This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: E3QHUZQxfd+s5Q84FpA0Czb0A/9Ujb8P1dIXKzLIZdM= Subject key identifier: C1:60:2A:60:D0:03:EE:3C:EC:4E:CC:99:D1:CD:B7:46:7A:67:14:68 Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 61CCF0654B38E2E94F731EDEF6635C54E6160B96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 0533 Signing time: Mon 15 Dec 2025 15:01:29 +0000 Manifest this update: Mon 15 Dec 2025 14:56:29 +0000 Manifest next update: Fri 19 Dec 2025 02:38:29 +0000 Files and hashes: 1: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: /ZqmuN0x+ZwpTTLsOK93bf5aWydgNNzXSi3NS4bqhi0=) 2: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) 3: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: 5tdW0LEd7ot3UTgTC9v+G4xHMjstWuC9plsJIrXJC7E=) 4: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: bV9xBqFWWdQNpl4xPPj/IRLaOQzWewk+JeafEOq6H8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 02:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cc:f0:65:4b:38:e2:e9:4f:73:1e:de:f6:63:5c:54:e6:16:0b:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Dec 15 14:56:29 2025 GMT Not After : Dec 19 02:38:29 2025 GMT Subject: CN=C1602A60D003EE3CEC4ECC99D1CDB7467A671468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:29:99:e9:02:30:ae:a8:c9:36:01:2c:f5:91: 40:82:82:21:dc:6c:be:9d:0b:5b:94:26:01:65:84: 0f:b4:84:26:0d:73:c7:0d:43:17:49:3e:7d:42:78: 1c:a6:81:6c:89:0b:90:70:b6:19:c4:ee:33:99:6f: 71:71:cc:d8:ac:d9:72:9e:32:ab:57:2b:40:5e:0a: cd:05:e2:bd:7c:44:09:4f:ed:25:6e:d7:eb:5e:12: 5b:de:9f:38:07:7d:69:b6:da:c4:e3:b5:61:a8:eb: 29:84:24:27:c8:14:fc:75:fa:17:f7:33:2f:2b:e4: 4e:a5:a3:1d:27:06:d9:1c:ec:01:ad:7d:e5:2e:a2: 62:0d:34:89:b6:9b:7b:c4:be:b1:79:d3:a4:29:62: be:27:1b:2f:49:95:6a:17:7a:b1:1e:c6:42:16:39: 07:19:8c:73:bc:0f:8a:d8:d6:3e:1c:4d:4c:a9:5d: 3b:11:9a:dc:ac:71:5b:e9:76:57:4e:bd:70:4e:de: ee:cd:f9:8a:46:5b:93:0f:42:7d:e2:52:e0:8e:3c: a6:a9:13:1a:29:7e:0e:f8:95:f9:b1:6a:0c:4c:4c: f0:cd:ca:f4:be:b4:69:b1:2c:0b:23:e6:b2:17:07: 39:90:1e:d6:6a:9b:39:96:3b:93:f6:39:39:4d:97: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:60:2A:60:D0:03:EE:3C:EC:4E:CC:99:D1:CD:B7:46:7A:67:14:68 X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:9d:bd:fe:82:c5:16:d9:49:5a:85:1a:14:67:b9:74:a1:31: e1:2b:a2:93:63:fb:58:be:71:c1:eb:2a:bd:5e:28:dd:ec:2f: 8d:70:ad:68:c4:9f:aa:89:3c:9d:33:af:87:a3:85:74:25:dd: 1f:0f:38:f9:0e:41:e5:3b:9c:00:16:8a:69:11:d0:c6:b9:39: a8:83:ab:f4:81:2c:85:b7:28:03:7f:a6:90:99:59:39:fa:f8: 0f:ba:b7:ff:c7:ff:2e:de:76:00:db:33:fb:c0:d7:dd:94:25: bf:75:78:15:3a:d8:a6:56:69:4e:7d:42:78:95:c1:91:b9:17: 7e:af:27:21:1d:ae:65:89:2b:25:88:4e:0c:2f:01:85:2f:eb: 9c:49:bd:5b:29:37:60:9d:07:51:75:26:ec:fb:fa:79:08:f2: 7f:fc:4c:32:81:b7:7e:81:ba:9b:b9:63:52:31:57:89:93:0e: bc:ba:f7:93:08:e9:b2:7b:29:fc:91:99:ce:9f:20:15:86:cb: 2a:d2:8f:19:ab:4a:d8:75:82:4b:17:22:3f:94:bd:c7:69:dc: 3a:a1:02:08:83:0f:5c:27:6a:b3:da:0e:d4:00:08:be:1e:fa: 94:bb:0f:fb:14:62:d0:cc:e9:45:53:41:b5:0b:3f:14:a2:ed: 57:76:38:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYczwZUs44ulPcx7e9mNcVOYWC5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNTEyMTUxNDU2MjlaFw0yNTEyMTkwMjM4MjlaMDMxMTAvBgNV BAMTKEMxNjAyQTYwRDAwM0VFM0NFQzRFQ0M5OUQxQ0RCNzQ2N0E2NzE0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlKZnpAjCuqMk2ASz1kUCCgiHc bL6dC1uUJgFlhA+0hCYNc8cNQxdJPn1CeBymgWyJC5BwthnE7jOZb3FxzNis2XKe MqtXK0BeCs0F4r18RAlP7SVu1+teElvenzgHfWm22sTjtWGo6ymEJCfIFPx1+hf3 My8r5E6lox0nBtkc7AGtfeUuomINNIm2m3vEvrF506QpYr4nGy9JlWoXerEexkIW OQcZjHO8D4rY1j4cTUypXTsRmtyscVvpdldOvXBO3u7N+YpGW5MPQn3iUuCOPKap Exopfg74lfmxagxMTPDNyvS+tGmxLAsj5rIXBzmQHtZqmzmWO5P2OTlNlzw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwWAqYNAD7jzsTsyZ0c23RnpnFGgwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmdvf6CxRbZSVqFGhRnuXShMeEropNj+1i+ ccHrKr1eKN3sL41wrWjEn6qJPJ0zr4ejhXQl3R8POPkOQeU7nAAWimkR0Ma5OaiD q/SBLIW3KAN/ppCZWTn6+A+6t//H/y7edgDbM/vA192UJb91eBU62KZWaU59QniV wZG5F36vJyEdrmWJKyWITgwvAYUv65xJvVspN2CdB1F1Juz7+nkI8n/8TDKBt36B upu5Y1IxV4mTDry695MI6bJ7KfyRmc6fIBWGyyrSjxmrSth1gksXIj+Uvcdp3Dqh AgiDD1wnarPaDtQACL4e+pS7D/sUYtDM6UVTQbULPxSi7Vd2OGo= -----END CERTIFICATE-----Generated at Wed Dec 17 20:50:37 2025 by rpki-client