This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: Z3tb6+QDYYMDJQpeTxellzK+jMGBRCUIq11b1h8Uv2s= Subject key identifier: D7:AC:93:2A:0C:DF:70:92:27:5F:9E:1F:A9:E0:1E:BA:B3:EF:D8:9B Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 12E21A6A62CF17671E5B743B813DE76DAE3758B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 027B Signing time: Thu 18 Dec 2025 14:42:01 +0000 Manifest this update: Thu 18 Dec 2025 14:37:01 +0000 Manifest next update: Sun 21 Dec 2025 21:16:01 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Vmie2s+Au9bD7oUrSucjO7WCyj2PVNNegBmJmg18JCw=) 2: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: /BgsaX/1HfoPmyJKSyHQQlcpArcrtr8zEFIAjI32KOA=) 3: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: BFfPGawHeoQ/eOFBPTAudUOh1OvlQi2pQ6d0UuAg2ps=) 4: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: 864a4NXsSV6s6f9LwDWkvt3tIk5bf4yhapcHoUmt2x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e2:1a:6a:62:cf:17:67:1e:5b:74:3b:81:3d:e7:6d:ae:37:58:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Dec 18 14:37:01 2025 GMT Not After : Dec 21 21:16:01 2025 GMT Subject: CN=D7AC932A0CDF7092275F9E1FA9E01EBAB3EFD89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:33:f2:99:4d:8a:a8:bb:2e:75:11:be:cf: 0d:fc:6f:e0:6e:34:63:d1:d5:d0:f8:af:5f:33:0f: fd:8b:d3:1b:3e:70:2a:74:55:c8:b8:a5:80:61:7a: ab:04:7f:e2:07:78:32:8c:3d:49:30:ab:74:48:b4: 41:f1:14:84:1b:06:8f:c9:47:8b:cf:02:25:23:d1: be:c7:c4:b9:48:47:85:81:32:ad:67:b8:1e:71:01: e4:4f:d0:53:f9:e6:20:c7:d4:b7:0b:9d:9e:38:b0: 30:ff:07:aa:4f:06:5b:24:ce:f8:00:01:47:9d:6d: f5:d7:dd:4f:b8:32:2e:41:09:77:c8:6a:e9:78:8a: ca:91:e2:f3:95:12:62:a2:35:a9:e5:6f:74:72:94: 76:d9:a1:79:c2:09:fb:46:aa:b5:ec:09:1d:b4:81: 63:85:c3:c5:03:77:91:92:b2:49:78:11:82:65:25: 39:04:91:d2:6c:c1:64:f5:79:6b:aa:18:22:16:5d: 2d:19:df:dc:0e:fb:ba:5e:7f:2e:32:a8:0b:ea:f8: 60:ae:2f:9c:21:35:03:cf:b6:80:b1:e7:0f:64:e5: 0c:42:40:ca:62:c6:30:15:ab:9a:7b:43:5a:48:f9: a4:f3:0f:18:bd:d7:65:c1:8e:4f:f5:6b:bc:cb:47: 81:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AC:93:2A:0C:DF:70:92:27:5F:9E:1F:A9:E0:1E:BA:B3:EF:D8:9B X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8a:5f:c6:65:20:94:ec:0f:81:14:b6:00:5a:b2:57:a0:ef: ab:f9:06:78:ce:ba:03:e0:28:79:4e:ae:8d:3c:c6:08:4a:d7: a0:a4:7c:ee:10:4f:93:b9:10:c7:8c:78:08:29:78:21:b5:bf: b2:37:7f:50:74:0e:7c:f0:1b:12:53:e3:b8:82:03:b8:52:6b: 4f:3d:43:4f:09:b3:8e:1a:25:1b:b5:1a:e5:67:26:aa:4f:32: 7e:fd:91:d3:04:14:ac:f4:a0:ed:0d:77:39:0f:ad:60:2d:80: 6f:29:17:4a:d6:b0:47:df:63:72:76:d3:91:7c:77:8b:e4:1e: e6:8a:14:15:32:71:66:dd:67:72:cc:0b:a0:fa:c6:e0:f2:4f: 96:d3:d6:8e:c7:5f:35:2a:b9:5d:08:73:52:8b:ba:a4:1f:04: 9c:cf:dc:0f:c7:b9:47:27:e9:d2:65:03:a8:61:2e:6e:c9:aa: 0b:07:1d:19:6a:ce:44:7c:fb:a5:8f:56:e6:c4:68:1f:bb:ce: eb:cb:1d:a2:7a:1e:0d:cc:db:9b:39:6e:2a:c2:c3:14:82:b8: d1:5b:b0:4d:3c:a7:a6:07:40:09:74:cd:91:f3:81:2c:c1:55: 36:09:2c:93:1f:3a:e6:7f:85:46:d9:f1:c5:ce:21:1e:c8:b5: 6c:f9:d2:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuIaamLPF2ceW3Q7gT3nba43WLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTEyMTgxNDM3MDFaFw0yNTEyMjEyMTE2MDFaMDMxMTAvBgNV BAMTKEQ3QUM5MzJBMENERjcwOTIyNzVGOUUxRkE5RTAxRUJBQjNFRkQ4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV3TPymU2KqLsudRG+zw38b+Bu NGPR1dD4r18zD/2L0xs+cCp0Vci4pYBheqsEf+IHeDKMPUkwq3RItEHxFIQbBo/J R4vPAiUj0b7HxLlIR4WBMq1nuB5xAeRP0FP55iDH1LcLnZ44sDD/B6pPBlskzvgA AUedbfXX3U+4Mi5BCXfIaul4isqR4vOVEmKiNanlb3RylHbZoXnCCftGqrXsCR20 gWOFw8UDd5GSskl4EYJlJTkEkdJswWT1eWuqGCIWXS0Z39wO+7pefy4yqAvq+GCu L5whNQPPtoCx5w9k5QxCQMpixjAVq5p7Q1pI+aTzDxi912XBjk/1a7zLR4EJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU16yTKgzfcJInX54fqeAeurPv2JswHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2KX8ZlIJTsD4EUtgBasleg76v5BnjOugPg KHlOro08xghK16CkfO4QT5O5EMeMeAgpeCG1v7I3f1B0DnzwGxJT47iCA7hSa089 Q08Js44aJRu1GuVnJqpPMn79kdMEFKz0oO0NdzkPrWAtgG8pF0rWsEffY3J205F8 d4vkHuaKFBUycWbdZ3LMC6D6xuDyT5bT1o7HXzUquV0Ic1KLuqQfBJzP3A/HuUcn 6dJlA6hhLm7JqgsHHRlqzkR8+6WPVubEaB+7zuvLHaJ6Hg3M25s5birCwxSCuNFb sE08p6YHQAl0zZHzgSzBVTYJLJMfOuZ/hUbZ8cXOIR7ItWz50hM= -----END CERTIFICATE-----Generated at Sat Dec 20 06:51:58 2025 by rpki-client