This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft File: B197F427572524588487CFDB163A9E512FAE4DF2.mft (raw, json) Hash identifier: +ZFUOWvtYP0anuuQG1r8LwkOFc+qmYIaTazBhTt1E0Q= Subject key identifier: 11:B3:3A:F8:83:E0:AA:5A:DA:36:9A:09:95:E6:3A:4D:85:20:74:49 Authority key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Certificate issuer: /CN=B197F427572524588487CFDB163A9E512FAE4DF2 Certificate serial: 667BBD140FE03670344169D46C9CFE2F3A9DC336 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft Manifest number: 0254 Signing time: Thu 18 Dec 2025 09:11:28 +0000 Manifest this update: Thu 18 Dec 2025 09:06:28 +0000 Manifest next update: Sun 21 Dec 2025 15:44:28 +0000 Files and hashes: 1: B197F427572524588487CFDB163A9E512FAE4DF2.crl (hash: sl8ysR3VFd9D7QCEEPg7F0xalcyrZSA+quA7rOyqkQ4=) 2: 3130332e3135332e3234372e302f32342d3234203d3e20313430343735.roa (hash: IlIKis9hrjcqU4gajZ2m+r4qTrp6BInf4S11M61jB+A=) 3: 323430363a346563303a3a2f33322d3332203d3e20313430343735.roa (hash: sqH8mgq0fr+XiznMLTzogmtodA1+q341U0FlkHOzY5k=) 4: 3130332e3135332e3234362e302f32342d3234203d3e20313430343735.roa (hash: BU1Q0ryHM0MlXG1Q7vZvhi4oAbOwc3sWBEiOeckA5Ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:7b:bd:14:0f:e0:36:70:34:41:69:d4:6c:9c:fe:2f:3a:9d:c3:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Validity Not Before: Dec 18 09:06:28 2025 GMT Not After : Dec 21 15:44:28 2025 GMT Subject: CN=11B33AF883E0AA5ADA369A0995E63A4D85207449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:17:26:d2:d6:4d:43:cf:02:e6:c5:9c:b4: 5b:0b:ed:d9:80:dd:37:36:57:a4:57:2e:43:38:09: 0a:e8:ce:c7:fb:f3:5c:cc:53:73:bd:8b:eb:23:97: 58:a5:f8:bf:77:7c:c1:5c:3a:95:16:33:dd:fa:2a: 11:78:6b:cb:76:9f:32:ab:9d:cc:39:40:51:53:22: e6:c9:57:af:9e:1f:53:56:ab:b6:fc:46:87:e9:65: 4f:9c:56:d6:f2:e2:7e:9d:62:72:8e:e8:58:0c:3a: 67:60:35:81:aa:1f:08:d4:d6:2b:38:56:d2:ec:20: 71:28:2a:c2:9b:8f:66:e6:40:b3:66:84:d0:fb:68: 1d:84:cd:9c:f8:13:38:ea:a5:ab:86:aa:34:19:88: f6:3f:f7:80:0f:95:5b:db:2b:40:19:cb:c4:19:55: 1a:c8:b7:06:d4:85:56:aa:d1:80:62:ff:17:fe:48: e5:64:2c:7b:83:36:bf:aa:62:5d:93:30:90:cc:c5: 13:6e:01:30:79:26:32:a6:ff:ca:26:63:d1:7b:1a: a4:5d:42:95:48:24:c8:85:bf:53:35:15:b0:dc:48: fa:c1:56:60:8b:45:34:46:22:ad:2b:bc:c2:15:aa: 27:b3:c1:cb:5e:e3:7c:bb:99:09:7d:bb:ec:0e:72: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B3:3A:F8:83:E0:AA:5A:DA:36:9A:09:95:E6:3A:4D:85:20:74:49 X509v3 Authority Key Identifier: keyid:B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:63:69:5c:b8:6f:05:ca:f4:65:32:ce:97:81:0e:d7:b2:05: e8:06:bb:ef:00:96:9f:a3:ab:87:42:55:b9:b6:c9:5a:64:c9: 96:b3:04:03:45:05:03:6c:b5:58:bb:7c:c6:c3:a9:fd:a9:b3: 29:26:b7:75:63:67:b9:62:0d:18:20:df:42:ba:80:7a:3d:2a: dd:ca:22:e8:b1:41:ad:d7:56:96:12:7e:d2:51:04:36:d3:7e: cc:9f:c1:66:63:86:8c:d4:57:69:b4:78:5e:21:b5:dd:18:5a: 32:65:41:94:13:85:58:76:41:78:13:38:38:2b:54:46:10:68: 64:96:33:81:c1:a7:b5:46:e2:c3:79:14:d0:ab:60:5c:aa:42: f9:0d:6e:89:1f:58:66:a8:03:5a:f8:e8:ad:cc:cd:0d:19:3e: e6:81:b4:e2:7e:fb:a7:48:07:d4:70:f3:98:97:12:5d:29:e3: 3c:3b:9c:94:90:7e:8f:5a:85:63:4f:26:9d:44:d7:8e:9b:ab: ba:64:2c:5f:a3:77:77:7f:c5:e3:1c:b2:81:33:de:df:6a:8e: 98:9d:35:64:0c:56:40:05:4d:6a:a5:73:19:3b:a3:f3:d6:4e: 88:5e:74:b9:02:6d:a8:78:3a:7e:d5:96:a9:fd:17:f5:c5:0c: 08:26:27:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZnu9FA/gNnA0QWnUbJz+LzqdwzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEy RkFFNERGMjAeFw0yNTEyMTgwOTA2MjhaFw0yNTEyMjExNTQ0MjhaMDMxMTAvBgNV BAMTKDExQjMzQUY4ODNFMEFBNUFEQTM2OUEwOTk1RTYzQTREODUyMDc0NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPRcm0tZNQ88C5sWctFsL7dmA 3Tc2V6RXLkM4CQrozsf781zMU3O9i+sjl1il+L93fMFcOpUWM936KhF4a8t2nzKr ncw5QFFTIubJV6+eH1NWq7b8RofpZU+cVtby4n6dYnKO6FgMOmdgNYGqHwjU1is4 VtLsIHEoKsKbj2bmQLNmhND7aB2EzZz4EzjqpauGqjQZiPY/94APlVvbK0AZy8QZ VRrItwbUhVaq0YBi/xf+SOVkLHuDNr+qYl2TMJDMxRNuATB5JjKm/8omY9F7GqRd QpVIJMiFv1M1FbDcSPrBVmCLRTRGIq0rvMIVqiezwcte43y7mQl9u+wOci1JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEbM6+IPgqlraNpoJleY6TYUgdEkwHwYDVR0j BBgwFoAUsZf0J1clJFiEh8/bFjqeUS+uTfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMC9CMTk3RjQyNzU3 MjUyNDU4ODQ4N0NGREIxNjNBOUU1MTJGQUU0REYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlFNTEyRkFF NERGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGRjZjQwNjctYTY5ZC00OTA4LWJl ZTgtYjQ2NTViZGMxNWY4LzAvQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdDRkRCMTYzQTlF NTEyRkFFNERGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNjaVy4bwXK9GUyzpeBDteyBegGu+8Alp+j q4dCVbm2yVpkyZazBANFBQNstVi7fMbDqf2psykmt3VjZ7liDRgg30K6gHo9Kt3K IuixQa3XVpYSftJRBDbTfsyfwWZjhozUV2m0eF4htd0YWjJlQZQThVh2QXgTODgr VEYQaGSWM4HBp7VG4sN5FNCrYFyqQvkNbokfWGaoA1r46K3MzQ0ZPuaBtOJ++6dI B9Rw85iXEl0p4zw7nJSQfo9ahWNPJp1E146bq7pkLF+jd3d/xeMcsoEz3t9qjpid NWQMVkAFTWqlcxk7o/PWTohedLkCbah4On7Vlqn9F/XFDAgmJ18= -----END CERTIFICATE-----Generated at Sat Dec 20 10:00:43 2025 by rpki-client