This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: uohKq+lUbNpBPSpc8P0J9aR+krlNj1zimH/JvBhN80s= Subject key identifier: 24:30:51:F6:89:EB:A5:46:AE:C8:82:86:5C:46:21:B8:B5:A6:DB:73 Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 02BBD51AC2224D7142512D0A907056D2884BCD2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 0483 Signing time: Sat 20 Dec 2025 04:22:53 +0000 Manifest this update: Sat 20 Dec 2025 04:17:53 +0000 Manifest next update: Tue 23 Dec 2025 12:29:53 +0000 Files and hashes: 1: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM=) 2: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo=) 3: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: faPEcCgD1gCtmG3oWPmi+T1fGddbi3Q99i2n0/fi798=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 12:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:bb:d5:1a:c2:22:4d:71:42:51:2d:0a:90:70:56:d2:88:4b:cd:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Dec 20 04:17:53 2025 GMT Not After : Dec 23 12:29:53 2025 GMT Subject: CN=243051F689EBA546AEC882865C4621B8B5A6DB73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:46:3e:fa:09:69:51:2c:c3:7b:b4:57:e3:d9: 0f:b2:60:c1:81:4d:32:68:53:a2:85:0b:c9:77:bb: b1:86:f8:2f:42:03:79:09:ad:71:a2:25:85:20:2a: 61:24:5f:7f:53:81:c9:f6:d0:39:19:c6:22:bb:3e: e3:9c:d6:02:73:52:91:64:c2:f0:1f:de:59:cf:db: c2:85:93:23:b3:6c:bd:f9:79:d3:de:13:a7:40:45: 41:0c:3d:ae:56:bb:d8:33:e9:a2:31:d2:25:24:40: a0:6a:cb:24:39:e4:e9:28:25:40:06:30:c1:12:88: 1f:a3:2e:dd:8f:ed:9a:b9:3d:eb:f1:eb:f8:ec:e9: 3a:ca:9b:9c:a3:48:db:dc:8c:19:7b:fc:a4:88:36: bd:6c:11:b7:ab:73:9f:93:11:c0:31:63:03:26:ab: 3d:09:e3:17:88:26:12:07:22:d7:e9:93:db:c2:0a: 25:e6:46:4d:74:bb:d0:7e:b4:9c:aa:84:a4:aa:c0: 36:c9:c1:0a:ec:14:9c:1d:38:4d:ee:3e:1f:34:94: 14:72:52:96:bb:c1:0e:d5:2f:93:cf:8b:05:54:49: 0c:73:cf:71:7f:d7:b6:22:1d:33:53:c8:7c:67:58: 7b:3a:0b:7a:f2:05:59:43:a2:bb:2a:b4:9d:56:ee: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:30:51:F6:89:EB:A5:46:AE:C8:82:86:5C:46:21:B8:B5:A6:DB:73 X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:91:4d:05:f9:bc:41:31:6c:52:cb:9c:c9:de:b2:8d:7b:5d: 5e:0d:29:45:02:f6:cb:3a:7b:12:bf:0a:88:5b:fd:0c:13:25: bd:9d:6b:25:39:6a:c4:13:21:39:f5:81:39:c1:ca:80:4c:74: 1e:c5:28:e6:a2:98:f4:f7:7f:7c:ed:1f:7c:ab:0f:05:39:22: 36:aa:ce:9c:0f:09:c7:3e:d8:9b:cc:b3:f2:01:9f:50:b5:29: 46:66:89:8f:d3:32:7d:82:c3:2e:e5:d3:b8:d6:8a:65:13:63: 03:3f:fc:9c:b1:01:53:cd:ea:35:90:e4:32:7f:10:7e:41:1c: 8f:74:16:b8:10:b1:6f:eb:f8:4d:f3:11:e9:2b:bf:7e:58:c0: 59:a9:d8:ef:a7:49:9f:62:5c:f4:8a:c4:f2:c5:33:77:73:bb: 23:31:ff:be:60:f6:ba:13:01:fb:03:92:b9:79:54:7a:cf:74: aa:45:5d:5e:a7:ef:e9:d4:94:72:a8:09:c0:40:57:73:cf:83: 9c:16:4d:3e:d5:24:5b:3c:e4:fe:71:a9:78:60:b5:bc:f0:15: 13:6d:67:d0:13:40:a7:2a:b1:a9:ca:83:88:ab:c6:07:2a:46: 19:8b:e5:d8:af:c4:e2:d3:f1:1b:79:ed:91:c6:ff:45:ed:61: 6b:80:3b:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArvVGsIiTXFCUS0KkHBW0ohLzS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNTEyMjAwNDE3NTNaFw0yNTEyMjMxMjI5NTNaMDMxMTAvBgNV BAMTKDI0MzA1MUY2ODlFQkE1NDZBRUM4ODI4NjVDNDYyMUI4QjVBNkRCNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURj76CWlRLMN7tFfj2Q+yYMGB TTJoU6KFC8l3u7GG+C9CA3kJrXGiJYUgKmEkX39Tgcn20DkZxiK7PuOc1gJzUpFk wvAf3lnP28KFkyOzbL35edPeE6dARUEMPa5Wu9gz6aIx0iUkQKBqyyQ55OkoJUAG MMESiB+jLt2P7Zq5Pevx6/js6TrKm5yjSNvcjBl7/KSINr1sEberc5+TEcAxYwMm qz0J4xeIJhIHItfpk9vCCiXmRk10u9B+tJyqhKSqwDbJwQrsFJwdOE3uPh80lBRy Upa7wQ7VL5PPiwVUSQxzz3F/17YiHTNTyHxnWHs6C3ryBVlDorsqtJ1W7m2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJDBR9onrpUauyIKGXEYhuLWm23MwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiRTQX5vEExbFLLnMneso17XV4NKUUC9ss6 exK/Cohb/QwTJb2dayU5asQTITn1gTnByoBMdB7FKOaimPT3f3ztH3yrDwU5Ijaq zpwPCcc+2JvMs/IBn1C1KUZmiY/TMn2Cwy7l07jWimUTYwM//JyxAVPN6jWQ5DJ/ EH5BHI90FrgQsW/r+E3zEekrv35YwFmp2O+nSZ9iXPSKxPLFM3dzuyMx/75g9roT AfsDkrl5VHrPdKpFXV6n7+nUlHKoCcBAV3PPg5wWTT7VJFs85P5xqXhgtbzwFRNt Z9ATQKcqsanKg4irxgcqRhmL5divxOLT8Rt57ZHG/0XtYWuAO7o= -----END CERTIFICATE-----Generated at Tue Dec 23 00:43:15 2025 by rpki-client