This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: hCdvaXFf4Dl8kN3+k6Yb5gRBBibZ7t1VotE8JhRDn/w= Subject key identifier: 82:45:C2:28:09:6D:3D:EC:F0:A0:0A:65:73:18:B3:34:27:AC:C3:A6 Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 2261FEF82047C7183FBA2E35584A3F9EF75DAA6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: D8 Signing time: Tue 23 Dec 2025 11:21:46 +0000 Manifest this update: Tue 23 Dec 2025 11:16:46 +0000 Manifest next update: Fri 26 Dec 2025 14:54:46 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: zP29jxBPlvDhlCldbUrYGUZ1r1XPfGYEF/176HvQEtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 14:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:61:fe:f8:20:47:c7:18:3f:ba:2e:35:58:4a:3f:9e:f7:5d:aa:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Dec 23 11:16:46 2025 GMT Not After : Dec 26 14:54:46 2025 GMT Subject: CN=8245C228096D3DECF0A00A657318B33427ACC3A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c0:d5:9a:d1:02:f1:6a:b2:e5:d4:de:7a:ac: 7d:09:b7:3f:9b:d7:d3:5f:42:68:0a:a5:09:42:b1: 4b:cc:a4:25:e1:aa:40:5c:c6:1d:79:b3:d1:59:8b: 79:45:29:87:ed:18:83:ba:06:12:a5:23:5b:26:73: 4a:56:79:65:16:3f:ff:ff:69:83:3f:32:a4:86:6a: b1:49:69:e2:36:1f:71:b4:8d:6b:55:8a:0f:25:7d: fe:8c:16:29:21:37:35:5f:f5:85:f3:cc:8a:2e:11: eb:f1:4a:52:7d:5b:67:7e:23:8a:93:d2:0e:1e:81: 93:73:ab:3d:8b:56:10:b5:56:e5:dd:9d:1d:a7:3a: 6f:ea:34:97:b5:6d:a6:11:69:38:e5:1c:59:48:7d: ba:9c:e8:8b:98:ff:e0:d4:ca:6b:83:11:c7:97:11: d4:48:a2:a6:c4:c6:23:7b:c5:41:54:15:ee:26:95: 19:66:39:3c:29:ad:63:a4:24:e5:9f:da:4f:7e:b9: 5b:96:5b:81:c4:d8:0a:c7:7b:22:33:e1:a0:9e:2d: 9e:49:fc:ca:38:92:04:ac:5d:77:54:17:c9:12:74: d1:68:ea:9a:f4:54:f2:53:96:35:f8:ca:78:b9:26: fd:22:63:f8:97:84:e0:f7:23:0c:2e:b1:2f:dc:d2: 75:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:45:C2:28:09:6D:3D:EC:F0:A0:0A:65:73:18:B3:34:27:AC:C3:A6 X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:a3:a9:f2:74:1f:41:8d:68:a6:21:2c:b0:02:6f:bc:26:18: 4d:96:e6:65:1f:8c:56:30:ac:be:7d:ae:4c:72:72:44:67:e4: 51:31:2e:54:6d:48:b3:20:e2:73:81:77:aa:c3:25:b8:24:90: 2d:2a:9f:48:58:4e:f7:52:f0:29:e2:ff:8a:9e:c0:9d:36:d1: a0:67:36:a0:2f:16:9a:01:59:cb:26:95:c2:55:e9:2e:ba:63: a5:79:bc:70:8b:17:2a:97:55:31:e6:97:62:30:5a:40:b9:f1: 73:0b:0e:b9:99:e3:85:ed:ea:0a:05:e5:92:ad:4c:f6:1c:02: e4:6a:84:56:29:d7:49:5c:c6:c0:24:79:3d:43:84:1f:de:db: 12:a5:cb:17:de:48:d8:7d:ec:5d:53:22:3a:30:51:be:65:55: b5:b7:10:03:40:99:20:94:02:c1:81:99:e5:d8:3c:ce:db:5e: 10:09:a9:31:0a:6f:7a:d8:b8:9f:78:66:af:4b:07:6c:0a:e3: fc:f1:d0:6c:53:d7:83:e5:37:37:65:be:d9:32:d2:b0:d0:b1: 4b:04:82:8f:3a:9b:ab:dd:9d:18:57:ce:dd:fe:01:18:6f:2c: 87:4f:c6:d7:85:1b:ed:e7:db:13:3d:90:89:c5:5a:6d:3d:63: d1:ce:53:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImH++CBHxxg/ui41WEo/nvddqm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTEyMjMxMTE2NDZaFw0yNTEyMjYxNDU0NDZaMDMxMTAvBgNV BAMTKDgyNDVDMjI4MDk2RDNERUNGMEEwMEE2NTczMThCMzM0MjdBQ0MzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXwNWa0QLxarLl1N56rH0Jtz+b 19NfQmgKpQlCsUvMpCXhqkBcxh15s9FZi3lFKYftGIO6BhKlI1smc0pWeWUWP/// aYM/MqSGarFJaeI2H3G0jWtVig8lff6MFikhNzVf9YXzzIouEevxSlJ9W2d+I4qT 0g4egZNzqz2LVhC1VuXdnR2nOm/qNJe1baYRaTjlHFlIfbqc6IuY/+DUymuDEceX EdRIoqbExiN7xUFUFe4mlRlmOTwprWOkJOWf2k9+uVuWW4HE2ArHeyIz4aCeLZ5J /Mo4kgSsXXdUF8kSdNFo6pr0VPJTljX4yni5Jv0iY/iXhOD3IwwusS/c0nXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgkXCKAltPezwoAplcxizNCesw6YwHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSjqfJ0H0GNaKYhLLACb7wmGE2W5mUfjFYw rL59rkxyckRn5FExLlRtSLMg4nOBd6rDJbgkkC0qn0hYTvdS8Cni/4qewJ020aBn NqAvFpoBWcsmlcJV6S66Y6V5vHCLFyqXVTHml2IwWkC58XMLDrmZ44Xt6goF5ZKt TPYcAuRqhFYp10lcxsAkeT1DhB/e2xKlyxfeSNh97F1TIjowUb5lVbW3EANAmSCU AsGBmeXYPM7bXhAJqTEKb3rYuJ94Zq9LB2wK4/zx0GxT14PlNzdlvtky0rDQsUsE go86m6vdnRhXzt3+ARhvLIdPxteFG+3n2xM9kInFWm09Y9HOUzQ= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:35 2025 by rpki-client