This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: M48lgO/h/5OD41q+eAXmUxrlWIgOIWnqb6LOTFV+SGs= Subject key identifier: BA:A3:3E:F2:4F:A4:ED:26:F5:ED:2B:A8:ED:FC:4C:B3:61:5B:0E:50 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 240F52CE5163D5CA21ECDE159240A641942AA2EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: 010A Signing time: Tue 16 Dec 2025 08:02:18 +0000 Manifest this update: Tue 16 Dec 2025 07:57:18 +0000 Manifest next update: Fri 19 Dec 2025 08:39:18 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 2: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) 3: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: 0+8s7ggNZCrgFrWZqRKVg6nfI7Bzidr/uJWH07rSqdY=) 4: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 08:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0f:52:ce:51:63:d5:ca:21:ec:de:15:92:40:a6:41:94:2a:a2:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Dec 16 07:57:18 2025 GMT Not After : Dec 19 08:39:18 2025 GMT Subject: CN=BAA33EF24FA4ED26F5ED2BA8EDFC4CB3615B0E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e4:6e:f4:c7:7d:b1:34:84:72:c6:9a:fc:38: 6c:da:78:20:91:15:b2:4b:bb:d0:a0:6c:95:c0:69: 4b:8c:e6:41:df:22:bd:26:5f:4d:69:dc:23:3e:19: f4:5d:08:0e:b6:a4:10:1d:9a:7a:77:91:8e:92:a2: 0d:84:db:64:d0:93:2e:42:2b:b6:15:ca:b3:bd:73: a4:7c:0f:d5:dc:82:85:ef:f0:3c:29:66:90:77:3d: d3:74:3e:b4:d1:3f:b9:79:24:bd:3d:1a:88:67:20: 2a:00:ef:91:c8:dc:3f:5b:e3:d9:8d:c5:52:74:3c: 53:c4:9a:4f:2d:fe:e5:b4:92:21:48:3d:30:9d:8e: 76:54:3b:c0:67:9c:94:14:29:6f:5e:8e:a9:d5:a0: 8a:8f:21:74:06:d3:02:4d:52:c0:13:87:73:22:ac: b2:99:14:80:b4:16:cb:cc:0c:bc:10:56:9a:df:d2: 3d:78:80:b2:2b:71:2d:d4:3c:53:c5:a1:0c:c6:f4: 85:db:60:50:37:23:2d:27:4e:87:04:7c:19:51:55: 2f:ee:c2:df:c9:07:f1:1b:cf:b0:41:fb:29:6e:97: 7f:3a:bc:e5:77:df:b2:eb:06:5b:dc:5a:10:d8:84: ea:b6:a8:91:70:e9:14:62:f8:cb:fb:03:38:29:68: 1d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A3:3E:F2:4F:A4:ED:26:F5:ED:2B:A8:ED:FC:4C:B3:61:5B:0E:50 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:e2:2a:d9:dd:17:ab:4c:23:81:ac:0a:dd:85:bb:f8:e6:77: 69:10:ca:56:66:79:10:00:47:63:01:2d:40:de:c6:be:2f:66: 3a:f7:b7:99:d3:bb:35:b3:79:92:87:c9:32:02:19:e5:e4:21: cb:c4:ad:24:a5:bf:10:58:66:26:a8:54:22:aa:6d:45:5f:a8: cf:f6:9d:96:71:7a:d6:90:27:c8:8b:7f:54:dd:d0:25:1d:9a: 58:c4:43:01:5c:8e:9b:da:9a:00:93:7f:7a:33:4c:9d:29:04: ba:5d:37:fa:f1:ad:57:16:04:49:83:e4:d3:15:67:20:14:9f: 21:98:4c:04:2d:8c:80:3b:a6:17:4c:29:f4:08:05:23:e7:77: d5:ec:94:90:bb:75:31:c3:7d:84:06:da:be:4d:0a:e3:c9:6b: fa:a1:21:a4:02:0c:75:58:77:03:89:ad:d3:03:df:a9:84:c3: 9b:9d:75:26:5c:11:eb:a1:d9:c9:53:c3:9d:dc:37:52:b2:ba: 23:82:f9:95:c2:62:b0:12:e5:41:1c:c6:8a:0a:78:fa:cf:b0: c9:3d:f5:cb:f9:6c:a0:fb:a7:c9:59:1d:16:31:e1:b2:29:e5: 4c:83:18:e9:35:24:93:f7:6b:fd:a8:2d:15:80:64:58:8d:78: 72:51:50:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJA9SzlFj1coh7N4VkkCmQZQqou8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTEyMTYwNzU3MThaFw0yNTEyMTkwODM5MThaMDMxMTAvBgNV BAMTKEJBQTMzRUYyNEZBNEVEMjZGNUVEMkJBOEVERkM0Q0IzNjE1QjBFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC25G70x32xNIRyxpr8OGzaeCCR FbJLu9CgbJXAaUuM5kHfIr0mX01p3CM+GfRdCA62pBAdmnp3kY6Sog2E22TQky5C K7YVyrO9c6R8D9XcgoXv8DwpZpB3PdN0PrTRP7l5JL09GohnICoA75HI3D9b49mN xVJ0PFPEmk8t/uW0kiFIPTCdjnZUO8BnnJQUKW9ejqnVoIqPIXQG0wJNUsATh3Mi rLKZFIC0FsvMDLwQVprf0j14gLIrcS3UPFPFoQzG9IXbYFA3Iy0nTocEfBlRVS/u wt/JB/Ebz7BB+ylul386vOV337LrBlvcWhDYhOq2qJFw6RRi+Mv7AzgpaB25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuqM+8k+k7Sb17Suo7fxMs2FbDlAwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3iKtndF6tMI4GsCt2Fu/jmd2kQylZmeRAA R2MBLUDexr4vZjr3t5nTuzWzeZKHyTICGeXkIcvErSSlvxBYZiaoVCKqbUVfqM/2 nZZxetaQJ8iLf1Td0CUdmljEQwFcjpvamgCTf3ozTJ0pBLpdN/rxrVcWBEmD5NMV ZyAUnyGYTAQtjIA7phdMKfQIBSPnd9XslJC7dTHDfYQG2r5NCuPJa/qhIaQCDHVY dwOJrdMD36mEw5uddSZcEeuh2clTw53cN1KyuiOC+ZXCYrAS5UEcxooKePrPsMk9 9cv5bKD7p8lZHRYx4bIp5UyDGOk1JJP3a/2oLRWAZFiNeHJRUEk= -----END CERTIFICATE-----Generated at Wed Dec 17 13:29:50 2025 by rpki-client