This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: U3fTO8+Jm1K6AAa/qqwbI3jkRcLTKCNaN9v/GTeNAcM= Subject key identifier: A2:0C:B2:DB:89:4B:FC:63:A8:DF:D7:65:EF:A3:E1:2F:29:D3:7F:99 Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 48113C86C1ADCA750A987EDBDA91C63623D5A6B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 0159 Signing time: Tue 23 Dec 2025 06:43:01 +0000 Manifest this update: Tue 23 Dec 2025 06:38:01 +0000 Manifest next update: Fri 26 Dec 2025 08:00:01 +0000 Files and hashes: 1: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: dNnoIXKVhmyapC9qepVTmmkVYB2sWKjzCXWE7DAeobc=) 2: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: LRt0YZQlUdflGuhG16Zib3KUuYj3YHcaqH92NpUD6o0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 08:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:11:3c:86:c1:ad:ca:75:0a:98:7e:db:da:91:c6:36:23:d5:a6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Dec 23 06:38:01 2025 GMT Not After : Dec 26 08:00:01 2025 GMT Subject: CN=A20CB2DB894BFC63A8DFD765EFA3E12F29D37F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:5a:dc:c8:2e:d0:49:88:61:45:d1:8d:6b: 4d:86:fd:cf:71:e2:2d:9e:3b:20:70:ff:74:bd:36: d7:a8:3c:12:c4:59:c1:36:d2:4f:a7:af:8c:cb:9a: e6:2f:2b:d5:5e:4e:0d:9b:2f:93:03:d5:9d:24:99: 82:91:7c:61:6c:e0:89:4c:07:a4:39:f0:51:16:73: 83:38:b2:66:c6:37:57:2a:d5:90:eb:3b:fd:db:3b: 41:81:1e:1d:02:9d:3f:66:92:57:c9:c0:82:c1:29: 94:03:51:0a:1a:30:d5:99:65:ca:29:c6:ad:fc:b5: d2:e1:6f:71:ad:02:65:f5:45:56:bb:82:b0:b4:93: 70:86:ad:ab:75:96:aa:32:9b:03:bf:6d:fd:12:f6: e1:a4:74:b3:d0:6a:8a:f8:d4:ad:29:2d:58:64:9b: 91:c1:89:fd:ba:91:c4:3d:bd:b8:2d:33:d0:0d:6e: 29:40:39:25:66:47:4b:06:c3:1d:86:85:0d:91:38: 50:66:f9:91:1f:e8:3a:be:59:4e:78:b6:35:ed:66: 6c:59:9c:91:99:ce:41:dc:fb:0d:17:87:b2:5e:34: 21:93:ee:56:92:74:e4:e9:ec:1c:10:03:e5:0b:a7: c5:61:70:39:61:4a:12:49:8d:30:db:10:ec:7f:ea: 19:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0C:B2:DB:89:4B:FC:63:A8:DF:D7:65:EF:A3:E1:2F:29:D3:7F:99 X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ed:83:bc:b3:51:1b:f1:0a:ba:80:ce:60:91:96:cb:3d:95: 9e:ad:72:ed:93:73:29:33:61:df:b7:3b:44:0f:fc:f3:db:50: 1b:fe:24:40:b8:14:41:58:02:a8:81:80:4d:b0:2b:fd:c3:c6: eb:99:9a:f7:7c:4d:ce:8e:21:de:bf:30:60:d5:42:5f:01:5b: 7b:a9:d1:df:fb:05:94:40:04:a5:b7:31:18:64:58:40:12:80: a0:fa:f1:27:f9:62:43:12:ec:a2:c9:33:c1:3d:55:c1:65:46: 9a:18:a5:53:7f:95:f8:e3:81:59:14:a0:1c:0a:e9:f6:78:98: 33:13:fe:0d:92:4c:52:89:9d:ce:00:d9:3e:5c:0d:ab:cc:0d: c2:b4:66:bb:50:fd:e2:33:c2:7a:1e:fe:00:b4:2a:ea:24:4a: 63:af:eb:2b:d7:cb:27:19:58:eb:b7:2f:c8:c3:3e:ab:21:29: dd:a0:e8:08:91:a0:e0:be:33:aa:86:1a:cc:90:4d:dd:9b:82: 6e:76:4d:a5:7e:b2:92:0a:6c:f2:aa:bb:f6:ef:13:d0:37:90: 2a:f1:d5:cf:0e:39:6d:fe:64:00:e5:06:e7:ce:08:0e:6e:91: 0c:38:a6:fa:b4:f1:62:1c:26:d4:25:77:f4:7a:0a:a0:8d:0e: d3:62:f1:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBE8hsGtynUKmH7b2pHGNiPVprYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNTEyMjMwNjM4MDFaFw0yNTEyMjYwODAwMDFaMDMxMTAvBgNV BAMTKEEyMENCMkRCODk0QkZDNjNBOERGRDc2NUVGQTNFMTJGMjlEMzdGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1AFrcyC7QSYhhRdGNa02G/c9x 4i2eOyBw/3S9NteoPBLEWcE20k+nr4zLmuYvK9VeTg2bL5MD1Z0kmYKRfGFs4IlM B6Q58FEWc4M4smbGN1cq1ZDrO/3bO0GBHh0CnT9mklfJwILBKZQDUQoaMNWZZcop xq38tdLhb3GtAmX1RVa7grC0k3CGrat1lqoymwO/bf0S9uGkdLPQaor41K0pLVhk m5HBif26kcQ9vbgtM9ANbilAOSVmR0sGwx2GhQ2ROFBm+ZEf6Dq+WU54tjXtZmxZ nJGZzkHc+w0Xh7JeNCGT7laSdOTp7BwQA+ULp8VhcDlhShJJjTDbEOx/6hmxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUogyy24lL/GOo39dl76PhLynTf5kwHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXtg7yzURvxCrqAzmCRlss9lZ6tcu2Tcykz Yd+3O0QP/PPbUBv+JEC4FEFYAqiBgE2wK/3DxuuZmvd8Tc6OId6/MGDVQl8BW3up 0d/7BZRABKW3MRhkWEASgKD68Sf5YkMS7KLJM8E9VcFlRpoYpVN/lfjjgVkUoBwK 6fZ4mDMT/g2STFKJnc4A2T5cDavMDcK0ZrtQ/eIzwnoe/gC0KuokSmOv6yvXyycZ WOu3L8jDPqshKd2g6AiRoOC+M6qGGsyQTd2bgm52TaV+spIKbPKqu/bvE9A3kCrx 1c8OOW3+ZADlBufOCA5ukQw4pvq08WIcJtQld/R6CqCNDtNi8Zo= -----END CERTIFICATE-----Generated at Wed Dec 24 21:50:22 2025 by rpki-client