This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft File: 2ADCBF290A98776E6F59353351C879A1502B884A.mft (raw, json) Hash identifier: jj1g2I+E8ltyEnk5IFhxlLsniyX0JzqqxswWfG9AfDM= Subject key identifier: B7:32:7A:DA:D4:C4:37:50:24:A5:AE:49:B4:D8:BD:C8:C8:2E:6F:80 Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A Certificate issuer: /CN=2ADCBF290A98776E6F59353351C879A1502B884A Certificate serial: 6D944D63B498A0E39FC40CBA522D0BE12C724FA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft Manifest number: 01D3 Signing time: Fri 05 Dec 2025 15:20:50 +0000 Manifest this update: Fri 05 Dec 2025 15:15:50 +0000 Manifest next update: Mon 08 Dec 2025 21:00:50 +0000 Files and hashes: 1: 3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (hash: FjkCQEbxTkTrmju7umuTXr3UC7Hk/PD5qd4yUNE4PfI=) 2: 3130332e35342e38322e302f32342d3234203d3e20313530353132.roa (hash: C79vzTgAfsGSSc4gNZfEhC+/ZQRPXp9nU63pK44dLyE=) 3: 2ADCBF290A98776E6F59353351C879A1502B884A.crl (hash: Ek0PzsZBscDbOssp4dGb3j54vRm9qa8Cjo1w4Mzv/7s=) 4: 3130332e35342e38332e302f32342d3234203d3e20313530353132.roa (hash: NLpjQTON2Z80uPvHtmw/0JAegSKn6kWFoxLR7SImnLM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:94:4d:63:b4:98:a0:e3:9f:c4:0c:ba:52:2d:0b:e1:2c:72:4f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A Validity Not Before: Dec 5 15:15:50 2025 GMT Not After : Dec 8 21:00:50 2025 GMT Subject: CN=B7327ADAD4C4375024A5AE49B4D8BDC8C82E6F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:44:8b:2c:ca:04:6f:9b:c9:39:8a:70:f4: e3:ff:82:1c:ed:48:32:5b:f1:e4:b3:a9:cb:77:20: db:24:06:31:b4:2a:47:52:2d:88:5e:77:fe:46:b2: 85:05:01:a0:a4:6c:93:0a:a9:32:09:ae:2e:6c:64: 12:5e:e9:c6:7d:1e:25:69:e2:2c:b0:a2:99:71:59: a0:a8:5b:48:98:a1:bf:9b:49:38:17:25:8f:7c:13: 1f:51:6a:1b:72:a2:23:ea:ab:ee:a2:51:98:59:87: 8e:b1:9d:fa:59:51:b3:96:07:0c:52:27:63:94:a9: 60:29:eb:9d:bf:af:93:d1:e6:5d:89:cd:93:93:2d: 4b:c9:8a:3f:64:53:40:0e:2c:9e:d9:27:3d:75:6a: 8f:09:0a:ca:8a:41:01:46:76:3b:85:85:33:8b:73: 93:c8:0f:94:dc:1b:c3:9a:b2:b8:17:c5:3b:33:33: ac:92:b3:f6:d3:fd:5c:bc:97:02:d7:76:21:8b:33: 1b:00:e7:19:57:cb:9b:65:58:07:42:0a:5f:66:8f: 48:84:66:68:dd:3f:d0:4c:92:29:df:7b:16:49:bc: 85:89:ae:5b:b3:2c:42:a2:4a:31:ac:c0:96:91:14: 4a:ac:b9:fa:aa:41:0c:01:9f:cb:1c:ac:9c:6c:6d: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:32:7A:DA:D4:C4:37:50:24:A5:AE:49:B4:D8:BD:C8:C8:2E:6F:80 X509v3 Authority Key Identifier: keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e0:92:6e:15:92:14:8c:bb:57:5d:14:ad:2f:72:e0:10:a5: c3:3e:31:08:96:5b:91:61:c1:87:23:0d:5c:b6:cd:e1:31:f4: 85:65:04:68:eb:9d:68:5f:e8:72:88:4c:fd:87:b3:31:f6:bf: c6:22:cc:9d:a4:a5:02:4c:da:8a:d8:4d:a3:ad:e2:97:26:11: 18:46:95:c6:0d:5a:c0:e6:e6:42:53:06:8e:38:86:e4:f0:bd: 3b:d6:e7:19:a1:e8:fa:86:b8:4e:21:2e:e3:5d:27:98:cb:bb: 9c:ca:39:f7:30:8c:a7:7b:1d:5b:10:30:a1:cb:db:02:fa:07: c5:7d:2a:ff:94:2f:86:db:db:d1:06:59:41:1f:89:e5:db:ae: 49:5b:56:08:de:2e:12:48:ad:5e:fe:bc:a3:76:b4:ad:5b:16: 3f:b3:62:2f:11:32:68:98:b6:e4:bd:c7:bb:7c:e1:c5:79:a5: 16:1e:4c:b9:f1:0a:d1:9c:0e:3e:4b:56:ae:53:ee:c2:d9:a9: 0b:e7:d1:96:c0:81:0d:95:8c:a1:b2:83:d0:c2:c7:ba:bd:b2: 6e:d8:cd:60:cd:a5:b6:e7:37:f4:45:9e:4d:52:41:40:06:b5: 1d:7c:63:c7:2b:d3:24:48:2b:68:af:47:a8:18:d7:77:9a:2e: 67:31:00:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZRNY7SYoOOfxAy6Ui0L4SxyT6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1 MDJCODg0QTAeFw0yNTEyMDUxNTE1NTBaFw0yNTEyMDgyMTAwNTBaMDMxMTAvBgNV BAMTKEI3MzI3QURBRDRDNDM3NTAyNEE1QUU0OUI0RDhCREM4QzgyRTZGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAx0SLLMoEb5vJOYpw9OP/ghzt SDJb8eSzqct3INskBjG0KkdSLYhed/5GsoUFAaCkbJMKqTIJri5sZBJe6cZ9HiVp 4iywoplxWaCoW0iYob+bSTgXJY98Ex9RahtyoiPqq+6iUZhZh46xnfpZUbOWBwxS J2OUqWAp652/r5PR5l2JzZOTLUvJij9kU0AOLJ7ZJz11ao8JCsqKQQFGdjuFhTOL c5PID5TcG8OasrgXxTszM6ySs/bT/Vy8lwLXdiGLMxsA5xlXy5tlWAdCCl9mj0iE ZmjdP9BMkinfexZJvIWJrluzLEKiSjGswJaRFEqsufqqQQwBn8scrJxsbU9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtzJ62tTEN1Akpa5JtNi9yMgub4AwHwYDVR0j BBgwFoAUKty/KQqYd25vWTUzUch5oVAriEowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGRlOTQ2My02OGE3LTQ2MmQtOTQwOC1hN2MzOWNlNmU4ZmYvMC8yQURDQkYyOTBB OTg3NzZFNkY1OTM1MzM1MUM4NzlBMTUwMkI4ODRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5QTE1MDJC ODg0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThkZTk0NjMtNjhhNy00NjJkLTk0 MDgtYTdjMzljZTZlOGZmLzAvMkFEQ0JGMjkwQTk4Nzc2RTZGNTkzNTMzNTFDODc5 QTE1MDJCODg0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTgkm4VkhSMu1ddFK0vcuAQpcM+MQiWW5Fh wYcjDVy2zeEx9IVlBGjrnWhf6HKITP2HszH2v8YizJ2kpQJM2orYTaOt4pcmERhG lcYNWsDm5kJTBo44huTwvTvW5xmh6PqGuE4hLuNdJ5jLu5zKOfcwjKd7HVsQMKHL 2wL6B8V9Kv+UL4bb29EGWUEfieXbrklbVgjeLhJIrV7+vKN2tK1bFj+zYi8RMmiY tuS9x7t84cV5pRYeTLnxCtGcDj5LVq5T7sLZqQvn0ZbAgQ2VjKGyg9DCx7q9sm7Y zWDNpbbnN/RFnk1SQUAGtR18Y8cr0yRIK2ivR6gY13eaLmcxAJo= -----END CERTIFICATE-----Generated at Sun Dec 7 07:27:30 2025 by rpki-client