This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft File: 926C43E6DACC18978406A2C9C57272491FFF9536.mft (raw, json) Hash identifier: vjDCTP5Tpv9i1hsuI9tBrGPApENTmDxZ6FXe2KMayvc= Subject key identifier: 57:19:93:86:F8:DF:12:18:CC:16:E8:4F:A7:BC:24:00:A4:11:DD:E7 Authority key identifier: 92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36 Certificate issuer: /CN=926C43E6DACC18978406A2C9C57272491FFF9536 Certificate serial: 5E0C5CD53779BFD942CBCC6B4AE795D583CDC27D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft Manifest number: 0227 Signing time: Thu 25 Dec 2025 00:30:41 +0000 Manifest this update: Thu 25 Dec 2025 00:25:41 +0000 Manifest next update: Sun 28 Dec 2025 10:22:41 +0000 Files and hashes: 1: 323030313a6466343a646138303a3a2f34382d3438203d3e20313431303735.roa (hash: lah3Lsyh/1yic09nG6WnhdTFrE8YdyloOKzD5mHdMZ4=) 2: 3130332e3135352e3232342e302f32332d3234203d3e20313431303735.roa (hash: A/rwCvV0N2IIi5162rcSMrNXLOVO+p2IOyLdZ8Vkj6A=) 3: 926C43E6DACC18978406A2C9C57272491FFF9536.crl (hash: b1xO+Nxrs4qkCzHxeemPjcWSljaB2iJxDrwdClHzERk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 10:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0c:5c:d5:37:79:bf:d9:42:cb:cc:6b:4a:e7:95:d5:83:cd:c2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=926C43E6DACC18978406A2C9C57272491FFF9536 Validity Not Before: Dec 25 00:25:41 2025 GMT Not After : Dec 28 10:22:41 2025 GMT Subject: CN=57199386F8DF1218CC16E84FA7BC2400A411DDE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:35:aa:e8:ff:ac:64:54:be:29:d7:83:bd: 6a:9f:1d:1d:1a:9d:06:a2:46:16:dd:4d:21:3b:b7: d1:15:e2:83:06:08:02:e9:dc:9c:c5:e6:6a:82:d9: cb:f6:e6:c6:a0:0d:85:21:be:2d:dd:c4:2a:e1:43: 0b:bb:a6:f2:53:4f:31:51:c7:d1:35:e4:9b:37:2c: 4d:b8:0d:12:16:9e:8c:7c:d7:45:f5:e3:3b:47:ee: 08:9a:93:3c:8d:37:d9:d3:22:83:57:43:7c:34:a1: 9a:10:79:db:b7:39:1a:e2:52:1c:09:53:61:b8:7c: c8:d0:9d:3b:ea:9e:0a:34:9a:6a:7c:64:14:ed:fd: 16:c7:6b:2f:25:3a:e9:09:50:a6:0c:63:9c:06:b2: 38:1a:59:3d:25:cf:31:a4:3c:36:fe:81:33:4f:b6: df:be:d1:20:71:c4:65:a1:03:0a:b1:db:cb:bd:de: ac:10:a4:cd:1f:3a:f9:81:c8:b1:64:e7:ad:ca:67: 1c:9d:49:7e:0d:c1:79:9e:e7:82:0f:5f:d5:d6:1a: 3b:fc:aa:bf:48:49:5b:bf:e5:e9:c0:c5:7c:55:84: 4d:fe:ae:c0:a0:84:7a:e4:1e:10:a7:17:85:ab:e8: 64:b1:8e:4c:dd:84:e7:ea:79:02:2e:32:c8:9e:d5: e9:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:19:93:86:F8:DF:12:18:CC:16:E8:4F:A7:BC:24:00:A4:11:DD:E7 X509v3 Authority Key Identifier: keyid:92:6C:43:E6:DA:CC:18:97:84:06:A2:C9:C5:72:72:49:1F:FF:95:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/926C43E6DACC18978406A2C9C57272491FFF9536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/435bc130-964a-47b8-922b-83069de67a7c/0/926C43E6DACC18978406A2C9C57272491FFF9536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:9a:fa:d4:22:ae:ae:d9:da:af:70:8d:01:e6:5b:42:20:00: 3e:06:e6:be:e5:0b:14:dc:f4:25:cc:90:74:91:d3:f0:da:8f: 2f:cb:a6:6d:ad:de:92:de:96:76:10:8f:12:c0:6a:d8:59:7c: 47:fa:60:96:0a:5e:a4:d8:b4:64:e7:6f:89:e6:54:2a:80:b4: 98:2a:0d:98:2e:4a:39:c8:65:b4:5e:a0:99:36:ad:54:4c:e4: 18:7b:04:2f:45:3c:d4:75:a6:30:7d:3e:6d:d3:a8:f7:7e:ec: 78:49:e1:91:d6:5e:ca:b1:21:76:53:55:75:5c:7a:11:21:2c: 9c:02:5f:39:91:5d:04:5a:60:b7:cc:8e:05:72:37:ee:cc:67: 10:8b:2c:bf:28:d0:1f:d8:68:e5:c1:c1:45:b5:e8:2d:39:5d: 65:ec:b3:74:c8:10:44:cd:7a:16:22:8b:59:f8:b2:07:b5:63: bd:33:4f:9a:bc:8b:5e:b9:c1:11:b4:52:13:19:cf:9d:ab:75: 5e:b1:65:85:f8:fd:32:a3:e2:2c:c8:42:09:3f:d9:5c:68:a7: 97:06:83:66:a5:b3:c6:4d:a9:33:18:1a:f7:2c:74:24:a6:7e: b0:b6:29:39:56:72:8b:8f:1b:97:bd:87:f4:e5:9b:c4:4a:4c: 33:37:2a:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgxc1Td5v9lCy8xrSueV1YPNwn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI2QzQzRTZEQUNDMTg5Nzg0MDZBMkM5QzU3MjcyNDkx RkZGOTUzNjAeFw0yNTEyMjUwMDI1NDFaFw0yNTEyMjgxMDIyNDFaMDMxMTAvBgNV BAMTKDU3MTk5Mzg2RjhERjEyMThDQzE2RTg0RkE3QkMyNDAwQTQxMURERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChPzWq6P+sZFS+KdeDvWqfHR0a nQaiRhbdTSE7t9EV4oMGCALp3JzF5mqC2cv25sagDYUhvi3dxCrhQwu7pvJTTzFR x9E15Js3LE24DRIWnox810X14ztH7giakzyNN9nTIoNXQ3w0oZoQedu3ORriUhwJ U2G4fMjQnTvqngo0mmp8ZBTt/RbHay8lOukJUKYMY5wGsjgaWT0lzzGkPDb+gTNP tt++0SBxxGWhAwqx28u93qwQpM0fOvmByLFk563KZxydSX4NwXme54IPX9XWGjv8 qr9ISVu/5enAxXxVhE3+rsCghHrkHhCnF4Wr6GSxjkzdhOfqeQIuMsie1emjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVxmThvjfEhjMFuhPp7wkAKQR3ecwHwYDVR0j BBgwFoAUkmxD5trMGJeEBqLJxXJySR//lTYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzViYzEzMC05NjRhLTQ3YjgtOTIyYi04MzA2OWRlNjdhN2MvMC85MjZDNDNFNkRB Q0MxODk3ODQwNkEyQzlDNTcyNzI0OTFGRkY5NTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTI2QzQzRTZEQUNDMTg5Nzg0MDZBMkM5QzU3MjcyNDkxRkZG OTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM1YmMxMzAtOTY0YS00N2I4LTky MmItODMwNjlkZTY3YTdjLzAvOTI2QzQzRTZEQUNDMTg5Nzg0MDZBMkM5QzU3Mjcy NDkxRkZGOTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANqa+tQirq7Z2q9wjQHmW0IgAD4G5r7lCxTc 9CXMkHSR0/Dajy/Lpm2t3pLelnYQjxLAathZfEf6YJYKXqTYtGTnb4nmVCqAtJgq DZguSjnIZbReoJk2rVRM5Bh7BC9FPNR1pjB9Pm3TqPd+7HhJ4ZHWXsqxIXZTVXVc ehEhLJwCXzmRXQRaYLfMjgVyN+7MZxCLLL8o0B/YaOXBwUW16C05XWXss3TIEETN ehYii1n4sge1Y70zT5q8i165wRG0UhMZz52rdV6xZYX4/TKj4izIQgk/2Vxop5cG g2als8ZNqTMYGvcsdCSmfrC2KTlWcouPG5e9h/Tlm8RKTDM3KiA= -----END CERTIFICATE-----Generated at Sat Dec 27 00:48:19 2025 by rpki-client