This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json) Hash identifier: yMLzPNQO9ooKc2IOB5JPiLjW4XSgh0cBvPR9bhCKMVg= Subject key identifier: 2A:D9:1E:B6:58:38:EA:10:FD:B7:74:BF:EF:90:85:B6:51:91:8A:A3 Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 4AB3660F4D04A902EE15B7E4C18E290CA867F3BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft Manifest number: 021F Signing time: Thu 18 Dec 2025 20:22:34 +0000 Manifest this update: Thu 18 Dec 2025 20:17:34 +0000 Manifest next update: Mon 22 Dec 2025 01:08:34 +0000 Files and hashes: 1: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=) 2: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=) 3: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: P7IC1rijujxnKvrkxa0MwIuL+9BWKvD1y2XNqQuaqPw=) 4: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b3:66:0f:4d:04:a9:02:ee:15:b7:e4:c1:8e:29:0c:a8:67:f3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: Dec 18 20:17:34 2025 GMT Not After : Dec 22 01:08:34 2025 GMT Subject: CN=2AD91EB65838EA10FDB774BFEF9085B651918AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:c6:88:dc:29:46:41:64:df:79:60:c5:1a: c5:21:06:6a:3e:d0:7c:5e:cc:a8:b3:d7:fa:2a:0a: 11:c5:fa:cd:44:05:7a:09:54:49:b2:e8:10:c2:c3: bf:18:21:60:28:b6:12:b2:d5:6d:13:11:2a:25:18: 85:da:72:f1:65:ba:50:13:d4:10:4f:6f:eb:67:86: 29:07:3d:cf:05:c0:d5:80:6a:d6:45:a4:fc:22:43: f7:38:27:67:de:cc:53:9a:15:9d:43:42:67:ab:ce: 31:31:05:b4:4d:b0:0c:8e:56:ff:9f:47:cf:6f:fb: 13:44:21:26:b4:ea:17:b4:24:fd:6c:5c:f7:4f:e7: 19:61:c8:8f:99:dd:56:09:38:da:c7:4e:d8:53:65: 8a:8c:9c:4f:b3:73:df:8a:c9:8e:ca:07:14:74:c7: 75:fc:b2:0e:09:53:bd:f0:a0:22:fd:87:04:85:83: 07:8b:e5:71:19:54:f5:b9:97:cd:a6:12:e8:ed:8b: 2e:a7:50:bc:48:10:fd:41:8e:8e:1f:43:e3:11:f2: ee:6f:e3:96:17:ba:ca:f1:0b:23:d0:ef:03:cb:b0: 26:81:8d:e4:e1:9b:af:d5:57:07:7a:d3:a0:46:e5: fd:48:f8:f4:c0:3f:33:2c:e0:bc:a4:6a:d7:bf:93: 82:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D9:1E:B6:58:38:EA:10:FD:B7:74:BF:EF:90:85:B6:51:91:8A:A3 X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:55:a1:37:52:2a:27:4c:2c:41:8a:2c:86:e7:af:b5:df:f1: ad:5b:c2:ee:51:49:67:44:b6:4d:50:47:55:99:89:ba:85:86: ce:d6:ff:14:3f:03:08:6a:27:53:60:ea:42:97:32:89:1d:c2: bb:56:54:44:a8:c1:50:4c:b4:1e:1f:e2:42:69:34:b7:22:91: 8b:de:74:05:60:d9:91:48:d2:46:0c:22:35:74:ed:53:f4:f0: 89:d8:4f:a8:d3:b1:97:3a:04:4c:e4:d3:bd:1c:10:79:99:52: 03:72:b8:9c:a7:21:40:7d:5b:ca:c2:ae:3d:eb:f9:50:60:47: 2d:a6:fe:b3:ec:2e:19:78:69:19:2f:0d:e7:2d:84:07:fe:79: e5:df:5a:c6:a8:a2:86:c9:01:06:10:8c:18:7f:08:07:ee:be: 0d:e5:6b:26:bd:db:ef:76:a5:5d:dc:53:99:74:62:8f:07:40: 7f:b0:c5:2b:79:52:7e:f2:dd:5b:9a:53:92:0d:97:3d:66:42: 81:ea:b9:64:36:02:bb:52:c1:42:01:a4:20:e3:b0:a0:f1:54: 47:70:bd:3e:48:24:fd:f6:5e:18:d3:34:99:95:55:94:96:3c: 7c:d9:3b:4d:ad:2d:c3:fc:dd:f6:fe:25:86:eb:b2:4c:04:06: f3:b5:90:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrNmD00EqQLuFbfkwY4pDKhn87swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNTEyMTgyMDE3MzRaFw0yNTEyMjIwMTA4MzRaMDMxMTAvBgNV BAMTKDJBRDkxRUI2NTgzOEVBMTBGREI3NzRCRkVGOTA4NUI2NTE5MThBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmMaI3ClGQWTfeWDFGsUhBmo+ 0HxezKiz1/oqChHF+s1EBXoJVEmy6BDCw78YIWAothKy1W0TESolGIXacvFlulAT 1BBPb+tnhikHPc8FwNWAatZFpPwiQ/c4J2fezFOaFZ1DQmerzjExBbRNsAyOVv+f R89v+xNEISa06he0JP1sXPdP5xlhyI+Z3VYJONrHTthTZYqMnE+zc9+KyY7KBxR0 x3X8sg4JU73woCL9hwSFgweL5XEZVPW5l82mEujtiy6nULxIEP1Bjo4fQ+MR8u5v 45YXusrxCyPQ7wPLsCaBjeThm6/VVwd606BG5f1I+PTAPzMs4Lykate/k4JfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKtketlg46hD9t3S/75CFtlGRiqMwHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh MTctZjY3OWYwNTA2Y2JjLzAvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcw QUU2MUJEQjk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN5VoTdSKidMLEGKLIbnr7Xf8a1bwu5RSWdE tk1QR1WZibqFhs7W/xQ/AwhqJ1Ng6kKXMokdwrtWVESowVBMtB4f4kJpNLcikYve dAVg2ZFI0kYMIjV07VP08InYT6jTsZc6BEzk070cEHmZUgNyuJynIUB9W8rCrj3r +VBgRy2m/rPsLhl4aRkvDecthAf+eeXfWsaooobJAQYQjBh/CAfuvg3laya92+92 pV3cU5l0Yo8HQH+wxSt5Un7y3VuaU5INlz1mQoHquWQ2ArtSwUIBpCDjsKDxVEdw vT5IJP32XhjTNJmVVZSWPHzZO02tLcP83fb+JYbrskwEBvO1kLQ= -----END CERTIFICATE-----Generated at Sat Dec 20 07:22:53 2025 by rpki-client