This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft File: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft (raw, json) Hash identifier: /xwiJmB67uDZ3aXDAas44Cw/za+Lip4QYzst0dykHRM= Subject key identifier: 86:DD:B2:20:C1:75:4C:43:86:16:C0:3E:C8:39:C5:78:CB:54:05:17 Authority key identifier: 29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 Certificate issuer: /CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Certificate serial: 4BF8BFEDE3B4E7CDC3FE85BAAD9FD3B9C4E2555D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft Manifest number: 03B2 Signing time: Thu 18 Dec 2025 23:32:40 +0000 Manifest this update: Thu 18 Dec 2025 23:27:40 +0000 Manifest next update: Mon 22 Dec 2025 05:00:40 +0000 Files and hashes: 1: 292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl (hash: mNFIDc1j2cCX6hBmCiv9110CrFUByv2WYldw2eJ3HaI=) 2: 3130332e3136362e3133362e302f32332d3234203d3e203137393935.roa (hash: bN0O+3JGtIOaU62palp9MIrngagfeVADVprJx+0r0Fs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 05:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f8:bf:ed:e3:b4:e7:cd:c3:fe:85:ba:ad:9f:d3:b9:c4:e2:55:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=292C6CF5F336CE0D758E47F5DF9778633CDCA769 Validity Not Before: Dec 18 23:27:40 2025 GMT Not After : Dec 22 05:00:40 2025 GMT Subject: CN=86DDB220C1754C438616C03EC839C578CB540517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:57:ac:eb:64:bc:5f:61:d7:23:6b:27:c4: d9:35:22:ac:55:74:60:01:7b:0c:c2:83:29:87:d0: 15:3e:af:bb:95:ac:c7:b6:9a:b9:28:ea:c6:5e:7d: 86:cf:1e:0e:81:00:08:2d:b5:d8:6c:de:56:40:89: 38:8a:71:21:49:84:5c:f8:55:dd:0f:92:a8:58:99: 5d:f3:d4:81:07:8c:39:62:44:12:93:83:61:5a:5d: 8c:18:ce:27:30:9b:83:5f:2f:f8:94:90:11:2d:3f: 14:56:a9:05:87:c9:b0:64:76:e8:2a:b6:90:f7:6f: c0:91:d7:38:11:7c:4f:c5:d1:04:ab:9e:75:b5:14: da:39:12:e0:bf:14:40:67:25:a4:73:f5:29:75:4c: 77:1e:a6:96:55:b2:a5:52:26:8d:36:ef:d8:45:76: 02:66:11:8c:c8:0a:6d:42:ac:91:5b:34:a9:81:98: a6:6c:98:4e:67:c7:16:6f:4e:03:7e:84:5a:de:3d: 89:1b:90:0d:d4:26:05:6a:63:de:85:10:b4:9f:10: b4:55:86:b7:6d:6f:7a:52:bc:59:d5:2e:3b:40:f0: fe:21:b4:83:46:ab:75:0a:d9:a5:4f:c8:58:73:74: 0f:b4:00:fc:3f:62:57:56:98:82:24:63:10:ea:52: f7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:DD:B2:20:C1:75:4C:43:86:16:C0:3E:C8:39:C5:78:CB:54:05:17 X509v3 Authority Key Identifier: keyid:29:2C:6C:F5:F3:36:CE:0D:75:8E:47:F5:DF:97:78:63:3C:DC:A7:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/292C6CF5F336CE0D758E47F5DF9778633CDCA769.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a634c8dc-8853-4f65-8209-4fbee7ab4252/0/292C6CF5F336CE0D758E47F5DF9778633CDCA769.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:23:aa:16:6a:00:4c:cd:45:6b:0e:1e:e3:d6:8c:0a:ea:7d: a1:00:32:2a:32:de:b0:23:df:da:f4:4b:59:59:d2:d1:bf:fb: 97:6e:1a:4a:84:45:38:53:52:bb:54:d7:1b:43:4a:57:b1:ce: 98:c2:4c:25:09:f5:5f:2f:1c:26:69:d0:9d:22:7b:8e:9b:75: 11:31:31:f2:b5:b6:12:c5:29:ed:21:65:a6:ba:86:2a:8c:dc: 69:c6:3b:27:c5:7a:cc:09:6b:27:f4:a9:86:e6:e7:18:f2:3c: bc:92:01:91:1a:63:4d:71:c1:09:68:15:2c:c1:71:dc:2e:40: 81:14:2a:cd:85:f9:5c:9c:2a:9c:e9:17:2d:81:a2:83:ee:b4: 5a:ec:d4:a4:99:a0:0f:ff:94:96:5a:f8:c4:1d:28:0c:49:f3: 73:5d:0b:e4:ef:de:5d:75:47:3c:c7:e4:ba:09:23:6d:74:1e: 19:5b:c9:07:5a:8e:93:24:3f:bc:5c:24:c7:cf:87:ad:00:2c: 8c:c4:d2:52:93:69:ea:79:78:9d:23:71:f6:10:4e:87:b8:34: 2c:5c:ac:09:00:74:3f:75:5b:13:25:dc:d2:44:f0:22:0b:bf: f1:b9:ba:e1:09:82:3a:88:ee:1c:43:5b:de:a7:e2:5e:d9:98: 2e:c6:9d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/i/7eO0583D/oW6rZ/TucTiVV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMz Q0RDQTc2OTAeFw0yNTEyMTgyMzI3NDBaFw0yNTEyMjIwNTAwNDBaMDMxMTAvBgNV BAMTKDg2RERCMjIwQzE3NTRDNDM4NjE2QzAzRUM4MzlDNTc4Q0I1NDA1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0les62S8X2HXI2snxNk1IqxV dGABewzCgymH0BU+r7uVrMe2mrko6sZefYbPHg6BAAgttdhs3lZAiTiKcSFJhFz4 Vd0PkqhYmV3z1IEHjDliRBKTg2FaXYwYzicwm4NfL/iUkBEtPxRWqQWHybBkdugq tpD3b8CR1zgRfE/F0QSrnnW1FNo5EuC/FEBnJaRz9Sl1THceppZVsqVSJo0279hF dgJmEYzICm1CrJFbNKmBmKZsmE5nxxZvTgN+hFrePYkbkA3UJgVqY96FELSfELRV hrdtb3pSvFnVLjtA8P4htINGq3UK2aVPyFhzdA+0APw/YldWmIIkYxDqUve5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUht2yIMF1TEOGFsA+yDnFeMtUBRcwHwYDVR0j BBgwFoAUKSxs9fM2zg11jkf135d4Yzzcp2kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjM0YzhkYy04ODUzLTRmNjUtODIwOS00ZmJlZTdhYjQyNTIvMC8yOTJDNkNGNUYz MzZDRTBENzU4RTQ3RjVERjk3Nzg2MzNDRENBNzY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4NjMzQ0RD QTc2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNGM4ZGMtODg1My00ZjY1LTgy MDktNGZiZWU3YWI0MjUyLzAvMjkyQzZDRjVGMzM2Q0UwRDc1OEU0N0Y1REY5Nzc4 NjMzQ0RDQTc2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgjqhZqAEzNRWsOHuPWjArqfaEAMioy3rAj 39r0S1lZ0tG/+5duGkqERThTUrtU1xtDSlexzpjCTCUJ9V8vHCZp0J0ie46bdREx MfK1thLFKe0hZaa6hiqM3GnGOyfFeswJayf0qYbm5xjyPLySAZEaY01xwQloFSzB cdwuQIEUKs2F+VycKpzpFy2BooPutFrs1KSZoA//lJZa+MQdKAxJ83NdC+Tv3l11 RzzH5LoJI210HhlbyQdajpMkP7xcJMfPh60ALIzE0lKTaep5eJ0jcfYQToe4NCxc rAkAdD91WxMl3NJE8CILv/G5uuEJgjqI7hxDW96n4l7ZmC7GnaY= -----END CERTIFICATE-----Generated at Sat Dec 20 21:51:20 2025 by rpki-client