This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: fjjQeIPEB1/fgm7lvpEtudUXWx+cN8e5jo90gOsoRmc= Subject key identifier: BA:13:02:84:21:40:53:06:C8:19:0A:06:FF:EA:7D:89:79:F1:0D:1E Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 0C970072AFE05663E579E5A6D158F666AB8FCD97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 0157 Signing time: Thu 18 Dec 2025 17:53:03 +0000 Manifest this update: Thu 18 Dec 2025 17:48:03 +0000 Manifest next update: Sun 21 Dec 2025 23:20:03 +0000 Files and hashes: 1: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: dNnoIXKVhmyapC9qepVTmmkVYB2sWKjzCXWE7DAeobc=) 2: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: waqQG8MtqVbtL4TY+/TA5IOZfS5SYXu95DoOpLmbRDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:97:00:72:af:e0:56:63:e5:79:e5:a6:d1:58:f6:66:ab:8f:cd:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Dec 18 17:48:03 2025 GMT Not After : Dec 21 23:20:03 2025 GMT Subject: CN=BA13028421405306C8190A06FFEA7D8979F10D1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:81:19:b3:ba:ca:97:1d:ae:9b:5f:89:58:64: 99:01:0c:f9:5c:60:f7:ec:94:77:6e:f9:01:7e:36: ff:02:0a:de:92:62:33:06:ec:ab:88:df:61:97:cf: 24:ce:99:57:23:48:0f:f3:ed:ee:11:42:19:ec:f3: 66:93:09:b5:4d:92:d8:32:81:44:af:77:94:5c:70: 5f:87:81:c3:db:3c:94:63:3f:2e:04:ff:47:8a:dd: c6:9e:fc:5f:85:cc:56:a6:64:32:eb:c2:88:d0:a1: cc:b4:9d:ab:db:81:ff:24:d7:2b:3b:95:77:35:06: 30:48:e6:d8:27:6d:5b:60:c3:3c:1e:b1:31:0a:8c: d0:9b:e9:28:ea:c0:a8:94:23:76:d3:47:55:92:15: b6:19:dc:fb:ba:8a:7a:bb:88:fe:89:93:67:bf:56: 56:01:10:44:88:06:d5:65:9b:da:56:80:09:37:eb: bd:06:51:47:54:13:c7:e8:ea:1a:44:5b:11:e0:55: 98:c0:82:7a:bc:df:85:90:9b:98:d4:5c:7e:16:49: bc:32:9a:9f:96:d1:c7:1c:c7:9f:8d:e1:bd:95:9b: a3:f5:d0:76:6e:8b:e8:8f:97:63:3f:d0:8c:0d:58: 34:2f:2f:5a:f2:87:01:99:f6:9d:03:60:29:48:b1: df:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:13:02:84:21:40:53:06:C8:19:0A:06:FF:EA:7D:89:79:F1:0D:1E X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:35:89:62:4a:68:54:7f:5f:53:8b:8f:4f:ad:a5:f0:ea:77: e6:94:22:6f:c1:0b:08:a2:77:41:9e:88:06:d7:d4:b8:bd:08: 94:1f:df:16:38:79:9c:0d:77:d6:5b:a2:9a:a6:8c:50:bf:da: 5b:47:67:56:37:cc:dc:21:05:71:0d:40:7d:cf:1c:6a:ca:2d: 7c:0c:a3:8e:fe:23:4a:eb:10:b4:1c:04:b6:ab:e9:ec:d2:09: 07:52:4f:66:28:1c:ce:fa:53:44:fe:fe:1d:63:de:a0:80:2f: af:d1:af:c0:92:80:2f:2b:e6:15:60:0e:1d:2f:02:45:1a:23: ba:7f:17:4f:bd:82:ab:7b:4e:33:32:bd:29:cd:c6:eb:4c:5d: b8:3e:1c:c7:ef:30:01:45:e3:98:41:7c:ec:49:1e:49:ca:39: 04:ef:67:0d:b2:45:e1:ee:8c:e2:1e:da:6f:f4:74:62:0c:47: f1:da:bf:aa:8a:79:0d:98:4a:ff:d9:ac:6d:37:df:81:cf:e2: 85:c0:94:ee:5a:22:f0:2b:6c:40:17:62:fe:0d:b0:bd:ba:09: 5e:25:dd:db:12:89:eb:60:7c:89:c9:72:fa:ca:e1:f6:07:5e: ff:80:91:d7:48:cd:7c:42:02:8a:9d:9c:7b:4a:4d:ca:4b:b3: 65:99:41:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJcAcq/gVmPleeWm0Vj2ZquPzZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTEyMTgxNzQ4MDNaFw0yNTEyMjEyMzIwMDNaMDMxMTAvBgNV BAMTKEJBMTMwMjg0MjE0MDUzMDZDODE5MEEwNkZGRUE3RDg5NzlGMTBEMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgRmzusqXHa6bX4lYZJkBDPlc YPfslHdu+QF+Nv8CCt6SYjMG7KuI32GXzyTOmVcjSA/z7e4RQhns82aTCbVNktgy gUSvd5RccF+HgcPbPJRjPy4E/0eK3cae/F+FzFamZDLrwojQocy0navbgf8k1ys7 lXc1BjBI5tgnbVtgwzwesTEKjNCb6SjqwKiUI3bTR1WSFbYZ3Pu6inq7iP6Jk2e/ VlYBEESIBtVlm9pWgAk3670GUUdUE8fo6hpEWxHgVZjAgnq834WQm5jUXH4WSbwy mp+W0cccx5+N4b2Vm6P10HZui+iPl2M/0IwNWDQvL1ryhwGZ9p0DYClIsd+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhMChCFAUwbIGQoG/+p9iXnxDR4wHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEE1iWJKaFR/X1OLj0+tpfDqd+aUIm/BCwii d0GeiAbX1Li9CJQf3xY4eZwNd9ZbopqmjFC/2ltHZ1Y3zNwhBXENQH3PHGrKLXwM o47+I0rrELQcBLar6ezSCQdST2YoHM76U0T+/h1j3qCAL6/Rr8CSgC8r5hVgDh0v AkUaI7p/F0+9gqt7TjMyvSnNxutMXbg+HMfvMAFF45hBfOxJHknKOQTvZw2yReHu jOIe2m/0dGIMR/Hav6qKeQ2YSv/ZrG0334HP4oXAlO5aIvArbEAXYv4NsL26CV4l 3dsSietgfInJcvrK4fYHXv+AkddIzXxCAoqdnHtKTcpLs2WZQc0= -----END CERTIFICATE-----Generated at Fri Dec 19 18:18:22 2025 by rpki-client