This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: j/q/rphkNS9AU3Wa2eZaw1ONRhAJpGOyES0NjgskkIc= Subject key identifier: 49:55:6C:A2:34:7D:1F:B3:26:13:AE:15:64:CF:B4:6B:B5:F9:3F:BF Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 625660B42BE94CF9EDE9D18B73C7B2BDAB39EB88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 010E Signing time: Sun 28 Dec 2025 22:52:33 +0000 Manifest this update: Sun 28 Dec 2025 22:47:33 +0000 Manifest next update: Thu 01 Jan 2026 08:26:33 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) 3: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: ZFw/+tn1pwNL/KPjK9VViPZccLnWHxeUKvPOnrvUUjc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 08:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:56:60:b4:2b:e9:4c:f9:ed:e9:d1:8b:73:c7:b2:bd:ab:39:eb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Dec 28 22:47:33 2025 GMT Not After : Jan 1 08:26:33 2026 GMT Subject: CN=49556CA2347D1FB32613AE1564CFB46BB5F93FBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:46:51:72:48:0c:0d:c1:f3:81:7b:37:6b:fa: 0f:0c:24:df:22:fa:04:7b:08:5f:f8:4e:fa:71:86: f4:6c:aa:b8:47:2b:8c:61:4a:b6:ec:de:91:e9:98: 58:2f:c7:c5:ec:a3:8e:8b:08:f5:df:3a:62:20:33: 91:7b:3b:67:95:50:b2:52:ca:28:49:89:1a:a3:d1: e2:76:cc:af:f1:a7:16:0e:a8:75:7d:5a:e3:56:4d: ac:6f:9e:b2:56:79:bc:4a:91:ed:43:dd:4b:b1:8c: 8a:9f:0c:ba:33:63:26:d7:16:f0:21:a0:d9:17:da: c0:17:8a:28:af:b7:50:6c:24:17:2b:23:1c:bc:c6: 86:02:52:7e:f9:7b:08:4a:0e:eb:06:72:7a:78:2f: 87:6e:d4:1b:58:bd:27:c7:f8:a2:b2:f4:7f:e3:dd: 33:39:3d:23:34:31:fc:ec:e0:ee:0e:54:af:73:e1: c1:d6:79:ef:b2:c6:06:c2:31:43:f0:b5:fe:19:ac: b1:0b:46:df:0e:af:bd:76:e3:71:bb:bc:4e:00:83: 19:40:79:30:52:f5:84:d7:c5:64:83:84:ae:12:4d: de:4f:6d:df:7c:f3:37:3d:c7:ff:74:0e:19:0a:f6: 8d:70:db:bc:5b:22:0f:84:71:ca:bd:fe:68:9c:fd: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:55:6C:A2:34:7D:1F:B3:26:13:AE:15:64:CF:B4:6B:B5:F9:3F:BF X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ae:90:7e:2a:7d:d5:e7:d0:95:89:6c:7f:d8:fc:0e:ec:ba: 53:9b:55:49:60:3c:3a:08:c8:45:87:68:3d:5c:f9:0f:71:c8: 16:28:3e:18:0b:9f:e9:be:b4:57:79:88:51:13:fd:d7:0b:7d: 34:a3:21:22:3e:6c:ed:3d:b8:94:41:76:71:a2:35:92:b3:bb: 64:d2:c3:fb:81:d3:07:27:cf:26:3c:56:07:68:a7:e2:ab:ff: 0e:d6:40:e0:67:d1:7f:0e:00:b6:40:17:33:1b:bf:08:d6:4d: d9:dc:0f:2c:2b:9d:9d:04:00:86:e0:71:6b:9b:a0:61:8e:db: 43:58:b3:2e:33:62:77:94:4b:90:94:a0:90:fb:e4:29:01:50: 72:ac:21:76:85:33:08:3a:60:47:75:4c:d3:ad:6b:bb:ee:aa: a5:e0:21:89:4a:20:9a:ae:d6:89:f4:95:9a:99:6d:08:15:50: 30:74:cb:16:0d:d2:2a:64:f5:d6:f1:40:b7:0b:d2:a4:99:55: 72:15:14:b0:03:0c:19:06:d2:21:72:9c:67:50:30:c6:aa:de: 48:59:d7:80:c6:e8:2b:4b:ab:08:58:73:b9:d5:61:ac:75:ce: 78:35:55:49:a8:e9:31:65:9e:80:e0:64:cd:f1:47:2b:43:79: 66:27:19:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlZgtCvpTPnt6dGLc8eyvas564gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTEyMjgyMjQ3MzNaFw0yNjAxMDEwODI2MzNaMDMxMTAvBgNV BAMTKDQ5NTU2Q0EyMzQ3RDFGQjMyNjEzQUUxNTY0Q0ZCNDZCQjVGOTNGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTRlFySAwNwfOBezdr+g8MJN8i +gR7CF/4TvpxhvRsqrhHK4xhSrbs3pHpmFgvx8Xso46LCPXfOmIgM5F7O2eVULJS yihJiRqj0eJ2zK/xpxYOqHV9WuNWTaxvnrJWebxKke1D3UuxjIqfDLozYybXFvAh oNkX2sAXiiivt1BsJBcrIxy8xoYCUn75ewhKDusGcnp4L4du1BtYvSfH+KKy9H/j 3TM5PSM0Mfzs4O4OVK9z4cHWee+yxgbCMUPwtf4ZrLELRt8Or71243G7vE4AgxlA eTBS9YTXxWSDhK4STd5Pbd988zc9x/90DhkK9o1w27xbIg+Eccq9/mic/bXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSVVsojR9H7MmE64VZM+0a7X5P78wHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyukH4qfdXn0JWJbH/Y/A7sulObVUlgPDoI yEWHaD1c+Q9xyBYoPhgLn+m+tFd5iFET/dcLfTSjISI+bO09uJRBdnGiNZKzu2TS w/uB0wcnzyY8Vgdop+Kr/w7WQOBn0X8OALZAFzMbvwjWTdncDywrnZ0EAIbgcWub oGGO20NYsy4zYneUS5CUoJD75CkBUHKsIXaFMwg6YEd1TNOta7vuqqXgIYlKIJqu 1on0lZqZbQgVUDB0yxYN0ipk9dbxQLcL0qSZVXIVFLADDBkG0iFynGdQMMaq3khZ 14DG6CtLqwhYc7nVYax1zng1VUmo6TFlnoDgZM3xRytDeWYnGV0= -----END CERTIFICATE-----Generated at Mon Dec 29 14:41:47 2025 by rpki-client