This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: XFhsdlUALRBp8Z5jWFH2iYxlyXttY62lpiwrINRgEFk= Subject key identifier: A5:ED:71:8A:2A:B2:12:52:E5:4D:C9:8E:57:FC:F0:BB:A5:21:A7:37 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 1A1AD11271F88662E22B358C6026ECF16AC0AA57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: E0 Signing time: Thu 18 Dec 2025 22:13:08 +0000 Manifest this update: Thu 18 Dec 2025 22:08:08 +0000 Manifest next update: Mon 22 Dec 2025 00:53:08 +0000 Files and hashes: 1: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: ODR1nhecNf1PNEUsr6U6g2HSVbKZCJoeERdVZUfBxjU=) 2: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: nYNGAgZ/KHJJA/3d3uL0ysMNm9weFEF7cJoGGKweKrc=) 3: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: l3iR50nUIesRrXuxRedIB5m4gPlIpbGPPv3QPItBtu8=) 4: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: TdbAEo+DNFVs6rvTpfC3A0glhnOTASTHzmtVNHtm/Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1a:d1:12:71:f8:86:62:e2:2b:35:8c:60:26:ec:f1:6a:c0:aa:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Dec 18 22:08:08 2025 GMT Not After : Dec 22 00:53:08 2025 GMT Subject: CN=A5ED718A2AB21252E54DC98E57FCF0BBA521A737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:8f:cd:2d:0a:ad:86:62:fe:55:f2:bf:5d: a3:c6:b2:b6:24:b9:d7:3f:92:85:59:63:0a:f8:1a: a0:b7:0e:a9:d0:89:45:52:1a:5d:b0:93:6b:e5:ca: 66:75:cf:89:e5:b6:ec:31:36:f9:00:18:09:b5:ce: 0f:19:0c:60:45:83:3e:65:65:46:5b:a8:7d:69:87: 42:03:70:b9:d3:83:62:09:bc:b5:02:a1:25:ab:a4: d4:e2:ea:00:41:93:a9:17:af:59:55:95:89:46:bd: bc:15:a3:8a:f7:38:83:d6:8f:1b:7a:70:1b:f5:b2: 2c:79:08:f0:28:1a:7b:b0:d3:13:f8:eb:40:11:b0: 03:0c:87:eb:98:0c:df:d8:15:84:ba:56:ac:2a:7b: 99:f0:0d:48:4e:48:9d:cd:13:7d:0b:57:f8:da:55: ac:55:4a:26:c4:55:3f:62:c8:e8:a1:7a:45:99:8f: d6:e1:99:63:0e:cf:b8:9e:75:f4:17:01:5e:0c:04: fc:b5:02:ec:c6:0c:4a:4e:74:92:c1:bb:05:ab:da: 8c:77:f3:19:57:63:de:e6:ad:f9:98:40:7a:0d:79: 87:0b:b8:a5:1a:55:e7:fa:f8:8b:31:2d:4e:15:69: 2e:f1:48:12:68:b3:b5:ae:b2:a9:f6:03:9d:8f:51: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:ED:71:8A:2A:B2:12:52:E5:4D:C9:8E:57:FC:F0:BB:A5:21:A7:37 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:97:23:1a:d6:f8:af:32:14:f5:67:2e:bc:05:a7:bb:5c:88: e2:96:8e:91:8c:ca:36:40:a1:bf:7a:6a:34:3b:b5:4f:4d:51: a9:0f:57:d4:ae:0a:11:49:75:36:5f:bb:c9:14:c8:a9:17:f2: 06:7b:8c:00:9e:56:95:a7:b8:a8:4c:19:02:c5:12:a1:58:84: 2c:83:c8:d1:f0:18:cc:3e:62:06:4d:a3:99:ba:1f:be:ab:e4: 7a:cb:c4:99:59:7a:40:4d:9c:a0:ea:66:18:a9:b7:09:1f:ae: a8:6b:eb:67:ed:b6:32:d1:f9:67:4f:75:97:f3:0f:5b:de:c2: 4e:17:38:27:5d:a5:54:d6:71:6d:6d:69:0b:9e:da:91:1a:da: 72:b4:3d:bd:71:3d:9e:73:3a:bd:bd:17:a0:c0:e1:3c:83:d3: 11:7e:a9:d8:78:13:a3:dd:1d:16:11:e7:8a:cd:33:26:be:46: 84:22:f1:4d:4a:e0:7d:9a:d5:6c:86:ea:1e:72:b4:15:36:8c: a6:dc:4c:a2:c2:93:ce:99:ab:88:9a:3b:a2:b1:5c:90:73:fe: b0:d9:41:b4:38:fd:8f:29:49:5d:37:e8:d6:ae:48:2f:64:67: d0:91:a0:cc:f2:e6:4b:2e:a4:7c:ec:06:cd:52:f0:57:cd:ce: 1c:56:af:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhrREnH4hmLiKzWMYCbs8WrAqlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTEyMTgyMjA4MDhaFw0yNTEyMjIwMDUzMDhaMDMxMTAvBgNV BAMTKEE1RUQ3MThBMkFCMjEyNTJFNTREQzk4RTU3RkNGMEJCQTUyMUE3MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSVI/NLQqthmL+VfK/XaPGsrYk udc/koVZYwr4GqC3DqnQiUVSGl2wk2vlymZ1z4nltuwxNvkAGAm1zg8ZDGBFgz5l ZUZbqH1ph0IDcLnTg2IJvLUCoSWrpNTi6gBBk6kXr1lVlYlGvbwVo4r3OIPWjxt6 cBv1six5CPAoGnuw0xP460ARsAMMh+uYDN/YFYS6Vqwqe5nwDUhOSJ3NE30LV/ja VaxVSibEVT9iyOihekWZj9bhmWMOz7iedfQXAV4MBPy1AuzGDEpOdJLBuwWr2ox3 8xlXY97mrfmYQHoNeYcLuKUaVef6+IsxLU4VaS7xSBJos7Wusqn2A52PUYl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpe1xiiqyElLlTcmOV/zwu6UhpzcwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2XIxrW+K8yFPVnLrwFp7tciOKWjpGMyjZA ob96ajQ7tU9NUakPV9SuChFJdTZfu8kUyKkX8gZ7jACeVpWnuKhMGQLFEqFYhCyD yNHwGMw+YgZNo5m6H76r5HrLxJlZekBNnKDqZhiptwkfrqhr62fttjLR+WdPdZfz D1vewk4XOCddpVTWcW1taQue2pEa2nK0Pb1xPZ5zOr29F6DA4TyD0xF+qdh4E6Pd HRYR54rNMya+RoQi8U1K4H2a1WyG6h5ytBU2jKbcTKLCk86Zq4iaO6KxXJBz/rDZ QbQ4/Y8pSV036NauSC9kZ9CRoMzy5ksupHzsBs1S8FfNzhxWr7Q= -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:20 2025 by rpki-client