This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft (raw, json) Hash identifier: 9D0ppIbptyelyItVZyREOvuXzYH2fZ3FfHwUjtgoSUI= Subject key identifier: 9A:6D:FC:A0:84:83:FE:F5:59:09:63:7A:2F:D0:9D:45:C8:E7:6E:CD Authority key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Certificate issuer: /CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Certificate serial: 2F1F69F96C7B9C4198ADD4A8F6A7C8BAF3786C1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft Manifest number: 0100 Signing time: Fri 19 Dec 2025 10:52:13 +0000 Manifest this update: Fri 19 Dec 2025 10:47:13 +0000 Manifest next update: Mon 22 Dec 2025 12:14:13 +0000 Files and hashes: 1: 32372e3132342e37352e302f32342d3234203d3e20313532303532.roa (hash: 0DxE8IbNsFsaPMHC2EuXiwZ1jqzI32HI1P7GaHMey18=) 2: 32372e3132342e37342e302f32332d3234203d3e20313532303532.roa (hash: 3Di6pAbEyZCpXZLge7Vqx+6QVFgcVq47/UIjvzmKJsw=) 3: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl (hash: 9aYpsmFOWsbDEmDOVuTacCowcwIRv6NVBEmleyYuhQ4=) 4: 32372e3132342e37342e302f32342d3234203d3e20313532303532.roa (hash: 6mgkKY9kBfU7sAQ5w8Wubk22DIAe6sIX9Uol4iEtsCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 12:14:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:1f:69:f9:6c:7b:9c:41:98:ad:d4:a8:f6:a7:c8:ba:f3:78:6c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Validity Not Before: Dec 19 10:47:13 2025 GMT Not After : Dec 22 12:14:13 2025 GMT Subject: CN=9A6DFCA08483FEF55909637A2FD09D45C8E76ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:21:3b:7d:3f:40:d3:e8:7c:1f:8c:1f:cf: f5:16:aa:0f:d3:91:50:8c:0c:22:1e:2d:f9:22:1a: a9:96:78:1b:b3:8d:ff:ca:f2:2f:11:33:f1:40:94: b6:d6:5e:cf:22:9e:7d:28:53:9d:7e:b0:44:ef:07: 72:5a:3d:12:a3:8d:09:af:42:dd:ed:f7:ba:71:f9: e6:f2:23:1a:7a:2c:cf:64:23:a6:8c:e3:59:4d:ad: 40:ed:5b:78:8e:22:79:7f:c6:02:3c:bb:bf:37:52: 2e:ed:c1:d7:22:e5:48:35:64:29:dd:e1:8c:2a:d1: fe:8a:58:14:bb:0d:20:69:a2:58:80:15:61:95:4f: e8:f1:76:f2:62:b0:28:5b:29:55:5c:b5:7c:9e:77: ba:60:7d:d0:b8:18:82:6b:6c:7f:f0:06:3d:b1:71: 4e:f3:19:f5:b8:a6:44:b9:2e:76:86:8d:2e:44:36: 18:cc:0e:f9:ee:74:54:82:25:ff:b8:0e:8c:02:df: 9c:f4:2a:fe:0f:c1:ed:e9:f6:26:ce:4d:af:b7:cc: f7:05:44:50:9b:b8:a4:40:5d:75:93:52:37:10:fe: a0:89:d3:72:10:f8:cd:8e:7e:f7:d4:a7:69:fb:9b: af:c6:9a:65:29:31:57:78:79:02:05:e2:fa:c6:17: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6D:FC:A0:84:83:FE:F5:59:09:63:7A:2F:D0:9D:45:C8:E7:6E:CD X509v3 Authority Key Identifier: keyid:29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:4f:2b:2a:78:7b:9a:7b:68:e2:42:94:1f:1a:bd:1f:dd:08: 08:93:ad:ed:e8:1b:0f:0d:ac:0b:13:df:34:65:58:87:e1:ae: 08:c0:b1:c4:41:68:e0:f1:08:7b:25:e4:68:b7:d3:b6:cc:0b: 2c:7d:db:25:88:b8:3e:cc:9d:f1:7b:70:36:06:a1:40:ea:1c: a3:0f:e1:af:18:af:fe:e7:f7:d3:2d:8b:01:36:1c:0b:e7:53: bd:5b:cb:7a:59:27:7c:85:43:06:ef:12:6c:6c:1c:2a:7a:6f: 58:d5:d2:d5:8d:55:6e:ab:58:6f:88:75:e3:d6:6f:d4:18:45: 23:5d:f5:f5:67:ff:d0:93:13:06:c0:f0:82:db:d0:44:3e:bf: 37:b7:6c:81:9a:c2:38:19:90:13:82:63:02:b9:2f:dc:4c:da: f5:86:48:fe:61:9d:14:99:b5:fb:6c:bb:a0:dd:35:95:7d:4e: b9:95:c9:00:5d:06:01:da:4e:fa:28:c0:97:15:ef:26:dd:e7: a3:54:77:83:b6:11:31:0e:5e:98:a4:47:71:6f:74:be:2b:a8: 58:67:15:ca:bb:fa:1c:8c:31:b6:b1:1d:3b:6e:6c:d5:11:f6: 1b:10:96:6f:b1:46:34:5f:bd:2d:e4:c5:79:3d:4e:bc:ff:30: da:f5:6c:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULx9p+Wx7nEGYrdSo9qfIuvN4bBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBF MEU3Q0Y5QTAeFw0yNTEyMTkxMDQ3MTNaFw0yNTEyMjIxMjE0MTNaMDMxMTAvBgNV BAMTKDlBNkRGQ0EwODQ4M0ZFRjU1OTA5NjM3QTJGRDA5RDQ1QzhFNzZFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCyE7fT9A0+h8H4wfz/UWqg/T kVCMDCIeLfkiGqmWeBuzjf/K8i8RM/FAlLbWXs8inn0oU51+sETvB3JaPRKjjQmv Qt3t97px+ebyIxp6LM9kI6aM41lNrUDtW3iOInl/xgI8u783Ui7twdci5Ug1ZCnd 4Ywq0f6KWBS7DSBpoliAFWGVT+jxdvJisChbKVVctXyed7pgfdC4GIJrbH/wBj2x cU7zGfW4pkS5LnaGjS5ENhjMDvnudFSCJf+4DowC35z0Kv4Pwe3p9ibOTa+3zPcF RFCbuKRAXXWTUjcQ/qCJ03IQ+M2OfvfUp2n7m6/GmmUpMVd4eQIF4vrGF3e7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmm38oISD/vVZCWN6L9CdRcjnbs0wHwYDVR0j BBgwFoAUKcBkDdkHbcBM+KOQ6nPfwODnz5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMC8yOUMwNjQwREQ5 MDc2REMwNENGOEEzOTBFQTczREZDMEUwRTdDRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RGQzBFMEU3 Q0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGRhZjlmMGYtNGZiMS00MGMwLWIz ODAtNTlhMzhkYmM5YTE2LzAvMjlDMDY0MEREOTA3NkRDMDRDRjhBMzkwRUE3M0RG QzBFMEU3Q0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhPKyp4e5p7aOJClB8avR/dCAiTre3oGw8N rAsT3zRlWIfhrgjAscRBaODxCHsl5Gi307bMCyx92yWIuD7MnfF7cDYGoUDqHKMP 4a8Yr/7n99MtiwE2HAvnU71by3pZJ3yFQwbvEmxsHCp6b1jV0tWNVW6rWG+IdePW b9QYRSNd9fVn/9CTEwbA8ILb0EQ+vze3bIGawjgZkBOCYwK5L9xM2vWGSP5hnRSZ tftsu6DdNZV9TrmVyQBdBgHaTvoowJcV7ybd56NUd4O2ETEOXpikR3FvdL4rqFhn Fcq7+hyMMbaxHTtubNUR9hsQlm+xRjRfvS3kxXk9Trz/MNr1bDU= -----END CERTIFICATE-----Generated at Sun Dec 21 20:53:53 2025 by rpki-client