This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: 3EDZNugTnGLO7BC/gQyBP6Su7rZKTeMXbFEJlJCPWP8= Subject key identifier: 0C:85:3C:E3:6B:01:24:2F:CB:58:C7:BB:7A:A2:60:BE:D8:D5:DE:02 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 2CA3F88931987DAA6E28CF3672E2EBCA3099DD47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 027A Signing time: Tue 16 Dec 2025 10:52:04 +0000 Manifest this update: Tue 16 Dec 2025 10:47:04 +0000 Manifest next update: Fri 19 Dec 2025 14:37:04 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: /BgsaX/1HfoPmyJKSyHQQlcpArcrtr8zEFIAjI32KOA=) 2: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: BFfPGawHeoQ/eOFBPTAudUOh1OvlQi2pQ6d0UuAg2ps=) 3: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: QdHCLVdC5aqM7GMJzXiusSTo+pF5ZxlIO55/YvtDftc=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Vmie2s+Au9bD7oUrSucjO7WCyj2PVNNegBmJmg18JCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 14:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a3:f8:89:31:98:7d:aa:6e:28:cf:36:72:e2:eb:ca:30:99:dd:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Dec 16 10:47:04 2025 GMT Not After : Dec 19 14:37:04 2025 GMT Subject: CN=0C853CE36B01242FCB58C7BB7AA260BED8D5DE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:dc:66:8a:e5:32:42:20:c4:2d:1c:44:c8: 27:96:93:94:df:a8:18:8b:8b:36:05:2b:09:86:6f: bd:a8:9d:bf:05:f0:7e:f4:53:3d:28:51:27:64:01: 4c:64:2b:62:e3:2b:61:8b:99:d4:4d:d4:97:bb:3a: a2:54:7e:60:9c:0a:1e:1c:7b:f9:b4:18:d3:33:a4: af:45:08:d3:5d:95:00:9e:85:97:af:39:eb:be:e4: fb:b3:c3:1c:a5:b1:aa:e9:b1:40:16:85:de:fc:bc: ff:bb:54:0e:98:99:4d:44:7d:9f:84:60:44:85:78: f6:f3:95:71:e1:11:33:ed:3d:10:87:ae:29:a6:49: 2b:63:a4:79:9e:a2:b0:8d:18:19:24:98:18:ba:d9: 46:23:bc:d5:b2:49:81:c3:07:81:80:79:5b:34:7f: 75:fb:f3:68:c5:be:0e:aa:50:ad:14:03:14:12:d0: e7:7e:c3:e3:20:ed:f1:2a:5b:70:6c:e1:ff:4b:0f: 36:f6:af:b7:53:b7:7e:f9:42:eb:e4:5a:3d:56:2f: e9:6f:25:32:c6:c2:d0:3a:7c:6c:ea:da:28:32:94: 35:bd:9f:5f:c0:6a:64:ed:04:ff:1d:c8:d6:67:a0: e0:45:80:8e:41:fb:b2:02:0e:21:46:e1:3e:06:05: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:85:3C:E3:6B:01:24:2F:CB:58:C7:BB:7A:A2:60:BE:D8:D5:DE:02 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f2:b6:de:94:cd:75:c8:ed:df:00:f6:b4:87:20:51:7b:33: 08:3c:9b:82:94:6a:3e:25:0b:c1:62:cf:c7:7f:bb:28:85:79: 1f:d1:6a:11:35:6d:2d:14:cd:f1:50:55:19:ad:ca:7f:83:e6: 71:39:0f:5c:81:6e:56:7e:eb:5a:89:0f:44:08:09:eb:11:b5: b6:0e:e8:98:40:af:28:3c:8b:66:1c:90:59:8b:9f:58:2b:fa: e9:c1:74:12:2c:b1:19:2c:3a:e9:f2:f2:64:41:59:eb:5d:ce: e0:a6:67:b6:7b:ab:24:a8:75:e6:12:ed:8d:af:9b:02:fc:87: bd:3f:82:f2:27:e1:1b:b0:1c:94:8a:82:c5:7a:09:34:e4:23: 6e:ed:b1:3b:c1:73:ce:da:f6:07:f0:a7:ac:93:6b:8e:45:33: 36:1e:dc:d0:c0:50:af:31:75:0a:1e:17:8c:71:ca:2c:bf:02: 66:f4:72:d9:d3:f8:11:d4:0b:93:81:38:81:63:db:0d:8a:c9: 81:1d:bb:1a:76:b6:7e:60:87:65:9e:f7:de:47:b3:8c:6b:42: 44:14:1d:7e:52:f9:ab:1a:c7:40:40:1e:ac:0d:63:e3:31:43: 38:39:7b:4b:e3:5d:0a:6d:3c:e1:4c:bf:c1:11:82:5c:76:b5: 28:6e:a2:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKP4iTGYfapuKM82cuLryjCZ3UcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNTEyMTYxMDQ3MDRaFw0yNTEyMTkxNDM3MDRaMDMxMTAvBgNV BAMTKDBDODUzQ0UzNkIwMTI0MkZDQjU4QzdCQjdBQTI2MEJFRDhENURFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw/NxmiuUyQiDELRxEyCeWk5Tf qBiLizYFKwmGb72onb8F8H70Uz0oUSdkAUxkK2LjK2GLmdRN1Je7OqJUfmCcCh4c e/m0GNMzpK9FCNNdlQCehZevOeu+5PuzwxylsarpsUAWhd78vP+7VA6YmU1EfZ+E YESFePbzlXHhETPtPRCHrimmSStjpHmeorCNGBkkmBi62UYjvNWySYHDB4GAeVs0 f3X782jFvg6qUK0UAxQS0Od+w+Mg7fEqW3Bs4f9LDzb2r7dTt375QuvkWj1WL+lv JTLGwtA6fGzq2igylDW9n1/AamTtBP8dyNZnoOBFgI5B+7ICDiFG4T4GBRUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDIU842sBJC/LWMe7eqJgvtjV3gIwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfytt6UzXXI7d8A9rSHIFF7Mwg8m4KUaj4l C8Fiz8d/uyiFeR/RahE1bS0UzfFQVRmtyn+D5nE5D1yBblZ+61qJD0QICesRtbYO 6JhAryg8i2YckFmLn1gr+unBdBIssRksOuny8mRBWetdzuCmZ7Z7qySodeYS7Y2v mwL8h70/gvIn4RuwHJSKgsV6CTTkI27tsTvBc87a9gfwp6yTa45FMzYe3NDAUK8x dQoeF4xxyiy/Amb0ctnT+BHUC5OBOIFj2w2KyYEduxp2tn5gh2We995Hs4xrQkQU HX5S+asax0BAHqwNY+MxQzg5e0vjXQptPOFMv8ERglx2tShuouA= -----END CERTIFICATE-----Generated at Thu Dec 18 11:58:45 2025 by rpki-client