This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: krC/UBDJfioX/NiNXEyP4JO+K/1VKB6PdBIhQff2PZc= Subject key identifier: C1:36:17:96:3A:FA:B9:69:D9:A1:6D:AD:B0:3A:23:24:0A:D0:AD:C6 Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 60C29433C62EAEA1430C12551A139EEF7D6D1671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 0190 Signing time: Fri 19 Dec 2025 19:23:29 +0000 Manifest this update: Fri 19 Dec 2025 19:18:29 +0000 Manifest next update: Tue 23 Dec 2025 03:19:29 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 2: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: 8iAJAScDFPxhPNTuWhIY4ypc21QJjgVwMSfKoWLLpe8=) 3: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) 4: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c2:94:33:c6:2e:ae:a1:43:0c:12:55:1a:13:9e:ef:7d:6d:16:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Dec 19 19:18:29 2025 GMT Not After : Dec 23 03:19:29 2025 GMT Subject: CN=C13617963AFAB969D9A16DADB03A23240AD0ADC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0e:f5:2a:f9:43:66:c6:23:fd:e5:6c:c0:85: 5f:be:23:7a:69:b9:26:3b:98:5a:a2:a1:0b:4e:f2: b6:fd:cc:42:2a:e7:08:46:5e:a2:8d:c7:3a:4d:e2: b4:dd:e5:4d:6f:ce:53:c2:00:4b:ee:4b:63:d5:1c: 3d:55:6c:e3:46:4c:85:ef:34:85:e2:81:53:ce:2c: 93:9e:f9:c9:70:65:97:f9:b3:50:b9:fd:c3:26:06: 14:da:78:0d:40:7f:0e:a5:0a:46:9c:84:3d:49:42: 5c:5c:aa:99:be:21:80:0a:f2:5c:d6:00:87:ae:3b: 5c:4b:78:1c:c6:75:7d:c4:1b:5a:94:ca:5b:ce:40: ec:db:2f:57:d0:97:6c:41:c7:61:5b:b3:a8:2a:a0: 1f:3c:ac:0a:be:83:09:44:00:bf:5c:7d:cd:28:42: 76:f5:99:fd:71:2e:b2:8e:a5:8e:95:dd:d4:ba:2b: d8:98:d2:95:8c:97:26:48:3f:c6:af:5f:56:ba:0e: c7:02:0f:49:2b:34:dd:71:8f:db:61:b9:1f:fe:a8: 22:e3:f4:54:f3:b9:db:59:ea:aa:3d:19:fa:b1:c4: 4d:ba:0e:b4:a1:be:ff:60:b3:77:c8:57:87:23:f4: f1:4f:13:94:63:5f:30:14:ee:3c:b0:38:56:32:2f: f8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:36:17:96:3A:FA:B9:69:D9:A1:6D:AD:B0:3A:23:24:0A:D0:AD:C6 X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8a:3c:35:7b:1e:bd:12:8c:a5:f2:ad:b3:99:b1:6b:f6:33: ff:ca:0d:53:5a:54:64:24:e8:57:a2:64:16:84:40:6d:09:fe: 26:6e:b2:f0:ba:9f:fd:c8:27:56:8b:1a:93:ee:7b:87:33:8f: b4:4a:e9:6f:26:78:fe:42:58:33:f3:9b:c3:a0:a1:04:0e:70: 03:1c:ca:9e:dc:5a:22:57:c8:2d:ae:09:56:76:0a:2a:c9:f9: 88:1f:51:9a:27:ef:38:fd:31:ea:7e:fd:a1:80:ca:5b:51:3b: 10:60:8b:f4:78:b9:25:3a:8a:ec:d1:91:27:f3:78:e0:71:aa: 8f:e4:c9:4b:97:5f:1d:41:db:63:a0:73:12:97:a7:83:b4:dc: da:6b:c1:5d:07:d5:75:f8:36:5e:5b:e8:c5:c1:77:3f:ab:ed: f0:9d:64:51:f7:16:0d:54:a8:9d:09:06:b5:d1:77:25:8b:d2: 4f:41:7d:b6:3b:12:7c:d7:97:44:83:c3:66:2d:10:55:ae:3a: 30:a8:11:df:b4:b3:b4:cd:be:f8:4c:e0:b3:20:dd:f2:ce:25: b4:00:54:df:30:3a:fc:33:2e:50:fa:f0:ba:2a:4f:45:c7:79: f9:ff:16:73:ae:e4:b9:b5:ac:b3:75:1a:61:18:28:38:37:ac: 9c:d2:5c:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYMKUM8YurqFDDBJVGhOe731tFnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTEyMTkxOTE4MjlaFw0yNTEyMjMwMzE5MjlaMDMxMTAvBgNV BAMTKEMxMzYxNzk2M0FGQUI5NjlEOUExNkRBREIwM0EyMzI0MEFEMEFEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYDvUq+UNmxiP95WzAhV++I3pp uSY7mFqioQtO8rb9zEIq5whGXqKNxzpN4rTd5U1vzlPCAEvuS2PVHD1VbONGTIXv NIXigVPOLJOe+clwZZf5s1C5/cMmBhTaeA1Afw6lCkachD1JQlxcqpm+IYAK8lzW AIeuO1xLeBzGdX3EG1qUylvOQOzbL1fQl2xBx2Fbs6gqoB88rAq+gwlEAL9cfc0o Qnb1mf1xLrKOpY6V3dS6K9iY0pWMlyZIP8avX1a6DscCD0krNN1xj9thuR/+qCLj 9FTzudtZ6qo9GfqxxE26DrShvv9gs3fIV4cj9PFPE5RjXzAU7jywOFYyL/jRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTYXljr6uWnZoW2tsDojJArQrcYwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2KPDV7Hr0SjKXyrbOZsWv2M//KDVNaVGQk 6FeiZBaEQG0J/iZusvC6n/3IJ1aLGpPue4czj7RK6W8meP5CWDPzm8OgoQQOcAMc yp7cWiJXyC2uCVZ2CirJ+YgfUZon7zj9Mep+/aGAyltROxBgi/R4uSU6iuzRkSfz eOBxqo/kyUuXXx1B22OgcxKXp4O03NprwV0H1XX4Nl5b6MXBdz+r7fCdZFH3Fg1U qJ0JBrXRdyWL0k9BfbY7EnzXl0SDw2YtEFWuOjCoEd+0s7TNvvhM4LMg3fLOJbQA VN8wOvwzLlD68LoqT0XHefn/FnOu5Lm1rLN1GmEYKDg3rJzSXN8= -----END CERTIFICATE-----Generated at Sun Dec 21 00:13:50 2025 by rpki-client