This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: T2ukSXqlztzUOHh/ASoW/pepONnVlKy2EJr53zYC6sE= Subject key identifier: 55:13:95:89:54:3F:55:B3:7D:D6:8D:68:F2:5A:B7:9E:DD:8A:F1:7E Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 1EE1788678348EF631DC89C90C98729371E3BB46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 01C1 Signing time: Wed 24 Dec 2025 08:51:12 +0000 Manifest this update: Wed 24 Dec 2025 08:46:12 +0000 Manifest next update: Sat 27 Dec 2025 20:41:12 +0000 Files and hashes: 1: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: kQyYXLOis/lh3t+MVsRloFKg9DWI2wzJXKTMEo2IuoU=) 2: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) 3: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) 4: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:e1:78:86:78:34:8e:f6:31:dc:89:c9:0c:98:72:93:71:e3:bb:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Dec 24 08:46:12 2025 GMT Not After : Dec 27 20:41:12 2025 GMT Subject: CN=55139589543F55B37DD68D68F25AB79EDD8AF17E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:42:11:41:d0:4c:d1:d9:be:23:73:7b:76: 92:a7:42:1a:7c:2a:1f:51:91:99:dc:70:88:be:1a: d6:19:9a:b2:13:28:b1:21:a1:ce:58:34:92:ea:2d: 2a:47:7b:82:ca:20:4f:0f:8b:f1:a9:07:07:ae:a3: b3:c2:41:49:89:ee:48:4c:12:50:38:ab:df:e1:7f: 82:4c:90:54:c3:fe:e9:cd:13:f1:22:af:36:41:2e: 67:c0:a9:39:2e:09:df:27:9b:49:f5:76:c7:b9:7a: a2:c7:c9:38:75:61:e5:11:ec:81:5a:a9:3d:2a:eb: 69:cd:77:60:4b:71:d8:44:97:ee:b7:40:08:1d:89: a3:e9:01:2e:9f:cb:de:77:c0:9b:05:0a:59:6c:f3: 34:40:a8:c6:b1:1f:b9:13:66:52:d6:e0:8e:f0:bf: ee:26:3e:48:de:f4:27:ed:d2:cf:66:2f:80:78:db: ae:e7:af:33:5b:8e:df:e4:c8:0a:3b:cd:16:51:0f: fb:f7:28:9b:4f:a0:c3:ec:5f:93:19:c2:46:d0:76: c1:38:cd:26:1b:a3:6c:bd:6b:d1:4f:c4:74:20:93: dd:c5:0b:10:05:aa:7a:da:53:e6:82:41:cd:eb:c1: 5f:b7:c4:e5:57:f6:8f:43:33:c2:dd:de:61:9b:46: e1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:13:95:89:54:3F:55:B3:7D:D6:8D:68:F2:5A:B7:9E:DD:8A:F1:7E X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:39:e7:ea:c6:1b:d4:d8:63:db:8b:27:0c:aa:5b:76:5c:7b: 22:84:6b:01:70:d0:3f:5f:75:fe:ec:77:54:26:55:e6:a2:25: cb:5d:88:f7:24:63:ce:f1:98:54:df:56:fd:56:2e:e4:91:74: 5e:20:c8:c4:c1:18:61:a7:00:d1:cb:b8:7a:10:7d:10:3c:bf: 30:8d:ea:e2:7e:bb:31:82:9e:e4:29:9c:dd:82:16:0b:74:a4: 25:e4:13:51:dc:3e:44:05:92:3c:2d:ec:da:fd:6d:44:93:c5: 7f:d5:af:59:86:3d:44:b1:54:c0:18:b5:dd:47:ea:37:c6:ff: a3:0a:53:f9:76:af:7f:4f:a4:ae:ed:b6:b6:32:e2:e9:4e:e3: 80:87:0a:bf:c8:a3:53:e0:89:12:04:88:1c:25:c3:41:06:cf: ad:96:79:c1:f0:76:e7:23:87:00:af:ff:74:a6:62:96:cd:78: 12:1a:b5:25:ff:46:f5:58:ce:7b:5e:f9:21:a6:f4:0c:5b:f5: 88:ef:68:1c:ad:64:4a:0b:8f:69:87:7b:32:65:57:37:ce:fb: d2:c4:34:a1:df:4f:59:b9:da:f1:fd:03:ed:7e:d6:0e:82:92: 21:5b:07:82:ff:6b:6e:ff:07:9d:82:e1:96:14:34:4f:be:30: 33:cd:fe:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHuF4hng0jvYx3InJDJhyk3Hju0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTEyMjQwODQ2MTJaFw0yNTEyMjcyMDQxMTJaMDMxMTAvBgNV BAMTKDU1MTM5NTg5NTQzRjU1QjM3REQ2OEQ2OEYyNUFCNzlFREQ4QUYxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87UIRQdBM0dm+I3N7dpKnQhp8 Kh9RkZnccIi+GtYZmrITKLEhoc5YNJLqLSpHe4LKIE8Pi/GpBweuo7PCQUmJ7khM ElA4q9/hf4JMkFTD/unNE/EirzZBLmfAqTkuCd8nm0n1dse5eqLHyTh1YeUR7IFa qT0q62nNd2BLcdhEl+63QAgdiaPpAS6fy953wJsFClls8zRAqMaxH7kTZlLW4I7w v+4mPkje9Cft0s9mL4B4267nrzNbjt/kyAo7zRZRD/v3KJtPoMPsX5MZwkbQdsE4 zSYbo2y9a9FPxHQgk93FCxAFqnraU+aCQc3rwV+3xOVX9o9DM8Ld3mGbRuHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVROViVQ/VbN91o1o8lq3nt2K8X4wHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABI55+rGG9TYY9uLJwyqW3ZceyKEawFw0D9f df7sd1QmVeaiJctdiPckY87xmFTfVv1WLuSRdF4gyMTBGGGnANHLuHoQfRA8vzCN 6uJ+uzGCnuQpnN2CFgt0pCXkE1HcPkQFkjwt7Nr9bUSTxX/Vr1mGPUSxVMAYtd1H 6jfG/6MKU/l2r39PpK7ttrYy4ulO44CHCr/Io1PgiRIEiBwlw0EGz62WecHwducj hwCv/3SmYpbNeBIatSX/RvVYznte+SGm9Axb9YjvaBytZEoLj2mHezJlVzfO+9LE NKHfT1m52vH9A+1+1g6CkiFbB4L/a27/B52C4ZYUNE++MDPN/lc= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:39 2025 by rpki-client