This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft File: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft (raw, json) Hash identifier: /Y+ryeIu9X4twMGGPKVFbcfUbF5vvH2hnTDlqcgntts= Subject key identifier: A5:1E:A1:48:00:B9:88:52:99:22:B4:5E:A1:8C:63:AA:4C:CE:8D:E3 Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 Certificate issuer: /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Certificate serial: AE9F685788BB3DB34F11733A869B365600FADA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft Manifest number: 0531 Signing time: Fri 19 Dec 2025 00:02:03 +0000 Manifest this update: Thu 18 Dec 2025 23:57:03 +0000 Manifest next update: Mon 22 Dec 2025 07:39:03 +0000 Files and hashes: 1: 3138302e3231342e3234382e302f32342d3234203d3e203338313530.roa (hash: O4758ltnaCnZlk7IYIR3KUuRIpNS2S4KZ7yVd+rr0y0=) 2: 3138302e3231342e3234322e302f32342d3234203d3e203338313530.roa (hash: b1d2IpMrPiIjBD6MTNOx5pdXixsLXZonVO5D5NGCeqQ=) 3: 323430323a663038303a313a3a2f34382d3438203d3e203338313530.roa (hash: l7IvhWfbT+lx2dajFWFQHmgoo+JryhgkVz+DjITDf5w=) 4: 323430323a663038303a623a3a2f34382d3438203d3e203338313530.roa (hash: Rjbhv9edaboHxu8zehTXAVaGiJWP5SEtMWZfSRiWBmE=) 5: 323430323a663038303a613a3a2f34382d3438203d3e203338313530.roa (hash: DnA9pVTlc5t5JUQmGO4bpvoQrAWbOAtoPuSdy5Z19iI=) 6: 3230322e39312e31302e302f32342d3234203d3e203338313530.roa (hash: iEwos51aWtJInprKu1evUCiZY2FYY6kr/E794RVuLRw=) 7: 323430323a663038303a323a3a2f34382d3438203d3e203338313530.roa (hash: nbkYpz+Buhh+XcMqkAbLahjlkTuDcneq98AvbJE0oqQ=) 8: 3138302e3231342e3234372e302f32342d3234203d3e203338313530.roa (hash: 7CnLEJTxSmV5XmK1oL/nqrOB4/valIkxzWgpmSqfSL0=) 9: 2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl (hash: mWwYKEq5PzZwCTJhXtDZAIoXTbghEsP1G6vyhQArQ00=) 10: 3138302e3231342e3234392e302f32342d3234203d3e203338313530.roa (hash: ktBqyZQvnsVWZJg0o8QMMym54n+sUY8BtLk1pA6WS3M=) 11: 3230322e39312e31312e302f32342d3234203d3e203338313530.roa (hash: GOw6BJn4XT5wEmOGVeX/6A1aWsswmeb6q3J3zFZr2JM=) 12: 3230322e39312e382e302f32342d3234203d3e203338313530.roa (hash: Ge6toEI3GzH1rudvQNuKe4sTOqkKcImFzmaL0fB9K2A=) 13: 3138302e3231342e3234302e302f32342d3234203d3e203338313530.roa (hash: 3hpRgS72xqbHw/rzHvrZvr06sNkUSk2YClN/PS2G8VY=) 14: 323430323a663038303a633a3a2f34382d3438203d3e203338313530.roa (hash: 2I4LUvDndEY+56Z45Zke7IZg+TWoP7vGoCnv2WeX4qA=) 15: 3138302e3231342e3235332e302f32342d3234203d3e203338313530.roa (hash: vVu41fldo66s3GTiO3p70Y9WjrS6PJn4ErhvMTYrL+0=) 16: 3138302e3231342e3234352e302f32342d3234203d3e203338313530.roa (hash: impujDOUoN2BKQyTyiVBUJjqkOdpqC1eOXOcnJD1Ge8=) 17: 3138302e3231342e3235342e302f32342d3234203d3e203338313530.roa (hash: qU/iCVYcrH5NwRFFUnpTANC1C4dNa/LYJXSxq8pN8yQ=) 18: 3230322e39312e31352e302f32342d3234203d3e203338313530.roa (hash: sTkMNKXQHwGJCIGPBjMVfmb030wQu4FTAnEhwXDkkhA=) 19: 3138302e3231342e3235352e302f32342d3234203d3e203338313530.roa (hash: 9DRtavO7TXPRRO9r4nJOU2l6z0jZDLCjiuHMpKPIfJU=) 20: 3138302e3231342e3234332e302f32342d3234203d3e203338313530.roa (hash: akxHC8MKM3EFjHhlpdlYP+/pk7TEX/1Nsq+20Bs3aRk=) 21: 3138302e3231342e3234312e302f32342d3234203d3e203338313530.roa (hash: bu8PQupPQERGQ/wzLVVe3ZYhIOmwELfx937WvLW0lzc=) 22: 3138302e3231342e3234342e302f32342d3234203d3e203338313530.roa (hash: t73bJSev/MnTBxda4w51EgtY3s6q8wQKW/7viVMLk2M=) 23: 323430323a663038303a3a2f34382d3438203d3e203338313530.roa (hash: SpSJ2mlMQ8WdpZZy+WtaRGJCKRn7SkirsoH4mwvq2iA=) 24: 3138302e3231342e3235322e302f32342d3234203d3e203338313530.roa (hash: oOJaEiRPwPQflN2dss15Y4scB4IK0srdXT4sQ+7Afow=) 25: 3138302e3231342e3234362e302f32342d3234203d3e203338313530.roa (hash: euoMpvL4eG72VF7oEqlEoSVWhRjwaeq3y0huB9mjd6w=) 26: 3230322e39312e31342e302f32342d3234203d3e203338313530.roa (hash: afV3DuPWJs229SMBfZ6L1zzWwdYeqEIzLl+zAnPOPc8=) 27: 3230322e39312e31322e302f32342d3234203d3e203338313530.roa (hash: M1sZzZsXerpK67gBWx+pwUlEiAdZNEC8sdxke6ageOg=) 28: 3230322e39312e31332e302f32342d3234203d3e203338313530.roa (hash: Pm3ejHe0iKXyhk2uLd7JZnNwWHWfKfQSqqt4OykxpQA=) 29: 323430323a663038303a333a3a2f34382d3438203d3e203338313530.roa (hash: oVmfGlTp0DWOtWPGyWCK/51mm8QlFMAOkDDm7W0JfnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ae:9f:68:57:88:bb:3d:b3:4f:11:73:3a:86:9b:36:56:00:fa:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9 Validity Not Before: Dec 18 23:57:03 2025 GMT Not After : Dec 22 07:39:03 2025 GMT Subject: CN=A51EA14800B988529922B45EA18C63AA4CCE8DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:4c:98:30:c8:ca:a3:20:e7:92:96:78:12: 27:8b:eb:0e:0f:49:61:c6:2b:de:24:58:e0:2b:16: 48:ea:37:55:bd:2f:4f:42:0b:f3:1a:9e:36:8e:bc: a0:ed:f9:c7:57:89:ad:cb:ce:c7:0d:f8:f4:04:cd: bd:03:85:96:cd:df:ac:0e:b6:a2:68:7a:82:9d:05: d3:4a:6a:39:7e:43:79:17:a7:63:b0:9b:37:bd:81: 96:8a:2b:a7:7c:7f:b4:b2:dc:be:f7:6b:a2:5d:5b: 01:28:fd:1c:fc:d9:e1:50:26:db:03:d9:7d:55:8f: 01:df:62:0c:35:1d:56:41:45:2c:9f:c2:8d:4c:24: 7f:77:1f:05:1c:86:93:7e:4f:11:4c:c1:16:fa:23: 1f:82:14:e9:47:d2:76:37:d0:c6:2e:f0:d0:5d:bb: ae:19:f7:75:f9:ce:b7:27:37:92:2f:57:bf:dc:c3: 05:0a:b6:97:c0:13:55:c2:1f:90:a7:be:61:54:ec: 33:79:2e:b9:7b:23:5a:3b:79:de:4d:fa:ba:a2:d1: cb:1f:03:b0:1b:c0:7d:81:5b:c3:78:66:9a:cd:b3: be:e6:0c:9f:6a:11:8c:2a:e5:bb:19:f8:50:f5:22: 71:fe:67:bf:42:2f:56:96:ed:86:ae:14:f5:d0:f4: c6:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1E:A1:48:00:B9:88:52:99:22:B4:5E:A1:8C:63:AA:4C:CE:8D:E3 X509v3 Authority Key Identifier: keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f4:e3:35:ee:4d:57:0b:57:7a:e5:12:03:b6:89:60:e5:aa: ff:79:06:91:d7:f4:1e:4d:25:24:d1:85:57:29:47:4a:97:a2: 0e:3a:0a:bb:0b:cb:21:39:f2:c3:9c:50:a2:d2:52:00:02:01: f7:6d:12:0c:99:ca:cd:c7:0c:0e:09:12:2f:58:c7:93:a8:09: 9e:35:9d:ee:89:35:86:6d:a3:a0:cb:64:23:2f:27:5e:d5:2d: 41:0e:cb:72:52:d6:fc:cd:59:a1:87:92:d8:90:1d:33:82:11: 55:08:e0:01:b0:1c:57:9c:84:f0:e5:b2:85:79:3e:5b:f6:35: 4e:fb:9f:97:d3:56:c2:59:31:2b:a4:ec:db:fc:24:d2:3c:84: 8a:91:a6:a2:b1:68:19:7c:0e:cd:bc:46:03:e0:cc:3c:06:fd: 88:d6:d2:87:f2:22:c7:b5:99:4f:25:5d:8f:47:47:d3:cb:79: 85:10:c3:3c:0d:2b:92:f1:04:3c:91:c5:8e:7a:5c:21:83:77: 7e:32:75:0e:4d:be:92:b7:d2:3e:71:9a:3c:ec:92:94:9e:65: 23:e6:d3:46:a1:55:7f:42:aa:f8:fd:cb:23:31:8a:95:bf:ba: 7a:e7:d2:3f:2b:0c:ee:5d:35:fb:75:5e:2b:b2:ba:88:d3:2a: db:bc:1c:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAK6faFeIuz2zTxFzOoabNlYA+towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG NjhDREJCOTAeFw0yNTEyMTgyMzU3MDNaFw0yNTEyMjIwNzM5MDNaMDMxMTAvBgNV BAMTKEE1MUVBMTQ4MDBCOTg4NTI5OTIyQjQ1RUExOEM2M0FBNENDRThERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1EyYMMjKoyDnkpZ4EieL6w4P SWHGK94kWOArFkjqN1W9L09CC/ManjaOvKDt+cdXia3LzscN+PQEzb0DhZbN36wO tqJoeoKdBdNKajl+Q3kXp2Owmze9gZaKK6d8f7Sy3L73a6JdWwEo/Rz82eFQJtsD 2X1VjwHfYgw1HVZBRSyfwo1MJH93HwUchpN+TxFMwRb6Ix+CFOlH0nY30MYu8NBd u64Z93X5zrcnN5IvV7/cwwUKtpfAE1XCH5CnvmFU7DN5Lrl7I1o7ed5N+rqi0csf A7AbwH2BW8N4ZprNs77mDJ9qEYwq5bsZ+FD1InH+Z79CL1aW7YauFPXQ9MbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpR6hSAC5iFKZIrReoYxjqkzOjeMwHwYDVR0j BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3 Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD REJCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlNjViNjctOTA1Yy00MDNjLThj NzktMjMxNTY1OTY2OGFhLzAvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhB NURGNjhDREJCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAID04zXuTVcLV3rlEgO2iWDlqv95BpHX9B5N JSTRhVcpR0qXog46CrsLyyE58sOcUKLSUgACAfdtEgyZys3HDA4JEi9Yx5OoCZ41 ne6JNYZto6DLZCMvJ17VLUEOy3JS1vzNWaGHktiQHTOCEVUI4AGwHFechPDlsoV5 Plv2NU77n5fTVsJZMSuk7Nv8JNI8hIqRpqKxaBl8Ds28RgPgzDwG/YjW0ofyIse1 mU8lXY9HR9PLeYUQwzwNK5LxBDyRxY56XCGDd34ydQ5NvpK30j5xmjzskpSeZSPm 00ahVX9Cqvj9yyMxipW/unrn0j8rDO5dNft1XiuyuojTKtu8HEQ= -----END CERTIFICATE-----Generated at Sat Dec 20 18:43:43 2025 by rpki-client