This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft File: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft (raw, json) Hash identifier: lnJtQ+AO7UGGMs2rZKY+0ELxKMYI6fpPQdkJRzrBIEg= Subject key identifier: B3:AA:2B:7E:8A:40:91:40:47:3F:02:B2:4A:E7:42:8F:B1:FB:9B:4C Authority key identifier: 2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A Certificate issuer: /CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Certificate serial: 78A2C081CEC5EA5B6265AFEAD27E46BD15E536AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft Manifest number: A2 Signing time: Thu 04 Dec 2025 13:02:04 +0000 Manifest this update: Thu 04 Dec 2025 12:57:04 +0000 Manifest next update: Sun 07 Dec 2025 17:55:04 +0000 Files and hashes: 1: 2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl (hash: cDFuXizbkKHicVbcpNCof1/hXGhzhLA76e0mnbL00D8=) 2: 3136302e32322e39342e302f32342d3234203d3e20313533313130.roa (hash: 5+7EpoRHiM1GiIon48eKxVuE1jLZPngRC9OVhAPzb0k=) 3: 3136302e32322e39342e302f32332d3233203d3e20313533313130.roa (hash: B9dkfAuQSGFkOUPXQNcOnfZc9f5rLPsJ947+ZcqQIGc=) 4: 3136302e32322e39352e302f32342d3234203d3e20313533313130.roa (hash: K9djVkSLZL7Bw4K3e9tKRF4aAw6JK34iXwFmQ3sWP34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 17:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a2:c0:81:ce:c5:ea:5b:62:65:af:ea:d2:7e:46:bd:15:e5:36:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A Validity Not Before: Dec 4 12:57:04 2025 GMT Not After : Dec 7 17:55:04 2025 GMT Subject: CN=B3AA2B7E8A409140473F02B24AE7428FB1FB9B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:24:5e:66:f3:4b:b2:74:41:54:26:a7:95: 01:8a:a4:a0:b7:21:67:00:b3:f7:fb:4b:72:bf:05: 27:0a:33:f4:e1:9f:e6:d0:f5:cf:8c:3d:83:f4:88: f2:ae:8b:2e:42:ae:21:6e:02:a4:f8:a6:93:b0:c8: cf:af:23:0f:2e:62:02:b1:39:6d:08:90:59:d9:78: c4:fa:12:68:91:04:f0:41:33:ea:0c:3e:a1:52:0f: e5:fa:9b:27:b4:e5:15:ce:6f:8f:8c:41:89:9e:4d: 84:f9:94:77:36:21:ce:10:56:de:9d:be:88:3c:4d: cb:59:84:ca:5d:be:2d:aa:de:3f:20:cf:f9:74:44: c8:2e:97:b1:5d:84:63:86:e8:57:5d:97:11:cb:4f: a9:47:12:54:78:d7:02:44:20:03:64:93:c9:b7:90: d7:0c:0f:4d:49:03:6f:40:96:ab:21:1d:c6:1f:5b: 15:d2:1e:d8:f9:db:a2:6a:0d:e1:85:fa:3d:43:18: c0:03:d0:50:80:a0:b5:0e:8e:13:1d:aa:b0:34:b8: 77:91:cc:14:14:b2:24:03:df:b5:2b:1c:9f:34:33: 9d:54:9a:fb:1e:34:0a:b3:4d:4d:19:97:bc:39:16: 9d:15:45:17:fd:df:ae:5a:c3:d9:92:d3:07:d4:c9: dd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AA:2B:7E:8A:40:91:40:47:3F:02:B2:4A:E7:42:8F:B1:FB:9B:4C X509v3 Authority Key Identifier: keyid:2C:9C:8D:6A:DB:43:A7:5F:1D:FA:48:05:3B:0E:13:BF:E4:BD:35:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea077386-301b-4ff1-871b-6232b5f3be09/0/2C9C8D6ADB43A75F1DFA48053B0E13BFE4BD350A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:4a:96:3d:fa:10:76:2c:72:a6:ca:68:f4:e7:e1:62:8a:56: 14:8a:e8:02:bb:af:8f:7f:f1:d4:9b:61:da:f1:e9:30:bc:7b: 58:e5:6a:cc:f7:05:38:85:46:32:6c:b3:4d:7a:d2:32:5f:0e: 1c:c2:4d:85:02:de:b9:9f:a5:8f:58:c7:7c:84:41:4d:46:56: bc:b7:d6:4d:bf:5b:f8:1c:42:eb:91:ed:b2:8b:30:56:05:15: 7d:f7:c2:f4:02:56:5d:50:3c:19:34:6b:4c:9b:f2:3f:40:e9: 0f:4b:8e:83:6a:5b:d6:4d:71:52:79:5f:9a:ef:12:21:8b:ff: 7d:a3:d8:b4:b2:8d:bc:7c:09:89:29:d1:fc:c2:6f:3d:38:b8: 6c:09:48:c3:7e:4e:48:59:d4:9e:12:5a:b0:69:5e:e6:73:18: 13:0c:17:a9:52:33:1a:83:24:6e:f1:64:82:e1:e0:cd:34:89: 85:98:46:c5:e2:33:aa:2c:84:d0:4a:e7:47:32:d8:a6:95:68: a4:7f:c1:7f:fe:bd:91:e2:eb:db:15:72:f3:9c:62:6c:30:27: ff:45:8f:2f:72:a0:f8:08:b6:a3:23:95:c3:e3:93:d5:9a:3a: b6:8f:79:52:4f:b4:9a:76:fa:94:82:dc:4e:28:0f:f2:a5:9b: 06:98:e7:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKLAgc7F6ltiZa/q0n5GvRXlNqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZF NEJEMzUwQTAeFw0yNTEyMDQxMjU3MDRaFw0yNTEyMDcxNzU1MDRaMDMxMTAvBgNV BAMTKEIzQUEyQjdFOEE0MDkxNDA0NzNGMDJCMjRBRTc0MjhGQjFGQjlCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRyReZvNLsnRBVCanlQGKpKC3 IWcAs/f7S3K/BScKM/Thn+bQ9c+MPYP0iPKuiy5CriFuAqT4ppOwyM+vIw8uYgKx OW0IkFnZeMT6EmiRBPBBM+oMPqFSD+X6mye05RXOb4+MQYmeTYT5lHc2Ic4QVt6d vog8TctZhMpdvi2q3j8gz/l0RMgul7FdhGOG6FddlxHLT6lHElR41wJEIANkk8m3 kNcMD01JA29AlqshHcYfWxXSHtj526JqDeGF+j1DGMAD0FCAoLUOjhMdqrA0uHeR zBQUsiQD37UrHJ80M51UmvseNAqzTU0Zl7w5Fp0VRRf9365aw9mS0wfUyd0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs6orfopAkUBHPwKySudCj7H7m0wwHwYDVR0j BBgwFoAULJyNattDp18d+kgFOw4Tv+S9NQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTA3NzM4Ni0zMDFiLTRmZjEtODcxYi02MjMyYjVmM2JlMDkvMC8yQzlDOEQ2QURC NDNBNzVGMURGQTQ4MDUzQjBFMTNCRkU0QkQzNTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEzQkZFNEJE MzUwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWEwNzczODYtMzAxYi00ZmYxLTg3 MWItNjIzMmI1ZjNiZTA5LzAvMkM5QzhENkFEQjQzQTc1RjFERkE0ODA1M0IwRTEz QkZFNEJEMzUwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN9Klj36EHYscqbKaPTn4WKKVhSK6AK7r49/ 8dSbYdrx6TC8e1jlasz3BTiFRjJss0160jJfDhzCTYUC3rmfpY9Yx3yEQU1GVry3 1k2/W/gcQuuR7bKLMFYFFX33wvQCVl1QPBk0a0yb8j9A6Q9LjoNqW9ZNcVJ5X5rv EiGL/32j2LSyjbx8CYkp0fzCbz04uGwJSMN+TkhZ1J4SWrBpXuZzGBMMF6lSMxqD JG7xZILh4M00iYWYRsXiM6oshNBK50cy2KaVaKR/wX/+vZHi69sVcvOcYmwwJ/9F jy9yoPgItqMjlcPjk9WaOraPeVJPtJp2+pSC3E4oD/KlmwaY594= -----END CERTIFICATE-----Generated at Sat Dec 6 18:02:28 2025 by rpki-client