This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: tlpEh6r6XAiGF2yqNYyUtcJkHhrHQ7wdHjBWqS4PObs= Subject key identifier: B0:F9:2B:07:40:32:B6:0D:CD:8C:63:46:E8:10:F4:8A:8B:CD:28:A5 Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 0AC15C3FA1B22F4BF087B2D4D9B94091E97A84FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 01DB Signing time: Tue 23 Dec 2025 20:50:46 +0000 Manifest this update: Tue 23 Dec 2025 20:45:46 +0000 Manifest next update: Sat 27 Dec 2025 05:03:46 +0000 Files and hashes: 1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: JY3uiU6kxOWTrPBBA8k5sLE3/x1c9VjEcmKZlooE1ns=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: 2L7DCJfQuXYmkUJUsfdFqwDAT1SsF8x6dqI0f/qoYAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 05:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c1:5c:3f:a1:b2:2f:4b:f0:87:b2:d4:d9:b9:40:91:e9:7a:84:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Dec 23 20:45:46 2025 GMT Not After : Dec 27 05:03:46 2025 GMT Subject: CN=B0F92B074032B60DCD8C6346E810F48A8BCD28A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ad:aa:ce:90:3d:a9:73:5b:0d:ea:ae:dd:8c: 10:c9:8f:60:18:ad:1a:dc:47:eb:c3:fc:cf:7e:a1: 20:43:65:89:f7:17:56:e5:7b:8c:bf:fc:96:bd:39: 26:b8:2d:7e:00:c8:dc:d7:30:36:51:95:51:1a:7a: 62:4c:2d:a2:c4:89:ee:5c:23:17:c1:21:1b:04:3d: a9:96:48:af:f7:77:a1:99:a9:79:d5:21:50:59:fd: 38:8a:3d:08:34:7a:02:94:18:82:28:b6:d8:ae:e4: c9:9c:d2:bd:1a:f9:a9:51:fe:7e:a4:64:20:75:d2: dc:1b:4a:ba:30:cc:6a:0c:2d:e6:6a:21:fd:26:77: 6c:8f:33:2b:3d:50:ec:2c:d3:9d:27:b8:95:d2:76: cb:a0:04:7f:1a:18:aa:0c:a9:7e:8a:83:95:37:5d: 8e:e9:ed:96:45:da:42:e6:36:30:6d:18:b9:1d:49: 4d:6f:b4:63:36:e4:fc:80:8f:47:26:30:75:6b:c3: 00:47:17:a9:dd:64:26:1a:6e:33:a5:cb:8d:5a:35: 34:a8:69:76:e7:9f:f1:6a:42:75:5b:f4:a7:bd:8f: 95:03:0d:23:fb:77:90:b7:79:3d:e4:f1:49:3c:50: 17:03:45:c8:a2:30:6d:64:39:3a:fd:f3:65:a0:e4: cb:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F9:2B:07:40:32:B6:0D:CD:8C:63:46:E8:10:F4:8A:8B:CD:28:A5 X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:43:8e:e5:11:59:8e:0a:fa:20:4a:6b:fb:01:b0:c2:19:4c: 10:74:26:b2:84:55:6e:9f:75:c8:cc:a4:f5:c2:03:ea:46:aa: c4:44:e5:bc:56:35:83:77:b7:35:d9:74:bb:7f:06:a7:4c:23: 09:30:6e:3f:36:67:f8:45:52:47:73:22:2d:98:bc:e1:d8:f6: e6:33:02:02:37:f4:2a:5d:2f:cc:45:f5:f9:ce:4b:15:49:5d: 49:59:4a:ca:cd:f3:31:13:61:60:65:d0:8e:3b:8f:17:9a:3d: 06:63:b1:5e:1f:c1:5e:3c:7c:bc:a1:8d:c2:9b:4c:07:fc:e7: d3:87:af:26:0f:eb:a7:49:e3:be:2d:1f:91:23:b4:de:48:e1: e0:9e:64:cf:f3:a0:c9:0a:ac:98:dc:fe:b8:7c:d7:bb:1b:53: 72:fd:35:f2:a7:a9:71:e0:b2:30:89:d1:15:46:de:1d:06:59: 5f:99:c2:a0:9b:67:25:67:01:3a:2e:fe:6f:9a:66:76:c0:32: 28:3a:46:87:e0:45:6d:5f:44:3c:3e:9e:77:34:15:9a:74:91: a3:a8:73:7f:ff:87:d3:f6:33:04:a3:3e:96:a1:e5:19:30:bd: 2a:a4:ae:20:ab:97:6d:f3:3b:7b:94:2b:a4:47:20:17:7e:b0: db:11:ef:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsFcP6GyL0vwh7LU2blAkel6hPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNTEyMjMyMDQ1NDZaFw0yNTEyMjcwNTAzNDZaMDMxMTAvBgNV BAMTKEIwRjkyQjA3NDAzMkI2MERDRDhDNjM0NkU4MTBGNDhBOEJDRDI4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmrarOkD2pc1sN6q7djBDJj2AY rRrcR+vD/M9+oSBDZYn3F1ble4y//Ja9OSa4LX4AyNzXMDZRlVEaemJMLaLEie5c IxfBIRsEPamWSK/3d6GZqXnVIVBZ/TiKPQg0egKUGIIottiu5Mmc0r0a+alR/n6k ZCB10twbSrowzGoMLeZqIf0md2yPMys9UOws050nuJXSdsugBH8aGKoMqX6Kg5U3 XY7p7ZZF2kLmNjBtGLkdSU1vtGM25PyAj0cmMHVrwwBHF6ndZCYabjOly41aNTSo aXbnn/FqQnVb9Ke9j5UDDSP7d5C3eT3k8Uk8UBcDRciiMG1kOTr982Wg5MslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsPkrB0Aytg3NjGNG6BD0iovNKKUwHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5DjuURWY4K+iBKa/sBsMIZTBB0JrKEVW6f dcjMpPXCA+pGqsRE5bxWNYN3tzXZdLt/BqdMIwkwbj82Z/hFUkdzIi2YvOHY9uYz AgI39CpdL8xF9fnOSxVJXUlZSsrN8zETYWBl0I47jxeaPQZjsV4fwV48fLyhjcKb TAf859OHryYP66dJ474tH5EjtN5I4eCeZM/zoMkKrJjc/rh817sbU3L9NfKnqXHg sjCJ0RVG3h0GWV+ZwqCbZyVnATou/m+aZnbAMig6RofgRW1fRDw+nnc0FZp0kaOo c3//h9P2MwSjPpah5RkwvSqkriCrl23zO3uUK6RHIBd+sNsR7/w= -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:55 2025 by rpki-client