This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: 17XExzIgXSQxwk3J6XA9gPVg2iVg9iO+Iq+dGdQpXxU= Subject key identifier: EE:FA:7C:4E:1E:24:B6:16:04:37:9F:2D:FD:C5:FB:19:F0:A5:10:3A Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 381D79F8796A148C8794F7442C3D83D104D9C0F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 020F Signing time: Sat 06 Dec 2025 12:50:59 +0000 Manifest this update: Sat 06 Dec 2025 12:45:59 +0000 Manifest next update: Tue 09 Dec 2025 22:25:59 +0000 Files and hashes: 1: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: nHTC7U0SrYxpshaEFqM5+Y9HEGIpFHHP3slcjvjHib8=) 2: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1d:79:f8:79:6a:14:8c:87:94:f7:44:2c:3d:83:d1:04:d9:c0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Dec 6 12:45:59 2025 GMT Not After : Dec 9 22:25:59 2025 GMT Subject: CN=EEFA7C4E1E24B61604379F2DFDC5FB19F0A5103A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:09:3d:66:6e:76:40:75:86:e3:fe:3d:68: 07:37:fc:72:4c:db:eb:cf:48:fe:35:fe:a3:c3:13: b6:b8:78:a9:f5:7c:35:7a:c0:38:11:72:e0:86:0e: 44:35:d6:f6:04:1e:74:a8:07:5d:71:05:47:37:fe: b8:da:de:b0:25:70:3b:53:74:41:94:8f:c0:f8:04: e9:f6:1e:0c:75:78:df:37:54:4e:e8:91:2e:f7:7d: 04:47:10:cd:a0:e5:27:06:a3:72:ae:91:2b:7b:99: e3:46:54:c9:a7:c7:3e:71:fb:5a:1c:43:5f:1c:9e: 2d:64:35:fd:47:4f:76:c1:77:f7:a8:89:8b:64:f3: a0:ae:d9:89:be:d3:1c:dc:0a:d0:86:ef:c8:1d:69: 5c:74:b8:0d:c9:ed:47:ae:3e:17:35:8a:8e:02:4b: 64:2d:70:63:22:5e:ee:df:48:a3:14:98:9c:6c:cf: a0:4d:18:b9:69:21:21:38:36:8c:b5:03:02:d6:ce: e0:d1:1d:80:7f:41:dc:f8:e4:28:e9:20:0d:02:da: 4b:d6:0c:4e:9b:cb:1a:5e:6e:9b:57:eb:f0:52:87: 2a:92:1f:a2:9b:2f:a7:eb:c8:f5:dc:7f:1b:97:bb: 7d:94:1f:fc:09:cc:ea:b1:ee:27:41:db:c0:eb:1d: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FA:7C:4E:1E:24:B6:16:04:37:9F:2D:FD:C5:FB:19:F0:A5:10:3A X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:3f:40:de:d7:aa:7b:bb:28:3d:21:6b:99:48:b6:fa:f6:6e: 8a:4a:24:c2:46:1d:10:4e:5a:43:74:52:f3:0b:1e:22:c3:7b: 71:7a:c4:ca:c1:d8:a9:b9:13:a7:dc:19:66:d4:da:3f:97:fa: 1c:42:00:0c:83:2d:1d:cd:21:c4:52:38:4e:05:13:5f:d1:7c: 00:f9:65:00:21:0e:84:e4:dc:f1:fd:a5:3d:73:76:19:f2:72: 7e:29:20:aa:80:4e:52:b0:ad:51:11:54:db:a5:93:1d:77:0f: 70:9a:a1:21:b4:77:ef:3b:d2:cf:71:78:fd:f4:27:bb:ff:33: 68:77:ba:72:46:ec:cf:53:eb:d6:a4:32:42:d4:f9:9b:f8:dd: 1a:92:a3:fb:57:5b:36:ff:51:f4:d6:1f:28:17:44:f9:8c:bb: 1b:80:63:0f:26:68:bb:5b:6b:d9:4f:8c:10:cc:27:eb:6c:56: 41:f3:6b:1b:eb:2d:62:5b:64:be:d5:d4:9c:72:ba:fd:ae:20: 16:ce:c2:b6:5e:3d:5d:04:45:ab:b5:a9:ed:f6:fc:5e:4a:8c: 8c:37:25:8c:54:4b:3e:13:97:b9:9c:09:41:df:ca:1d:73:76: 5d:a6:71:8d:9d:e1:cb:8e:8f:b8:9d:07:08:ce:7f:a3:8f:10: 6b:c0:49:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOB15+HlqFIyHlPdELD2D0QTZwPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNTEyMDYxMjQ1NTlaFw0yNTEyMDkyMjI1NTlaMDMxMTAvBgNV BAMTKEVFRkE3QzRFMUUyNEI2MTYwNDM3OUYyREZEQzVGQjE5RjBBNTEwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6gk9Zm52QHWG4/49aAc3/HJM 2+vPSP41/qPDE7a4eKn1fDV6wDgRcuCGDkQ11vYEHnSoB11xBUc3/rja3rAlcDtT dEGUj8D4BOn2Hgx1eN83VE7okS73fQRHEM2g5ScGo3KukSt7meNGVMmnxz5x+1oc Q18cni1kNf1HT3bBd/eoiYtk86Cu2Ym+0xzcCtCG78gdaVx0uA3J7UeuPhc1io4C S2QtcGMiXu7fSKMUmJxsz6BNGLlpISE4Noy1AwLWzuDRHYB/Qdz45CjpIA0C2kvW DE6byxpebptX6/BShyqSH6KbL6fryPXcfxuXu32UH/wJzOqx7idB28DrHc4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7vp8Th4kthYEN58t/cX7GfClEDowHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4/QN7Xqnu7KD0ha5lItvr2bopKJMJGHRBO WkN0UvMLHiLDe3F6xMrB2Km5E6fcGWbU2j+X+hxCAAyDLR3NIcRSOE4FE1/RfAD5 ZQAhDoTk3PH9pT1zdhnycn4pIKqATlKwrVERVNulkx13D3CaoSG0d+870s9xeP30 J7v/M2h3unJG7M9T69akMkLU+Zv43RqSo/tXWzb/UfTWHygXRPmMuxuAYw8maLtb a9lPjBDMJ+tsVkHzaxvrLWJbZL7V1Jxyuv2uIBbOwrZePV0ERau1qe32/F5KjIw3 JYxUSz4Tl7mcCUHfyh1zdl2mcY2d4cuOj7idBwjOf6OPEGvASWY= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:18 2025 by rpki-client