This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft File: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft (raw, json) Hash identifier: olEkaKB3xo59OYbVsnwVOf11CcgnSqfwZ76VcqT82CA= Subject key identifier: 38:EF:31:60:0C:8C:EE:5E:EA:98:89:E9:B3:D8:AA:BC:12:A2:8E:0F Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B Certificate serial: 6DFD261F75E7844B1C904195216C0307377F7AFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft Manifest number: 0243 Signing time: Sun 21 Dec 2025 19:02:58 +0000 Manifest this update: Sun 21 Dec 2025 18:57:58 +0000 Manifest next update: Thu 25 Dec 2025 00:24:58 +0000 Files and hashes: 1: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl (hash: aF9J2ShJDVLGXkBVKxrV3putpzExNpEJQqUZLu1xrkM=) 2: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: lNbPUGA/82mjhGneJ7g/W99enSkyu+j5sTgsqJn2Sk0=) 3: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: uqS3f/a/mCNWGnrE+t9GmuqXdPtzmTdKMITykozV6Ak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:fd:26:1f:75:e7:84:4b:1c:90:41:95:21:6c:03:07:37:7f:7a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B Validity Not Before: Dec 21 18:57:58 2025 GMT Not After : Dec 25 00:24:58 2025 GMT Subject: CN=38EF31600C8CEE5EEA9889E9B3D8AABC12A28E0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:b7:7d:33:cf:85:d2:7a:a6:ff:20:9f:c2: 4c:a9:6d:01:d7:f9:d7:e2:63:be:bf:78:98:e8:e4: 1e:b4:d3:b0:e9:29:e4:b3:b9:47:a3:a0:47:37:8d: aa:11:75:64:56:73:6e:9a:02:7a:e2:b5:4a:8e:28: eb:73:0e:08:ed:dc:64:eb:d0:a4:04:c1:9d:bd:3f: 3b:78:a3:f2:ce:c5:34:10:67:98:77:16:e2:33:83: 2b:bb:df:d0:1f:41:cd:00:3e:dc:ad:94:d1:04:0c: d7:5a:a7:30:8d:f7:cd:ad:2b:eb:68:85:4c:fa:8b: 2b:a5:05:8d:f8:ef:73:57:ee:20:2b:71:ab:dd:e7: 69:51:23:31:a6:db:10:7b:6d:fb:7c:87:a7:7c:7d: f6:e6:8a:b6:24:0e:3a:ab:ec:32:d6:95:65:07:f3: 4f:4b:bb:42:3d:14:b6:54:00:d4:09:12:37:43:71: 14:8a:57:36:de:5a:51:60:a9:50:75:bf:e4:5d:f9: 06:9b:dd:9c:55:53:08:07:97:71:e5:f2:1e:6b:60: 5c:c5:54:4d:05:8b:34:bd:f3:ca:0e:41:76:38:6a: 0b:db:0f:31:67:e1:ac:1d:0b:3a:c3:7a:1a:19:a4: e9:de:1c:84:4c:45:db:01:1d:e9:8e:74:7b:0e:44: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EF:31:60:0C:8C:EE:5E:EA:98:89:E9:B3:D8:AA:BC:12:A2:8E:0F X509v3 Authority Key Identifier: keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6e:f1:82:dc:f4:0d:72:96:d7:ff:e3:15:3f:d9:2c:4b:c8: fb:3f:bc:18:c3:51:14:24:b5:1f:7f:cc:0a:7c:29:33:c2:df: f6:61:3d:a7:18:09:2e:18:7c:61:f5:c9:ee:a5:58:a9:ea:7c: f8:8c:20:ee:95:ee:5b:5f:d5:20:da:6e:e3:77:e1:af:52:60: 9c:65:27:f9:72:1c:1a:d2:2c:99:a5:0b:33:6e:ad:c0:69:dd: eb:87:2d:fc:52:f4:bd:04:6f:e6:9a:e4:68:5e:6d:f3:87:95: 5e:fa:f3:9a:bc:10:bb:2c:96:b2:e8:31:49:4c:d6:71:ec:15: 85:04:63:1f:31:ce:af:bf:50:e0:8f:0a:47:03:33:84:9a:fe: 83:61:a3:73:9e:fb:91:99:1b:c6:d8:7a:86:e9:0e:10:54:15: 49:b7:80:9e:8e:81:66:67:55:6b:0d:4d:03:53:3e:76:18:72: 2f:e3:e1:4a:4f:63:7c:56:c4:9d:31:8d:bb:fa:94:1f:0a:3e: 06:67:93:48:3c:92:f1:f0:d8:9a:7d:b7:f5:c3:8b:98:f4:49: b4:71:a2:ac:58:8f:82:43:c0:cd:36:c1:21:9b:54:df:6c:9d: 6b:e7:e1:71:ca:a0:67:80:16:a3:cf:f2:d3:52:0c:4a:71:de: d1:6e:e5:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbf0mH3XnhEsckEGVIWwDBzd/evwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0 RkY3QTQ4QjAeFw0yNTEyMjExODU3NThaFw0yNTEyMjUwMDI0NThaMDMxMTAvBgNV BAMTKDM4RUYzMTYwMEM4Q0VFNUVFQTk4ODlFOUIzRDhBQUJDMTJBMjhFMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/GLd9M8+F0nqm/yCfwkypbQHX +dfiY76/eJjo5B6007DpKeSzuUejoEc3jaoRdWRWc26aAnritUqOKOtzDgjt3GTr 0KQEwZ29Pzt4o/LOxTQQZ5h3FuIzgyu739AfQc0APtytlNEEDNdapzCN982tK+to hUz6iyulBY3473NX7iArcavd52lRIzGm2xB7bft8h6d8ffbmirYkDjqr7DLWlWUH 809Lu0I9FLZUANQJEjdDcRSKVzbeWlFgqVB1v+Rd+Qab3ZxVUwgHl3Hl8h5rYFzF VE0FizS988oOQXY4agvbDzFn4awdCzrDehoZpOneHIRMRdsBHemOdHsORNH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOO8xYAyM7l7qmInps9iqvBKijg8wHwYDVR0j BBgwFoAUJtXAY761gLOPKPPMFrlYY0/3pIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWE3NGFjOS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMC8yNkQ1QzA2M0JF QjU4MEIzOEYyOEYzQ0MxNkI5NTg2MzRGRjdBNDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0RkY3 QTQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4 NjM0RkY3QTQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9u8YLc9A1yltf/4xU/2SxLyPs/vBjDURQk tR9/zAp8KTPC3/ZhPacYCS4YfGH1ye6lWKnqfPiMIO6V7ltf1SDabuN34a9SYJxl J/lyHBrSLJmlCzNurcBp3euHLfxS9L0Eb+aa5GhebfOHlV7685q8ELsslrLoMUlM 1nHsFYUEYx8xzq+/UOCPCkcDM4Sa/oNho3Oe+5GZG8bYeobpDhBUFUm3gJ6OgWZn VWsNTQNTPnYYci/j4UpPY3xWxJ0xjbv6lB8KPgZnk0g8kvHw2Jp9t/XDi5j0SbRx oqxYj4JDwM02wSGbVN9snWvn4XHKoGeAFqPP8tNSDEpx3tFu5ZY= -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:33 2025 by rpki-client