This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: 9IXaTc8z33kuh2dMPbict43gfVnC23brz05n4Hwgbsk= Subject key identifier: 10:34:7E:5E:38:2D:E9:27:70:81:A8:FD:B8:E6:2A:76:10:AB:63:7A Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 163912D215FD04DDC9DF92ACBFEE49E342E2AD59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 03B5 Signing time: Thu 25 Dec 2025 20:32:32 +0000 Manifest this update: Thu 25 Dec 2025 20:27:32 +0000 Manifest next update: Mon 29 Dec 2025 08:23:32 +0000 Files and hashes: 1: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=) 2: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: JXyh67/LseeaMxsMdFhxU6y4hmbOSzM+Ph+lJ8Xh+hs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:23:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:39:12:d2:15:fd:04:dd:c9:df:92:ac:bf:ee:49:e3:42:e2:ad:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: Dec 25 20:27:32 2025 GMT Not After : Dec 29 08:23:32 2025 GMT Subject: CN=10347E5E382DE9277081A8FDB8E62A7610AB637A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:1e:c4:04:76:9e:7f:2f:8d:47:45:98:78: 92:8a:86:78:09:aa:e9:de:be:f1:86:0a:5f:76:c4: 54:41:96:d2:0a:46:e9:fd:fa:a9:b0:b0:9f:e5:66: e3:83:46:3d:32:c5:dc:2c:82:a9:da:3b:fd:87:fe: 64:97:55:45:4e:d1:d8:a9:7b:d4:47:c2:26:17:ba: bc:fa:3b:53:69:9c:b5:b3:4b:2d:60:94:43:df:ec: 14:de:fc:7d:bf:da:c7:59:5b:0f:a6:32:35:fd:a4: 2a:63:a8:da:3e:3d:62:07:2f:e7:9e:9a:ac:be:a4: a4:54:43:f1:0f:19:91:d2:bc:35:39:e9:aa:ed:76: f8:83:c5:2e:0c:2b:a0:02:c9:45:b4:82:01:49:8b: 85:aa:9b:15:34:58:22:ab:94:2a:a5:b5:19:22:e4: e8:b2:33:80:87:2d:10:ca:46:d4:b1:e5:bf:40:c8: 36:97:20:95:70:e7:5b:1e:93:45:78:55:be:73:aa: b2:4d:fc:b9:38:e4:29:c5:3b:03:70:c6:96:39:0c: f3:0a:d4:1c:4a:b7:22:4e:0f:9f:e1:33:d1:7e:60: f6:b6:c6:2d:b9:83:48:61:de:79:31:cc:00:44:92: 64:cd:78:7b:d9:7a:b1:62:9e:3e:84:3d:ba:d9:01: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:34:7E:5E:38:2D:E9:27:70:81:A8:FD:B8:E6:2A:76:10:AB:63:7A X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b6:7c:d0:26:ac:11:95:34:a1:05:18:2f:89:58:16:29:4d: b7:89:50:47:f9:5f:a2:5e:53:e9:ae:1a:53:f5:cf:30:25:67: f1:52:2c:d2:88:eb:6e:02:5c:df:ae:93:d6:64:8b:93:df:87: da:ba:fe:61:0d:02:2b:5e:ca:39:43:a4:8a:c3:19:3b:36:17: 8e:3d:12:5c:b2:90:4f:cd:ae:04:92:c3:33:92:af:d0:6b:56: 86:44:06:e7:b6:42:e1:16:75:83:ef:ad:d5:12:ec:b8:c2:16: 42:89:28:74:9c:b9:76:c8:a2:e3:84:8c:ac:a2:dc:10:06:f1: 16:6a:1f:46:7d:09:9d:c3:67:11:35:2e:d4:18:46:f2:5f:72: 02:c7:f5:5e:37:c2:f3:40:9a:15:b7:72:cf:3a:c7:04:00:ad: 9f:62:22:4b:c2:90:32:08:1a:7f:1a:43:bd:6d:7f:ee:c5:bb: 47:10:89:7c:df:fa:6d:6f:52:67:b0:8f:12:ef:86:f4:4b:62: c8:75:31:b0:35:36:57:5a:bd:a1:1f:83:1c:bb:ca:1d:66:16: 3c:78:26:66:96:b5:33:17:92:3c:c1:7a:cb:f1:9e:5b:0d:bf: 18:ff:66:7f:a3:31:52:93:d6:62:70:95:3d:fe:be:62:91:3a: bc:4d:87:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFjkS0hX9BN3J35Ksv+5J40LirVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNTEyMjUyMDI3MzJaFw0yNTEyMjkwODIzMzJaMDMxMTAvBgNV BAMTKDEwMzQ3RTVFMzgyREU5Mjc3MDgxQThGREI4RTYyQTc2MTBBQjYzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFx7EBHaefy+NR0WYeJKKhngJ qunevvGGCl92xFRBltIKRun9+qmwsJ/lZuODRj0yxdwsgqnaO/2H/mSXVUVO0dip e9RHwiYXurz6O1NpnLWzSy1glEPf7BTe/H2/2sdZWw+mMjX9pCpjqNo+PWIHL+ee mqy+pKRUQ/EPGZHSvDU56artdviDxS4MK6ACyUW0ggFJi4WqmxU0WCKrlCqltRki 5OiyM4CHLRDKRtSx5b9AyDaXIJVw51sek0V4Vb5zqrJN/Lk45CnFOwNwxpY5DPMK 1BxKtyJOD5/hM9F+YPa2xi25g0hh3nkxzABEkmTNeHvZerFinj6EPbrZAUcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEDR+Xjgt6Sdwgaj9uOYqdhCrY3owHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG2fNAmrBGVNKEFGC+JWBYpTbeJUEf5X6Je U+muGlP1zzAlZ/FSLNKI624CXN+uk9Zki5Pfh9q6/mENAiteyjlDpIrDGTs2F449 ElyykE/NrgSSwzOSr9BrVoZEBue2QuEWdYPvrdUS7LjCFkKJKHScuXbIouOEjKyi 3BAG8RZqH0Z9CZ3DZxE1LtQYRvJfcgLH9V43wvNAmhW3cs86xwQArZ9iIkvCkDII Gn8aQ71tf+7Fu0cQiXzf+m1vUmewjxLvhvRLYsh1MbA1NldavaEfgxy7yh1mFjx4 JmaWtTMXkjzBesvxnlsNvxj/Zn+jMVKT1mJwlT3+vmKROrxNh7I= -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:15 2025 by rpki-client