This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft File: 926C43E6DACC18978406A2C9C57272491FFF9536.mft (raw, json) Hash identifier: dK1evgra4vBq+1Ue+LtxNcUZnaIx54IMOMUfnaYddoo= Subject key identifier: C4:6F:87:CD:AF:75:22:B6:4D:20:E8:DD:6F:F0:17:6D:45:19:88:1E Authority key identifier: 92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36 Certificate issuer: /CN=926C43E6DACC18978406A2C9C57272491FFF9536 Certificate serial: 30D69572A962FCFEBDC563EDA83CD18E5E6E9D16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft Manifest number: 0226 Signing time: Mon 22 Dec 2025 23:10:55 +0000 Manifest this update: Mon 22 Dec 2025 23:05:55 +0000 Manifest next update: Fri 26 Dec 2025 00:21:55 +0000 Files and hashes: 1: 926C43E6DACC18978406A2C9C57272491FFF9536.crl (hash: 2p5dIHS3GG/gLHukE48nJ6NS9KFf2tTqUSBagwSqWYM=) 2: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: A/rwCvV0N2IIi5162rcSMrNXLOVO+p2IOyLdZ8Vkj6A=) 3: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: lah3Lsyh/1yic09nG6WnhdTFrE8YdyloOKzD5mHdMZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d6:95:72:a9:62:fc:fe:bd:c5:63:ed:a8:3c:d1:8e:5e:6e:9d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926C43E6DACC18978406A2C9C57272491FFF9536 Validity Not Before: Dec 22 23:05:55 2025 GMT Not After : Dec 26 00:21:55 2025 GMT Subject: CN=C46F87CDAF7522B64D20E8DD6FF0176D4519881E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0d:d0:08:87:ea:3d:28:9e:9f:64:78:ef:f1: d8:1e:e3:24:fd:db:2b:dc:52:a0:91:ad:8d:57:b9: bb:75:ba:1e:5c:09:ce:9e:0e:f4:46:1d:a8:3f:4e: 8a:82:07:01:89:45:40:fc:31:3d:20:c6:e7:85:c5: 83:d3:d1:30:f0:79:e0:74:31:8c:a8:26:06:63:26: 61:e3:b3:8b:a8:89:2e:98:eb:fa:08:24:2d:fd:fa: 4a:b9:bc:4c:58:20:f4:18:87:c4:18:68:78:b7:27: 42:ce:4d:e8:82:81:e0:e9:5f:55:39:79:2a:90:10: 57:47:43:1c:82:c1:3b:8d:6b:2d:46:ec:4d:e0:27: 0c:a1:b3:4c:0d:a7:47:b3:19:0c:59:fe:1b:4a:12: 26:7e:2f:25:27:7b:03:26:2c:23:99:11:45:c1:63: 4c:18:06:28:d9:92:8d:95:da:7f:55:35:8a:ab:9f: a2:52:f0:f0:31:db:c9:00:b0:2b:30:d1:aa:c9:a5: 4a:43:35:e3:85:14:8d:48:20:38:83:f8:d4:42:bb: 78:9d:f2:5e:0e:13:84:7a:1e:7a:b5:68:dc:46:ce: d5:db:cf:7c:8c:0e:2c:44:f7:6a:d2:bf:55:ab:01: bd:c4:be:78:ad:05:94:d1:a3:ad:09:dd:f7:f2:4a: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6F:87:CD:AF:75:22:B6:4D:20:E8:DD:6F:F0:17:6D:45:19:88:1E X509v3 Authority Key Identifier: keyid:92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f3:02:51:5e:f3:cb:0b:cc:94:50:69:57:fd:60:35:b7:75:87: 98:61:13:3d:81:ec:64:31:1a:bf:60:dd:aa:c8:46:db:3e:a7: c5:47:eb:89:70:33:d9:cd:d8:6a:f6:bb:62:c3:a6:59:47:0f: cf:15:d0:c4:fb:bf:df:06:2e:ac:ee:42:54:b8:b2:3c:b2:68: 88:89:90:b2:c8:39:fd:a3:ac:be:ca:f6:47:72:02:f1:d7:6e: 22:2a:c4:9c:90:ff:92:1a:18:7f:c5:18:da:56:a9:2b:f1:3e: 92:7f:c6:c2:d6:37:0a:73:0f:46:ea:15:0a:d2:89:f1:93:58: d5:84:cd:2c:f2:c5:04:dd:8e:87:7b:de:59:52:e9:84:83:65: 74:3f:29:c9:82:de:c2:ba:90:48:dd:d9:00:65:5a:07:65:73: e0:b7:b9:ff:d2:55:02:77:64:b2:82:e9:43:8e:c1:b4:38:54: e2:af:05:54:94:1a:d9:8a:70:82:2f:07:85:df:f9:f6:62:48: 50:ea:28:89:06:78:5a:0d:e7:63:59:a8:a8:9d:96:8c:a0:d8: a0:ee:c2:5f:31:2c:c3:0d:f9:91:78:f1:cb:b4:5e:9f:6d:5f: 33:55:5a:0a:f5:3a:61:ab:f8:43:1f:02:7b:af:71:d6:78:8f: 8f:ea:e5:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNaVcqli/P69xWPtqDzRjl5unRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2QzQzRTZEQUNDMTg5Nzg0MDZBMkM5QzU3MjcyNDkx RkZGOTUzNjAeFw0yNTEyMjIyMzA1NTVaFw0yNTEyMjYwMDIxNTVaMDMxMTAvBgNV BAMTKEM0NkY4N0NEQUY3NTIyQjY0RDIwRThERDZGRjAxNzZENDUxOTg4MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2DdAIh+o9KJ6fZHjv8dge4yT9 2yvcUqCRrY1Xubt1uh5cCc6eDvRGHag/ToqCBwGJRUD8MT0gxueFxYPT0TDweeB0 MYyoJgZjJmHjs4uoiS6Y6/oIJC39+kq5vExYIPQYh8QYaHi3J0LOTeiCgeDpX1U5 eSqQEFdHQxyCwTuNay1G7E3gJwyhs0wNp0ezGQxZ/htKEiZ+LyUnewMmLCOZEUXB Y0wYBijZko2V2n9VNYqrn6JS8PAx28kAsCsw0arJpUpDNeOFFI1IIDiD+NRCu3id 8l4OE4R6Hnq1aNxGztXbz3yMDixE92rSv1WrAb3EvnitBZTRo60J3ffyShYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxG+Hza91IrZNIOjdb/AXbUUZiB4wHwYDVR0j BBgwFoAUkmxD5trMGJeEBqLJxXJySR//lTYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzViYzEzMC05NjRhLTQ3YjgtOTIyYi04MzA2OWRlNjdhN2MvMC85MjZDNDNFNkRB Q0MxODk3ODQwNkEyQzlDNTcyNzI0OTFGRkY5NTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTI2QzQzRTZEQUNDMTg5Nzg0MDZBMkM5QzU3MjcyNDkxRkZG OTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvOTI2QzQzRTZEQUNDMTg5Nzg0MDZBMkM5QzU3Mjcy NDkxRkZGOTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPMCUV7zywvMlFBpV/1gNbd1h5hhEz2B7GQx Gr9g3arIRts+p8VH64lwM9nN2Gr2u2LDpllHD88V0MT7v98GLqzuQlS4sjyyaIiJ kLLIOf2jrL7K9kdyAvHXbiIqxJyQ/5IaGH/FGNpWqSvxPpJ/xsLWNwpzD0bqFQrS ifGTWNWEzSzyxQTdjod73llS6YSDZXQ/KcmC3sK6kEjd2QBlWgdlc+C3uf/SVQJ3 ZLKC6UOOwbQ4VOKvBVSUGtmKcIIvB4Xf+fZiSFDqKIkGeFoN52NZqKidloyg2KDu wl8xLMMN+ZF48cu0Xp9tXzNVWgr1OmGr+EMfAnuvcdZ4j4/q5fY= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:52 2025 by rpki-client