This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: 1+ml2jO9CRSuwJ7k+8cwM9HBBMYqKPdyiYihsozTlB4= Subject key identifier: D8:6F:14:05:D6:36:AE:D8:CD:EA:39:F5:4E:0A:6B:C9:35:42:30:43 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 293D30DFA6D19E8FB205C86825E2D2B217F2FDBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 0275 Signing time: Fri 05 Dec 2025 07:02:00 +0000 Manifest this update: Fri 05 Dec 2025 06:57:00 +0000 Manifest next update: Mon 08 Dec 2025 12:05:00 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: /BgsaX/1HfoPmyJKSyHQQlcpArcrtr8zEFIAjI32KOA=) 2: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: BFfPGawHeoQ/eOFBPTAudUOh1OvlQi2pQ6d0UuAg2ps=) 3: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Vmie2s+Au9bD7oUrSucjO7WCyj2PVNNegBmJmg18JCw=) 4: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: zq9jURiQ22qlXaNGfXYYrzayKk+FnjtAUFdVo05evWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:3d:30:df:a6:d1:9e:8f:b2:05:c8:68:25:e2:d2:b2:17:f2:fd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Dec 5 06:57:00 2025 GMT Not After : Dec 8 12:05:00 2025 GMT Subject: CN=D86F1405D636AED8CDEA39F54E0A6BC935423043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:11:db:fa:cf:89:e3:5e:a7:13:85:c4:67: 29:f7:69:48:fd:3a:95:1e:d3:a8:91:48:0f:22:e4: cd:19:b7:fa:5d:92:91:b6:b9:24:18:32:4a:69:5e: 08:be:d7:fd:13:d6:1d:1b:6e:bb:48:6b:1b:51:c6: cb:6f:e9:4e:e4:ff:87:87:2b:f1:0d:4c:8d:56:13: 6e:22:ce:c4:ae:85:81:12:32:69:a9:bc:60:7f:df: e5:b1:6d:df:ef:94:cf:af:f8:ee:20:22:ec:bd:b7: 0d:85:2f:53:c1:29:e1:9b:60:dd:20:b9:40:aa:50: e2:a0:7a:07:5e:cd:6c:07:ca:ec:d4:b1:80:e5:f1: 1c:40:14:5e:14:de:a0:fc:32:78:39:28:cf:fc:d6: 95:24:81:1a:02:51:7b:88:a8:43:0b:a9:55:bd:7a: e4:93:58:d5:ec:52:49:fc:9a:12:05:9a:2d:50:04: 0c:45:32:25:0a:8c:79:02:9c:92:e8:cd:ca:36:90: c7:c0:58:78:f4:41:aa:f6:17:cd:93:d1:ae:55:8d: cc:5b:7c:4f:e3:02:31:bd:47:2a:ff:a2:97:8a:cb: 1d:15:de:3d:a0:98:9c:c3:e4:48:8b:cc:a2:33:39: e2:87:f8:95:47:cb:9f:d9:68:0e:9a:66:7f:9f:44: f8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6F:14:05:D6:36:AE:D8:CD:EA:39:F5:4E:0A:6B:C9:35:42:30:43 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8c:36:89:04:94:0d:85:29:81:7b:de:66:38:21:a1:d6:de: bf:8f:11:e7:21:d3:23:5f:62:b3:db:03:a0:86:2c:8e:ba:ab: f9:2f:61:ae:02:cf:ce:34:f6:ce:aa:60:bb:9a:81:e2:60:43: 4b:95:fb:10:88:00:61:02:ae:4a:38:f2:d6:08:53:0a:c5:34: 99:e9:23:b7:e1:cf:7c:f7:d3:f1:f3:f0:c1:ae:5b:82:d1:1a: 21:03:b8:e1:46:4f:c5:ae:57:dd:c3:da:9e:6b:8c:5b:50:da: 66:a5:5d:33:d5:8c:f6:6c:8a:cf:7f:f0:86:8a:f9:43:b7:f5: 9b:ca:a6:ba:53:7b:40:12:18:01:12:45:63:ef:cf:c1:b5:c7: 76:87:46:8a:74:19:39:dd:e3:aa:0c:a8:64:78:a0:1d:1c:26: 42:22:ca:35:7c:ca:04:32:17:74:5a:33:45:cf:a7:6e:e6:0d: fc:86:7a:64:32:32:6d:b9:ee:a5:96:c7:4b:27:67:24:2d:87: 05:a4:af:b4:d5:22:0a:c5:1b:18:de:e0:3c:0b:fa:7e:05:50: 35:cd:3a:92:d2:72:f4:21:58:0a:8d:48:01:26:78:87:86:98: c9:a5:d7:37:ef:a5:d1:c7:84:e4:61:2d:8c:bf:04:12:db:c7: 50:f6:57:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKT0w36bRno+yBchoJeLSshfy/b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTEyMDUwNjU3MDBaFw0yNTEyMDgxMjA1MDBaMDMxMTAvBgNV BAMTKEQ4NkYxNDA1RDYzNkFFRDhDREVBMzlGNTRFMEE2QkM5MzU0MjMwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGRHb+s+J416nE4XEZyn3aUj9 OpUe06iRSA8i5M0Zt/pdkpG2uSQYMkppXgi+1/0T1h0bbrtIaxtRxstv6U7k/4eH K/ENTI1WE24izsSuhYESMmmpvGB/3+Wxbd/vlM+v+O4gIuy9tw2FL1PBKeGbYN0g uUCqUOKgegdezWwHyuzUsYDl8RxAFF4U3qD8Mng5KM/81pUkgRoCUXuIqEMLqVW9 euSTWNXsUkn8mhIFmi1QBAxFMiUKjHkCnJLozco2kMfAWHj0Qar2F82T0a5Vjcxb fE/jAjG9Ryr/opeKyx0V3j2gmJzD5EiLzKIzOeKH+JVHy5/ZaA6aZn+fRPjpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2G8UBdY2rtjN6jn1TgpryTVCMEMwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuMNokElA2FKYF73mY4IaHW3r+PEech0yNf YrPbA6CGLI66q/kvYa4Cz8409s6qYLuageJgQ0uV+xCIAGECrko48tYIUwrFNJnp I7fhz3z30/Hz8MGuW4LRGiEDuOFGT8WuV93D2p5rjFtQ2malXTPVjPZsis9/8IaK +UO39ZvKprpTe0ASGAESRWPvz8G1x3aHRop0GTnd46oMqGR4oB0cJkIiyjV8ygQy F3RaM0XPp27mDfyGemQyMm257qWWx0snZyQthwWkr7TVIgrFGxje4DwL+n4FUDXN OpLScvQhWAqNSAEmeIeGmMml1zfvpdHHhORhLYy/BBLbx1D2V20= -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:36 2025 by rpki-client