This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: fxAfVgTQCxSJunx3LBSW/YRHJ0tTDkx4wstaIBXaU58= Subject key identifier: B1:FF:74:68:52:B0:82:2D:0B:4A:32:C4:46:56:03:DC:7F:CF:64:34 Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 5C83E436CB0243E310B8676E3E9FA41028C540FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 022F Signing time: Sat 13 Dec 2025 15:21:58 +0000 Manifest this update: Sat 13 Dec 2025 15:16:58 +0000 Manifest next update: Tue 16 Dec 2025 20:17:58 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: MoAZLzmUZKoXkxyAEY5T6MHXlh7fQkuDiriMoJtVjkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 20:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:83:e4:36:cb:02:43:e3:10:b8:67:6e:3e:9f:a4:10:28:c5:40:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Dec 13 15:16:58 2025 GMT Not After : Dec 16 20:17:58 2025 GMT Subject: CN=B1FF746852B0822D0B4A32C4465603DC7FCF6434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:16:3e:78:e7:84:73:90:24:73:84:38:b4: 4e:8d:79:00:07:0c:30:72:93:bf:66:4d:d3:22:97: 8d:76:35:39:67:7e:34:1b:a5:51:80:cd:7f:d1:fd: e6:f0:d4:c4:7c:18:8c:58:33:f9:ec:6e:69:3d:32: 06:d5:03:8c:b5:88:cd:7c:04:28:99:7f:8b:5d:86: 6a:27:90:a4:72:77:1a:82:1f:5f:7e:2c:e2:fb:ac: af:87:f5:31:4a:9c:e8:61:c4:de:69:80:88:2a:55: 70:fe:a4:19:81:3d:3e:e8:50:8b:57:de:5a:2d:2c: 93:6d:6d:dd:de:ba:29:1f:91:1e:0d:0e:b9:e0:f7: 72:94:a2:6f:1a:8c:bb:60:e7:65:de:25:b4:d3:f2: cd:98:9b:12:0b:4b:bb:33:03:94:98:2c:db:8a:8b: d1:c6:a0:04:cc:87:5d:5e:30:68:27:07:61:f0:c0: 95:5e:50:6e:1c:01:50:2f:21:fc:5e:e7:84:a1:20: 77:eb:54:cc:fa:c3:c7:d7:3b:6f:c8:e4:cf:f6:ae: 03:e4:fd:3f:29:69:82:60:12:3a:c4:f7:00:20:68: fa:eb:40:d9:85:a4:81:06:dc:f0:2c:93:46:97:86: 7b:0d:7b:2c:f7:38:34:2d:ec:8f:00:ef:59:43:6d: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FF:74:68:52:B0:82:2D:0B:4A:32:C4:46:56:03:DC:7F:CF:64:34 X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c6:4c:7c:39:2f:e1:c3:da:4f:4a:60:e8:5b:c6:37:c7:ae: a8:8b:27:27:6b:98:d3:72:ed:79:95:11:c8:b3:5c:5d:6d:69: 13:77:a6:5e:eb:5d:e2:ea:9f:42:20:02:57:4a:86:40:ac:64: 7c:64:00:cb:4d:7c:23:95:90:12:d9:72:bb:14:b8:8c:b0:0e: 43:e8:b2:4f:4d:16:d5:2f:15:7f:2a:8f:4b:7a:02:1a:f0:d6: df:ba:75:f1:50:68:ca:73:71:04:bd:aa:6e:1d:39:0b:e5:93: 97:20:9d:6f:ac:82:91:90:f0:6e:87:dd:10:1e:6e:af:45:0d: c1:6e:76:11:67:f7:a7:cc:cd:56:e1:be:b0:6e:1a:20:bb:ce: e1:c0:a9:2a:95:4a:00:a7:36:74:bb:c9:0d:59:e1:83:2f:77: 02:f6:42:7f:26:4a:5b:23:a6:0a:db:ce:a8:2e:d2:3c:2b:31: c3:9b:d4:44:fd:ba:66:f0:80:b3:a3:b2:08:1e:e6:8f:19:09: 03:99:ed:c8:11:b3:7f:f3:70:b9:7b:6d:84:51:f6:0d:1b:ba: 30:fb:a7:f4:30:fa:df:06:5c:aa:b5:a2:20:12:fe:3c:af:96: 9e:83:70:58:fc:66:db:b3:96:b1:32:c7:99:61:b0:55:a6:2f: 8c:12:2f:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIPkNssCQ+MQuGduPp+kECjFQPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNTEyMTMxNTE2NThaFw0yNTEyMTYyMDE3NThaMDMxMTAvBgNV BAMTKEIxRkY3NDY4NTJCMDgyMkQwQjRBMzJDNDQ2NTYwM0RDN0ZDRjY0MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/BY+eOeEc5Akc4Q4tE6NeQAH DDByk79mTdMil412NTlnfjQbpVGAzX/R/ebw1MR8GIxYM/nsbmk9MgbVA4y1iM18 BCiZf4tdhmonkKRydxqCH19+LOL7rK+H9TFKnOhhxN5pgIgqVXD+pBmBPT7oUItX 3lotLJNtbd3euikfkR4NDrng93KUom8ajLtg52XeJbTT8s2YmxILS7szA5SYLNuK i9HGoATMh11eMGgnB2HwwJVeUG4cAVAvIfxe54ShIHfrVMz6w8fXO2/I5M/2rgPk /T8paYJgEjrE9wAgaPrrQNmFpIEG3PAsk0aXhnsNeyz3ODQt7I8A71lDbfRPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsf90aFKwgi0LSjLERlYD3H/PZDQwHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbGTHw5L+HD2k9KYOhbxjfHrqiLJydrmNNy 7XmVEcizXF1taRN3pl7rXeLqn0IgAldKhkCsZHxkAMtNfCOVkBLZcrsUuIywDkPo sk9NFtUvFX8qj0t6Ahrw1t+6dfFQaMpzcQS9qm4dOQvlk5cgnW+sgpGQ8G6H3RAe bq9FDcFudhFn96fMzVbhvrBuGiC7zuHAqSqVSgCnNnS7yQ1Z4YMvdwL2Qn8mSlsj pgrbzqgu0jwrMcOb1ET9umbwgLOjsgge5o8ZCQOZ7cgRs3/zcLl7bYRR9g0bujD7 p/Qw+t8GXKq1oiAS/jyvlp6DcFj8ZtuzlrEyx5lhsFWmL4wSL6w= -----END CERTIFICATE-----Generated at Mon Dec 15 19:54:02 2025 by rpki-client