This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: 0uRiQgTyJveiBQSrJpDhFiDe0W+FVgn7MHXJ1r9WBhY= Subject key identifier: 55:1A:14:1D:C2:17:06:2C:2C:D3:3D:E3:3F:A5:6B:4C:16:49:BB:35 Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 3ADF9276456B3E43C09CF811D638F17262AA40AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: 0129 Signing time: Thu 18 Dec 2025 01:31:20 +0000 Manifest this update: Thu 18 Dec 2025 01:26:20 +0000 Manifest next update: Sun 21 Dec 2025 08:35:20 +0000 Files and hashes: 1: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: Wby8pisH2aNzeOYSUgj3D3f7W/GR4XuSlwrWAhDXRSY=) 2: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: T56TwNuf3EVVKNZ4lQ8Ldgdic1XY2tNrYbscCPFk9Pg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:35:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:df:92:76:45:6b:3e:43:c0:9c:f8:11:d6:38:f1:72:62:aa:40:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Dec 18 01:26:20 2025 GMT Not After : Dec 21 08:35:20 2025 GMT Subject: CN=551A141DC217062C2CD33DE33FA56B4C1649BB35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:16:bb:61:ef:d5:d4:13:d3:08:77:90:e6: 44:41:95:0e:da:b3:12:83:d0:73:59:14:0b:13:ef: 81:8b:1b:9b:18:7c:86:10:ba:7c:c1:0f:28:02:ab: 25:e6:ca:ff:5b:42:0d:f3:d4:48:24:f5:6f:51:f3: a5:ad:9c:8e:fc:d5:1f:48:f2:3c:f5:d8:92:9e:30: ad:bd:01:a5:1f:5d:c5:f2:a6:6a:c8:11:73:a1:d3: 4a:4b:8d:48:e3:61:e7:51:e8:ee:20:46:f0:54:b9: 6d:40:93:64:55:fc:62:24:a8:94:6b:d0:4e:db:ff: 31:ef:d7:d6:fc:03:33:1d:da:76:e6:41:2f:f0:35: d4:ca:c3:00:1e:4d:7d:d8:21:24:9b:6a:02:c8:d9: 14:8e:e3:70:8e:9d:c4:a5:c3:66:29:98:ac:9b:71: 8f:c0:96:34:c4:01:6e:80:d3:15:a3:f3:35:7c:31: 6f:17:6d:00:24:86:02:13:75:ff:66:1a:f9:17:2f: 15:fc:91:71:b9:5a:5d:b3:76:92:16:b9:a1:47:d4: 30:bb:22:33:94:f8:bb:19:b8:77:05:37:35:73:0c: 30:17:aa:5e:1f:d6:e8:62:e6:65:db:78:11:60:c5: 3e:9e:6c:95:3f:c1:f2:79:dc:16:89:03:c3:d5:43: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1A:14:1D:C2:17:06:2C:2C:D3:3D:E3:3F:A5:6B:4C:16:49:BB:35 X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a4:ed:f9:b5:c2:cb:78:c8:c6:7d:cb:17:72:74:74:60:10: ad:20:c8:71:69:6b:b6:b7:07:71:90:0f:bb:2e:7d:56:e8:0b: 97:88:e7:6d:40:8f:ec:36:f2:bd:cc:9d:2b:4e:20:48:86:b1: 12:d8:16:36:e9:bd:e7:28:a0:ab:04:7b:45:76:82:d2:2b:f4: 94:79:00:79:14:16:27:9d:e1:01:2f:22:32:70:a2:7d:61:be: 8f:fd:76:16:3f:80:43:8f:2a:d6:de:3a:bf:9d:6e:11:0e:b7: 8c:30:08:fd:3e:85:7e:2d:ff:9c:a6:fe:8e:6e:6a:fa:6f:42: 4e:2b:0f:37:d2:f2:76:c4:9f:ea:1e:88:2a:d7:5c:26:a5:ab: 31:41:53:80:19:b8:4f:c6:b1:0f:01:f8:2e:53:01:31:80:d1: 67:bf:b7:d8:e1:d0:0b:5a:d6:99:df:b3:9f:eb:7b:b8:b9:5d: 62:cb:b4:18:1e:3e:38:1c:a7:d8:a2:2c:ae:a2:da:cc:7b:cd: 86:94:40:ee:5f:7e:51:a7:b7:63:bd:6c:2e:8f:dd:c3:2c:de: 33:16:f7:cd:ac:28:1f:ba:c1:39:6c:1c:4d:01:00:6b:ac:9c: b0:f3:59:42:87:35:26:b0:07:6b:48:7e:a9:8d:cd:ae:93:29: e1:ff:0b:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOt+SdkVrPkPAnPgR1jjxcmKqQKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNTEyMTgwMTI2MjBaFw0yNTEyMjEwODM1MjBaMDMxMTAvBgNV BAMTKDU1MUExNDFEQzIxNzA2MkMyQ0QzM0RFMzNGQTU2QjRDMTY0OUJCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFaha7Ye/V1BPTCHeQ5kRBlQ7a sxKD0HNZFAsT74GLG5sYfIYQunzBDygCqyXmyv9bQg3z1Egk9W9R86WtnI781R9I 8jz12JKeMK29AaUfXcXypmrIEXOh00pLjUjjYedR6O4gRvBUuW1Ak2RV/GIkqJRr 0E7b/zHv19b8AzMd2nbmQS/wNdTKwwAeTX3YISSbagLI2RSO43COncSlw2YpmKyb cY/AljTEAW6A0xWj8zV8MW8XbQAkhgITdf9mGvkXLxX8kXG5Wl2zdpIWuaFH1DC7 IjOU+LsZuHcFNzVzDDAXql4f1uhi5mXbeBFgxT6ebJU/wfJ53BaJA8PVQxbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVRoUHcIXBiws0z3jP6VrTBZJuzUwHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFik7fm1wst4yMZ9yxdydHRgEK0gyHFpa7a3 B3GQD7sufVboC5eI521Aj+w28r3MnStOIEiGsRLYFjbpvecooKsEe0V2gtIr9JR5 AHkUFied4QEvIjJwon1hvo/9dhY/gEOPKtbeOr+dbhEOt4wwCP0+hX4t/5ym/o5u avpvQk4rDzfS8nbEn+oeiCrXXCalqzFBU4AZuE/GsQ8B+C5TATGA0We/t9jh0Ata 1pnfs5/re7i5XWLLtBgePjgcp9iiLK6i2sx7zYaUQO5fflGnt2O9bC6P3cMs3jMW 982sKB+6wTlsHE0BAGusnLDzWUKHNSawB2tIfqmNza6TKeH/C00= -----END CERTIFICATE-----Generated at Thu Dec 18 07:50:55 2025 by rpki-client