This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: sGq+jE0DyRm0KGyHwHf7U5eQ7CbV3bUvfGwwA8qmPec= Subject key identifier: DA:8B:6C:5C:A1:06:1E:27:A7:B6:95:BD:02:5C:38:F3:D4:56:9B:DA Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 049A5775878C2E5BB287DF32E65A1DC6AB65180B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: 0135 Signing time: Fri 19 Dec 2025 04:22:30 +0000 Manifest this update: Fri 19 Dec 2025 04:17:29 +0000 Manifest next update: Mon 22 Dec 2025 08:37:29 +0000 Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: c1YTmFPpuMAYQXEDkzcMD7Oe4rLDjuQb12nuKQxDkLQ=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: bpEdGaau57Ls0LX+FXCrBVL5qcwulWWQkMdNRaMhV9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 08:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:9a:57:75:87:8c:2e:5b:b2:87:df:32:e6:5a:1d:c6:ab:65:18:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Dec 19 04:17:29 2025 GMT Not After : Dec 22 08:37:29 2025 GMT Subject: CN=DA8B6C5CA1061E27A7B695BD025C38F3D4569BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:c4:0b:84:8c:04:77:c5:ad:b4:d5:38:5b: 82:b2:5a:25:28:03:d7:0e:fe:c9:ac:d0:de:42:8c: 42:93:02:68:16:60:de:3c:2e:b0:08:07:ef:20:c4: e6:2f:3b:5f:f9:f8:8a:04:70:a2:3e:02:d3:91:0c: 40:5d:37:41:65:56:f6:80:ae:fd:02:04:e1:42:e2: 05:43:48:fa:0d:b7:e7:31:40:00:19:73:c5:c9:e1: 13:ce:a2:12:6b:58:af:eb:96:24:29:03:53:10:d0: 77:47:ee:31:dd:b1:8b:a3:87:c2:03:8d:80:39:37: dd:d4:a4:c5:4a:39:7b:88:e1:a0:50:b7:b2:cb:da: 46:2b:02:ea:31:f5:49:30:91:6f:b8:12:45:15:ae: 9c:0f:9a:0e:92:99:20:d9:1a:f1:d7:24:02:50:5c: 20:8c:42:ad:0c:fe:68:e6:4b:4d:de:b2:b2:3b:ac: 3c:26:8f:07:9c:c5:46:c0:f6:b6:56:66:cf:6e:17: 88:eb:43:d5:c8:65:b4:74:c0:4c:fd:21:7b:00:83: a0:69:2f:f0:fa:c6:1f:da:54:0c:13:95:49:37:40: 3a:1c:75:2e:83:bb:93:3b:db:dc:87:da:08:ad:2c: cc:f8:e0:6c:d1:b7:d9:82:91:02:f3:38:b8:49:24: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8B:6C:5C:A1:06:1E:27:A7:B6:95:BD:02:5C:38:F3:D4:56:9B:DA X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:ce:cf:d4:2e:2c:a2:25:65:9b:87:ca:fc:55:80:9b:57:41: a3:17:fc:6d:f8:ea:d3:14:11:00:34:d7:72:04:63:e1:86:a0: f6:13:28:1f:a7:f3:17:ae:19:50:41:77:e1:f8:f9:00:df:c9: aa:4d:e7:cc:3e:82:8b:c4:3d:66:fd:98:89:6f:50:88:07:57: 46:e3:55:2e:ba:29:c6:42:70:37:12:fa:f2:4d:3e:b8:83:74: 60:19:ba:7d:e4:7e:2f:28:5a:ed:38:4e:71:0f:f0:4f:41:39: d8:1b:27:07:b9:40:ad:1c:18:ab:39:bb:81:45:30:c1:5a:42: be:6f:1b:eb:ea:39:f0:ed:1d:7d:ae:75:aa:40:e0:8a:bb:06: 45:2e:5e:c4:90:28:70:42:5b:ba:e5:6a:eb:f4:ed:69:a7:5b: d9:79:01:b4:e4:6e:1f:1f:54:de:12:10:e2:d3:05:a1:e4:94: 70:ca:65:38:d0:6d:27:1b:7b:a9:a8:03:9c:d9:32:3f:0e:76: 82:37:e8:2c:8d:0a:a7:6c:b4:94:a2:c3:96:e4:e2:6a:3e:66: 05:36:93:38:53:2c:45:03:27:e3:be:80:4c:c7:98:a7:84:dd: da:8a:1e:95:3b:d8:d4:47:31:56:0f:53:6a:83:14:5d:95:72: 5b:9a:96:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJpXdYeMLluyh98y5lodxqtlGAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNTEyMTkwNDE3MjlaFw0yNTEyMjIwODM3MjlaMDMxMTAvBgNV BAMTKERBOEI2QzVDQTEwNjFFMjdBN0I2OTVCRDAyNUMzOEYzRDQ1NjlCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57MQLhIwEd8WttNU4W4KyWiUo A9cO/sms0N5CjEKTAmgWYN48LrAIB+8gxOYvO1/5+IoEcKI+AtORDEBdN0FlVvaA rv0CBOFC4gVDSPoNt+cxQAAZc8XJ4RPOohJrWK/rliQpA1MQ0HdH7jHdsYujh8ID jYA5N93UpMVKOXuI4aBQt7LL2kYrAuox9UkwkW+4EkUVrpwPmg6SmSDZGvHXJAJQ XCCMQq0M/mjmS03esrI7rDwmjwecxUbA9rZWZs9uF4jrQ9XIZbR0wEz9IXsAg6Bp L/D6xh/aVAwTlUk3QDocdS6Du5M729yH2gitLMz44GzRt9mCkQLzOLhJJN4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2otsXKEGHientpW9Alw489RWm9owHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfOz9QuLKIlZZuHyvxVgJtXQaMX/G346tMU EQA013IEY+GGoPYTKB+n8xeuGVBBd+H4+QDfyapN58w+govEPWb9mIlvUIgHV0bj VS66KcZCcDcS+vJNPriDdGAZun3kfi8oWu04TnEP8E9BOdgbJwe5QK0cGKs5u4FF MMFaQr5vG+vqOfDtHX2udapA4Iq7BkUuXsSQKHBCW7rlauv07WmnW9l5AbTkbh8f VN4SEOLTBaHklHDKZTjQbScbe6moA5zZMj8OdoI36CyNCqdstJSiw5bk4mo+ZgU2 kzhTLEUDJ+O+gEzHmKeE3dqKHpU72NRHMVYPU2qDFF2Vclualh8= -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:21 2025 by rpki-client