This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft File: 2A2E185B12379871494114828D5D5D713982E469.mft (raw, json) Hash identifier: 3SC2q833PYnMw9zNfZoeGXe1VMNN9Z/UoQ0VOMpC5BA= Subject key identifier: 7A:88:B2:FF:F6:5C:90:8D:BF:21:77:54:1D:FA:09:A9:D3:0B:A3:F7 Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 Certificate issuer: /CN=2A2E185B12379871494114828D5D5D713982E469 Certificate serial: 317E6A590CC0297396E6FE3E1088DD780A8A619C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft Manifest number: 0132 Signing time: Thu 25 Dec 2025 07:50:52 +0000 Manifest this update: Thu 25 Dec 2025 07:45:52 +0000 Manifest next update: Sun 28 Dec 2025 13:22:52 +0000 Files and hashes: 1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: sTQiXQPTUn8HIqNQ+b3wvUaJvQWDXNesHzrzHQ54ZJs=) 2: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: BX+MaWypdCst/M24DHvIILvzG6SSrCeLejG/IziZlnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7e:6a:59:0c:c0:29:73:96:e6:fe:3e:10:88:dd:78:0a:8a:61:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2E185B12379871494114828D5D5D713982E469 Validity Not Before: Dec 25 07:45:52 2025 GMT Not After : Dec 28 13:22:52 2025 GMT Subject: CN=7A88B2FFF65C908DBF2177541DFA09A9D30BA3F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:2c:d6:94:0c:de:2b:21:d4:f0:72:19:f7: fe:b5:df:1a:e6:0e:4e:ea:46:05:77:cd:c5:6d:97: 20:45:df:f9:c6:46:e8:4c:fd:59:2a:1d:c9:2f:0d: 26:58:1c:d0:d1:d2:fa:90:11:0c:bc:0b:66:eb:43: 64:81:47:1c:1f:5c:0d:7e:23:93:82:c8:89:01:76: af:d0:5c:95:93:bd:6b:b9:3b:4a:58:5e:c8:99:a9: 9b:84:d6:62:99:df:62:f5:8f:e6:f6:73:a1:1f:75: 72:16:ae:33:76:c4:5b:ac:80:50:87:ff:c9:b1:7c: 3b:e6:d8:1d:62:00:fa:b6:ba:3f:9a:6f:01:3e:f4: b4:e5:30:98:98:5e:3f:2d:06:3b:2b:5a:28:54:36: 58:15:0b:d0:8d:85:75:ad:f1:59:b9:5b:92:50:67: 09:cd:61:ad:e0:d7:c8:39:5d:2a:b7:b8:57:fc:5a: 84:3a:c1:ca:bd:8f:5c:43:fe:6b:c6:5d:32:8a:cd: 56:2f:8d:c6:95:f5:c8:40:40:1d:c2:67:91:fc:5f: 70:4a:b5:1c:c7:15:6a:13:0f:16:17:de:a6:aa:22: 2a:3f:f4:31:ca:be:57:0d:68:bf:fc:22:25:29:c9: 2e:27:8a:c3:b1:28:be:8c:88:02:8f:a9:1f:60:cb: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:88:B2:FF:F6:5C:90:8D:BF:21:77:54:1D:FA:09:A9:D3:0B:A3:F7 X509v3 Authority Key Identifier: keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:8d:20:bc:94:37:de:fa:f4:a4:77:2f:59:e3:86:d1:87:63: c5:c2:aa:f7:88:b2:e4:21:85:63:97:b8:f7:1c:18:b2:e0:0d: 7c:50:6f:8a:56:be:6d:ab:24:0c:41:23:88:6b:38:3d:cb:38: 79:6a:e6:1b:6c:1b:42:56:be:ec:31:33:ab:24:3d:52:f7:4f: 99:e9:60:ab:44:16:a8:e9:ab:44:4b:7d:fe:ac:0c:68:ea:d2: b4:58:2e:0b:0e:52:ca:78:f8:d5:45:bf:0c:3b:c4:f7:b7:70: 78:2d:63:51:ad:21:c1:ba:ca:a6:2f:4f:57:58:6b:11:0b:de: 44:2b:c8:c1:a8:22:0b:f4:af:85:44:fa:9d:57:ab:4c:51:47: b9:14:ed:c0:ed:55:d5:83:9a:c5:cd:da:db:20:06:ba:04:b5: b9:ba:54:ba:14:44:a0:b3:d8:96:b2:d4:99:12:4e:49:a8:e6: 32:7c:db:26:39:ce:77:2f:4a:06:05:71:ea:77:7f:db:ba:9b: 89:6c:68:53:4d:2a:93:d0:30:d5:ea:be:7b:ed:49:e2:e9:c0: e7:2d:04:4d:13:8b:dc:61:6d:9d:9b:0b:8a:25:5f:6a:f8:a2: 3f:9b:9f:56:65:50:4f:bd:f2:0c:eb:20:3a:43:a7:f2:17:26: d5:eb:ca:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMX5qWQzAKXOW5v4+EIjdeAqKYZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEz OTgyRTQ2OTAeFw0yNTEyMjUwNzQ1NTJaFw0yNTEyMjgxMzIyNTJaMDMxMTAvBgNV BAMTKDdBODhCMkZGRjY1QzkwOERCRjIxNzc1NDFERkEwOUE5RDMwQkEzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkZizWlAzeKyHU8HIZ9/613xrm Dk7qRgV3zcVtlyBF3/nGRuhM/VkqHckvDSZYHNDR0vqQEQy8C2brQ2SBRxwfXA1+ I5OCyIkBdq/QXJWTvWu5O0pYXsiZqZuE1mKZ32L1j+b2c6EfdXIWrjN2xFusgFCH /8mxfDvm2B1iAPq2uj+abwE+9LTlMJiYXj8tBjsrWihUNlgVC9CNhXWt8Vm5W5JQ ZwnNYa3g18g5XSq3uFf8WoQ6wcq9j1xD/mvGXTKKzVYvjcaV9chAQB3CZ5H8X3BK tRzHFWoTDxYX3qaqIio/9DHKvlcNaL/8IiUpyS4nisOxKL6MiAKPqR9gy1QZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeoiy//ZckI2/IXdUHfoJqdMLo/cwHwYDVR0j BBgwFoAUKi4YWxI3mHFJQRSCjV1dcTmC5GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMC8yQTJFMTg1QjEy Mzc5ODcxNDk0MTE0ODI4RDVENUQ3MTM5ODJFNDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEzOTgy RTQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzAvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVE NzEzOTgyRTQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGNILyUN9769KR3L1njhtGHY8XCqveIsuQh hWOXuPccGLLgDXxQb4pWvm2rJAxBI4hrOD3LOHlq5htsG0JWvuwxM6skPVL3T5np YKtEFqjpq0RLff6sDGjq0rRYLgsOUsp4+NVFvww7xPe3cHgtY1GtIcG6yqYvT1dY axEL3kQryMGoIgv0r4VE+p1Xq0xRR7kU7cDtVdWDmsXN2tsgBroEtbm6VLoURKCz 2Jay1JkSTkmo5jJ82yY5zncvSgYFcep3f9u6m4lsaFNNKpPQMNXqvnvtSeLpwOct BE0Ti9xhbZ2bC4olX2r4oj+bn1ZlUE+98gzrIDpDp/IXJtXryrg= -----END CERTIFICATE-----Generated at Fri Dec 26 09:32:43 2025 by rpki-client