0309AB544295A32C6F81736289 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 052D Signing time: Thu 04 Dec 2025 19:30:54 +0000 Manifest this update: Thu 04 Dec 2025 19:25:54 +0000 Manifest next update: Mon 08 Dec 2025 02:29:54 +0000 Files and hashes: 1: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: y8OjPmLpYB8RFNL748IG3ZZaNqGXywHt5VoyRbqCkpc=) 2: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:91:8c:91:93:ea:6d:03:09:ab:54:42:95:a3:2c:6f:81:73:62:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Dec 4 19:25:54 2025 GMT Not After : Dec 8 02:29:54 2025 GMT Subject: CN=57E04C3F72933449B33720281F7DBDEC315AC323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:c1:6c:97:0f:69:bd:36:b6:25:fd:d8:cc: a7:fc:3e:22:3f:8d:ce:41:12:67:ad:b1:e9:81:a7: 61:58:32:76:fa:b7:53:59:57:fc:25:95:6d:c7:93: 2e:89:ae:96:8e:51:65:f1:5a:e1:82:3d:60:10:0f: 84:f3:a6:d1:98:ac:f8:3b:74:fb:74:a3:95:22:f2: 30:4d:e9:46:fb:94:91:0e:6d:f8:c8:4c:22:22:42: a4:14:ab:e3:e6:42:7d:ec:30:d6:6a:85:a0:f8:a6: b2:06:64:91:a2:2e:43:fd:bb:9a:83:b4:5d:f2:d9: 31:7a:3d:c5:a7:9e:2a:15:ed:5c:fe:87:d6:db:78: 0f:fd:3a:6b:a1:35:72:7c:4e:e5:bf:f9:49:19:19: f8:52:1a:4c:54:ee:ca:67:a8:2d:18:74:a2:12:53: 93:ce:d4:7b:4c:56:6f:51:99:d5:9d:3b:3c:96:7b: c4:fc:68:cc:d7:dc:68:5d:ea:41:0a:04:a7:3d:ea: 1a:10:87:12:39:a6:13:97:27:32:57:8e:7e:de:36: 9d:af:ab:33:3d:75:0c:8a:e7:19:f1:7b:93:f8:f9: 45:c2:83:56:d6:12:d5:4c:ee:a8:8f:6f:38:b3:7f: c5:50:00:70:1b:a0:33:aa:eb:ac:9f:b8:47:36:23: 19:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E0:4C:3F:72:93:34:49:B3:37:20:28:1F:7D:BD:EC:31:5A:C3:23 X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ed:13:17:cf:91:1d:99:b8:f6:d7:a4:a5:ce:e5:ac:dc:a1: fa:a7:19:55:5a:29:e0:07:df:29:19:4c:d9:14:eb:26:a4:67: 63:59:9d:b7:a7:b7:cb:9b:2c:19:ff:7d:50:85:18:51:ea:81: c7:17:24:ec:d8:7c:53:ee:93:98:02:b9:59:f9:74:da:a2:89: 89:0f:ea:28:e7:cd:aa:3a:f8:5d:89:4b:91:54:f7:21:ee:87: bb:01:57:0c:b8:c7:61:3d:e7:99:de:b8:05:76:df:d3:f8:99: 82:9a:18:d9:05:38:6d:74:a0:79:8e:77:42:9c:fb:42:81:1c: bd:49:94:c1:32:eb:08:8d:f9:26:fd:dc:03:85:e7:ca:6c:a9: d4:64:cb:9e:6b:50:d8:1e:23:80:f9:c3:a2:17:cc:6d:79:ab: e5:af:3f:1e:dd:12:e3:92:17:e7:3f:5c:44:0b:88:9b:e6:e1: 75:ff:01:9d:bf:20:2c:8e:9d:4a:13:4f:12:cf:cf:b4:42:79: f9:08:dd:f5:bb:f5:ea:d2:03:8b:7b:a1:b8:12:59:5b:af:3c: 8d:b5:01:f3:65:d9:a8:f8:d0:ac:9b:b6:74:0f:9b:40:e2:e6: 05:45:12:31:c3:d9:2c:04:0f:64:93:b3:16:a3:9c:24:50:15: 81:cd:20:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJGMkZPqbQMJq1RClaMsb4FzYokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNTEyMDQxOTI1NTRaFw0yNTEyMDgwMjI5NTRaMDMxMTAvBgNV BAMTKDU3RTA0QzNGNzI5MzM0NDlCMzM3MjAyODFGN0RCREVDMzE1QUMzMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxc8Fslw9pvTa2Jf3YzKf8PiI/ jc5BEmetsemBp2FYMnb6t1NZV/wllW3Hky6JrpaOUWXxWuGCPWAQD4TzptGYrPg7 dPt0o5Ui8jBN6Ub7lJEObfjITCIiQqQUq+PmQn3sMNZqhaD4prIGZJGiLkP9u5qD tF3y2TF6PcWnnioV7Vz+h9bbeA/9OmuhNXJ8TuW/+UkZGfhSGkxU7spnqC0YdKIS U5PO1HtMVm9RmdWdOzyWe8T8aMzX3Ghd6kEKBKc96hoQhxI5phOXJzJXjn7eNp2v qzM9dQyK5xnxe5P4+UXCg1bWEtVM7qiPbzizf8VQAHAboDOq66yfuEc2IxmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV+BMP3KTNEmzNyAoH3297DFawyMwHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHtExfPkR2ZuPbXpKXO5azcofqnGVVaKeAH 3ykZTNkU6yakZ2NZnbent8ubLBn/fVCFGFHqgccXJOzYfFPuk5gCuVn5dNqiiYkP 6ijnzao6+F2JS5FU9yHuh7sBVwy4x2E955neuAV239P4mYKaGNkFOG10oHmOd0Kc +0KBHL1JlMEy6wiN+Sb93AOF58psqdRky55rUNgeI4D5w6IXzG15q+WvPx7dEuOS F+c/XEQLiJvm4XX/AZ2/ICyOnUoTTxLPz7RCefkI3fW79erSA4t7obgSWVuvPI21 AfNl2aj40KybtnQPm0Di5gVFEjHD2SwED2STsxajnCRQFYHNIKc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:57 2025 by rpki-client