This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: G+niopiuyUK3RtKYcXq/VQ5AwyMEBzg5LHMCtBQ5ZdI= Subject key identifier: EC:FF:0C:51:14:8C:18:59:D1:2C:A2:5B:DE:CC:23:4D:94:5D:82:A6 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 2C6B72CFB5A17CA62DC073FB1953D7501D1119FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: 0108 Signing time: Thu 25 Dec 2025 03:30:43 +0000 Manifest this update: Thu 25 Dec 2025 03:25:43 +0000 Manifest next update: Sun 28 Dec 2025 04:21:43 +0000 Files and hashes: 1: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: 8j1yb4juUXnxs7bQYVdv5SJY8/PKu+oKwyt5/dugucM=) 2: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:6b:72:cf:b5:a1:7c:a6:2d:c0:73:fb:19:53:d7:50:1d:11:19:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Dec 25 03:25:43 2025 GMT Not After : Dec 28 04:21:43 2025 GMT Subject: CN=ECFF0C51148C1859D12CA25BDECC234D945D82A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:f5:2a:2a:9c:75:a4:7b:86:bb:15:3e:da: f8:a0:c7:1b:d9:09:ca:94:ba:bd:8b:61:6d:cd:bc: d8:7c:42:72:bc:70:8c:f3:a1:aa:e6:a4:b1:9f:d7: 56:92:4f:3f:16:49:ad:ed:9e:39:bb:0e:ac:04:3d: b5:9c:83:1e:c8:cf:0a:a1:3b:7a:73:90:c4:60:2a: 37:e2:64:60:fd:ca:eb:cb:f7:57:77:70:26:d1:43: 86:c7:41:44:14:bf:6e:b1:d6:76:e6:9a:c6:91:39: ce:1b:db:c2:ff:2b:e5:9b:dc:04:6f:0a:1d:5a:5f: db:1c:d1:02:2d:54:33:1a:f8:ea:30:8a:f7:72:c8: 6b:2b:40:d5:18:de:12:3d:dd:a3:a1:4d:c0:23:ab: 2b:70:ef:6c:eb:a9:0f:86:39:e8:89:db:f7:11:a4: bc:b9:90:9e:b7:2a:05:f5:de:5c:fb:ca:e9:09:c0: f4:dc:0d:82:e5:37:d0:3f:89:c1:38:5a:63:f1:cb: b5:70:8f:91:8d:94:ef:fc:19:6b:4a:4f:b3:a1:1b: 06:c8:e1:e8:29:68:91:e5:cb:0f:b5:9b:2a:70:3b: ba:9f:cf:25:a5:54:92:94:22:6a:eb:60:34:77:b9: 45:91:20:68:4c:bc:a9:a0:73:ef:8b:9b:e4:45:80: 9e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FF:0C:51:14:8C:18:59:D1:2C:A2:5B:DE:CC:23:4D:94:5D:82:A6 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a7:cf:11:a4:b6:27:f9:6d:e6:ef:9a:8f:98:d7:cc:a6:60: 11:d6:f3:08:c1:bb:84:87:78:08:ea:15:4c:77:a2:85:32:60: f4:a8:fc:58:d3:4f:33:f6:a6:14:cc:85:9a:64:c8:77:f5:b6: 00:66:02:98:05:43:da:02:de:37:3c:fd:bf:b2:19:c9:eb:4b: 77:e3:1f:5f:48:44:5a:6e:52:5f:68:82:6d:cf:f3:3b:b0:d3: 6d:70:cd:66:4e:7b:ab:1d:b7:f8:01:9b:87:e7:5d:1d:35:0a: ee:86:94:23:9b:f4:95:d4:26:78:0b:e0:a0:fc:25:33:b2:de: 1f:a6:68:fe:1d:fd:7e:1e:40:76:4b:4c:96:24:3e:5b:ef:61: 4b:af:4d:a7:70:6d:6c:e8:f5:4d:8f:0e:a0:cb:cc:bb:0c:f0: 86:3a:83:97:cc:58:85:4e:20:0e:19:bc:c9:fe:c9:dc:61:21: 99:c2:af:e8:7b:79:6d:cf:d0:a1:9e:23:0e:b3:99:d5:30:a5: 17:9d:fc:f7:85:84:4e:b1:c1:ea:d2:1b:e6:7b:a8:0d:04:37: b6:ee:58:17:26:e8:4a:da:25:a3:85:be:97:e3:cf:b8:8b:43: 09:cc:e2:c9:e5:ed:08:d2:01:32:e1:9e:5f:f1:17:e9:e8:f3: e5:a1:2d:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULGtyz7WhfKYtwHP7GVPXUB0RGfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNTEyMjUwMzI1NDNaFw0yNTEyMjgwNDIxNDNaMDMxMTAvBgNV BAMTKEVDRkYwQzUxMTQ4QzE4NTlEMTJDQTI1QkRFQ0MyMzREOTQ1RDgyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQfUqKpx1pHuGuxU+2vigxxvZ CcqUur2LYW3NvNh8QnK8cIzzoarmpLGf11aSTz8WSa3tnjm7DqwEPbWcgx7Izwqh O3pzkMRgKjfiZGD9yuvL91d3cCbRQ4bHQUQUv26x1nbmmsaROc4b28L/K+Wb3ARv Ch1aX9sc0QItVDMa+OowivdyyGsrQNUY3hI93aOhTcAjqytw72zrqQ+GOeiJ2/cR pLy5kJ63KgX13lz7yukJwPTcDYLlN9A/icE4WmPxy7Vwj5GNlO/8GWtKT7OhGwbI 4egpaJHlyw+1mypwO7qfzyWlVJKUImrrYDR3uUWRIGhMvKmgc++Lm+RFgJ7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7P8MURSMGFnRLKJb3swjTZRdgqYwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmnzxGktif5bebvmo+Y18ymYBHW8wjBu4SH eAjqFUx3ooUyYPSo/FjTTzP2phTMhZpkyHf1tgBmApgFQ9oC3jc8/b+yGcnrS3fj H19IRFpuUl9ogm3P8zuw021wzWZOe6sdt/gBm4fnXR01Cu6GlCOb9JXUJngL4KD8 JTOy3h+maP4d/X4eQHZLTJYkPlvvYUuvTadwbWzo9U2PDqDLzLsM8IY6g5fMWIVO IA4ZvMn+ydxhIZnCr+h7eW3P0KGeIw6zmdUwpRed/PeFhE6xwerSG+Z7qA0EN7bu WBcm6EraJaOFvpfjz7iLQwnM4snl7QjSATLhnl/xF+no8+WhLfs= -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:14 2025 by rpki-client