This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft File: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft (raw, json) Hash identifier: Mml64PsrgGSgx4F2pnvjbbtIB7XPnAi+vYwG/eoCNfU= Subject key identifier: 05:DB:5A:DF:82:B9:C6:C6:DA:FB:E4:25:52:03:A5:54:28:23:98:FE Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D Certificate issuer: /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Certificate serial: 7C188F3A8B09D1DE7FBEBB09031936CE3311EEFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft Manifest number: 01DA Signing time: Sat 20 Dec 2025 03:51:42 +0000 Manifest this update: Sat 20 Dec 2025 03:46:42 +0000 Manifest next update: Tue 23 Dec 2025 13:30:42 +0000 Files and hashes: 1: 2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl (hash: Jl1r2RzNx09EpV403lHsM4JgZEmoKgzrLBmCH3qMTuM=) 2: 3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (hash: o6xh9ZmeUkW54lbLFnSG54IoYTtHKw0vyrbfABLw2qM=) 3: 3130332e3132392e35302e302f32332d3234203d3e20313335343738.roa (hash: 8ALFBF9HwCBiqRlbp4pItk5eubZkWUc5/ZoPPFKzTcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 13:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:18:8f:3a:8b:09:d1:de:7f:be:bb:09:03:19:36:ce:33:11:ee:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D Validity Not Before: Dec 20 03:46:42 2025 GMT Not After : Dec 23 13:30:42 2025 GMT Subject: CN=05DB5ADF82B9C6C6DAFBE4255203A554282398FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:c0:0f:10:0c:6e:d8:3d:9d:c9:ff:a0:2d: a8:27:e1:bb:2d:61:0f:95:f8:3f:d6:07:70:eb:19: 48:4f:44:f1:f0:1c:da:1b:9a:bc:96:7b:11:c4:40: c6:0f:50:70:d4:e3:a5:db:19:b8:42:39:51:ee:e5: 2a:bb:9f:17:ec:62:ee:3a:9c:e9:df:09:4d:82:bf: 0c:77:6b:3b:ef:11:04:67:34:2a:65:42:d9:78:68: 4e:db:bb:f8:87:4e:95:43:39:48:16:74:08:6d:15: c6:a5:4e:63:7e:4e:6d:c1:21:48:6b:26:c3:45:bd: 59:b4:8f:75:73:5b:19:7f:41:f4:f0:65:d2:35:38: 89:64:11:5c:4b:60:d7:1f:2f:7b:a0:62:7c:9a:44: 87:16:a2:56:b9:d6:04:8c:04:38:6c:79:f9:7e:70: 7e:c3:d9:85:bd:a6:16:b4:45:de:16:86:aa:1d:f4: 72:7f:5a:98:b8:60:47:e5:95:ee:0b:84:b6:32:2d: 2b:41:29:6a:97:cd:1c:16:65:fe:e5:90:ec:d4:21: 39:38:5e:12:eb:bf:97:23:da:27:a0:ad:49:28:2f: 37:b6:43:f9:c8:d0:25:51:be:09:a8:e3:92:9e:a6: 1d:2d:d4:57:ff:e1:88:e5:06:8b:1b:36:c2:37:69: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:5A:DF:82:B9:C6:C6:DA:FB:E4:25:52:03:A5:54:28:23:98:FE X509v3 Authority Key Identifier: keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6a:c0:34:a0:8e:7b:13:b4:d1:43:f9:cf:41:f0:69:95:19: 36:20:d0:8e:7f:dd:92:00:09:35:ce:d5:92:bb:ca:f8:fa:82: 27:d4:1c:cc:38:74:0b:b2:31:50:6e:07:9b:bf:1e:9b:f8:dc: 71:97:26:57:84:45:af:cc:a7:d5:5c:7f:7a:b6:88:d3:e0:dd: 76:85:c3:ed:e3:fa:45:76:93:bc:e8:49:9f:04:63:58:db:c4: ea:c9:a2:2d:1c:58:5c:0a:11:86:4d:28:d0:22:84:ba:ba:19: 41:53:82:49:01:ec:3a:db:43:1d:3c:be:d9:69:42:2f:ff:4e: 4c:78:79:b2:65:f2:98:dd:01:39:a9:1b:d4:38:d3:02:33:cd: 6c:8f:00:6d:fc:02:df:22:6b:8a:3a:9f:3f:f7:4a:f4:9d:b0: 50:16:d0:3b:ac:7c:07:8e:03:cb:94:b3:ed:d2:bf:d8:c7:d8: 4f:de:a1:85:89:43:c3:13:6f:d0:1c:3a:81:7b:31:21:f5:45: b5:3a:bc:b9:78:c9:89:0e:1f:eb:3b:d3:bf:f1:3b:1f:d9:37: 6f:f5:7f:5a:c4:02:33:c1:ca:12:6d:19:cd:32:9d:e5:b7:4c: 64:a8:35:40:fe:ea:6d:4c:d9:fe:3d:f7:e1:ef:d6:b1:7d:81: e4:56:88:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBiPOosJ0d5/vrsJAxk2zjMR7v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4 MDEyRDI5RDAeFw0yNTEyMjAwMzQ2NDJaFw0yNTEyMjMxMzMwNDJaMDMxMTAvBgNV BAMTKDA1REI1QURGODJCOUM2QzZEQUZCRTQyNTUyMDNBNTU0MjgyMzk4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYacAPEAxu2D2dyf+gLagn4bst YQ+V+D/WB3DrGUhPRPHwHNobmryWexHEQMYPUHDU46XbGbhCOVHu5Sq7nxfsYu46 nOnfCU2Cvwx3azvvEQRnNCplQtl4aE7bu/iHTpVDOUgWdAhtFcalTmN+Tm3BIUhr JsNFvVm0j3VzWxl/QfTwZdI1OIlkEVxLYNcfL3ugYnyaRIcWola51gSMBDhsefl+ cH7D2YW9pha0Rd4Whqod9HJ/Wpi4YEflle4LhLYyLStBKWqXzRwWZf7lkOzUITk4 XhLrv5cj2iegrUkoLze2Q/nI0CVRvgmo45Keph0t1Ff/4YjlBosbNsI3aRJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdta34K5xsba++QlUgOlVCgjmP4wHwYDVR0j BBgwFoAUKqbmW4bkQjrsfQLYW0O6AIAS0p0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTZiZmY5ZC1mYjEzLTQ3YjktOWNjMC1kZDZhMDczMGExYzYvMC8yQUE2RTY1Qjg2 RTQ0MjNBRUM3RDAyRDg1QjQzQkEwMDgwMTJEMjlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JBMDA4MDEy RDI5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U2YmZmOWQtZmIxMy00N2I5LTlj YzAtZGQ2YTA3MzBhMWM2LzAvMkFBNkU2NUI4NkU0NDIzQUVDN0QwMkQ4NUI0M0JB MDA4MDEyRDI5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNqwDSgjnsTtNFD+c9B8GmVGTYg0I5/3ZIA CTXO1ZK7yvj6gifUHMw4dAuyMVBuB5u/Hpv43HGXJleERa/Mp9Vcf3q2iNPg3XaF w+3j+kV2k7zoSZ8EY1jbxOrJoi0cWFwKEYZNKNAihLq6GUFTgkkB7DrbQx08vtlp Qi//Tkx4ebJl8pjdATmpG9Q40wIzzWyPAG38At8ia4o6nz/3SvSdsFAW0DusfAeO A8uUs+3Sv9jH2E/eoYWJQ8MTb9AcOoF7MSH1RbU6vLl4yYkOH+s707/xOx/ZN2/1 f1rEAjPByhJtGc0yneW3TGSoNUD+6m1M2f499+Hv1rF9geRWiKk= -----END CERTIFICATE-----Generated at Sun Dec 21 23:59:46 2025 by rpki-client