This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft File: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft (raw, json) Hash identifier: 22kAL6JTyrkvlLuUehdh+fgV5U5gfh+1A+YscdF8nJ8= Subject key identifier: 3D:40:1F:D1:53:98:E3:BA:71:1B:39:E9:A1:84:3A:18:F3:71:0B:DD Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F Certificate issuer: /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Certificate serial: 4C57E96145364FAA27BC7DC3432A14BBC45FF5B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft Manifest number: 0277 Signing time: Wed 17 Dec 2025 16:01:03 +0000 Manifest this update: Wed 17 Dec 2025 15:56:03 +0000 Manifest next update: Sun 21 Dec 2025 03:03:03 +0000 Files and hashes: 1: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl (hash: WCh1wBL24gtMo6wDnlK/9MFI2Y5z718e7Fvko6jLf9w=) 2: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: 8QADEgAErVDYeQ0m0w7xjODJNew42ezz18E9+und7b8=) 3: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: ikGxWPZOEbgUDak1S8/4CtTFLYGMeDrUhJdgA4v8gic=) 4: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: +s+ZoPDcwc45gGow9YdBPADqPzbPO8zvkcvI3KhfKWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:57:e9:61:45:36:4f:aa:27:bc:7d:c3:43:2a:14:bb:c4:5f:f5:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Validity Not Before: Dec 17 15:56:03 2025 GMT Not After : Dec 21 03:03:03 2025 GMT Subject: CN=3D401FD15398E3BA711B39E9A1843A18F3710BDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4f:71:a8:57:59:8a:7a:e7:12:c1:b6:f5:d8: 4d:99:b8:a3:32:82:33:7c:39:ff:9c:3e:3b:df:0f: 8c:7b:6c:27:11:17:88:86:fe:fc:ab:a1:a9:cc:c5: be:16:e6:55:ca:43:ed:ed:98:e5:7c:5c:af:59:f1: 97:c3:27:ac:c9:20:be:33:ec:61:e2:03:67:86:7f: a6:83:c9:16:d7:47:23:e4:d6:16:93:0e:90:14:ef: 50:3a:5e:41:ec:4a:87:6f:ad:b9:60:ae:a0:c7:c2: 81:c7:13:74:6a:97:c3:a4:9c:37:3c:74:83:e1:e3: 99:10:8d:f1:59:d0:77:fb:72:3d:14:6b:0f:38:1a: 6b:50:40:63:87:4d:d9:1e:31:28:5e:e1:e5:ba:a1: 08:9a:09:82:eb:2c:b8:3d:a6:02:59:80:05:53:e9: 0f:42:e3:9c:c4:9c:5a:d7:73:25:78:06:d0:5d:64: 65:68:8c:b8:44:15:18:50:d9:3d:ab:91:50:28:e6: 8a:90:84:cb:0f:a2:74:f7:b9:f6:79:07:28:77:55: 51:f1:1a:df:26:df:1a:d3:ff:b3:cd:8b:38:60:1a: 39:6b:bc:da:c1:0a:5a:99:f7:77:04:e4:72:47:b1: 7a:a1:82:7d:07:88:d0:bf:56:0e:e2:15:75:93:30: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:40:1F:D1:53:98:E3:BA:71:1B:39:E9:A1:84:3A:18:F3:71:0B:DD X509v3 Authority Key Identifier: keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:dc:9f:cc:ff:86:9c:6f:81:92:7c:7d:68:db:6d:a6:46:41: 77:c1:38:3c:ff:1c:95:c3:ea:86:24:85:97:1b:79:a3:8c:65: 9b:43:66:8a:dc:72:eb:cf:b1:a2:2c:91:53:cb:55:3d:f6:80: 40:1f:2a:df:fd:97:65:12:69:28:09:b1:0a:3b:7d:23:55:af: ee:65:08:95:37:7a:42:e0:8b:d6:7f:71:83:8a:db:2c:7e:fd: ba:e7:f4:28:8a:51:e9:58:e2:1f:1b:4c:b9:b8:7f:68:e4:ce: 2e:ca:6b:3c:bd:3b:ef:18:91:4b:ac:1e:15:75:11:f5:d2:d2: be:6b:2e:51:fc:03:30:77:4f:fb:64:79:69:71:58:1e:37:2a: 24:8b:6d:63:6e:1c:36:45:25:42:94:ba:4a:e9:2b:41:b8:2f: d4:08:88:31:87:f9:46:82:b9:90:6d:38:0c:1c:d7:a5:4a:38: b7:18:63:cd:d0:c7:26:d6:74:2d:27:07:7f:4b:90:78:8f:84: fd:3e:93:b1:b8:07:e6:c8:ca:c4:ee:97:97:34:e2:95:4a:56: 8d:9c:3c:21:ba:c0:6f:5a:ea:6d:df:77:90:4d:22:57:0b:56: ad:c5:22:0f:b0:38:a8:77:59:aa:f3:87:c8:9e:a1:f9:ab:01: 5f:ec:60:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFfpYUU2T6onvH3DQyoUu8Rf9bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUw MjNGQjcwRjAeFw0yNTEyMTcxNTU2MDNaFw0yNTEyMjEwMzAzMDNaMDMxMTAvBgNV BAMTKDNENDAxRkQxNTM5OEUzQkE3MTFCMzlFOUExODQzQTE4RjM3MTBCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrT3GoV1mKeucSwbb12E2ZuKMy gjN8Of+cPjvfD4x7bCcRF4iG/vyroanMxb4W5lXKQ+3tmOV8XK9Z8ZfDJ6zJIL4z 7GHiA2eGf6aDyRbXRyPk1haTDpAU71A6XkHsSodvrblgrqDHwoHHE3Rql8OknDc8 dIPh45kQjfFZ0Hf7cj0Uaw84GmtQQGOHTdkeMShe4eW6oQiaCYLrLLg9pgJZgAVT 6Q9C45zEnFrXcyV4BtBdZGVojLhEFRhQ2T2rkVAo5oqQhMsPonT3ufZ5Byh3VVHx Gt8m3xrT/7PNizhgGjlrvNrBClqZ93cE5HJHsXqhgn0HiNC/Vg7iFXWTMNRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPUAf0VOY47pxGznpoYQ6GPNxC90wHwYDVR0j BBgwFoAUJrBDMfPbpwtpTy//NxyF7gI/tw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YThhOWE4MS0wYTUyLTRhNTAtYjdmNi1hMzZmODZmM2QyYzcvMC8yNkIwNDMzMUYz REJBNzBCNjk0RjJGRkYzNzFDODVFRTAyM0ZCNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUwMjNG QjcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1 RUUwMjNGQjcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3cn8z/hpxvgZJ8fWjbbaZGQXfBODz/HJXD 6oYkhZcbeaOMZZtDZorccuvPsaIskVPLVT32gEAfKt/9l2USaSgJsQo7fSNVr+5l CJU3ekLgi9Z/cYOK2yx+/brn9CiKUelY4h8bTLm4f2jkzi7Kazy9O+8YkUusHhV1 EfXS0r5rLlH8AzB3T/tkeWlxWB43KiSLbWNuHDZFJUKUukrpK0G4L9QIiDGH+UaC uZBtOAwc16VKOLcYY83QxybWdC0nB39LkHiPhP0+k7G4B+bIysTul5c04pVKVo2c PCG6wG9a6m3fd5BNIlcLVq3FIg+wOKh3Warzh8ieofmrAV/sYHE= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:34 2025 by rpki-client