This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft File: A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft (raw, json) Hash identifier: GXeZ9wf7Mnex9TxsyQ/VOXabDHyndEtS6KFil67y7ps= Subject key identifier: 6B:53:7F:F6:6D:3C:86:44:03:04:48:55:02:97:A9:F1:6B:62:F9:96 Authority key identifier: A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 Certificate issuer: /CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Certificate serial: 3DB4BD314EA54650CE76171C31D92CB8B1C6299C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft Manifest number: 87 Signing time: Wed 24 Dec 2025 12:23:44 +0000 Manifest this update: Wed 24 Dec 2025 12:18:44 +0000 Manifest next update: Sat 27 Dec 2025 13:11:44 +0000 Files and hashes: 1: 3136302e32352e3234392e302f32342d3234203d3e20313336303939.roa (hash: fAL9MfqpRcilmiK6cDbN2CreeawZppTYa6tvP1zgN7Y=) 2: A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl (hash: Y1lorLXFpAWBtmmA1OeOHXs1jSLQ8m3qpuPTba1G2VM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b4:bd:31:4e:a5:46:50:ce:76:17:1c:31:d9:2c:b8:b1:c6:29:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A21BA70DF8EE470FE7A60385B6653842570ED3A4 Validity Not Before: Dec 24 12:18:44 2025 GMT Not After : Dec 27 13:11:44 2025 GMT Subject: CN=6B537FF66D3C8644030448550297A9F16B62F996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:60:2e:f4:2f:84:7f:84:cf:6c:56:9d:69: 23:32:22:05:ae:56:21:5e:11:e4:13:6f:34:a0:f0: e3:06:57:7f:09:52:ea:a5:e1:c4:a9:6e:ab:76:82: 9d:ce:25:25:5e:04:74:94:71:75:3e:bb:b3:5a:86: d6:b1:79:a7:e4:11:ec:bc:78:2d:cb:b5:70:c7:a6: a4:54:77:83:f4:09:ac:50:b3:4b:84:02:f2:df:39: be:31:13:73:ca:57:3e:46:6d:18:f2:81:cd:6d:d5: bc:07:e4:f8:a3:6f:ed:9b:d0:e9:be:d1:c2:18:67: 48:16:7c:f2:f7:65:04:20:e4:db:46:57:a0:ba:18: 9e:6d:ba:f7:73:95:e1:92:7e:a7:fa:ff:79:8d:b4: 6e:e5:71:53:d4:17:86:d8:26:87:f8:94:32:00:e2: 40:ec:37:05:9d:77:57:9f:37:8e:af:20:df:ca:bc: cc:02:85:ea:28:72:d3:f6:cd:2c:94:32:29:3c:fc: dd:8a:b6:53:46:45:68:58:a9:42:e6:23:e0:dc:25: cd:95:eb:4d:26:92:d2:a1:88:d9:f9:6a:09:d0:15: 49:ad:02:54:86:a9:21:d3:98:ba:a5:31:f9:6b:5e: fe:f9:43:a8:9b:6b:f7:d8:c1:19:ae:33:d2:85:c3: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:53:7F:F6:6D:3C:86:44:03:04:48:55:02:97:A9:F1:6B:62:F9:96 X509v3 Authority Key Identifier: keyid:A2:1B:A7:0D:F8:EE:47:0F:E7:A6:03:85:B6:65:38:42:57:0E:D3:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/1/A21BA70DF8EE470FE7A60385B6653842570ED3A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:66:25:94:db:a3:ce:49:61:2f:42:87:16:68:e5:63:f8:fb: 59:75:7b:e4:46:9b:68:4c:34:63:d0:44:4f:50:f6:0e:fb:7e: e1:bd:fa:33:48:f2:44:2e:3b:15:13:99:7a:25:b5:3d:fe:d2: 8f:60:05:ee:66:79:9a:92:57:f2:0d:0e:64:46:0b:18:83:c7: 89:ac:ce:d1:9c:35:48:cd:e5:72:41:29:90:00:b3:a7:50:23: a4:07:76:3a:04:72:0b:86:81:1b:4d:63:fd:35:80:11:68:5d: e5:2f:7d:5d:b4:01:6b:35:b7:14:56:2e:38:1b:be:88:c2:a7: 24:81:14:bc:cc:83:57:a9:49:82:39:55:d2:99:5a:fb:47:d3: cc:81:84:52:e3:bd:80:9d:47:53:1c:46:01:7f:53:16:69:9c: 9d:39:f7:6d:ab:c5:3d:8e:7e:53:ce:b8:49:42:79:a4:36:49: d3:0e:74:ae:49:a4:77:37:51:30:e5:54:8d:94:54:7c:0e:db: d8:09:74:62:47:66:6c:49:0a:32:30:84:ac:14:15:a0:40:81: 39:a7:c6:bd:07:94:8b:03:9c:f8:df:b2:20:48:56:ab:b7:4e: 74:c2:d8:b8:5d:a7:90:d2:05:a4:be:9a:68:ec:a6:9c:91:2d: 78:39:0d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbS9MU6lRlDOdhccMdksuLHGKZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1 NzBFRDNBNDAeFw0yNTEyMjQxMjE4NDRaFw0yNTEyMjcxMzExNDRaMDMxMTAvBgNV BAMTKDZCNTM3RkY2NkQzQzg2NDQwMzA0NDg1NTAyOTdBOUYxNkI2MkY5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7s2Au9C+Ef4TPbFadaSMyIgWu ViFeEeQTbzSg8OMGV38JUuql4cSpbqt2gp3OJSVeBHSUcXU+u7NahtaxeafkEey8 eC3LtXDHpqRUd4P0CaxQs0uEAvLfOb4xE3PKVz5GbRjygc1t1bwH5Pijb+2b0Om+ 0cIYZ0gWfPL3ZQQg5NtGV6C6GJ5tuvdzleGSfqf6/3mNtG7lcVPUF4bYJof4lDIA 4kDsNwWdd1efN46vIN/KvMwCheooctP2zSyUMik8/N2KtlNGRWhYqULmI+DcJc2V 600mktKhiNn5agnQFUmtAlSGqSHTmLqlMflrXv75Q6iba/fYwRmuM9KFw1EPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa1N/9m08hkQDBEhVApep8Wti+ZYwHwYDVR0j BBgwFoAUohunDfjuRw/npgOFtmU4QlcO06QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMS9BMjFCQTcwREY4 RUU0NzBGRTdBNjAzODVCNjY1Mzg0MjU3MEVEM0E0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4NDI1NzBF RDNBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzEvQTIxQkE3MERGOEVFNDcwRkU3QTYwMzg1QjY2NTM4 NDI1NzBFRDNBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExmJZTbo85JYS9ChxZo5WP4+1l1e+RGm2hM NGPQRE9Q9g77fuG9+jNI8kQuOxUTmXoltT3+0o9gBe5meZqSV/INDmRGCxiDx4ms ztGcNUjN5XJBKZAAs6dQI6QHdjoEcguGgRtNY/01gBFoXeUvfV20AWs1txRWLjgb vojCpySBFLzMg1epSYI5VdKZWvtH08yBhFLjvYCdR1McRgF/UxZpnJ05922rxT2O flPOuElCeaQ2SdMOdK5JpHc3UTDlVI2UVHwO29gJdGJHZmxJCjIwhKwUFaBAgTmn xr0HlIsDnPjfsiBIVqu3TnTC2Lhdp5DSBaS+mmjsppyRLXg5DVE= -----END CERTIFICATE-----Generated at Wed Dec 24 20:33:26 2025 by rpki-client