This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft File: 29692979765B670997413579D7BF5663C05BBD1A.mft (raw, json) Hash identifier: FwIVJU0xEXz91LtBh8MRcWPJQmrai6Wy+/2PPCbcHUk= Subject key identifier: A7:60:F7:74:6B:AC:72:98:F5:2E:14:5D:AA:12:7D:D7:C7:0B:87:9C Authority key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Certificate issuer: /CN=29692979765B670997413579D7BF5663C05BBD1A Certificate serial: 1DCFF949A565D88C96CE66959B64A6B9EE0570E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft Manifest number: 026A Signing time: Fri 19 Dec 2025 20:31:43 +0000 Manifest this update: Fri 19 Dec 2025 20:26:43 +0000 Manifest next update: Tue 23 Dec 2025 06:20:43 +0000 Files and hashes: 1: 3130332e392e3132342e302f32322d3234203d3e20313331373131.roa (hash: gJ4+RIzMU3sNK8zgeNrc/IFATPDJCmEd1aztpgZm3dA=) 2: 29692979765B670997413579D7BF5663C05BBD1A.crl (hash: 8NQC4pnVSvf/hXEMno5ShkH9aMmPcY1vN5IEYhh1sXg=) 3: 34352e3235312e37322e302f32322d3234203d3e20313331373131.roa (hash: wQ45tmfAW0vTrcP1CHqdkU4kV8VsIFLIOnBtD5fu+LU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cf:f9:49:a5:65:d8:8c:96:ce:66:95:9b:64:a6:b9:ee:05:70:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29692979765B670997413579D7BF5663C05BBD1A Validity Not Before: Dec 19 20:26:43 2025 GMT Not After : Dec 23 06:20:43 2025 GMT Subject: CN=A760F7746BAC7298F52E145DAA127DD7C70B879C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:e7:c1:a7:ce:81:12:71:db:78:9b:bf:34: ff:ba:07:30:30:69:94:76:54:f8:ad:51:76:2a:6f: 27:4c:bd:b8:5f:e6:61:20:47:ed:fb:c3:2f:fc:1e: c1:41:bb:8b:bd:26:36:9a:d4:75:a6:47:34:bd:62: e7:47:70:db:4c:88:c2:4d:7d:3e:6b:11:42:ee:6e: 4f:82:e9:33:07:ac:40:28:07:67:7b:1c:00:bc:6c: ee:35:76:f7:a9:bf:f3:58:aa:62:49:1a:5f:84:be: c0:19:6f:a2:9f:3b:32:e2:28:c2:18:19:19:52:0d: 0c:62:28:6c:d9:e0:f6:a0:4d:94:97:b6:65:fa:b5: c4:1e:e2:b7:6e:8f:19:78:4b:8a:43:23:8a:f1:ed: 0c:a8:cd:53:15:fa:4d:2f:4a:ee:f2:d2:e0:37:80: 47:55:27:32:91:ec:93:e2:c0:e3:ff:57:4f:aa:40: 29:c6:4e:21:9a:c7:d0:a9:52:ac:bb:7d:2f:cb:39: 28:c6:17:de:fa:b2:be:2b:74:0a:b2:ce:87:9c:b5: 0e:da:2a:01:31:a8:7b:18:73:b6:d4:e3:28:41:94: d4:ba:3a:86:00:26:00:23:2d:07:5f:4f:4e:42:05: 50:c2:0d:11:ae:33:c9:6b:47:43:85:12:88:1e:3a: f8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:60:F7:74:6B:AC:72:98:F5:2E:14:5D:AA:12:7D:D7:C7:0B:87:9C X509v3 Authority Key Identifier: keyid:29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a0:d4:bb:b0:e9:7f:d9:10:be:90:1d:46:e6:1d:fb:a5:a0: fa:f3:33:dc:09:ca:6c:6c:f8:43:54:60:a2:5e:f6:b4:4e:3f: a3:e5:4d:4f:12:8c:fe:60:47:bf:8d:c0:7d:3a:16:36:89:0a: 1f:f6:ed:db:45:d1:eb:74:4d:13:b4:a7:2f:29:4a:31:73:d2: c4:99:12:f6:ad:e9:f3:ce:33:3d:29:95:49:89:74:17:2b:28: 4c:e6:71:f5:5e:f6:26:5c:fb:f1:b4:2f:36:3e:17:99:38:62: 00:3f:7f:11:8f:da:33:3e:6f:13:56:40:b6:5e:28:5c:49:0f: 0e:22:e0:cd:01:8b:bc:c0:84:67:6c:91:35:59:1a:6c:d4:6c: ec:bd:ef:55:1f:00:08:ab:a4:e0:6e:e9:54:a2:ff:86:4b:8f: 4d:6c:66:fd:c5:81:2f:1f:3a:99:77:ec:35:af:b9:4f:dd:43: f3:fb:7f:ed:76:a6:a8:e1:74:f3:d6:4d:f7:6b:d1:a6:8e:03: 98:91:cc:6b:ff:96:74:13:c2:c0:83:f1:e4:ea:db:c2:03:99: 4b:65:6b:76:16:e8:ad:3b:a8:5c:5a:26:cc:ec:fb:62:26:f9: 60:e5:87:8b:0a:aa:43:15:c0:69:4b:c6:4a:60:c6:d4:1b:08: bc:68:86:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHc/5SaVl2IyWzmaVm2Smue4FcOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjND MDVCQkQxQTAeFw0yNTEyMTkyMDI2NDNaFw0yNTEyMjMwNjIwNDNaMDMxMTAvBgNV BAMTKEE3NjBGNzc0NkJBQzcyOThGNTJFMTQ1REFBMTI3REQ3QzcwQjg3OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJOfBp86BEnHbeJu/NP+6BzAw aZR2VPitUXYqbydMvbhf5mEgR+37wy/8HsFBu4u9Jjaa1HWmRzS9YudHcNtMiMJN fT5rEULubk+C6TMHrEAoB2d7HAC8bO41dvepv/NYqmJJGl+EvsAZb6KfOzLiKMIY GRlSDQxiKGzZ4PagTZSXtmX6tcQe4rdujxl4S4pDI4rx7QyozVMV+k0vSu7y0uA3 gEdVJzKR7JPiwOP/V0+qQCnGTiGax9CpUqy7fS/LOSjGF976sr4rdAqyzoectQ7a KgExqHsYc7bU4yhBlNS6OoYAJgAjLQdfT05CBVDCDRGuM8lrR0OFEogeOvh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp2D3dGuscpj1LhRdqhJ918cLh5wwHwYDVR0j BBgwFoAUKWkpeXZbZwmXQTV5179WY8BbvRowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMC8yOTY5Mjk3OTc2 NUI2NzA5OTc0MTM1NzlEN0JGNTY2M0MwNUJCRDFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2NjNDMDVC QkQxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IwYTExYjUtOTQ0MS00Y2M5LWE2 NzItYmU5Nzk5YjY1NTIwLzAvMjk2OTI5Nzk3NjVCNjcwOTk3NDEzNTc5RDdCRjU2 NjNDMDVCQkQxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACag1Luw6X/ZEL6QHUbmHfuloPrzM9wJymxs +ENUYKJe9rROP6PlTU8SjP5gR7+NwH06FjaJCh/27dtF0et0TRO0py8pSjFz0sSZ Evat6fPOMz0plUmJdBcrKEzmcfVe9iZc+/G0LzY+F5k4YgA/fxGP2jM+bxNWQLZe KFxJDw4i4M0Bi7zAhGdskTVZGmzUbOy971UfAAirpOBu6VSi/4ZLj01sZv3FgS8f Opl37DWvuU/dQ/P7f+12pqjhdPPWTfdr0aaOA5iRzGv/lnQTwsCD8eTq28IDmUtl a3YW6K07qFxaJszs+2Im+WDlh4sKqkMVwGlLxkpgxtQbCLxohh4= -----END CERTIFICATE-----Generated at Sat Dec 20 19:11:31 2025 by rpki-client