This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: 9Afps/u4nGf44vcJF7QRbSviLQNSs2TjVwgSmAiKf6I= Subject key identifier: CE:2C:3B:70:ED:D2:EC:65:96:17:E7:BF:A1:E0:F9:11:FB:E2:F0:6E Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 4314475F593E9F9B36DC128FB2E82A420BDDF45A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 01F0 Signing time: Tue 23 Dec 2025 10:54:04 +0000 Manifest this update: Tue 23 Dec 2025 10:49:04 +0000 Manifest next update: Fri 26 Dec 2025 17:16:04 +0000 Files and hashes: 1: 3130332e35312e3130372e302f32342d3234203d3e20313337323839.roa (hash: 9EmMFN9j1NU/nvOY8wiv0XwdZICwg892ouExOsJJt8g=) 2: 3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (hash: oHaPvJW9wiPw6s3g8J+9ty85JMlTJ8ChGgOpurTLBaY=) 3: 3130332e35312e3130362e302f32332d3233203d3e20313337323839.roa (hash: DIUdo24NgyOlqJkMr4yBSWfhyJtglfGHEA0tVVMrxoY=) 4: 6886844AB176920850E0984917E9713667D0A025.crl (hash: XBM5L/QO8kS8i3LnOmD7eUPac8loaFZr2znrushFkgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:14:47:5f:59:3e:9f:9b:36:dc:12:8f:b2:e8:2a:42:0b:dd:f4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Dec 23 10:49:04 2025 GMT Not After : Dec 26 17:16:04 2025 GMT Subject: CN=CE2C3B70EDD2EC659617E7BFA1E0F911FBE2F06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:db:fc:4f:ae:76:ae:df:89:e9:1f:35:92:ca: 49:1d:18:5b:ad:06:50:0a:3b:72:0c:d7:b2:e7:22: 1b:8d:d2:4a:c9:fe:cf:fd:c2:65:5f:2c:17:1a:38: 81:ad:5e:27:9b:96:ba:8b:f9:81:cb:7a:de:5e:4f: 22:9c:ab:13:62:40:20:be:93:e8:61:c4:b6:40:ab: 5a:45:eb:12:59:ff:94:f3:64:c1:6c:13:fa:79:a9: 63:5b:63:25:d3:89:ac:98:25:1d:0d:da:23:e3:64: 37:6f:80:d6:74:da:88:ff:97:15:3b:35:5e:47:02: b8:bc:29:48:0c:4a:67:9e:2c:40:00:dc:69:53:1d: 9f:68:71:ff:5d:3a:9f:63:ce:f7:87:d5:f3:29:58: 3d:04:7f:c2:77:f3:31:21:69:9c:7f:ff:f5:46:61: 32:18:bd:85:23:f4:9e:4d:8c:ab:e5:bc:90:44:52: 6f:e3:52:1d:ad:86:d1:0a:e2:f8:03:a9:bf:df:c0: 7c:34:41:c8:5e:47:0f:49:47:f8:49:a2:8c:21:06: 34:89:fa:41:a5:ff:6f:07:ef:4e:f9:0a:bb:95:e5: ee:e6:b1:8c:f0:64:b7:8b:3f:0b:f7:82:60:99:b7: 4c:2f:08:3d:50:ef:e9:28:51:67:39:60:64:dd:68: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2C:3B:70:ED:D2:EC:65:96:17:E7:BF:A1:E0:F9:11:FB:E2:F0:6E X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f2:59:f1:aa:26:6b:b7:fe:52:59:a1:43:f6:74:d3:fc:7c: 2b:ef:17:56:aa:c6:e2:e1:8f:c0:1f:ec:df:ba:66:52:66:bb: 8a:f6:46:a3:ca:83:a7:a1:2b:75:4c:ba:8c:b0:31:82:a9:31: cc:02:b4:15:eb:6c:10:07:bc:87:31:44:d4:3c:9c:33:72:f3: cb:83:1c:9f:8b:ab:78:44:f3:43:ee:42:80:d9:c7:4b:a2:7c: 22:1c:3a:9d:16:07:c4:9a:2f:9e:00:d7:1d:96:95:7b:a5:ad: 00:ce:bf:61:37:de:73:60:c5:47:49:09:02:d8:ee:bf:4d:f5: d9:11:88:b8:80:ac:84:7e:1e:13:e6:b1:39:7f:ae:38:5d:82: 9a:52:f9:70:03:c5:de:f0:13:4f:7e:d1:c8:b2:80:ff:c7:d5: 6d:b8:f2:e9:6c:6c:27:c2:ed:08:a4:8c:b3:cc:80:5e:f5:a4: a6:6d:c4:b9:1b:7c:66:af:cc:72:2b:94:4c:fa:89:56:16:f0: 6c:10:28:52:13:53:47:6f:3d:35:52:82:52:57:ed:f9:25:09: c9:8a:94:e4:dc:53:2c:32:9c:aa:73:0f:8c:9e:c7:45:f6:fa: 32:54:ea:c9:a2:ee:6c:ad:f5:68:86:46:1d:91:b2:84:f6:83: 8c:31:3b:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQxRHX1k+n5s23BKPsugqQgvd9FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNTEyMjMxMDQ5MDRaFw0yNTEyMjYxNzE2MDRaMDMxMTAvBgNV BAMTKENFMkMzQjcwRUREMkVDNjU5NjE3RTdCRkExRTBGOTExRkJFMkYwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl2/xPrnau34npHzWSykkdGFut BlAKO3IM17LnIhuN0krJ/s/9wmVfLBcaOIGtXieblrqL+YHLet5eTyKcqxNiQCC+ k+hhxLZAq1pF6xJZ/5TzZMFsE/p5qWNbYyXTiayYJR0N2iPjZDdvgNZ02oj/lxU7 NV5HAri8KUgMSmeeLEAA3GlTHZ9ocf9dOp9jzveH1fMpWD0Ef8J38zEhaZx///VG YTIYvYUj9J5NjKvlvJBEUm/jUh2thtEK4vgDqb/fwHw0QcheRw9JR/hJoowhBjSJ +kGl/28H7075CruV5e7msYzwZLeLPwv3gmCZt0wvCD1Q7+koUWc5YGTdaM13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUziw7cO3S7GWWF+e/oeD5Efvi8G4wHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzyWfGqJmu3/lJZoUP2dNP8fCvvF1aqxuLh j8Af7N+6ZlJmu4r2RqPKg6ehK3VMuoywMYKpMcwCtBXrbBAHvIcxRNQ8nDNy88uD HJ+Lq3hE80PuQoDZx0uifCIcOp0WB8SaL54A1x2WlXulrQDOv2E33nNgxUdJCQLY 7r9N9dkRiLiArIR+HhPmsTl/rjhdgppS+XADxd7wE09+0ciygP/H1W248ulsbCfC 7QikjLPMgF71pKZtxLkbfGavzHIrlEz6iVYW8GwQKFITU0dvPTVSglJX7fklCcmK lOTcUywynKpzD4yex0X2+jJU6smi7myt9WiGRh2RsoT2g4wxO3A= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:16 2025 by rpki-client