This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: ns6lIhm8RWRXzjlKIuUnm381lfd9LjGYVuSz/TQuVk4= Subject key identifier: 5E:15:4D:B8:BE:94:03:77:6B:47:B6:D9:CD:00:83:31:22:C7:8C:AD Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 413DF0A51EC02EA4DA3EA7C022D19B8471F6BE03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 01F2 Signing time: Fri 19 Dec 2025 21:03:15 +0000 Manifest this update: Fri 19 Dec 2025 20:58:15 +0000 Manifest next update: Tue 23 Dec 2025 07:54:15 +0000 Files and hashes: 1: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) 2: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: 9Dzp0jy9ycBomgMLfjWG2Zy5p9S3WUcQM8/O3ITGMCA=) 3: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: IgvUit+JVnRvJOkjIYlvNPAALXRaIVBYKC5WzTyMkfQ=) 4: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3d:f0:a5:1e:c0:2e:a4:da:3e:a7:c0:22:d1:9b:84:71:f6:be:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Dec 19 20:58:15 2025 GMT Not After : Dec 23 07:54:15 2025 GMT Subject: CN=5E154DB8BE9403776B47B6D9CD00833122C78CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:4c:7f:d3:28:e0:f5:7c:e6:78:19:45:62: dd:4e:ad:67:bf:4f:59:87:a7:06:f5:72:b7:4e:3e: b5:a6:63:3a:bd:70:41:8e:36:3f:77:56:d4:1b:4a: e9:e2:8d:a1:ab:d5:d4:a1:9d:13:c3:dd:60:a4:32: 6f:d5:33:ab:4d:1a:ff:ea:02:e5:f0:12:b2:99:75: c6:1c:ab:0f:9f:65:70:01:35:11:76:fb:af:bb:2a: de:88:e9:b0:0e:34:6c:29:f0:0e:3f:48:59:a4:d4: 25:b7:0c:5d:0d:18:9f:d7:26:84:44:77:8b:ce:42: 58:0b:00:74:50:bf:64:42:ca:1f:36:57:1d:a3:90: 3b:26:91:15:e9:b7:49:ae:ae:5c:2f:9c:23:22:0a: ab:0f:33:ff:72:c8:d2:3b:1b:6b:00:09:41:97:7e: 7e:2b:a7:f2:72:9f:fa:35:bf:bb:5a:dd:8a:1f:f3: cc:49:ba:a0:94:12:0a:1e:91:b9:4b:8b:c1:30:c0: 1f:b2:f5:6a:56:f3:59:04:1e:3a:94:e2:45:22:5b: 93:54:3d:bc:12:d2:68:38:98:6e:c5:79:18:00:68: 16:28:e1:25:3f:d5:e9:2b:98:b5:91:7f:5b:97:18: 87:ed:4d:d3:9f:59:19:89:b0:80:90:81:f6:b4:68: 44:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:15:4D:B8:BE:94:03:77:6B:47:B6:D9:CD:00:83:31:22:C7:8C:AD X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bc:b1:40:fb:1e:2d:e0:4e:cf:fe:8c:99:c7:1f:23:9b:2b: a7:ef:38:b6:9f:02:f0:66:c7:61:37:29:22:41:48:02:3d:c7: c3:a0:74:da:f4:9d:e0:f6:c4:19:3b:2e:e4:31:fb:c5:0f:fd: ac:3d:cd:bf:4c:0d:6d:9d:83:d8:fa:46:f4:7c:15:19:af:58: 03:77:b3:d8:ad:6d:0a:77:cc:a4:6f:b5:49:61:74:f8:d2:60: 8d:34:1b:44:ce:7c:3b:1f:58:e2:3f:9c:32:fe:cd:f4:67:ff: c6:d0:1f:a5:83:b7:e7:07:71:59:79:b5:58:51:e6:86:53:35: 2b:d1:13:e9:2a:19:5b:96:9e:ef:2c:94:9f:1e:c2:36:f7:1a: 7d:e5:9e:87:a5:b8:e9:f6:78:23:a6:53:d4:11:c4:11:d1:77: 10:7d:a2:03:8e:75:9b:b6:eb:71:eb:a9:91:25:49:82:39:00: ad:cc:bb:7c:28:38:d7:de:eb:cb:bf:48:ea:12:03:a7:13:6d: 05:f2:b6:55:32:0d:98:30:3c:04:cf:37:3b:e4:90:75:7f:2d: 61:6d:4d:c1:4b:cc:85:b9:46:ba:60:e7:b5:80:6b:cb:f2:51: 4a:e6:c5:ab:e8:56:09:e1:a1:61:88:8a:9d:42:b0:af:f1:8f: 8c:65:dc:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQT3wpR7ALqTaPqfAItGbhHH2vgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNTEyMTkyMDU4MTVaFw0yNTEyMjMwNzU0MTVaMDMxMTAvBgNV BAMTKDVFMTU0REI4QkU5NDAzNzc2QjQ3QjZEOUNEMDA4MzMxMjJDNzhDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZm0x/0yjg9XzmeBlFYt1OrWe/ T1mHpwb1crdOPrWmYzq9cEGONj93VtQbSunijaGr1dShnRPD3WCkMm/VM6tNGv/q AuXwErKZdcYcqw+fZXABNRF2+6+7Kt6I6bAONGwp8A4/SFmk1CW3DF0NGJ/XJoRE d4vOQlgLAHRQv2RCyh82Vx2jkDsmkRXpt0murlwvnCMiCqsPM/9yyNI7G2sACUGX fn4rp/Jyn/o1v7ta3Yof88xJuqCUEgoekblLi8EwwB+y9WpW81kEHjqU4kUiW5NU PbwS0mg4mG7FeRgAaBYo4SU/1ekrmLWRf1uXGIftTdOfWRmJsICQgfa0aETVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXhVNuL6UA3drR7bZzQCDMSLHjK0wHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA68sUD7Hi3gTs/+jJnHHyObK6fvOLafAvBm x2E3KSJBSAI9x8OgdNr0neD2xBk7LuQx+8UP/aw9zb9MDW2dg9j6RvR8FRmvWAN3 s9itbQp3zKRvtUlhdPjSYI00G0TOfDsfWOI/nDL+zfRn/8bQH6WDt+cHcVl5tVhR 5oZTNSvRE+kqGVuWnu8slJ8ewjb3Gn3lnoeluOn2eCOmU9QRxBHRdxB9ogOOdZu2 63HrqZElSYI5AK3Mu3woONfe68u/SOoSA6cTbQXytlUyDZgwPATPNzvkkHV/LWFt TcFLzIW5Rrpg57WAa8vyUUrmxavoVgnhoWGIip1CsK/xj4xl3OM= -----END CERTIFICATE-----Generated at Sat Dec 20 08:39:48 2025 by rpki-client