This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft File: 2FB994CD1282292E6D2907FCECD7F9E472F49985.mft (raw, json) Hash identifier: hwRgxD1n66aek46aL/9zk0LNXxAJ9Yc8Jen90nSzwx8= Subject key identifier: 0D:F0:4D:5A:EB:00:7F:64:60:6B:76:0A:89:38:12:B9:F8:D4:32:2A Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 Certificate issuer: /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Certificate serial: 16AC0DDBCF67093603B1D63A9A8E800886DBD7F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft Manifest number: 0531 Signing time: Tue 16 Dec 2025 07:40:49 +0000 Manifest this update: Tue 16 Dec 2025 07:35:49 +0000 Manifest next update: Fri 19 Dec 2025 12:37:49 +0000 Files and hashes: 1: 2FB994CD1282292E6D2907FCECD7F9E472F49985.crl (hash: mutpXwAskvQErnaYj/PqzyJsp7/zpu+n8+HR6s9mQkM=) 2: 3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (hash: Gcf2m6wvxledkwR1qQNWFpogqDCtyqIrxx7PKSay3xY=) 3: 3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (hash: gVdR11t5fw1Z3vuhsrv3YNa5sWCtSlARbhSmJWiHvO4=) 4: 3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (hash: MJzwkeAeDIIHbvzCyYoNIOj+cbb5++mSci1EoFNlAV0=) 5: 3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (hash: E2uu1x+I6SmKuq0aJgDdyKaobr6kyHxRsZ9a/8jvA7A=) 6: 3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (hash: aTbEH2RiVh4K07qhKRGxV184e2sOPaIMjUhuR94+WEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 12:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ac:0d:db:cf:67:09:36:03:b1:d6:3a:9a:8e:80:08:86:db:d7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985 Validity Not Before: Dec 16 07:35:49 2025 GMT Not After : Dec 19 12:37:49 2025 GMT Subject: CN=0DF04D5AEB007F64606B760A893812B9F8D4322A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:ba:35:c1:02:23:b8:b2:61:83:aa:78:84: e6:3c:30:ac:6a:d7:ae:3f:95:10:f0:77:94:e5:59: 3f:e9:95:f3:5e:28:52:5f:80:0f:cd:31:1c:7d:78: ca:1b:64:49:76:48:92:26:8a:3c:22:ea:ce:9e:da: af:7a:1f:1d:f9:50:45:22:3d:5d:e6:ec:63:5f:86: 6e:7c:11:f2:d6:7d:35:f1:59:83:33:79:79:f8:59: 1b:d3:c4:b9:54:e3:bd:fa:66:60:72:f5:1b:80:4f: 64:6e:d6:e2:58:27:45:2f:e3:80:ef:ad:7f:a6:f5: 4e:7d:11:de:ac:b9:8a:80:02:11:9d:ad:0f:4a:66: 30:34:37:3f:2d:23:8b:ce:7d:f5:1f:a6:85:87:b6: cd:cb:2a:bf:bf:38:48:93:81:44:25:56:09:fb:ec: aa:02:73:de:f3:39:31:47:e8:26:28:33:6c:32:29: ac:96:b9:ae:7a:17:12:67:36:53:3d:de:99:52:dc: 53:e8:a9:02:cc:76:8c:ba:38:2d:f5:22:c1:e0:d5: 3f:a6:c3:79:fb:f9:5f:34:42:b8:cc:cc:1b:53:46: 82:56:9e:6a:32:6e:67:e7:60:4e:a8:c4:38:3b:e9: f8:5d:de:fb:74:d7:8c:3a:0e:de:d0:52:29:52:75: b8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F0:4D:5A:EB:00:7F:64:60:6B:76:0A:89:38:12:B9:F8:D4:32:2A X509v3 Authority Key Identifier: keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:2f:5c:5f:3d:d4:9f:4d:01:62:f8:15:15:d4:7c:1a:f6:d4: 8f:53:6a:90:38:d7:ea:18:40:b8:f6:d6:9f:0d:89:e2:3e:22: de:f2:80:7a:84:37:8a:ff:77:5a:00:db:d4:1e:d2:26:fc:0f: 0a:b9:ac:b2:ea:a4:3e:8c:83:34:7d:56:f6:3d:ab:af:30:0d: 0e:2e:10:b9:e9:d6:5b:5a:07:cf:80:ba:a2:33:46:d3:d2:76: d9:3f:f4:02:f7:c2:d2:ff:80:41:26:8a:86:c0:4e:87:94:05: 00:1b:b0:47:fb:52:f3:79:6f:87:fc:25:ab:59:6c:4d:3f:79: 6f:90:6e:12:ee:17:02:88:5c:bc:5d:09:97:41:e8:38:00:18: 43:8c:54:77:c3:21:8e:88:c3:9c:cf:df:78:55:f2:4b:7c:1c: 04:91:50:05:86:ef:d4:84:b0:71:e5:29:1b:b8:c8:37:6e:44: 31:3d:cb:60:47:57:b3:a8:39:c8:fe:59:7e:db:d3:46:3a:21: 32:2a:be:e9:88:95:f7:36:73:f1:13:90:d3:10:a7:9a:ba:5b: 03:09:04:a0:84:05:ad:23:8b:2b:b7:32:23:16:d0:42:c2:31: 7f:26:34:42:34:08:99:b1:45:f2:8f:93:b4:b6:f8:90:59:f1: 2c:0e:da:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqwN289nCTYDsdY6mo6ACIbb1/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3 MkY0OTk4NTAeFw0yNTEyMTYwNzM1NDlaFw0yNTEyMTkxMjM3NDlaMDMxMTAvBgNV BAMTKDBERjA0RDVBRUIwMDdGNjQ2MDZCNzYwQTg5MzgxMkI5RjhENDMyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyabo1wQIjuLJhg6p4hOY8MKxq 164/lRDwd5TlWT/plfNeKFJfgA/NMRx9eMobZEl2SJImijwi6s6e2q96Hx35UEUi PV3m7GNfhm58EfLWfTXxWYMzeXn4WRvTxLlU4736ZmBy9RuAT2Ru1uJYJ0Uv44Dv rX+m9U59Ed6suYqAAhGdrQ9KZjA0Nz8tI4vOffUfpoWHts3LKr+/OEiTgUQlVgn7 7KoCc97zOTFH6CYoM2wyKayWua56FxJnNlM93plS3FPoqQLMdoy6OC31IsHg1T+m w3n7+V80QrjMzBtTRoJWnmoybmfnYE6oxDg76fhd3vt014w6Dt7QUilSdbhFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDfBNWusAf2Rga3YKiTgSufjUMiowHwYDVR0j BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0 OTk4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmRhNzczZGQtOTVhYS00NDdlLTk5 M2QtNGNmNGExMjczYjMxLzAvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5 RTQ3MkY0OTk4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAvXF891J9NAWL4FRXUfBr21I9TapA41+oY QLj21p8NieI+It7ygHqEN4r/d1oA29Qe0ib8Dwq5rLLqpD6MgzR9VvY9q68wDQ4u ELnp1ltaB8+AuqIzRtPSdtk/9AL3wtL/gEEmiobAToeUBQAbsEf7UvN5b4f8JatZ bE0/eW+QbhLuFwKIXLxdCZdB6DgAGEOMVHfDIY6Iw5zP33hV8kt8HASRUAWG79SE sHHlKRu4yDduRDE9y2BHV7OoOcj+WX7b00Y6ITIqvumIlfc2c/ETkNMQp5q6WwMJ BKCEBa0jiyu3MiMW0ELCMX8mNEI0CJmxRfKPk7S2+JBZ8SwO2vI= -----END CERTIFICATE-----Generated at Wed Dec 17 16:16:59 2025 by rpki-client