This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft File: 9D21366ED4E3738A5F50E524109806C98D710BD3.mft (raw, json) Hash identifier: 0sd4FYFiBTEYFnYoT3N1CDNfccne99/r33Nj7TsqnWY= Subject key identifier: 41:5C:84:70:39:62:61:A0:C9:49:EC:10:5B:11:5B:A7:08:55:38:71 Authority key identifier: 9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 Certificate issuer: /CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Certificate serial: 54286143BC83A690C1B55BBA805AF58BA4CD6EA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft Manifest number: E0 Signing time: Tue 23 Dec 2025 05:40:01 +0000 Manifest this update: Tue 23 Dec 2025 05:35:01 +0000 Manifest next update: Fri 26 Dec 2025 14:27:01 +0000 Files and hashes: 1: 9D21366ED4E3738A5F50E524109806C98D710BD3.crl (hash: yie8+zx7waHq0xlRQzhgb0q7pbG1P7QHmz0tAofBRog=) 2: 3136302e32352e3131382e302f32332d3234203d3e20313533303936.roa (hash: TUzFMsEIFjmnDLri6vPKTFWHWFqmADC1pDUr5mNeK+o=) 3: 3136302e32352e3131392e302f32342d3234203d3e20313533303936.roa (hash: l9ERQS2lY9vY7cqdtac+IvPm2s0vxFEvQIVHJEks1Zc=) 4: 3136302e32352e3131382e302f32342d3234203d3e20313533303936.roa (hash: Nzl8vY9SfxTMTS+PrIiEnPNs8vGKrloce/myFfDThWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:28:61:43:bc:83:a6:90:c1:b5:5b:ba:80:5a:f5:8b:a4:cd:6e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D21366ED4E3738A5F50E524109806C98D710BD3 Validity Not Before: Dec 23 05:35:01 2025 GMT Not After : Dec 26 14:27:01 2025 GMT Subject: CN=415C8470396261A0C949EC105B115BA708553871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:76:1f:11:8f:8b:06:0e:24:7b:05:b0:15: eb:66:6f:17:11:3e:58:e5:58:bf:8f:58:3b:12:30: 29:cb:9f:f3:41:dc:c2:90:2f:0e:32:13:de:70:12: 1f:64:15:00:e5:dd:c4:07:11:b3:50:20:9a:a7:2b: 72:16:f6:dc:01:b6:25:d9:2c:99:15:26:71:45:12: 0d:c2:51:4a:e7:12:8c:c8:55:3e:14:c9:35:35:eb: 8e:db:25:3d:df:51:48:98:81:94:76:1b:fe:d1:a0: 55:a9:9f:8b:93:9b:3d:0e:a9:b4:25:c3:0a:df:dd: 75:b5:50:20:c0:40:03:f7:ee:59:35:a4:8a:82:12: 5c:7f:27:4e:e1:1f:92:da:a1:43:8c:1c:ab:c2:77: 4e:bb:0d:b7:82:cc:aa:56:64:07:c3:6b:d7:8a:c1: 9f:45:61:59:92:4a:48:05:51:ca:3b:6a:57:a9:19: a1:1d:f4:6e:a6:a6:0d:56:98:48:e3:34:92:ef:61: 05:7d:48:c8:61:1d:97:0b:71:61:4a:b5:12:a4:4d: 68:02:cf:83:94:a3:d3:db:23:70:47:b5:cc:f8:6f: ca:3a:f3:f9:6e:2e:0f:98:1e:83:62:44:2e:f2:79: 13:d4:c8:e0:9d:7f:36:54:0f:48:e6:9f:f0:ca:63: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5C:84:70:39:62:61:A0:C9:49:EC:10:5B:11:5B:A7:08:55:38:71 X509v3 Authority Key Identifier: keyid:9D:21:36:6E:D4:E3:73:8A:5F:50:E5:24:10:98:06:C9:8D:71:0B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9D21366ED4E3738A5F50E524109806C98D710BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61e44665-e846-455b-aa1a-d5ab07deedf3/0/9D21366ED4E3738A5F50E524109806C98D710BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:6b:47:51:7a:2c:b9:a6:56:58:2c:3b:6b:74:4e:19:7e:5f: c1:db:62:b8:1e:67:ee:3b:76:2c:2b:28:07:69:93:91:96:ac: 89:ac:1d:53:ed:57:0c:73:c1:0f:98:ff:36:2f:3c:49:a1:ec: 86:eb:d7:bc:45:cd:0d:d5:c7:d9:5d:75:4b:fb:2d:9b:4d:8d: fc:2a:e0:72:05:30:3c:67:9b:c3:25:40:d5:0d:91:89:3a:ae: 3a:bc:45:ea:92:b2:d9:0c:73:8c:eb:d3:3c:5b:dd:fd:87:68: 3e:c7:90:7e:67:91:2d:53:a5:63:f3:6a:7c:33:31:b9:22:b5: ee:cb:81:1c:d0:c6:ec:64:61:2d:02:bd:be:b9:e7:48:e0:98: 30:6c:8b:27:67:aa:b5:2e:82:34:f7:61:31:54:03:a3:0b:9b: 67:37:62:d4:f8:2f:33:50:f2:0f:2d:da:1f:e4:b9:10:e7:79: b3:f7:ee:8d:20:e4:fd:94:8d:c7:3a:51:c8:bf:6c:07:48:e0: 92:62:06:64:30:a8:7a:a9:40:a8:10:a6:25:82:35:0a:da:f5: a6:7b:6c:96:74:9f:22:f4:fc:06:c1:ef:c3:ae:09:d8:93:fc: fb:22:0e:93:bc:d4:90:8f:0f:7a:35:26:24:a0:64:52:e9:a7: 88:4d:9d:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVChhQ7yDppDBtVu6gFr1i6TNbqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4 RDcxMEJEMzAeFw0yNTEyMjMwNTM1MDFaFw0yNTEyMjYxNDI3MDFaMDMxMTAvBgNV BAMTKDQxNUM4NDcwMzk2MjYxQTBDOTQ5RUMxMDVCMTE1QkE3MDg1NTM4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7s3YfEY+LBg4kewWwFetmbxcR PljlWL+PWDsSMCnLn/NB3MKQLw4yE95wEh9kFQDl3cQHEbNQIJqnK3IW9twBtiXZ LJkVJnFFEg3CUUrnEozIVT4UyTU1647bJT3fUUiYgZR2G/7RoFWpn4uTmz0OqbQl wwrf3XW1UCDAQAP37lk1pIqCElx/J07hH5LaoUOMHKvCd067DbeCzKpWZAfDa9eK wZ9FYVmSSkgFUco7alepGaEd9G6mpg1WmEjjNJLvYQV9SMhhHZcLcWFKtRKkTWgC z4OUo9PbI3BHtcz4b8o68/luLg+YHoNiRC7yeRPUyOCdfzZUD0jmn/DKY+kBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQVyEcDliYaDJSewQWxFbpwhVOHEwHwYDVR0j BBgwFoAUnSE2btTjc4pfUOUkEJgGyY1xC9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MWU0NDY2NS1lODQ2LTQ1NWItYWExYS1kNWFiMDdkZWVkZjMvMC85RDIxMzY2RUQ0 RTM3MzhBNUY1MEU1MjQxMDk4MDZDOThENzEwQkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2Qzk4RDcx MEJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjFlNDQ2NjUtZTg0Ni00NTViLWFh MWEtZDVhYjA3ZGVlZGYzLzAvOUQyMTM2NkVENEUzNzM4QTVGNTBFNTI0MTA5ODA2 Qzk4RDcxMEJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhrR1F6LLmmVlgsO2t0Thl+X8HbYrgeZ+47 diwrKAdpk5GWrImsHVPtVwxzwQ+Y/zYvPEmh7Ibr17xFzQ3Vx9lddUv7LZtNjfwq 4HIFMDxnm8MlQNUNkYk6rjq8ReqSstkMc4zr0zxb3f2HaD7HkH5nkS1TpWPzanwz Mbkite7LgRzQxuxkYS0Cvb6550jgmDBsiydnqrUugjT3YTFUA6MLm2c3YtT4LzNQ 8g8t2h/kuRDnebP37o0g5P2Ujcc6Uci/bAdI4JJiBmQwqHqpQKgQpiWCNQra9aZ7 bJZ0nyL0/AbB78OuCdiT/PsiDpO81JCPD3o1JiSgZFLpp4hNnbs= -----END CERTIFICATE-----Generated at Thu Dec 25 09:17:56 2025 by rpki-client