This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: WaRXMdSf0AnnqlcraVRyS1B5GYMMNcuVMCewolSNdSs= Subject key identifier: AB:E3:4F:BD:3E:AC:CB:9F:E5:82:30:4D:71:69:4B:F7:50:67:6E:84 Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 1461B237FDF11E5FF85489B2980ACFBB4970D9FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 0533 Signing time: Thu 18 Dec 2025 19:10:54 +0000 Manifest this update: Thu 18 Dec 2025 19:05:54 +0000 Manifest next update: Sun 21 Dec 2025 21:22:54 +0000 Files and hashes: 1: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: SBwy/PTIKe/hrqkEmjMKIGp+gjTVt7BAj+EZkIEExmQ=) 2: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:61:b2:37:fd:f1:1e:5f:f8:54:89:b2:98:0a:cf:bb:49:70:d9:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Dec 18 19:05:54 2025 GMT Not After : Dec 21 21:22:54 2025 GMT Subject: CN=ABE34FBD3EACCB9FE582304D71694BF750676E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:4a:67:ea:1b:10:c1:16:bd:a7:12:83:94: cd:90:5c:0a:78:99:04:56:a1:b0:d6:83:66:20:44: 8f:30:ab:c7:bf:c9:81:c8:59:3e:10:d6:59:ce:3c: a5:2f:e3:0f:e2:51:45:41:27:83:78:66:b1:90:24: b9:24:9a:67:9f:88:33:4e:52:65:d6:41:d7:72:6d: ec:9c:ee:62:1d:73:7f:db:0e:a3:f8:4c:59:c9:7c: 0e:9e:55:8b:c8:ff:c0:aa:50:28:d2:e6:a2:f4:53: 80:5a:05:a3:54:10:90:55:73:e1:86:63:d3:f4:45: 24:32:47:1f:b1:d3:79:3c:fb:b6:63:40:2d:d6:e7: cb:e3:18:8c:96:5f:de:21:8b:ea:c9:9c:96:81:8a: f0:71:e6:7f:fa:fd:5c:dd:95:56:19:eb:63:05:b0: 2e:9a:df:54:1f:5f:5f:13:18:34:04:10:12:c7:46: ef:88:3f:ad:01:ee:93:8c:58:a6:01:d2:da:65:56: cd:e0:c6:a7:44:1f:08:1d:3a:9c:8e:49:0f:0b:70: e4:44:85:72:23:a8:35:4b:19:c7:18:f4:d7:0f:40: 86:54:73:b3:d1:ed:7f:25:30:39:97:73:ec:e5:6f: 6c:50:6c:bb:75:57:b9:bd:da:aa:33:a8:44:f6:1d: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E3:4F:BD:3E:AC:CB:9F:E5:82:30:4D:71:69:4B:F7:50:67:6E:84 X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1b:be:6e:f8:96:4e:fc:ab:20:49:6a:dd:72:58:91:6c:97: ce:8d:df:8e:d0:57:da:35:81:60:bc:40:cc:9f:28:54:1e:84: 65:a3:3a:4e:4e:6a:26:ae:5d:4c:22:38:e0:7a:dc:73:ab:22: 6e:9e:c1:54:81:0a:00:6b:80:6c:31:5d:a8:58:bd:b9:1c:93: 1f:d3:a1:97:9b:b5:c0:0c:b1:6b:ab:8e:8b:9d:6d:8f:28:bf: b1:f7:02:8e:51:df:af:91:7b:9c:fe:08:12:91:5b:7b:fd:51: 6a:6c:33:a0:bc:f6:dd:12:99:a8:f9:fd:7c:98:4b:c4:32:de: c5:02:45:05:8f:f1:98:31:58:68:ee:b4:84:63:a1:90:fb:05: 21:ca:f2:b4:dd:79:fd:64:00:29:1c:f7:19:50:f9:ff:0f:75: 8d:3b:e1:72:49:ca:d6:82:ed:5e:27:3d:6d:a5:82:24:cd:74: e0:91:5e:57:49:ba:80:55:e5:1a:09:25:cf:fa:90:d8:06:68: e2:3e:13:e3:6c:83:57:e5:de:b4:9a:84:a2:1d:3b:ef:cd:0c: 23:ef:8c:9a:c0:6e:70:86:7b:ee:74:91:7c:bb:35:94:40:c9: fc:da:89:09:f2:44:15:74:00:58:74:e7:8c:3a:5e:f9:e0:bd: 00:77:0c:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGGyN/3xHl/4VImymArPu0lw2f0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNTEyMTgxOTA1NTRaFw0yNTEyMjEyMTIyNTRaMDMxMTAvBgNV BAMTKEFCRTM0RkJEM0VBQ0NCOUZFNTgyMzA0RDcxNjk0QkY3NTA2NzZFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPEpn6hsQwRa9pxKDlM2QXAp4 mQRWobDWg2YgRI8wq8e/yYHIWT4Q1lnOPKUv4w/iUUVBJ4N4ZrGQJLkkmmefiDNO UmXWQddybeyc7mIdc3/bDqP4TFnJfA6eVYvI/8CqUCjS5qL0U4BaBaNUEJBVc+GG Y9P0RSQyRx+x03k8+7ZjQC3W58vjGIyWX94hi+rJnJaBivBx5n/6/VzdlVYZ62MF sC6a31QfX18TGDQEEBLHRu+IP60B7pOMWKYB0tplVs3gxqdEHwgdOpyOSQ8LcORE hXIjqDVLGccY9NcPQIZUc7PR7X8lMDmXc+zlb2xQbLt1V7m92qozqET2Hc6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq+NPvT6sy5/lgjBNcWlL91BnboQwHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0bvm74lk78qyBJat1yWJFsl86N347QV9o1 gWC8QMyfKFQehGWjOk5OaiauXUwiOOB63HOrIm6ewVSBCgBrgGwxXahYvbkckx/T oZebtcAMsWurjoudbY8ov7H3Ao5R36+Re5z+CBKRW3v9UWpsM6C89t0Smaj5/XyY S8Qy3sUCRQWP8ZgxWGjutIRjoZD7BSHK8rTdef1kACkc9xlQ+f8PdY074XJJytaC 7V4nPW2lgiTNdOCRXldJuoBV5RoJJc/6kNgGaOI+E+Nsg1fl3rSahKIdO+/NDCPv jJrAbnCGe+50kXy7NZRAyfzaiQnyRBV0AFh054w6XvngvQB3DBM= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:40 2025 by rpki-client