This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: R2KoEZtcj3dB9u9PynmpMM5LYRcOu5aDOBPmcwA77zQ= Subject key identifier: F1:14:00:A3:1C:0F:55:FE:FE:B1:41:AC:4D:B2:B9:E0:A1:9B:6C:1C Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 691E7CB7EA513E354DE8B97A1E0355914CFCE27E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 023A Signing time: Wed 17 Dec 2025 20:31:51 +0000 Manifest this update: Wed 17 Dec 2025 20:26:51 +0000 Manifest next update: Sun 21 Dec 2025 07:00:51 +0000 Files and hashes: 1: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=) 2: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: 2/ykXAG224/0GfgyKX86tF05abFWutR2AOERdYjQ1gI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:1e:7c:b7:ea:51:3e:35:4d:e8:b9:7a:1e:03:55:91:4c:fc:e2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Dec 17 20:26:51 2025 GMT Not After : Dec 21 07:00:51 2025 GMT Subject: CN=F11400A31C0F55FEFEB141AC4DB2B9E0A19B6C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:4e:44:c9:22:06:18:ac:f6:16:4e:1b:9b: f4:82:28:62:d9:db:03:3d:c7:e4:e7:6b:29:a5:53: 49:cd:2d:ee:92:34:53:ce:e3:ab:f0:c9:70:e9:f7: 87:12:ae:83:78:ca:fe:3c:21:91:e2:00:b2:a1:89: b2:96:9c:b7:e1:87:e5:e3:74:48:45:e2:91:24:c4: b3:d7:04:57:19:62:5c:0f:95:60:77:ef:6d:30:99: 27:07:67:9f:47:bb:f5:20:ae:3b:e2:fc:68:cd:e9: ac:48:5d:04:cb:36:b3:a3:f9:2a:5c:24:95:f6:dc: 73:f0:95:19:db:2c:3c:2a:b7:8f:e3:c6:c6:ed:d0: 6b:c2:a3:16:7d:eb:2d:40:b2:de:5d:8a:f0:8a:5b: 13:bc:c9:a5:07:04:a0:ad:0b:23:39:ad:e3:a6:5e: 58:46:68:05:a9:a7:a8:a2:c4:a1:4e:d9:f1:2e:e0: c6:08:2c:4d:35:c0:05:a4:7e:be:f3:f9:4d:8f:1e: 1f:6a:07:d9:25:36:11:51:58:2f:30:9a:80:d6:0e: f6:3a:38:98:99:4b:dc:93:71:08:f6:c8:12:01:af: ed:cd:eb:31:f6:0e:18:86:6e:25:f2:3a:88:33:d2: ee:71:91:25:2f:e4:04:da:32:7f:37:59:30:8f:36: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:14:00:A3:1C:0F:55:FE:FE:B1:41:AC:4D:B2:B9:E0:A1:9B:6C:1C X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:06:a6:f0:09:08:96:26:49:15:c0:33:e1:f0:b4:00:3c:83: 8e:a6:70:8d:39:bc:56:84:40:9c:09:23:87:36:36:8e:ce:2a: e8:cb:92:e3:2a:f8:6c:67:df:90:09:15:c8:00:0f:9b:3d:49: 12:5a:e6:e8:d8:0a:1d:00:3f:14:79:ef:29:5d:fb:11:a3:32: 94:2d:0f:70:67:d4:c2:46:64:fd:f0:6d:10:17:d0:c2:dc:ab: ca:fc:33:1c:98:87:d3:21:8d:77:25:98:35:4c:0c:e8:aa:45: ef:ee:8f:b6:8f:2a:e9:32:13:0c:db:2d:c1:d2:c8:da:85:ca: c9:95:81:10:da:62:68:5a:41:30:f4:e7:4b:18:14:42:74:d3: 88:cf:16:eb:85:43:31:e4:92:06:75:a3:b0:b2:dd:ee:cf:6e: 57:4b:29:43:5a:9b:d8:7c:9c:64:1b:2a:e2:e9:16:06:24:05: c3:78:b6:66:d9:0c:d8:88:d4:3d:5e:b1:73:c5:e6:a9:2c:0e: 51:64:5b:5a:ec:4b:d5:0d:80:59:34:3d:31:44:8d:f4:42:98: 15:61:ea:7d:a0:9d:8c:84:51:3e:1c:99:17:53:9b:60:05:2a: 7b:4e:d9:0b:fc:b4:45:3d:10:9d:08:38:76:87:3a:48:dc:96: 36:ae:c8:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaR58t+pRPjVN6Ll6HgNVkUz84n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNTEyMTcyMDI2NTFaFw0yNTEyMjEwNzAwNTFaMDMxMTAvBgNV BAMTKEYxMTQwMEEzMUMwRjU1RkVGRUIxNDFBQzREQjJCOUUwQTE5QjZDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUv05EySIGGKz2Fk4bm/SCKGLZ 2wM9x+TnaymlU0nNLe6SNFPO46vwyXDp94cSroN4yv48IZHiALKhibKWnLfhh+Xj dEhF4pEkxLPXBFcZYlwPlWB3720wmScHZ59Hu/Ugrjvi/GjN6axIXQTLNrOj+Spc JJX23HPwlRnbLDwqt4/jxsbt0GvCoxZ96y1Ast5divCKWxO8yaUHBKCtCyM5reOm XlhGaAWpp6iixKFO2fEu4MYILE01wAWkfr7z+U2PHh9qB9klNhFRWC8wmoDWDvY6 OJiZS9yTcQj2yBIBr+3N6zH2DhiGbiXyOogz0u5xkSUv5ATaMn83WTCPNokPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8RQAoxwPVf7+sUGsTbK54KGbbBwwHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsGpvAJCJYmSRXAM+HwtAA8g46mcI05vFaE QJwJI4c2No7OKujLkuMq+Gxn35AJFcgAD5s9SRJa5ujYCh0APxR57yld+xGjMpQt D3Bn1MJGZP3wbRAX0MLcq8r8MxyYh9MhjXclmDVMDOiqRe/uj7aPKukyEwzbLcHS yNqFysmVgRDaYmhaQTD050sYFEJ004jPFuuFQzHkkgZ1o7Cy3e7PbldLKUNam9h8 nGQbKuLpFgYkBcN4tmbZDNiI1D1esXPF5qksDlFkW1rsS9UNgFk0PTFEjfRCmBVh 6n2gnYyEUT4cmRdTm2AFKntO2Qv8tEU9EJ0IOHaHOkjcljauyEg= -----END CERTIFICATE-----Generated at Fri Dec 19 11:36:21 2025 by rpki-client