This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft File: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft (raw, json) Hash identifier: cC3zsKWMUhOAn84kVVgZjtXfLVghsCfv/bpwahaOvKg= Subject key identifier: 86:E1:C1:13:4B:00:C0:A8:74:3F:C3:A8:21:2D:3B:2F:46:F5:9F:B4 Authority key identifier: 01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 Certificate issuer: /CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Certificate serial: 550FAF9E6D74EFF527A956BB0DD998B26F4473DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft Manifest number: F0 Signing time: Fri 19 Dec 2025 01:41:54 +0000 Manifest this update: Fri 19 Dec 2025 01:36:54 +0000 Manifest next update: Mon 22 Dec 2025 07:26:54 +0000 Files and hashes: 1: 3136302e31392e3135362e302f32332d3233203d3e20313532373638.roa (hash: CbUawBdc6/owSFYBdX6zk907J+9GwiPGZDz88NQXPnI=) 2: 3136302e31392e3135372e302f32342d3234203d3e20313532373638.roa (hash: /U+44U6OBvCGsv3ed3z+YxR73loB+6G9DzRSbiFpHC4=) 3: 01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl (hash: uz2kWCT0vauPGbRd4cA41NMI7xEGAhT37n3grEnqsfc=) 4: 3136302e31392e3135362e302f32342d3234203d3e20313532373638.roa (hash: YwfkNT9uJxp+XppevLMj2drKR6MOyIxH6IZjcA7OFyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:0f:af:9e:6d:74:ef:f5:27:a9:56:bb:0d:d9:98:b2:6f:44:73:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A2349B25C18BC156CEE53AEAE63EE3010910E2 Validity Not Before: Dec 19 01:36:54 2025 GMT Not After : Dec 22 07:26:54 2025 GMT Subject: CN=86E1C1134B00C0A8743FC3A8212D3B2F46F59FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:cc:e7:19:8e:54:80:26:a5:78:13:4a:d9: 95:bf:12:22:3f:74:31:84:5f:43:a5:bf:e9:4e:f2: a3:b8:d6:b3:42:9b:4f:41:d3:5a:7c:34:ef:7f:c6: 52:bb:38:3f:0f:ed:64:8d:e9:3c:46:83:c6:6a:4a: 12:01:f5:0c:a3:2e:a3:f6:12:d4:0c:7b:06:49:c2: 84:12:8a:e4:a6:fa:dd:55:b2:67:13:30:16:8c:68: 08:f0:9f:57:2b:30:d9:c5:7e:3d:86:e0:31:c5:c3: 99:f6:65:69:82:90:aa:23:b6:01:2b:23:0f:31:73: cf:16:ae:fe:70:c6:0b:f0:83:bb:94:c7:e7:d9:47: 98:7f:22:67:75:de:41:e6:7c:f4:8b:b2:51:9b:4e: dc:b7:27:fb:c5:46:1d:c5:89:ce:12:98:f2:d0:0b: b6:f5:55:d3:56:05:80:46:28:ba:f2:e9:84:a4:2a: a4:62:78:15:f2:2e:21:93:b3:ad:e9:73:ef:5b:7c: 4c:65:0e:25:24:b3:77:28:05:0c:e6:fd:f5:dc:07: dc:7f:c2:c7:8d:bf:86:58:35:84:97:56:1b:60:91: b7:9b:57:6f:09:19:92:7e:4b:0d:40:70:88:da:88: 7d:46:79:72:de:93:50:f9:d0:70:80:84:97:ce:6d: 83:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E1:C1:13:4B:00:C0:A8:74:3F:C3:A8:21:2D:3B:2F:46:F5:9F:B4 X509v3 Authority Key Identifier: keyid:01:A2:34:9B:25:C1:8B:C1:56:CE:E5:3A:EA:E6:3E:E3:01:09:10:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/01A2349B25C18BC156CEE53AEAE63EE3010910E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12f808a4-9db3-4698-a07b-4769dce18ec7/0/01A2349B25C18BC156CEE53AEAE63EE3010910E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:74:c6:52:c0:f8:a9:8d:d8:2f:ca:c5:8c:bb:c0:77:ce:20: 36:9a:78:4a:cf:6c:91:12:34:3d:fc:bf:90:9c:14:70:e3:13: 6e:f4:dd:4e:15:36:ec:06:ac:56:24:f3:3a:32:6b:95:76:79: c1:70:aa:30:b0:3a:25:ac:11:b7:68:7b:e8:d6:b1:66:4c:18: 21:05:f7:99:d4:18:ec:ae:0f:d8:16:41:d4:a6:ad:b7:59:5f: 84:3c:b8:80:2e:99:8f:44:79:ca:86:4a:3a:f3:02:67:d0:d8: 2e:f2:3a:25:3c:9f:91:8f:8c:00:cb:c4:0b:c1:d3:1a:5b:94: 2b:2a:21:88:f1:e4:20:ab:65:1e:53:36:ba:d0:99:c0:cf:f5: 9b:18:a5:25:34:d1:a6:61:cc:ba:9c:b2:2d:f9:01:ca:fd:c4: 37:63:0a:96:6a:06:14:3b:fe:3e:24:81:97:ce:74:98:5d:ad: 12:2a:74:f2:7b:b8:b1:60:63:52:fc:f6:96:80:2e:9f:6a:1a: 9a:c3:70:ac:cf:b7:db:33:dc:47:58:78:54:58:d7:a9:63:74: 0d:35:db:fe:55:cb:f9:dc:51:7d:ca:5b:8a:8b:52:15:ab:8f: 7c:1b:6f:67:5c:46:ba:b4:2b:cf:f3:d6:ef:78:59:31:ef:75: 97:a5:1d:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQ+vnm107/UnqVa7DdmYsm9Ec90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMw MTA5MTBFMjAeFw0yNTEyMTkwMTM2NTRaFw0yNTEyMjIwNzI2NTRaMDMxMTAvBgNV BAMTKDg2RTFDMTEzNEIwMEMwQTg3NDNGQzNBODIxMkQzQjJGNDZGNTlGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC128znGY5UgCaleBNK2ZW/EiI/ dDGEX0Olv+lO8qO41rNCm09B01p8NO9/xlK7OD8P7WSN6TxGg8ZqShIB9QyjLqP2 EtQMewZJwoQSiuSm+t1VsmcTMBaMaAjwn1crMNnFfj2G4DHFw5n2ZWmCkKojtgEr Iw8xc88Wrv5wxgvwg7uUx+fZR5h/Imd13kHmfPSLslGbTty3J/vFRh3Fic4SmPLQ C7b1VdNWBYBGKLry6YSkKqRieBXyLiGTs63pc+9bfExlDiUks3coBQzm/fXcB9x/ wseNv4ZYNYSXVhtgkbebV28JGZJ+Sw1AcIjaiH1GeXLek1D50HCAhJfObYOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhuHBE0sAwKh0P8OoIS07L0b1n7QwHwYDVR0j BBgwFoAUAaI0myXBi8FWzuU66uY+4wEJEOIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmY4MDhhNC05ZGIzLTQ2OTgtYTA3Yi00NzY5ZGNlMThlYzcvMC8wMUEyMzQ5QjI1 QzE4QkMxNTZDRUU1M0FFQUU2M0VFMzAxMDkxMEUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNFRTMwMTA5 MTBFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJmODA4YTQtOWRiMy00Njk4LWEw N2ItNDc2OWRjZTE4ZWM3LzAvMDFBMjM0OUIyNUMxOEJDMTU2Q0VFNTNBRUFFNjNF RTMwMTA5MTBFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGB0xlLA+KmN2C/KxYy7wHfOIDaaeErPbJES ND38v5CcFHDjE2703U4VNuwGrFYk8zoya5V2ecFwqjCwOiWsEbdoe+jWsWZMGCEF 95nUGOyuD9gWQdSmrbdZX4Q8uIAumY9EecqGSjrzAmfQ2C7yOiU8n5GPjADLxAvB 0xpblCsqIYjx5CCrZR5TNrrQmcDP9ZsYpSU00aZhzLqcsi35Acr9xDdjCpZqBhQ7 /j4kgZfOdJhdrRIqdPJ7uLFgY1L89paALp9qGprDcKzPt9sz3EdYeFRY16ljdA01 2/5Vy/ncUX3KW4qLUhWrj3wbb2dcRrq0K8/z1u94WTHvdZelHRc= -----END CERTIFICATE-----Generated at Sat Dec 20 21:22:35 2025 by rpki-client