This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: lgNadOJkiTboVhN3Vmz38+fA/qTiMpIJdBc2HyPn6j4= Subject key identifier: 5E:EB:15:89:5D:81:80:26:E7:63:21:15:7B:F1:2C:DF:BC:E5:F3:64 Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 66DBD91EC5B0479A2E92741440D2B4F4E457E8FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 0218 Signing time: Sat 20 Dec 2025 14:01:59 +0000 Manifest this update: Sat 20 Dec 2025 13:56:59 +0000 Manifest next update: Tue 23 Dec 2025 17:06:59 +0000 Files and hashes: 1: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: jfBPikwcOXfyCAw2T4LtcRftqdJoZDQGQR3Ub10AvuI=) 2: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: LDE8MHvWr7ClJaD2b6MGzIMO0HFW7Xb1cGyTVwE6YBs=) 3: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: PGU4KuR448yemmsVnXESMvccG3WXP+Z9F9r4RTEeahU=) 4: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: b6fruH9Pkg0tQtl5YFYqPR73UwekDQbIDYYtyH1Ta2c=) 5: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 9YIt3S9f2TckOIHLJingGQoR7QpEu3PnRMAwc6NgmOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:db:d9:1e:c5:b0:47:9a:2e:92:74:14:40:d2:b4:f4:e4:57:e8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Dec 20 13:56:59 2025 GMT Not After : Dec 23 17:06:59 2025 GMT Subject: CN=5EEB15895D818026E76321157BF12CDFBCE5F364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:94:35:70:47:91:fe:12:be:e2:79:04:1e: 90:c7:66:56:03:cc:3d:9d:bf:9d:44:ea:fb:88:a8: 32:f6:c2:c4:45:cd:36:99:fd:9a:dd:ee:aa:be:11: c0:76:0c:94:9f:cc:8c:6c:e6:fb:d8:61:72:a7:83: 9d:1b:ec:6c:27:15:23:b5:fb:b9:ee:23:35:b5:b7: 98:78:ec:e6:64:5b:e9:bc:dd:cb:95:08:da:9b:9c: 51:bb:0c:ae:1d:86:01:f9:91:99:cb:c0:01:7f:f7: a5:af:01:0e:a5:65:1d:5d:ca:6d:25:06:7b:b9:88: 59:3d:7b:80:61:52:14:ba:f5:aa:e1:b7:4d:98:c1: ce:e6:06:92:7d:3e:82:e3:a0:ee:70:7a:e1:8f:f7: 3a:eb:43:e8:15:e0:d3:08:cb:bf:ba:ce:35:cf:9a: 62:a4:a5:34:9c:35:8a:f7:7c:92:ca:53:1b:83:b0: 54:4f:d8:c7:64:69:1a:ed:ce:fe:dd:1a:ec:4b:54: 6a:37:29:a8:ed:f8:46:84:84:26:21:59:c3:22:6e: b6:ce:7d:90:52:95:c5:77:1f:04:66:ed:e7:b3:52: 0c:19:6c:de:4e:46:6a:c1:e8:89:f1:17:74:b8:05: 90:b0:ef:9e:d9:11:d3:cb:f7:a9:1b:9c:c2:cb:56: ae:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EB:15:89:5D:81:80:26:E7:63:21:15:7B:F1:2C:DF:BC:E5:F3:64 X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2f:db:c9:fa:e9:d7:47:c8:c9:12:49:f4:0e:a6:62:53:03: 6a:3d:ef:7c:8a:84:25:c7:a4:80:f3:f2:0f:c2:06:17:da:4d: 1a:46:fb:4e:f1:ae:c2:ec:fe:bc:85:1c:a7:c5:dd:86:08:1a: f5:78:e8:67:97:8b:08:a2:9d:b5:bc:80:3e:79:d4:8d:8a:a6: b0:9c:d3:ba:5a:9f:a9:3b:d1:8c:c2:d8:77:4b:a6:d3:d0:f4: 3c:1e:85:a2:60:92:9d:c4:70:65:b6:57:ee:b7:fa:ec:1a:81: 39:cb:f5:92:0e:19:15:2d:91:d9:8e:ac:80:37:6d:1a:0a:74: 70:b6:69:69:92:f4:cc:78:07:fe:08:e7:df:54:2e:ef:98:12: 3f:d3:cb:1c:df:87:eb:8b:dc:63:50:2f:41:c9:16:e5:cb:a6: 49:19:16:23:25:ce:d3:9d:06:41:be:f7:b9:53:39:51:b4:0d: b8:b6:04:ea:5f:c2:b3:11:7a:55:62:61:bd:a4:86:77:66:de: 15:84:17:5f:7c:fb:84:5c:c1:50:3f:d3:6c:a3:e6:1d:02:3e: ce:3a:4b:03:3e:d1:94:be:bc:5a:bb:b0:e6:c3:8e:77:00:2d: f3:15:de:92:43:4b:6d:c0:f6:e9:87:d4:c4:1d:ed:2c:23:9d: c4:a0:f4:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtvZHsWwR5ouknQUQNK09ORX6PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNTEyMjAxMzU2NTlaFw0yNTEyMjMxNzA2NTlaMDMxMTAvBgNV BAMTKDVFRUIxNTg5NUQ4MTgwMjZFNzYzMjExNTdCRjEyQ0RGQkNFNUYzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPL5Q1cEeR/hK+4nkEHpDHZlYD zD2dv51E6vuIqDL2wsRFzTaZ/Zrd7qq+EcB2DJSfzIxs5vvYYXKng50b7GwnFSO1 +7nuIzW1t5h47OZkW+m83cuVCNqbnFG7DK4dhgH5kZnLwAF/96WvAQ6lZR1dym0l Bnu5iFk9e4BhUhS69arht02Ywc7mBpJ9PoLjoO5weuGP9zrrQ+gV4NMIy7+6zjXP mmKkpTScNYr3fJLKUxuDsFRP2MdkaRrtzv7dGuxLVGo3Kajt+EaEhCYhWcMibrbO fZBSlcV3HwRm7eezUgwZbN5ORmrB6InxF3S4BZCw757ZEdPL96kbnMLLVq7nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXusViV2BgCbnYyEVe/Es37zl82QwHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJov28n66ddHyMkSSfQOpmJTA2o973yKhCXH pIDz8g/CBhfaTRpG+07xrsLs/ryFHKfF3YYIGvV46GeXiwiinbW8gD551I2KprCc 07pan6k70YzC2HdLptPQ9DwehaJgkp3EcGW2V+63+uwagTnL9ZIOGRUtkdmOrIA3 bRoKdHC2aWmS9Mx4B/4I599ULu+YEj/Tyxzfh+uL3GNQL0HJFuXLpkkZFiMlztOd BkG+97lTOVG0Dbi2BOpfwrMRelViYb2khndm3hWEF198+4RcwVA/02yj5h0CPs46 SwM+0ZS+vFq7sObDjncALfMV3pJDS23A9umH1MQd7SwjncSg9BU= -----END CERTIFICATE-----Generated at Sun Dec 21 16:13:15 2025 by rpki-client