This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: SczIDsv7HqqehREP3eBLcnwVOgLJMmewHC7AXcoYEng= Subject key identifier: B8:01:01:76:8A:90:86:D7:D3:AF:F2:C6:64:9E:18:CE:FB:43:D2:30 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 2693526A683836B51065C6EB2BADD124A22A4FE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: D6 Signing time: Wed 17 Dec 2025 12:32:23 +0000 Manifest this update: Wed 17 Dec 2025 12:27:23 +0000 Manifest next update: Sat 20 Dec 2025 22:17:23 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: wyIbahz11aZfi2S/2RQvsZyd0i5aoghilD1jHUhVNU8=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: p2JbTeALyG9aK8WKnnAwuAWEvzJMkTyQIFNlD05DkyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:93:52:6a:68:38:36:b5:10:65:c6:eb:2b:ad:d1:24:a2:2a:4f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Dec 17 12:27:23 2025 GMT Not After : Dec 20 22:17:23 2025 GMT Subject: CN=B80101768A9086D7D3AFF2C6649E18CEFB43D230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c8:0b:14:3c:7a:42:92:b3:dd:ea:df:07:62: 6a:cd:ab:87:47:e9:7a:e6:88:7f:53:39:e4:8c:fa: fc:66:92:4b:98:4a:86:72:2d:0e:98:26:b6:04:07: ef:48:ca:0d:52:d9:5d:91:70:0f:07:ff:58:bd:23: 1a:43:03:44:d7:bf:c3:08:b1:ba:05:82:f4:6d:87: 2c:73:ba:0b:e9:21:49:41:42:18:7d:6d:97:36:a8: 4e:ae:48:f8:ec:8a:62:a7:50:bf:c8:f9:f4:f6:4c: c9:7c:b6:2a:87:3a:1f:cc:eb:c3:ac:14:ba:2d:8f: c7:02:fd:90:5e:4b:b9:a5:1e:b8:ee:00:f8:9c:b7: 5e:4c:37:dc:e9:89:6e:77:5d:7c:65:04:95:3b:5f: 01:a9:36:4a:8a:2f:7a:82:b3:6a:b8:d8:f2:d1:ac: 84:08:6d:d1:76:80:32:be:0d:4a:5c:b2:93:a8:7c: 91:93:67:4c:4c:32:fc:4b:ad:aa:00:5f:f0:b8:00: 0b:90:25:dd:7f:cc:20:39:3b:0c:f2:8c:f4:c4:ad: e4:e0:eb:6d:f6:0d:c9:f5:09:c7:77:33:61:67:71: 93:9b:ca:be:91:8f:49:5e:32:8e:62:a2:36:da:72: cb:b6:85:51:fa:c8:26:20:95:f5:bf:51:a4:a3:a6: 3b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:01:01:76:8A:90:86:D7:D3:AF:F2:C6:64:9E:18:CE:FB:43:D2:30 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:75:2b:ac:3c:05:6f:01:f6:1d:99:ce:93:a6:3b:70:97:96: ea:71:c9:33:69:dd:fe:ba:41:7a:d0:5c:e9:69:10:4d:a8:e0: 2b:8a:2f:71:23:d2:74:e5:da:61:01:6f:d5:8a:60:1d:c7:6f: ed:9f:88:f5:b3:b1:04:8f:68:5f:d0:8a:8f:2c:af:21:c2:76: a7:b6:02:18:d6:fe:fd:f8:ac:0c:8c:36:d0:dd:cb:8b:c6:94: 41:84:b1:98:ee:3b:02:e5:a8:62:ef:41:7d:4d:eb:63:4f:df: 3e:71:a7:08:b5:c8:02:f8:56:78:46:b5:f6:6d:ef:cf:40:83: 0a:40:bc:e2:30:dc:0c:34:89:83:42:7f:f4:c7:40:2f:fe:a7: 61:08:ae:d0:55:6a:78:78:3d:bf:86:60:30:ae:0a:17:fc:ed: 20:be:ed:3f:0f:e7:e6:0c:30:c4:7c:de:87:b1:18:6e:36:fe: 38:cb:b2:90:58:73:61:d8:25:4c:d9:cf:d9:31:18:d4:7b:02: f0:19:18:2f:1e:5a:00:39:da:64:d9:d9:5d:28:05:47:a6:30: a6:15:29:16:38:0e:7b:e9:8c:ee:52:99:0e:e8:5a:76:26:7f: 74:4b:6b:f4:c1:e1:96:50:26:4c:6f:b1:c1:c7:10:6b:ae:c0: b3:d9:d9:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpNSamg4NrUQZcbrK63RJKIqT+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTEyMTcxMjI3MjNaFw0yNTEyMjAyMjE3MjNaMDMxMTAvBgNV BAMTKEI4MDEwMTc2OEE5MDg2RDdEM0FGRjJDNjY0OUUxOENFRkI0M0QyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyAsUPHpCkrPd6t8HYmrNq4dH 6XrmiH9TOeSM+vxmkkuYSoZyLQ6YJrYEB+9Iyg1S2V2RcA8H/1i9IxpDA0TXv8MI sboFgvRthyxzugvpIUlBQhh9bZc2qE6uSPjsimKnUL/I+fT2TMl8tiqHOh/M68Os FLotj8cC/ZBeS7mlHrjuAPict15MN9zpiW53XXxlBJU7XwGpNkqKL3qCs2q42PLR rIQIbdF2gDK+DUpcspOofJGTZ0xMMvxLraoAX/C4AAuQJd1/zCA5OwzyjPTEreTg 6232Dcn1Ccd3M2FncZObyr6Rj0leMo5iojbacsu2hVH6yCYglfW/UaSjpjt5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuAEBdoqQhtfTr/LGZJ4YzvtD0jAwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd1K6w8BW8B9h2ZzpOmO3CXlupxyTNp3f66 QXrQXOlpEE2o4CuKL3Ej0nTl2mEBb9WKYB3Hb+2fiPWzsQSPaF/Qio8sryHCdqe2 AhjW/v34rAyMNtDdy4vGlEGEsZjuOwLlqGLvQX1N62NP3z5xpwi1yAL4VnhGtfZt 789AgwpAvOIw3Aw0iYNCf/THQC/+p2EIrtBVanh4Pb+GYDCuChf87SC+7T8P5+YM MMR83oexGG42/jjLspBYc2HYJUzZz9kxGNR7AvAZGC8eWgA52mTZ2V0oBUemMKYV KRY4DnvpjO5SmQ7oWnYmf3RLa/TB4ZZQJkxvscHHEGuuwLPZ2VI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:54 2025 by rpki-client