This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: TUAcbndDfML7ysrwQQt/rJ4F5I4GnYsveRkHu2jvdT8= Subject key identifier: E9:B7:CA:AE:1C:E5:84:71:E2:9F:5B:73:83:DD:2B:79:72:49:D6:43 Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 30B4489D691F7F6EC5354923EE6B15FEEE4706FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 65 Signing time: Wed 17 Dec 2025 13:31:04 +0000 Manifest this update: Wed 17 Dec 2025 13:26:04 +0000 Manifest next update: Sat 20 Dec 2025 18:51:04 +0000 Files and hashes: 1: 3130332e3134332e3132392e302f32342d3234203d3e20313339333933.roa (hash: 3wetidkcCavxQpjkiXbTz/VCnjcuje+VreUWREjQdgQ=) 2: 323430353a353163303a3a2f33322d3332203d3e20313339333933.roa (hash: xOhwGI2U+4AffMNiCyrvrejLk4Xi3+2L832MlZGbs+w=) 3: 3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (hash: WrbEtwkzEelam58TNUV4Bn/EuB71NKCGwrujJRp3Bd8=) 4: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: laz7OJ/UBdh/CFx4xsFediDrNJFX4B1VTFawtagAHLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b4:48:9d:69:1f:7f:6e:c5:35:49:23:ee:6b:15:fe:ee:47:06:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Dec 17 13:26:04 2025 GMT Not After : Dec 20 18:51:04 2025 GMT Subject: CN=E9B7CAAE1CE58471E29F5B7383DD2B797249D643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:dc:80:5d:13:ae:75:85:b4:b2:9a:dd:e0: 06:95:78:c7:22:63:c4:04:cf:98:62:e7:6a:9f:e6: b8:6f:f6:73:1c:e2:18:cf:48:90:4b:85:6e:52:34: a1:f8:36:5f:04:3e:dc:ad:3b:45:5c:c3:86:2d:c2: 0e:9a:cc:f7:81:b7:30:1c:33:d3:5c:b4:84:1b:62: 0d:89:fd:cf:ca:40:af:7a:88:27:5c:fe:c2:cf:ae: e8:fd:3c:4d:e8:dc:35:28:da:31:d8:9b:85:1a:72: fb:bf:81:8f:8e:29:de:da:d8:25:e9:12:53:ba:63: 40:9f:04:28:14:f5:38:84:e7:c7:10:df:6b:9c:cd: 0a:7f:aa:f9:bb:bb:d2:d8:93:c5:b1:00:78:0a:32: a4:b9:ac:07:84:e3:c1:ab:c3:09:fd:7d:76:66:b9: b6:5c:3f:16:15:e2:58:54:03:2a:83:4f:11:09:12: 55:14:6c:71:c1:97:24:47:78:9b:a2:d6:34:a7:8b: ba:f7:68:2a:23:c2:8e:b9:3d:62:3f:ef:d6:05:07: ff:cc:80:39:15:42:4d:37:51:0d:18:f8:5f:b9:97: 71:d4:98:1d:62:a8:1d:93:37:43:2e:a3:23:0b:17: a3:13:c9:c8:b3:88:46:53:f5:25:2b:83:ed:5b:eb: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B7:CA:AE:1C:E5:84:71:E2:9F:5B:73:83:DD:2B:79:72:49:D6:43 X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f5:0d:7d:80:e4:29:b3:20:c0:ed:48:38:c3:60:52:de:7b: 03:99:ab:e1:b2:0b:e4:72:52:8c:a5:c2:c5:91:e3:c9:cc:cc: e6:2e:b1:c6:a4:6b:25:e2:8e:76:2d:80:e9:a2:54:e3:91:f1: c9:2d:57:db:8a:ef:59:3e:08:79:21:cf:1a:fb:f7:d3:64:15: b1:81:7c:b9:e2:37:f2:52:0d:b7:0e:73:d6:27:c7:99:a7:c5: 84:f8:5a:6d:6d:d1:88:f4:e8:0a:8f:c2:e0:7e:28:88:a8:f7: cc:38:6d:67:02:cf:ba:a3:b0:e5:da:f6:2b:55:9b:d4:e4:85: 02:ed:ab:b1:73:76:20:65:e7:7b:83:d5:f5:cd:76:ba:d1:a9: 1f:7e:c1:3c:14:d6:63:0b:76:2f:43:ac:5c:63:77:f8:e4:43: 2f:53:b8:18:63:dc:92:9a:3c:2e:33:b7:0c:13:52:2c:0a:d8: 1d:f6:c6:0f:d3:e1:f3:8c:f2:c5:e6:06:b5:7a:79:1a:54:b6: bf:8b:f3:94:46:b4:b0:b7:4c:6a:f4:1c:9e:3a:af:d2:2e:26: 3f:45:07:86:48:33:06:13:5d:54:47:8c:48:7f:be:f0:86:85: c3:71:7e:fd:13:7b:e7:34:0e:05:c1:9c:a9:7f:fb:f1:49:e8: ea:08:c7:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLRInWkff27FNUkj7msV/u5HBv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNTEyMTcxMzI2MDRaFw0yNTEyMjAxODUxMDRaMDMxMTAvBgNV BAMTKEU5QjdDQUFFMUNFNTg0NzFFMjlGNUI3MzgzREQyQjc5NzI0OUQ2NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaNyAXROudYW0sprd4AaVeMci Y8QEz5hi52qf5rhv9nMc4hjPSJBLhW5SNKH4Nl8EPtytO0Vcw4Ytwg6azPeBtzAc M9NctIQbYg2J/c/KQK96iCdc/sLPruj9PE3o3DUo2jHYm4Uacvu/gY+OKd7a2CXp ElO6Y0CfBCgU9TiE58cQ32uczQp/qvm7u9LYk8WxAHgKMqS5rAeE48Grwwn9fXZm ubZcPxYV4lhUAyqDTxEJElUUbHHBlyRHeJui1jSni7r3aCojwo65PWI/79YFB//M gDkVQk03UQ0Y+F+5l3HUmB1iqB2TN0MuoyMLF6MTyciziEZT9SUrg+1b6wE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bfKrhzlhHHin1tzg90reXJJ1kMwHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb1DX2A5CmzIMDtSDjDYFLeewOZq+GyC+Ry UoylwsWR48nMzOYuscakayXijnYtgOmiVOOR8cktV9uK71k+CHkhzxr799NkFbGB fLniN/JSDbcOc9Ynx5mnxYT4Wm1t0Yj06AqPwuB+KIio98w4bWcCz7qjsOXa9itV m9TkhQLtq7FzdiBl53uD1fXNdrrRqR9+wTwU1mMLdi9DrFxjd/jkQy9TuBhj3JKa PC4ztwwTUiwK2B32xg/T4fOM8sXmBrV6eRpUtr+L85RGtLC3TGr0HJ46r9IuJj9F B4ZIMwYTXVRHjEh/vvCGhcNxfv0Te+c0DgXBnKl/+/FJ6OoIx/M= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:34 2025 by rpki-client