This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: RrpbPP/UDBn+hI/TmD+Fclm0NrUvobwSyrcgPF1aybA= Subject key identifier: A0:D6:E1:85:0B:2F:DF:F1:A4:3A:0A:34:3E:A6:0A:E4:3B:EF:DE:CA Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 0292A4C4CC70E60B61760C8285B3BDF316982FFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: D9 Signing time: Thu 25 Dec 2025 15:01:04 +0000 Manifest this update: Thu 25 Dec 2025 14:56:04 +0000 Manifest next update: Mon 29 Dec 2025 01:56:04 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: fSyGywOme+Ns0mlAdFKw4R8XnR/xR3D7td1SQntTohI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 01:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:92:a4:c4:cc:70:e6:0b:61:76:0c:82:85:b3:bd:f3:16:98:2f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Dec 25 14:56:04 2025 GMT Not After : Dec 29 01:56:04 2025 GMT Subject: CN=A0D6E1850B2FDFF1A43A0A343EA60AE43BEFDECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:ec:5d:87:a9:7b:2d:84:3e:67:28:3d:54: b1:9f:1f:85:48:2b:0a:5e:08:00:79:95:92:bb:e3: 8e:34:5b:9d:47:f8:66:2b:2c:ed:00:4b:96:33:63: 88:d0:c4:cf:11:de:8b:e1:61:c4:ee:84:97:53:65: be:8b:ba:d6:5e:4b:dc:67:1f:b2:60:22:f0:4c:67: 07:a4:7e:77:61:b5:d5:3f:16:c0:fe:dd:dc:0a:bf: ab:bc:64:e2:7f:7c:0d:31:65:de:b5:6c:1c:59:b2: 1f:71:5e:b3:d9:95:d0:ce:81:90:1b:c7:28:1b:f0: 37:ac:f4:10:e5:44:77:d0:04:b7:c0:57:bd:6e:2a: 75:a7:0c:b8:85:71:f6:c5:ff:c2:77:53:f5:b1:f7: 46:38:9d:e4:1d:1b:3d:ce:0b:d0:28:ea:e7:50:f9: bb:aa:61:85:c2:13:c9:99:86:18:cc:78:61:ea:8c: 8b:9a:44:76:10:c6:01:8c:d3:5d:98:88:58:53:9c: 07:04:a3:59:9b:1d:72:ab:95:c8:c9:4d:15:46:49: 6a:a9:45:7f:d4:af:8c:e3:da:1a:62:16:95:e2:41: fb:55:e2:2d:e9:9d:4b:c0:73:57:ee:7c:39:ba:7b: 01:f2:3c:32:21:66:d3:33:84:6e:ee:ca:d5:6c:5d: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D6:E1:85:0B:2F:DF:F1:A4:3A:0A:34:3E:A6:0A:E4:3B:EF:DE:CA X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ff:a1:ea:8a:76:9d:51:d6:22:db:52:85:d1:c2:84:6c:35: c2:0e:c4:81:ed:e7:5c:d7:5b:b9:e3:77:bc:85:84:ff:8a:d2: ce:4e:8a:89:0f:76:e2:cd:9b:d2:01:81:f6:ff:41:13:28:0e: 36:41:12:18:8b:b6:1d:2a:30:c5:a1:05:80:aa:1d:b8:4d:12: 3c:a2:65:e1:6d:63:01:f9:7d:aa:89:22:df:22:cc:e6:c2:be: 88:44:4b:d5:ab:46:7a:b8:ec:fb:df:cd:d6:6d:f2:dc:96:a0: e3:3f:53:5a:d7:c2:f5:9e:8e:34:b8:18:25:d2:91:b9:6d:9b: a8:90:9b:cf:1c:83:e4:8b:27:b2:34:91:3e:e7:5b:91:31:3e: 16:1a:c0:f5:4e:58:0a:d7:da:27:42:4a:b2:ad:f0:e2:66:01: 9d:46:58:b1:02:9f:8e:1e:62:e5:d1:20:8b:6c:c7:e6:ef:b2: d2:18:18:8f:b2:7f:41:22:ff:2f:43:b1:1d:92:63:8d:23:ed: c9:92:41:2f:63:dd:5b:9e:a5:80:ef:ed:47:81:e3:65:6f:77: 69:87:ed:d5:89:48:66:bd:ae:dd:79:14:2d:d0:55:91:d7:b2: 2c:b4:d2:b8:81:b5:bc:83:c3:bf:a9:ad:3a:e5:07:b3:32:63: de:e1:11:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApKkxMxw5gthdgyChbO98xaYL/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTEyMjUxNDU2MDRaFw0yNTEyMjkwMTU2MDRaMDMxMTAvBgNV BAMTKEEwRDZFMTg1MEIyRkRGRjFBNDNBMEEzNDNFQTYwQUU0M0JFRkRFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXexdh6l7LYQ+Zyg9VLGfH4VI KwpeCAB5lZK74440W51H+GYrLO0AS5YzY4jQxM8R3ovhYcTuhJdTZb6LutZeS9xn H7JgIvBMZwekfndhtdU/FsD+3dwKv6u8ZOJ/fA0xZd61bBxZsh9xXrPZldDOgZAb xygb8Des9BDlRHfQBLfAV71uKnWnDLiFcfbF/8J3U/Wx90Y4neQdGz3OC9Ao6udQ +buqYYXCE8mZhhjMeGHqjIuaRHYQxgGM012YiFhTnAcEo1mbHXKrlcjJTRVGSWqp RX/Ur4zj2hpiFpXiQftV4i3pnUvAc1fufDm6ewHyPDIhZtMzhG7uytVsXc/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNbhhQsv3/GkOgo0PqYK5Dvv3sowHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABr/oeqKdp1R1iLbUoXRwoRsNcIOxIHt51zX W7njd7yFhP+K0s5OiokPduLNm9IBgfb/QRMoDjZBEhiLth0qMMWhBYCqHbhNEjyi ZeFtYwH5faqJIt8izObCvohES9WrRnq47PvfzdZt8tyWoOM/U1rXwvWejjS4GCXS kbltm6iQm88cg+SLJ7I0kT7nW5ExPhYawPVOWArX2idCSrKt8OJmAZ1GWLECn44e YuXRIItsx+bvstIYGI+yf0Ei/y9DsR2SY40j7cmSQS9j3VuepYDv7UeB42Vvd2mH 7dWJSGa9rt15FC3QVZHXsiy00riBtbyDw7+prTrlB7MyY97hEWQ= -----END CERTIFICATE-----Generated at Sat Dec 27 15:55:04 2025 by rpki-client