This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json) Hash identifier: 5PyJYO+i45AunQDB4Se/v4+4E3aGwmJDsXgydv5oAiI= Subject key identifier: C7:D4:A3:BA:86:89:EA:8C:83:E8:5F:20:63:06:A9:D5:95:0E:EA:AC Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Certificate serial: 399FF114D0BA1591802ABF32F35983A1C67331C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft Manifest number: 01D8 Signing time: Mon 29 Dec 2025 11:30:48 +0000 Manifest this update: Mon 29 Dec 2025 11:25:48 +0000 Manifest next update: Thu 01 Jan 2026 19:08:48 +0000 Files and hashes: 1: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=) 2: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: 9oxgVHbHvAy1N8JtIyMrsgGSogvO2d+YopIUJptYKOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 19:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9f:f1:14:d0:ba:15:91:80:2a:bf:32:f3:59:83:a1:c6:73:31:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Validity Not Before: Dec 29 11:25:48 2025 GMT Not After : Jan 1 19:08:48 2026 GMT Subject: CN=C7D4A3BA8689EA8C83E85F206306A9D5950EEAAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:ec:75:48:86:ea:7b:e3:29:dd:61:ff:97: 79:88:83:82:7c:80:ab:18:4d:8d:37:97:5b:89:d2: 10:2d:04:b7:7a:f5:f0:4d:1c:da:a7:bb:0f:aa:bd: 0d:a9:d9:01:50:a4:35:9a:8b:3a:6e:8b:51:ec:21: 24:eb:25:a4:51:d4:77:de:52:69:19:8e:bc:0f:90: d0:e4:3d:77:43:21:29:a5:d2:fa:5b:26:19:03:db: 4c:cd:91:d6:48:0c:6b:68:9f:9f:b2:51:cf:43:75: 2a:e3:ed:19:30:27:47:e0:d3:a6:d5:7d:2a:de:3c: c8:5f:d9:ee:e1:00:25:0b:52:1c:f7:35:10:49:e0: 65:4b:64:51:98:bb:ac:72:52:91:4c:d8:19:b5:fb: ef:0d:02:64:da:31:25:5a:6d:e6:c4:a0:57:3b:88: f1:fd:dd:58:61:7e:31:9a:02:a9:76:df:25:87:49: 0c:be:10:7f:20:5e:86:98:5b:38:f8:57:e1:a6:38: 12:ff:29:97:df:1a:29:0e:83:e2:d6:a5:ff:2a:ab: a7:e0:57:50:9c:f1:4c:d0:3d:50:a2:b5:55:f0:d5: 70:a8:43:6f:ac:ad:eb:33:d6:b7:0e:9b:a2:c5:4b: ae:1e:fd:7d:67:0d:d3:e4:b4:42:69:99:16:a2:f2: 7d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:A3:BA:86:89:EA:8C:83:E8:5F:20:63:06:A9:D5:95:0E:EA:AC X509v3 Authority Key Identifier: keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:cc:49:80:b8:81:a4:da:97:8f:cb:c8:1c:26:71:a9:72:2e: 82:0d:5c:4a:75:0b:11:5c:15:db:86:c3:83:bb:a5:04:99:35: 87:f8:2c:57:37:a7:40:c6:57:38:6a:87:b3:98:c6:d3:bc:de: 75:19:62:41:12:02:8f:ab:2f:43:35:00:f7:57:23:f2:0e:30: 3a:29:e0:5e:50:c7:6b:d1:26:9e:f6:9f:fb:3c:42:72:64:a0: 4c:14:b7:c9:6d:11:82:28:b3:c9:db:1d:41:3c:45:7c:f8:27: e8:21:02:d9:42:05:a9:79:25:7e:05:85:cf:a4:d9:36:4a:39: 0f:4b:cc:f8:9f:37:f8:ed:3e:b2:d0:70:50:5f:e1:52:fe:63: 2a:95:8a:8f:37:7d:9a:ee:d8:b8:36:b7:d8:d2:59:08:9b:fe: cc:cf:82:b6:93:64:9a:3f:c5:0c:7d:82:ca:ab:bf:c0:e6:0c: 47:7f:00:cd:d6:42:67:4e:63:b4:56:b5:14:0f:9a:d0:90:66: 62:7e:f8:50:37:46:c0:03:9f:63:61:4b:5f:25:76:a6:42:43: d0:89:df:db:63:11:43:2d:95:b6:28:79:f6:96:86:91:9d:9d: 63:88:b3:3a:15:92:8f:20:4b:fb:0c:63:97:41:6a:0a:0e:39: f8:9e:3e:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZ/xFNC6FZGAKr8y81mDocZzMcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4 QzFDMjI4RjAeFw0yNTEyMjkxMTI1NDhaFw0yNjAxMDExOTA4NDhaMDMxMTAvBgNV BAMTKEM3RDRBM0JBODY4OUVBOEM4M0U4NUYyMDYzMDZBOUQ1OTUwRUVBQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQ+x1SIbqe+Mp3WH/l3mIg4J8 gKsYTY03l1uJ0hAtBLd69fBNHNqnuw+qvQ2p2QFQpDWaizpui1HsISTrJaRR1Hfe UmkZjrwPkNDkPXdDISml0vpbJhkD20zNkdZIDGton5+yUc9DdSrj7RkwJ0fg06bV fSrePMhf2e7hACULUhz3NRBJ4GVLZFGYu6xyUpFM2Bm1++8NAmTaMSVabebEoFc7 iPH93VhhfjGaAql23yWHSQy+EH8gXoaYWzj4V+GmOBL/KZffGikOg+LWpf8qq6fg V1Cc8UzQPVCitVXw1XCoQ2+sresz1rcOm6LFS64e/X1nDdPktEJpmRai8n2xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx9SjuoaJ6oyD6F8gYwap1ZUO6qwwHwYDVR0j BBgwFoAUIoJaC+6SZoOsQaBIau9Vr4wcIo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC8yMjgyNUEwQkVF OTI2NjgzQUM0MUEwNDg2QUVGNTVBRjhDMUMyMjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4QzFD MjI4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1 QUY4QzFDMjI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHMSYC4gaTal4/LyBwmcalyLoINXEp1CxFc FduGw4O7pQSZNYf4LFc3p0DGVzhqh7OYxtO83nUZYkESAo+rL0M1APdXI/IOMDop 4F5Qx2vRJp72n/s8QnJkoEwUt8ltEYIos8nbHUE8RXz4J+ghAtlCBal5JX4Fhc+k 2TZKOQ9LzPifN/jtPrLQcFBf4VL+YyqVio83fZru2Lg2t9jSWQib/szPgraTZJo/ xQx9gsqrv8DmDEd/AM3WQmdOY7RWtRQPmtCQZmJ++FA3RsADn2NhS18ldqZCQ9CJ 39tjEUMtlbYoefaWhpGdnWOIszoVko8gS/sMY5dBagoOOfiePn0= -----END CERTIFICATE-----Generated at Tue Dec 30 07:16:31 2025 by rpki-client