This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.mft (raw, json) Hash identifier: PgyoRHq/9DWHYlxqBW3mK99059iLZMquCwd6vxnjCic= Subject key identifier: B0:7B:E9:19:C0:EE:78:8A:18:F4:C2:A5:12:36:13:E9:19:61:74:D8 Authority key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Certificate issuer: /CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Certificate serial: 7B8D28EB8D79773F36CB1C50EB42FCA080E15235 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft Manifest number: 66 Signing time: Fri 19 Dec 2025 18:52:05 +0000 Manifest this update: Fri 19 Dec 2025 18:47:05 +0000 Manifest next update: Mon 22 Dec 2025 20:05:05 +0000 Files and hashes: 1: 29BE771FE6D788CA509E787787F218ADFB43DDB2.crl (hash: ZkP4W2tg1wvgQAezpycgCKiYYVPHH8ZdbTjekKkrzPA=) 2: 323430353a353163303a3a2f33322d3332203d3e20313339333933.roa (hash: xOhwGI2U+4AffMNiCyrvrejLk4Xi3+2L832MlZGbs+w=) 3: 3130332e3134332e3132392e302f32342d3234203d3e20313339333933.roa (hash: 3wetidkcCavxQpjkiXbTz/VCnjcuje+VreUWREjQdgQ=) 4: 3130332e3134332e3132382e302f32342d3234203d3e20313339333933.roa (hash: WrbEtwkzEelam58TNUV4Bn/EuB71NKCGwrujJRp3Bd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8d:28:eb:8d:79:77:3f:36:cb:1c:50:eb:42:fc:a0:80:e1:52:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Validity Not Before: Dec 19 18:47:05 2025 GMT Not After : Dec 22 20:05:05 2025 GMT Subject: CN=B07BE919C0EE788A18F4C2A5123613E9196174D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:42:e3:ac:12:ed:1f:a8:b8:62:8a:dd:e2:38: d5:71:32:82:22:62:3d:6e:c6:2e:d2:52:cd:a8:39: b9:f6:e6:2b:c2:7d:56:8f:d2:95:02:2a:b5:5f:c2: df:28:9a:af:cb:37:df:ee:d9:a5:9c:81:f9:5d:9e: 84:98:c4:b8:e5:4e:f6:e0:8c:5b:10:47:02:ef:43: c1:3b:b1:a7:b8:81:07:eb:11:c5:83:fe:1c:89:b5: 8b:d1:73:d6:bf:6b:d2:16:eb:0e:d1:7c:c0:1f:eb: b1:77:2b:87:fd:24:e1:13:c1:b9:6e:53:4d:fd:df: b6:85:ef:3b:f9:24:d3:51:64:24:ba:d5:87:50:eb: 0e:f3:26:70:85:c1:27:76:77:5b:40:ba:2e:5c:f8: 83:95:53:b0:e7:22:f0:c6:c5:6c:28:09:46:4d:e5: e9:10:69:b3:83:8e:d6:fe:33:6d:ea:44:b4:e5:77: e3:84:82:42:e0:6c:7b:41:05:1b:e5:73:bf:41:33: e2:85:06:b2:fe:ea:66:87:b6:7e:56:80:b2:35:7b: 96:64:20:72:50:de:ae:07:3f:3e:e7:d8:22:86:03: 51:ff:ed:ed:c5:7e:05:d4:45:08:cc:a1:92:85:06: 92:ec:20:7d:c4:e4:3d:80:2f:5c:b8:4c:ad:c3:09: ba:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7B:E9:19:C0:EE:78:8A:18:F4:C2:A5:12:36:13:E9:19:61:74:D8 X509v3 Authority Key Identifier: keyid:29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0b:9c:7b:8a:07:a2:62:97:7d:01:ed:df:d4:60:18:3f:c4: 8a:9b:7d:45:dc:a9:de:4b:8a:53:e6:c5:6f:93:90:7d:38:f2: 4b:16:b2:f9:6c:7c:44:ba:a5:1d:5c:2f:6f:a3:88:27:e9:10: bc:2d:ac:dc:4a:92:cb:f6:54:17:2d:0f:cc:19:51:60:3f:2a: 05:16:f9:4b:4d:78:cf:52:2e:b1:ff:c0:a8:2e:cf:e0:de:f0: 29:43:f2:aa:c2:2f:7b:ee:67:ea:51:7a:d2:b4:8c:2a:f7:83: f5:0a:91:64:99:f6:9b:b0:b2:16:3e:49:9a:90:7d:0e:26:1e: e6:b8:5d:d4:29:08:83:03:d3:1a:b2:54:18:b5:14:c3:ce:f1: 2d:8c:79:dc:66:1b:b8:96:cf:f5:61:27:ca:2d:21:9d:c0:6f: ce:4d:f4:a4:f8:21:0b:af:27:ac:bc:1a:45:c7:bc:15:c1:34: b2:bb:76:1a:11:cf:39:6d:a5:4f:be:f3:b5:d8:52:75:65:e1: 9c:11:18:6f:4f:6c:d9:97:ee:c0:35:c0:ae:51:59:85:1c:37: 0a:d3:5c:b3:38:2e:72:70:ee:6c:da:ca:96:5b:92:5b:53:88: 42:67:41:d6:b8:17:ce:bb:fe:70:f0:4e:47:67:b6:58:5a:90: 32:1f:5e:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe40o6415dz82yxxQ60L8oIDhUjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURG QjQzRERCMjAeFw0yNTEyMTkxODQ3MDVaFw0yNTEyMjIyMDA1MDVaMDMxMTAvBgNV BAMTKEIwN0JFOTE5QzBFRTc4OEExOEY0QzJBNTEyMzYxM0U5MTk2MTc0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQuOsEu0fqLhiit3iONVxMoIi Yj1uxi7SUs2oObn25ivCfVaP0pUCKrVfwt8omq/LN9/u2aWcgfldnoSYxLjlTvbg jFsQRwLvQ8E7sae4gQfrEcWD/hyJtYvRc9a/a9IW6w7RfMAf67F3K4f9JOETwblu U03937aF7zv5JNNRZCS61YdQ6w7zJnCFwSd2d1tAui5c+IOVU7DnIvDGxWwoCUZN 5ekQabODjtb+M23qRLTld+OEgkLgbHtBBRvlc79BM+KFBrL+6maHtn5WgLI1e5Zk IHJQ3q4HPz7n2CKGA1H/7e3FfgXURQjMoZKFBpLsIH3E5D2AL1y4TK3DCboTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsHvpGcDueIoY9MKlEjYT6RlhdNgwHwYDVR0j BBgwFoAUKb53H+bXiMpQnnh3h/IYrftD3bIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMC8yOUJFNzcxRkU2 RDc4OENBNTA5RTc4Nzc4N0YyMThBREZCNDNEREIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4QURGQjQz RERCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJlOTZiZjMtZDAyMS00ZDg0LTkw ZDUtYzI0NTU4YWE0OTVmLzAvMjlCRTc3MUZFNkQ3ODhDQTUwOUU3ODc3ODdGMjE4 QURGQjQzRERCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwLnHuKB6Jil30B7d/UYBg/xIqbfUXcqd5L ilPmxW+TkH048ksWsvlsfES6pR1cL2+jiCfpELwtrNxKksv2VBctD8wZUWA/KgUW +UtNeM9SLrH/wKguz+De8ClD8qrCL3vuZ+pRetK0jCr3g/UKkWSZ9puwshY+SZqQ fQ4mHua4XdQpCIMD0xqyVBi1FMPO8S2MedxmG7iWz/VhJ8otIZ3Ab85N9KT4IQuv J6y8GkXHvBXBNLK7dhoRzzltpU++87XYUnVl4ZwRGG9PbNmX7sA1wK5RWYUcNwrT XLM4LnJw7mzaypZbkltTiEJnQda4F867/nDwTkdntlhakDIfXvE= -----END CERTIFICATE-----Generated at Sat Dec 20 18:53:51 2025 by rpki-client