This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: qnIpdop5f1hshYvRWraO8+lfPVOYmCnccbkJKqKHay8= Subject key identifier: E2:31:10:6C:72:98:9B:A3:85:9C:59:21:A7:CB:0E:6E:02:3E:38:36 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 508A87BD98F4A8429F0D6AE66F0718D458D7C70F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 0210 Signing time: Tue 23 Dec 2025 20:21:13 +0000 Manifest this update: Tue 23 Dec 2025 20:16:13 +0000 Manifest next update: Sat 27 Dec 2025 05:11:13 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) 3: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: Lv6NyNVA3KzzW0KBgcpQbMFbGOYORMMfluP5fbTIIgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 05:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:8a:87:bd:98:f4:a8:42:9f:0d:6a:e6:6f:07:18:d4:58:d7:c7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Dec 23 20:16:13 2025 GMT Not After : Dec 27 05:11:13 2025 GMT Subject: CN=E231106C72989BA3859C5921A7CB0E6E023E3836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:c1:dd:0d:4f:31:2c:7e:c1:4f:da:aa:fe: 51:64:0a:78:69:d6:7c:cf:f6:58:d6:88:02:92:17: d7:17:a9:ec:57:1d:8a:5f:7e:0e:52:90:12:8e:18: ec:e0:78:ad:b8:2b:06:f0:e9:93:c1:0d:5e:29:cf: 43:e2:af:56:61:60:43:ce:9d:94:bc:7f:e3:b5:58: 7f:cb:31:ab:69:37:5e:8b:ba:a8:0b:a9:35:e3:76: 0d:01:22:07:ab:c2:2b:bb:92:2a:e6:25:0c:a9:f0: 9b:7b:35:d8:48:fa:13:d9:10:ca:c6:b2:cc:af:56: 26:e2:48:d9:8f:df:3f:4f:39:8c:aa:2e:6d:7e:26: 54:41:1d:c8:68:c1:55:75:8e:9c:32:47:e5:11:a2: f7:98:31:7c:cf:da:ae:4f:3f:f2:62:ec:56:95:d9: 26:41:6a:05:e1:b8:f1:e6:0f:49:1b:92:5a:40:01: 77:73:f5:c3:f4:48:55:57:4b:ce:ad:02:35:74:73: 1e:53:3c:d3:09:95:a0:4a:a7:0f:d5:fa:2e:2e:89: d0:b2:4b:b9:ee:16:c6:6c:34:0f:6d:ba:14:48:8d: a6:a1:66:ad:c4:9c:04:f3:0e:6b:81:5e:1e:7b:74: d2:f1:3b:41:4e:ff:43:fe:61:88:ac:cc:5b:a3:d7: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:31:10:6C:72:98:9B:A3:85:9C:59:21:A7:CB:0E:6E:02:3E:38:36 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c0:4a:23:cb:f6:0d:1f:e2:09:d6:39:3d:b5:a7:66:cb:3e: 54:4d:dd:bf:c0:f9:b7:1d:e0:71:30:8a:0d:4e:0f:6e:a3:24: 03:9d:7c:18:31:69:28:f9:01:59:99:4d:dd:c0:ca:17:3c:67: 24:05:50:26:a0:a9:20:3e:46:60:b3:1d:7e:59:fc:09:ee:eb: 61:a5:92:08:ce:04:62:1b:9c:45:0a:0b:d2:dd:d3:d3:a1:26: bc:58:4e:5a:0d:20:9b:00:12:a2:3d:bf:a7:28:5c:4b:22:65: e5:29:da:4d:04:70:4d:47:48:02:7f:a9:66:f1:dc:5b:4f:94: c6:45:56:04:15:b0:c7:4d:e4:68:9a:8a:10:b6:68:b4:af:9b: ba:b4:9a:bf:1d:c2:b7:76:a1:6d:be:1f:5f:ef:67:3a:8d:ff: c6:e5:d8:d6:35:cf:fc:04:a1:fa:89:38:a8:8e:00:10:44:e8: a8:74:50:dd:ce:91:c7:c0:bd:a9:22:f1:5a:3c:99:87:06:a6: b0:b7:7a:73:1a:33:16:d5:7a:a3:58:3f:61:37:1e:e6:85:d5: 65:c3:52:4e:13:b4:55:58:df:2e:fe:4d:95:34:ca:14:87:9e: a8:47:d0:4e:f3:07:9d:c6:cc:30:18:26:64:26:9c:3d:72:e5: cf:f2:d0:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIqHvZj0qEKfDWrmbwcY1FjXxw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTEyMjMyMDE2MTNaFw0yNTEyMjcwNTExMTNaMDMxMTAvBgNV BAMTKEUyMzExMDZDNzI5ODlCQTM4NTlDNTkyMUE3Q0IwRTZFMDIzRTM4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXMHdDU8xLH7BT9qq/lFkCnhp 1nzP9ljWiAKSF9cXqexXHYpffg5SkBKOGOzgeK24Kwbw6ZPBDV4pz0Pir1ZhYEPO nZS8f+O1WH/LMatpN16LuqgLqTXjdg0BIgerwiu7kirmJQyp8Jt7NdhI+hPZEMrG ssyvVibiSNmP3z9POYyqLm1+JlRBHchowVV1jpwyR+URoveYMXzP2q5PP/Ji7FaV 2SZBagXhuPHmD0kbklpAAXdz9cP0SFVXS86tAjV0cx5TPNMJlaBKpw/V+i4uidCy S7nuFsZsNA9tuhRIjaahZq3EnATzDmuBXh57dNLxO0FO/0P+YYiszFuj1xzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jEQbHKYm6OFnFkhp8sObgI+ODYwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjASiPL9g0f4gnWOT21p2bLPlRN3b/A+bcd 4HEwig1OD26jJAOdfBgxaSj5AVmZTd3Ayhc8ZyQFUCagqSA+RmCzHX5Z/Anu62Gl kgjOBGIbnEUKC9Ld09OhJrxYTloNIJsAEqI9v6coXEsiZeUp2k0EcE1HSAJ/qWbx 3FtPlMZFVgQVsMdN5GiaihC2aLSvm7q0mr8dwrd2oW2+H1/vZzqN/8bl2NY1z/wE ofqJOKiOABBE6Kh0UN3OkcfAvaki8Vo8mYcGprC3enMaMxbVeqNYP2E3HuaF1WXD Uk4TtFVY3y7+TZU0yhSHnqhH0E7zB53GzDAYJmQmnD1y5c/y0KI= -----END CERTIFICATE-----Generated at Wed Dec 24 18:12:09 2025 by rpki-client