This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: CJ9SA6IYNEMn+1Kvnlw9jXjbQpLKEhuSmAvEn5Nzevs= Subject key identifier: 5A:EC:21:24:EB:DA:E8:66:7E:4F:BB:35:CE:75:DF:B2:5B:78:B8:64 Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 2DDE41599902CF63BC3EA16864DF8692DBC43FE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 0539 Signing time: Wed 24 Dec 2025 15:22:59 +0000 Manifest this update: Wed 24 Dec 2025 15:17:59 +0000 Manifest next update: Sat 27 Dec 2025 20:26:59 +0000 Files and hashes: 1: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: jlSi5oX9gPvXAJxHrMJBCk8X3O/vIg52Jvuu8epuy0o=) 2: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: g2j4L6oa7s+Yo5r0t0sgHCPdhAYOBJ4LtHuSFZmj5UA=) 3: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: M9IqkBmv/6mvit+aqd+lb7yJ4UZJweQxalWJOia6lMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:de:41:59:99:02:cf:63:bc:3e:a1:68:64:df:86:92:db:c4:3f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Dec 24 15:17:59 2025 GMT Not After : Dec 27 20:26:59 2025 GMT Subject: CN=5AEC2124EBDAE8667E4FBB35CE75DFB25B78B864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:f3:96:33:00:91:a4:90:7c:47:9f:f9:40: 5c:8a:12:c4:bd:56:f9:b0:0c:09:80:05:4d:f4:d9: 8c:61:dc:d4:63:64:c4:26:b3:da:ed:4d:fd:95:c3: 78:69:b4:10:cc:60:91:91:8e:3b:69:c2:18:8c:9d: 91:c2:fb:ad:17:6f:d4:ee:91:13:e4:f1:a9:0a:dd: a7:e7:7a:60:b7:13:e2:82:d6:ff:84:c5:32:48:1f: 36:30:ea:91:c0:37:ad:f2:2a:a7:91:df:63:96:80: 47:ea:07:a8:78:71:75:f2:63:c7:6e:d7:63:02:7f: 12:11:35:4d:12:30:8c:90:c3:84:81:57:1f:ba:0a: 58:ef:1b:ca:90:aa:48:72:19:d7:84:ff:0a:e9:30: 26:2b:de:eb:72:f0:52:df:22:8b:78:fb:63:11:cc: 92:5d:c3:da:a5:70:05:5e:1d:cb:2d:48:ff:1b:1b: 27:30:9c:35:a0:bc:95:06:86:ee:88:33:d9:2e:48: 27:06:7c:2f:9a:2c:07:05:0c:54:05:de:bf:4c:cc: 7f:0f:52:89:c5:65:06:11:a7:6d:09:42:7d:19:a3: 08:8d:4d:09:1a:bd:a6:fe:5d:24:2d:8e:d6:ba:fc: 35:4e:31:dd:ab:9b:f1:0e:25:8e:95:89:ac:83:05: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EC:21:24:EB:DA:E8:66:7E:4F:BB:35:CE:75:DF:B2:5B:78:B8:64 X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b3:af:7e:cd:61:c8:5e:81:27:a7:49:4c:e4:28:f1:2d:a5: 78:be:d6:20:4b:c6:ad:c0:c4:dd:4c:2a:06:f0:82:44:f5:93: 7c:42:15:f2:cb:7a:85:cd:be:6a:d8:ad:66:eb:95:ac:24:9c: dd:8d:55:a9:e4:a3:7b:c7:1d:87:8c:55:1d:08:44:ca:70:b1: c5:f7:40:38:8b:ad:f2:b5:d9:ab:db:e2:10:1c:93:70:73:e9: 4c:7e:89:80:3b:9d:6e:61:f5:ed:0e:d3:f2:9e:cd:aa:6c:58: e8:9f:ab:24:c1:67:32:a9:37:44:c0:00:71:1d:42:5d:2d:d4: d2:c3:01:7f:22:24:9f:7d:35:0e:5f:2b:b0:cf:a2:89:c6:42: 17:52:e9:83:ba:6f:cc:95:88:85:fc:06:ee:39:67:fa:ab:e8: 47:25:0b:2f:f7:c0:da:13:3d:f4:9a:97:ba:f1:2e:ec:7c:03: fe:7c:11:43:1f:94:85:46:18:cd:35:eb:d0:a5:88:ce:e4:49: f8:76:fe:53:c1:d3:cf:bc:ed:62:19:cb:3b:36:2f:b6:9f:3f: 57:38:fc:b0:15:b5:b1:eb:91:ae:28:d8:17:a1:6b:b2:39:3f: 12:72:f3:f5:7f:6c:1d:8c:62:8c:9e:06:b0:0d:be:8a:60:3b: 73:8a:87:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULd5BWZkCz2O8PqFoZN+GktvEP+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNTEyMjQxNTE3NTlaFw0yNTEyMjcyMDI2NTlaMDMxMTAvBgNV BAMTKDVBRUMyMTI0RUJEQUU4NjY3RTRGQkIzNUNFNzVERkIyNUI3OEI4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43fOWMwCRpJB8R5/5QFyKEsS9 VvmwDAmABU302Yxh3NRjZMQms9rtTf2Vw3hptBDMYJGRjjtpwhiMnZHC+60Xb9Tu kRPk8akK3afnemC3E+KC1v+ExTJIHzYw6pHAN63yKqeR32OWgEfqB6h4cXXyY8du 12MCfxIRNU0SMIyQw4SBVx+6CljvG8qQqkhyGdeE/wrpMCYr3uty8FLfIot4+2MR zJJdw9qlcAVeHcstSP8bGycwnDWgvJUGhu6IM9kuSCcGfC+aLAcFDFQF3r9MzH8P UonFZQYRp20JQn0ZowiNTQkavab+XSQtjta6/DVOMd2rm/EOJY6ViayDBRbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWuwhJOva6GZ+T7s1znXfslt4uGQwHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2zr37NYchegSenSUzkKPEtpXi+1iBLxq3A xN1MKgbwgkT1k3xCFfLLeoXNvmrYrWbrlawknN2NVanko3vHHYeMVR0IRMpwscX3 QDiLrfK12avb4hAck3Bz6Ux+iYA7nW5h9e0O0/KezapsWOifqyTBZzKpN0TAAHEd Ql0t1NLDAX8iJJ99NQ5fK7DPoonGQhdS6YO6b8yViIX8Bu45Z/qr6EclCy/3wNoT PfSal7rxLux8A/58EUMflIVGGM0169CliM7kSfh2/lPB08+87WIZyzs2L7afP1c4 /LAVtbHrka4o2Beha7I5PxJy8/V/bB2MYoyeBrANvopgO3OKh88= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:58 2025 by rpki-client