This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: 2ddWlB9aDA0qqTkc0K8ycwMBxwOOQNZIzz1ZTwLvbuo= Subject key identifier: EA:C3:B8:C3:6F:8D:A1:F6:C9:75:77:26:23:B9:1C:CD:C0:CB:7B:FA Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 317ED3C6604C40F0637CF16BBEE9C14735E034AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 021B Signing time: Mon 22 Dec 2025 03:41:08 +0000 Manifest this update: Mon 22 Dec 2025 03:36:08 +0000 Manifest next update: Thu 25 Dec 2025 15:39:08 +0000 Files and hashes: 1: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) 2: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) 3: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) 4: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: Vnvlo/4tlnmGCXCHexzm6W3+EZxW9Zz2pW061oz/qGA=) 5: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7e:d3:c6:60:4c:40:f0:63:7c:f1:6b:be:e9:c1:47:35:e0:34:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Dec 22 03:36:08 2025 GMT Not After : Dec 25 15:39:08 2025 GMT Subject: CN=EAC3B8C36F8DA1F6C975772623B91CCDC0CB7BFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:52:02:08:5f:e9:31:c9:0a:78:e6:67:a9: 67:59:be:4f:a2:b4:ed:3d:8f:4d:0e:a0:5f:ca:47: 78:d8:5e:88:19:03:9e:7f:64:4a:2c:ff:42:24:15: 48:29:b3:16:a0:83:88:39:5f:20:c1:7c:a6:7b:50: 03:8e:e2:4e:e2:2d:87:db:cc:45:99:1f:4a:34:be: 35:32:79:ee:5e:7e:8a:b6:df:ee:74:21:bf:2c:6a: 25:45:e3:2b:d6:6a:9d:21:4d:89:a7:08:55:34:86: 62:92:60:83:41:d0:5d:a3:c3:4e:13:89:b6:32:b8: e9:d6:5f:d2:88:66:9c:af:9e:ca:d7:df:36:16:49: 4d:3b:68:0e:94:10:4a:63:7b:52:ff:5f:d3:0a:b8: 09:d5:2b:9c:3c:50:75:c1:9e:9e:21:bf:51:07:d2: 03:2f:17:0e:92:e8:a8:4b:73:03:50:ff:cc:b8:81: 71:34:0c:46:73:1c:f5:dc:b5:17:66:9e:1e:e8:12: fb:32:4f:91:08:92:2b:ea:bd:30:f9:4d:5c:8f:ce: 32:62:be:78:e0:86:48:5d:47:fc:da:ef:62:e6:e4: 7b:c1:c7:13:9f:b3:f8:68:e5:48:cf:1e:1d:f3:e7: 15:95:d5:59:5c:7b:47:31:45:ae:f7:03:f0:c7:e2: 2c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C3:B8:C3:6F:8D:A1:F6:C9:75:77:26:23:B9:1C:CD:C0:CB:7B:FA X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f8:1b:44:ee:7f:41:29:7a:e8:1b:8c:0e:94:b5:39:b0:13: ad:c0:af:e0:97:ad:17:58:39:2c:1d:36:2a:db:6a:8a:4a:1d: 7b:ca:ca:36:b2:37:1c:a4:81:be:42:ee:f1:7d:fe:04:a6:95: 85:64:e1:d5:a4:e7:3c:f9:cd:5d:27:2f:b8:27:e5:0f:be:ec: 34:da:16:21:d9:f7:4c:73:af:cd:d7:14:bb:f9:6d:b0:81:c7: 3d:ba:f2:b0:b8:29:72:b0:bc:49:57:0e:47:49:ee:90:c7:3c: 0c:51:9a:ad:67:94:ad:78:44:39:cd:55:a3:54:c1:de:c0:d4: 78:2a:83:ff:ba:9d:fd:4a:82:52:ba:d7:3a:40:ba:38:75:76: 95:8a:64:50:dd:0d:5d:7c:8a:8b:5d:5f:7d:e3:0b:01:9a:85: 45:6c:41:fd:61:fb:01:f0:17:2a:e1:89:79:be:e9:f3:af:5a: 92:dc:ca:05:9d:16:fa:cc:b1:4e:2c:a3:76:39:03:a4:a3:d9: 4e:16:a9:ac:ee:51:5e:e7:a0:32:3e:05:17:97:1e:8c:08:1a: 19:a9:b2:af:75:b0:2e:c9:4e:0a:c6:1c:44:4e:f5:41:9a:81: bf:27:cc:e6:2f:53:5d:c9:e5:79:a5:d8:c0:9f:b9:70:f7:c8: d1:8e:9f:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMX7TxmBMQPBjfPFrvunBRzXgNKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNTEyMjIwMzM2MDhaFw0yNTEyMjUxNTM5MDhaMDMxMTAvBgNV BAMTKEVBQzNCOEMzNkY4REExRjZDOTc1NzcyNjIzQjkxQ0NEQzBDQjdCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UFICCF/pMckKeOZnqWdZvk+i tO09j00OoF/KR3jYXogZA55/ZEos/0IkFUgpsxagg4g5XyDBfKZ7UAOO4k7iLYfb zEWZH0o0vjUyee5efoq23+50Ib8saiVF4yvWap0hTYmnCFU0hmKSYINB0F2jw04T ibYyuOnWX9KIZpyvnsrX3zYWSU07aA6UEEpje1L/X9MKuAnVK5w8UHXBnp4hv1EH 0gMvFw6S6KhLcwNQ/8y4gXE0DEZzHPXctRdmnh7oEvsyT5EIkivqvTD5TVyPzjJi vnjghkhdR/za72Lm5HvBxxOfs/ho5UjPHh3z5xWV1Vlce0cxRa73A/DH4iwJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6sO4w2+NofbJdXcmI7kczcDLe/owHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIv4G0Tuf0EpeugbjA6UtTmwE63Ar+CXrRdY OSwdNirbaopKHXvKyjayNxykgb5C7vF9/gSmlYVk4dWk5zz5zV0nL7gn5Q++7DTa FiHZ90xzr83XFLv5bbCBxz268rC4KXKwvElXDkdJ7pDHPAxRmq1nlK14RDnNVaNU wd7A1Hgqg/+6nf1KglK61zpAujh1dpWKZFDdDV18iotdX33jCwGahUVsQf1h+wHw FyrhiXm+6fOvWpLcygWdFvrMsU4so3Y5A6Sj2U4WqazuUV7noDI+BReXHowIGhmp sq91sC7JTgrGHERO9UGagb8nzOYvU13J5Xml2MCfuXD3yNGOn8g= -----END CERTIFICATE-----Generated at Tue Dec 23 05:34:30 2025 by rpki-client