This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft File: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft (raw, json) Hash identifier: +ueNx2Col8jkVgIp5uHSnZnUdGOr23SaPWAUcHdJEWM= Subject key identifier: 24:27:8C:83:74:AE:28:17:98:36:D8:EA:57:A7:59:8B:4E:96:2C:0F Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 Certificate issuer: /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Certificate serial: 217CE45286B81E834473C82AD93A4616B884240E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft Manifest number: 023D Signing time: Wed 17 Dec 2025 03:40:57 +0000 Manifest this update: Wed 17 Dec 2025 03:35:57 +0000 Manifest next update: Sat 20 Dec 2025 15:14:57 +0000 Files and hashes: 1: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: nZ1CR/rbID4ESxk42tIk0CS9T1eppeEb7s7cp74yVZ4=) 2: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl (hash: 4DTJUzUGHU4mUY1KKCik8q1oaAbR0BmSZprPSvhBFTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:7c:e4:52:86:b8:1e:83:44:73:c8:2a:d9:3a:46:16:b8:84:24:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Validity Not Before: Dec 17 03:35:57 2025 GMT Not After : Dec 20 15:14:57 2025 GMT Subject: CN=24278C8374AE28179836D8EA57A7598B4E962C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e4:cc:d0:5b:fa:f2:04:21:07:33:94:08:e5: 59:79:ba:be:de:94:e6:35:b5:2b:9a:02:0b:45:27: b6:88:c4:78:e3:d1:10:6a:4e:e0:d1:42:e0:2a:24: 1b:30:fc:37:28:95:42:7e:f3:4c:4c:ae:27:1b:8f: 50:cc:77:30:5f:2e:11:f6:1b:57:22:bd:13:64:98: d5:3d:e1:36:97:f2:39:0a:fa:d2:ff:6c:7c:f0:cd: 56:62:45:41:db:39:64:5b:80:85:5e:d7:76:91:e5: 98:39:ed:da:54:d8:59:92:bc:b0:4f:c4:36:b2:f9: bf:1d:47:87:8a:af:63:fd:10:2a:34:e0:c6:d2:48: 1d:60:e7:e9:f6:7b:83:e8:cd:0c:48:c7:3c:07:99: 92:dd:2a:df:eb:f7:01:19:a0:f4:e4:05:da:0a:92: c7:2d:a9:0c:d0:ee:f8:d7:e5:da:24:08:ec:1c:8e: 14:08:61:95:0f:e1:bf:e7:fc:79:3d:97:1a:27:75: 24:05:97:fd:cc:d1:b6:9e:51:6d:f7:e5:b2:46:21: cd:5e:44:c0:34:90:be:6c:40:35:92:dc:80:69:a8: c0:34:3d:9a:8f:e8:7a:83:8d:65:ff:b6:61:89:23: d3:52:d1:87:05:fa:df:33:e9:c1:e4:03:c7:82:15: 60:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:27:8C:83:74:AE:28:17:98:36:D8:EA:57:A7:59:8B:4E:96:2C:0F X509v3 Authority Key Identifier: keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:6f:98:34:35:86:3d:3e:e8:a9:64:7c:78:38:03:df:63:3c: 68:ff:09:8b:f3:ce:b7:e2:ee:c1:ab:e9:ee:b0:35:a5:48:38: af:c9:38:5d:74:ec:75:c7:5b:b5:26:04:81:25:90:99:15:bd: 4e:1e:5c:5e:74:1f:49:c6:c2:6a:3d:18:11:ef:e4:2a:e6:4b: 98:1f:bc:03:ee:8a:b4:0b:23:ae:92:f6:7b:4d:e9:bd:f1:1e: 4e:4f:f5:e2:f8:c6:33:23:2f:be:7f:1f:b7:4c:9c:67:13:ca: 73:fc:3b:c8:2c:b0:c6:13:19:a9:c8:60:68:2d:95:d2:64:94: e6:b1:7d:c2:e5:7b:72:99:2a:58:f4:f0:52:7f:6e:d9:1c:dc: 74:a5:5e:26:77:d3:d7:1b:e4:f2:82:8c:1f:df:37:ac:07:6a: b3:f7:ff:57:fb:22:83:6e:1e:9b:f3:40:0f:53:64:5e:79:18: 7f:27:10:d2:15:ed:2a:82:2f:38:12:6b:2e:72:60:69:06:ed: f2:6b:83:46:4a:07:e0:83:12:7b:89:cb:e9:12:66:0a:35:af: 99:2f:e0:dc:fe:f4:79:95:23:ff:21:cb:95:4b:00:fa:55:7d: 7a:f4:87:ed:07:eb:62:86:f4:fd:9c:e5:07:79:cc:1e:4d:85: fd:91:27:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXzkUoa4HoNEc8gq2TpGFriEJA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0Iy QkE4RTJFNjAeFw0yNTEyMTcwMzM1NTdaFw0yNTEyMjAxNTE0NTdaMDMxMTAvBgNV BAMTKDI0Mjc4QzgzNzRBRTI4MTc5ODM2RDhFQTU3QTc1OThCNEU5NjJDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5MzQW/ryBCEHM5QI5Vl5ur7e lOY1tSuaAgtFJ7aIxHjj0RBqTuDRQuAqJBsw/DcolUJ+80xMricbj1DMdzBfLhH2 G1civRNkmNU94TaX8jkK+tL/bHzwzVZiRUHbOWRbgIVe13aR5Zg57dpU2FmSvLBP xDay+b8dR4eKr2P9ECo04MbSSB1g5+n2e4PozQxIxzwHmZLdKt/r9wEZoPTkBdoK ksctqQzQ7vjX5dokCOwcjhQIYZUP4b/n/Hk9lxondSQFl/3M0baeUW335bJGIc1e RMA0kL5sQDWS3IBpqMA0PZqP6HqDjWX/tmGJI9NS0YcF+t8z6cHkA8eCFWBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCeMg3SuKBeYNtjqV6dZi06WLA8wHwYDVR0j BBgwFoAUEyaopCE3iRpws8C7MBzWyyuo4uYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjExMjZkMy0xM2JlLTQ1MDgtYjk3ZC0xM2ZlNjVhNWI0ZDYvMC8xMzI2QThBNDIx Mzc4OTFBNzBCM0MwQkIzMDFDRDZDQjJCQThFMkU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0IyQkE4 RTJFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2 Q0IyQkE4RTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9vmDQ1hj0+6KlkfHg4A99jPGj/CYvzzrfi 7sGr6e6wNaVIOK/JOF107HXHW7UmBIElkJkVvU4eXF50H0nGwmo9GBHv5CrmS5gf vAPuirQLI66S9ntN6b3xHk5P9eL4xjMjL75/H7dMnGcTynP8O8gssMYTGanIYGgt ldJklOaxfcLle3KZKlj08FJ/btkc3HSlXiZ309cb5PKCjB/fN6wHarP3/1f7IoNu HpvzQA9TZF55GH8nENIV7SqCLzgSay5yYGkG7fJrg0ZKB+CDEnuJy+kSZgo1r5kv 4Nz+9HmVI/8hy5VLAPpVfXr0h+0H62KG9P2c5Qd5zB5Nhf2RJ/8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:35 2025 by rpki-client