This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: Bph5I2kaZ3hdaSGSucWeaUA5XhIUVGk87412RMRqK3s= Subject key identifier: 90:97:A7:47:90:D1:93:8D:3C:48:94:1D:FD:2C:D5:5E:ED:C6:3A:C7 Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 0E32E44CA06622621F891EEACC2B73FCE2E9B2A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 60 Signing time: Sat 06 Dec 2025 01:41:02 +0000 Manifest this update: Sat 06 Dec 2025 01:36:02 +0000 Manifest next update: Tue 09 Dec 2025 07:12:02 +0000 Files and hashes: 1: 3130332e3134332e3132392e302f32342d3234203d3e20313339333933.roa (hash: 3wetidkcCavxQpjkiXbTz/VCnjcuje+VreUWREjQdgQ=) 2: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: e5jA5BaUSrah0HvhgbIqKxUKdS3WVpw+4a5CJbVU7Dk=) 3: 3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (hash: WrbEtwkzEelam58TNUV4Bn/EuB71NKCGwrujJRp3Bd8=) 4: 323430353a353163303a3a2f33322d3332203d3e20313339333933.roa (hash: xOhwGI2U+4AffMNiCyrvrejLk4Xi3+2L832MlZGbs+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:32:e4:4c:a0:66:22:62:1f:89:1e:ea:cc:2b:73:fc:e2:e9:b2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Dec 6 01:36:02 2025 GMT Not After : Dec 9 07:12:02 2025 GMT Subject: CN=9097A74790D1938D3C48941DFD2CD55EEDC63AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6a:67:23:9f:5b:c7:bd:00:67:38:38:8f:03: 54:bd:b9:c9:74:f9:ab:fb:3a:be:19:ab:0b:40:c0: 3e:d0:1d:bb:6b:82:6d:44:3a:de:9c:bb:ba:8c:e9: 0b:54:46:6b:21:49:55:3e:1d:c8:1a:99:7f:4b:c1: d7:7c:52:ca:a0:e7:d0:5f:98:3f:65:89:aa:90:e2: 23:40:86:af:ba:7d:d7:28:bd:d5:6e:96:07:30:01: 85:30:5e:f9:4f:a1:bf:72:cd:16:fd:cb:d4:36:80: cb:0b:18:b9:bf:26:1d:a3:07:6e:2d:ab:2e:89:81: 3e:4c:4d:40:43:8c:cb:9e:4a:45:16:66:26:3b:56: 68:e3:2c:1a:6d:fa:e3:c5:58:fd:8f:1e:95:ae:3b: c7:43:f6:c5:e1:25:31:f9:d8:2d:14:8f:74:1c:b8: 08:c6:4b:a6:97:1a:e3:d3:e9:d8:b5:92:d3:b1:d7: 45:3c:41:19:df:a1:b4:15:8b:39:14:02:91:f4:55: c8:b8:ef:91:27:2c:21:28:13:49:a2:3a:23:65:37: 81:e0:10:41:0c:fb:93:2f:0d:43:38:06:70:a6:e4: 35:56:3f:b8:f1:2a:1f:30:26:73:3b:42:d1:d8:35: 85:4c:d2:bf:b0:08:40:5f:1d:c4:94:e7:be:9a:c3: ad:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:97:A7:47:90:D1:93:8D:3C:48:94:1D:FD:2C:D5:5E:ED:C6:3A:C7 X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3d:55:9f:64:89:ad:60:c8:1d:d8:1a:b5:bb:d6:10:5a:8c: 5f:9e:8a:c2:7b:88:e3:b2:14:b6:8e:46:94:c9:47:86:42:b0: a6:9f:30:ac:bf:f2:e5:36:ad:4b:27:44:04:1d:a6:84:49:a2: b8:77:ac:23:35:70:a9:73:25:d9:d8:33:9b:ff:8a:ed:b1:c4: 62:47:95:57:cc:49:dd:4e:da:34:11:e2:4f:87:c6:a4:06:ec: b7:c9:8b:b6:97:78:e6:ae:31:34:59:d5:b9:91:0b:8a:63:0e: 44:03:8e:2f:0a:2c:07:49:d4:20:b8:73:65:aa:ca:f7:7d:8a: c8:2e:6a:8a:37:b5:3a:1e:9a:f4:0b:9d:3b:06:ee:d4:94:d7: da:4c:6a:aa:68:4e:f5:47:22:9a:ee:f3:83:cf:a8:ba:a9:b8: 77:64:21:96:ba:7a:70:01:f6:8b:4b:4f:1d:91:a9:78:72:94: a7:3f:f2:b2:40:a0:7c:7b:1d:32:ae:da:98:0e:f4:2a:0c:a0: 08:21:48:af:25:37:ce:24:16:f1:3a:aa:28:a5:5b:5b:2a:33: 1d:17:2e:c1:91:38:9b:e3:76:9b:a9:e6:27:5b:f8:22:ba:c0: d5:a6:d1:58:c4:79:ee:e6:14:d0:95:de:7b:8f:de:8a:a2:37: 5e:9d:9c:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjLkTKBmImIfiR7qzCtz/OLpsqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNTEyMDYwMTM2MDJaFw0yNTEyMDkwNzEyMDJaMDMxMTAvBgNV BAMTKDkwOTdBNzQ3OTBEMTkzOEQzQzQ4OTQxREZEMkNENTVFRURDNjNBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxamcjn1vHvQBnODiPA1S9ucl0 +av7Or4ZqwtAwD7QHbtrgm1EOt6cu7qM6QtURmshSVU+HcgamX9Lwdd8Usqg59Bf mD9liaqQ4iNAhq+6fdcovdVulgcwAYUwXvlPob9yzRb9y9Q2gMsLGLm/Jh2jB24t qy6JgT5MTUBDjMueSkUWZiY7VmjjLBpt+uPFWP2PHpWuO8dD9sXhJTH52C0Uj3Qc uAjGS6aXGuPT6di1ktOx10U8QRnfobQVizkUApH0Vci475EnLCEoE0miOiNlN4Hg EEEM+5MvDUM4BnCm5DVWP7jxKh8wJnM7QtHYNYVM0r+wCEBfHcSU576aw62XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkJenR5DRk408SJQd/SzVXu3GOscwHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEw9VZ9kia1gyB3YGrW71hBajF+eisJ7iOOy FLaORpTJR4ZCsKafMKy/8uU2rUsnRAQdpoRJorh3rCM1cKlzJdnYM5v/iu2xxGJH lVfMSd1O2jQR4k+HxqQG7LfJi7aXeOauMTRZ1bmRC4pjDkQDji8KLAdJ1CC4c2Wq yvd9isguaoo3tToemvQLnTsG7tSU19pMaqpoTvVHIpru84PPqLqpuHdkIZa6enAB 9otLTx2RqXhylKc/8rJAoHx7HTKu2pgO9CoMoAghSK8lN84kFvE6qiilW1sqMx0X LsGROJvjdpup5idb+CK6wNWm0VjEee7mFNCV3nuP3oqiN16dnD8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:46:32 2025 by rpki-client