This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft (raw, json) Hash identifier: 0qP6hx8yifegMC/ZesMrCOji3QISAjgK+CxvWwZosGk= Subject key identifier: 05:B8:24:C9:8A:29:71:C3:18:26:38:82:95:B9:31:18:E0:4A:B5:16 Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Certificate issuer: /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Certificate serial: 6C7B6DF46F2063480D9CA8D2094E40EA760B6C1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft Manifest number: 0389 Signing time: Mon 22 Dec 2025 17:01:09 +0000 Manifest this update: Mon 22 Dec 2025 16:56:09 +0000 Manifest next update: Fri 26 Dec 2025 00:03:09 +0000 Files and hashes: 1: 3230332e39362e3232382e302f32332d3234203d3e20313334363535.roa (hash: WnEoSKGZIFsfEoy7vBg6GUxPJ2sdlBMhPa8SmUKwOwQ=) 2: 3130332e3234372e3231312e302f32342d3234203d3e20313334363535.roa (hash: +RIUAVxGB33d0KDSRHLJ9X8+j7gj5NlzbX8RpGUfLIQ=) 3: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl (hash: mlKhrZMltcCyOMKfMoN7GtGTaZeHHc0moE6Qhb2k1uQ=) 4: 323430343a353938303a3a2f33322d3332203d3e20313334363535.roa (hash: QZavpRmJwgWpUP/+i0D2076ri9bNfiH2V5J64XJ0fT4=) 5: 3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (hash: AOicjomaXVowUxKVLUAzngaobesRemFsc6Mjiuwj2Bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7b:6d:f4:6f:20:63:48:0d:9c:a8:d2:09:4e:40:ea:76:0b:6c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Validity Not Before: Dec 22 16:56:09 2025 GMT Not After : Dec 26 00:03:09 2025 GMT Subject: CN=05B824C98A2971C31826388295B93118E04AB516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:9c:f7:33:b5:63:16:b3:3f:3c:83:a9:0e: c6:93:a3:58:ab:88:fc:fa:31:2e:02:6d:fd:2b:f3: d8:96:38:36:bb:d2:52:be:9c:8b:eb:55:58:da:c5: ec:47:fe:a7:bd:e5:9c:d6:6d:ae:4a:cb:ee:ea:9a: 61:fe:dd:87:3e:d4:05:f5:b9:26:22:8b:78:f0:36: aa:fb:d3:a4:6c:29:d9:2b:88:60:19:c8:73:16:e8: 80:10:d2:b3:50:7b:d0:e5:1c:10:57:fb:bd:f2:7d: 91:cb:da:2e:c6:28:42:c0:9e:a6:c8:cf:6d:11:67: 09:31:d2:6d:54:3a:03:a1:f8:35:84:f9:ca:8d:d8: 13:a7:bd:34:ea:e1:86:77:15:61:4c:d3:70:f2:db: 00:2b:3b:9c:31:9f:6f:a3:46:26:69:79:92:9f:b1: ad:2d:61:d1:5c:d4:5f:11:56:03:e9:61:11:04:df: 97:eb:89:8c:16:c7:ee:e2:be:08:5b:73:2b:05:52: 05:ff:0c:1f:98:e0:1e:cc:74:58:7d:de:aa:af:f0: 65:b9:13:fe:21:43:66:a6:73:b1:a5:5a:d2:6c:5c: 32:d7:60:18:9c:1a:e5:54:5f:8e:94:29:4a:31:44: ee:2f:fb:23:99:32:23:a1:ec:32:9a:65:19:08:38: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B8:24:C9:8A:29:71:C3:18:26:38:82:95:B9:31:18:E0:4A:B5:16 X509v3 Authority Key Identifier: keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:02:84:44:fd:f2:93:5e:41:1e:74:c6:f8:62:0e:21:5a:af: 92:c0:d8:fb:13:75:37:a8:91:e3:cf:bc:16:87:8e:31:66:9d: df:df:6d:d4:ce:78:12:82:81:89:32:2f:c9:c6:3b:c1:0f:20: 15:dd:96:00:67:4e:3f:86:df:67:11:af:b7:4d:0a:f2:39:43: 45:7f:10:17:7b:b4:b9:7e:9f:7b:bf:03:20:da:8b:76:85:d9: 90:78:80:1d:3e:b7:56:e9:54:22:04:f4:85:13:3a:4e:a5:04: 6b:82:3a:43:52:43:c8:34:bd:59:97:ed:90:26:fa:76:65:60: ae:55:58:cd:dd:00:d3:a2:93:1e:66:77:87:40:ec:d4:ef:21: be:20:e1:76:9d:04:93:12:bb:0a:82:2b:bd:ad:e0:cb:c7:ad: cd:1a:fd:34:cb:a3:04:7d:b6:03:8f:c4:62:d0:e7:b4:03:c4: ae:e0:06:6e:c1:bb:57:42:56:4f:bb:17:51:b1:0a:0c:c4:54: f1:98:98:8c:5d:4e:c9:7a:3b:80:29:e7:97:01:3c:03:b5:5c: 53:b6:94:c5:37:82:f4:83:12:2c:54:27:1b:c7:ba:b4:d8:eb: dc:ce:11:01:a6:98:e1:cc:8d:b9:16:63:ce:5c:8a:91:23:f8: 88:03:81:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHtt9G8gY0gNnKjSCU5A6nYLbBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4 QTNCNkU3OTAeFw0yNTEyMjIxNjU2MDlaFw0yNTEyMjYwMDAzMDlaMDMxMTAvBgNV BAMTKDA1QjgyNEM5OEEyOTcxQzMxODI2Mzg4Mjk1QjkzMTE4RTA0QUI1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BZz3M7VjFrM/PIOpDsaTo1ir iPz6MS4Cbf0r89iWODa70lK+nIvrVVjaxexH/qe95ZzWba5Ky+7qmmH+3Yc+1AX1 uSYii3jwNqr706RsKdkriGAZyHMW6IAQ0rNQe9DlHBBX+73yfZHL2i7GKELAnqbI z20RZwkx0m1UOgOh+DWE+cqN2BOnvTTq4YZ3FWFM03Dy2wArO5wxn2+jRiZpeZKf sa0tYdFc1F8RVgPpYREE35friYwWx+7ivghbcysFUgX/DB+Y4B7MdFh93qqv8GW5 E/4hQ2amc7GlWtJsXDLXYBicGuVUX46UKUoxRO4v+yOZMiOh7DKaZRkIOGfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBbgkyYopccMYJjiClbkxGOBKtRYwHwYDVR0j BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC NkU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjkzOWRiZjEtMzA3NS00NTE5LWJh OTAtY2VlOGQzOTc5ZmNkLzAvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNG QkE4QTNCNkU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUChET98pNeQR50xvhiDiFar5LA2PsTdTeo kePPvBaHjjFmnd/fbdTOeBKCgYkyL8nGO8EPIBXdlgBnTj+G32cRr7dNCvI5Q0V/ EBd7tLl+n3u/AyDai3aF2ZB4gB0+t1bpVCIE9IUTOk6lBGuCOkNSQ8g0vVmX7ZAm +nZlYK5VWM3dANOikx5md4dA7NTvIb4g4XadBJMSuwqCK72t4MvHrc0a/TTLowR9 tgOPxGLQ57QDxK7gBm7Bu1dCVk+7F1GxCgzEVPGYmIxdTsl6O4Ap55cBPAO1XFO2 lMU3gvSDEixUJxvHurTY69zOEQGmmOHMjbkWY85cipEj+IgDgYY= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:10 2025 by rpki-client