This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft File: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft (raw, json) Hash identifier: xO8+q2SQ/hAeVHmxgDM4RamlOsaCiiPF0/9oj7pWXeo= Subject key identifier: 12:9A:FC:51:30:C3:F2:07:D5:65:A4:C0:D4:1B:99:D9:B2:DA:15:36 Authority key identifier: 1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A Certificate issuer: /CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Certificate serial: 66745A252620586C6E554EE9F72CB8D76FDF603E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft Manifest number: 03AF Signing time: Sun 14 Dec 2025 03:01:13 +0000 Manifest this update: Sun 14 Dec 2025 02:56:13 +0000 Manifest next update: Wed 17 Dec 2025 09:17:13 +0000 Files and hashes: 1: 3130332e3136342e3234382e302f32332d3234203d3e203137393935.roa (hash: LTBEQvAXAeuY0KH0kB6kKvzSEQh0r1sAqnbQ1uPtbW4=) 2: 1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl (hash: 5e4My4q+8dvg4qHovy0zo3MbS1yrJnUmZqaGKV0jyMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 09:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:74:5a:25:26:20:58:6c:6e:55:4e:e9:f7:2c:b8:d7:6f:df:60:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A Validity Not Before: Dec 14 02:56:13 2025 GMT Not After : Dec 17 09:17:13 2025 GMT Subject: CN=129AFC5130C3F207D565A4C0D41B99D9B2DA1536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:35:2b:f9:52:62:ac:23:10:e2:69:c7:44:fd: 8a:fd:21:be:5a:0e:6c:cf:6d:00:44:e6:f8:39:6d: 5c:36:fb:63:d8:e7:d2:93:96:c2:93:ef:64:8b:54: 77:90:91:a7:7e:70:42:40:64:20:1a:10:3a:fb:1d: 33:3b:e1:ee:60:31:55:26:f8:3e:f7:a2:3c:19:cc: d3:4f:55:62:cf:a0:8d:c8:60:ff:7c:1c:6a:9d:79: 75:df:f7:a5:29:c0:2e:b9:da:3e:a6:11:4b:71:02: e6:9f:7d:67:2d:b1:4b:de:d2:22:e8:8e:57:ee:b3: 5d:f1:75:2e:7c:25:a3:7c:b9:4b:fb:eb:ed:1e:97: ac:0a:15:44:8c:79:23:64:9a:ff:82:e2:b6:71:9c: ee:40:50:e7:f3:a5:38:c3:e7:2c:d1:ca:ce:fa:d6: 1c:52:e2:6d:f9:ed:38:1a:65:f3:0d:8a:db:03:dd: 01:65:a5:52:b7:d2:f2:02:43:c2:bf:33:9b:b9:40: 3f:0d:68:12:49:fc:ff:d2:da:55:00:f0:92:f7:c4: 5c:f8:b3:35:11:bd:d7:c1:e7:b9:3f:03:52:16:84: 5a:30:87:45:4d:ce:88:f9:92:c4:69:30:8e:29:9e: 44:35:d9:48:eb:c1:4b:65:6a:87:28:bd:55:a5:c9: a2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9A:FC:51:30:C3:F2:07:D5:65:A4:C0:D4:1B:99:D9:B2:DA:15:36 X509v3 Authority Key Identifier: keyid:1C:22:CD:3D:77:91:A7:91:87:DA:9D:03:4E:B4:BB:5E:D5:E4:64:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0041b48d-73c4-4cdd-bcac-a59699bcbbc1/0/1C22CD3D7791A79187DA9D034EB4BB5ED5E4642A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:42:f5:7e:74:44:29:f7:56:b0:38:dd:dd:45:af:fd:c2:94: f8:62:c0:55:4f:b7:00:9d:fa:53:e6:80:39:d7:6a:a7:c4:41: ec:a7:e4:75:73:88:c0:de:e2:54:bc:94:57:d1:98:cc:94:8f: aa:a4:3e:0d:6b:bc:24:79:07:46:99:0a:8f:96:84:14:3b:22: cb:64:cf:13:4e:c1:04:96:ca:97:bb:ca:85:e3:22:49:bc:1f: c5:73:b5:e9:9e:9b:26:ee:4c:ea:60:44:43:f8:9c:a5:35:68: 80:0a:62:81:cf:1b:71:72:1b:ac:d4:05:88:16:82:a1:6b:89: 7e:06:a9:bc:d6:13:0b:a6:fa:a5:ae:7c:00:f9:d9:d7:24:34: c8:20:7a:eb:d9:ba:51:04:e4:24:7d:75:5f:be:2b:46:72:b5: 94:2d:4d:3b:bd:92:7b:12:e6:52:91:43:e2:37:89:7f:4f:27: 6c:f6:5d:36:78:bd:6e:d3:cc:01:f2:d4:dd:19:b0:19:7f:e4: 0d:d6:e2:b0:60:36:0b:2f:46:0a:b1:9c:14:d6:4e:4a:27:da: c5:43:20:b8:01:b2:90:3d:87:61:d2:3a:92:8d:64:ec:70:a6: e5:1b:3a:fc:b0:4c:ab:da:fd:d3:72:81:f5:95:a8:5b:67:71: 67:90:4a:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnRaJSYgWGxuVU7p9yy412/fYD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVE NUU0NjQyQTAeFw0yNTEyMTQwMjU2MTNaFw0yNTEyMTcwOTE3MTNaMDMxMTAvBgNV BAMTKDEyOUFGQzUxMzBDM0YyMDdENTY1QTRDMEQ0MUI5OUQ5QjJEQTE1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjNSv5UmKsIxDiacdE/Yr9Ib5a DmzPbQBE5vg5bVw2+2PY59KTlsKT72SLVHeQkad+cEJAZCAaEDr7HTM74e5gMVUm +D73ojwZzNNPVWLPoI3IYP98HGqdeXXf96UpwC652j6mEUtxAuaffWctsUve0iLo jlfus13xdS58JaN8uUv76+0el6wKFUSMeSNkmv+C4rZxnO5AUOfzpTjD5yzRys76 1hxS4m357TgaZfMNitsD3QFlpVK30vICQ8K/M5u5QD8NaBJJ/P/S2lUA8JL3xFz4 szURvdfB57k/A1IWhFowh0VNzoj5ksRpMI4pnkQ12UjrwUtlaocovVWlyaKzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEpr8UTDD8gfVZaTA1BuZ2bLaFTYwHwYDVR0j BBgwFoAUHCLNPXeRp5GH2p0DTrS7XtXkZCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDQxYjQ4ZC03M2M0LTRjZGQtYmNhYy1hNTk2OTliY2JiYzEvMC8xQzIyQ0QzRDc3 OTFBNzkxODdEQTlEMDM0RUI0QkI1RUQ1RTQ2NDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJCNUVENUU0 NjQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA0MWI0OGQtNzNjNC00Y2RkLWJj YWMtYTU5Njk5YmNiYmMxLzAvMUMyMkNEM0Q3NzkxQTc5MTg3REE5RDAzNEVCNEJC NUVENUU0NjQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBC9X50RCn3VrA43d1Fr/3ClPhiwFVPtwCd +lPmgDnXaqfEQeyn5HVziMDe4lS8lFfRmMyUj6qkPg1rvCR5B0aZCo+WhBQ7Istk zxNOwQSWype7yoXjIkm8H8VztememybuTOpgREP4nKU1aIAKYoHPG3FyG6zUBYgW gqFriX4GqbzWEwum+qWufAD52dckNMggeuvZulEE5CR9dV++K0ZytZQtTTu9knsS 5lKRQ+I3iX9PJ2z2XTZ4vW7TzAHy1N0ZsBl/5A3W4rBgNgsvRgqxnBTWTkon2sVD ILgBspA9h2HSOpKNZOxwpuUbOvywTKva/dNygfWVqFtncWeQSo0= -----END CERTIFICATE-----Generated at Mon Dec 15 19:53:19 2025 by rpki-client