This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: lDKKolaolz6rvN2QGyYFDpvzCaDWwNANbt5h1O36mV4= Subject key identifier: 48:AB:40:E9:C9:E6:22:64:7B:C0:4C:AF:38:43:ED:71:E9:EB:39:6C Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 5EB83DE53AD1264EA15114D4C909A1D2F13720A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 010C Signing time: Wed 24 Dec 2025 09:13:01 +0000 Manifest this update: Wed 24 Dec 2025 09:08:01 +0000 Manifest next update: Sat 27 Dec 2025 11:51:01 +0000 Files and hashes: 1: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) 2: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) 3: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: zeNGvZGkrC0F6D1azKexx+vZaFsH5lxiNUDBu1zuNZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b8:3d:e5:3a:d1:26:4e:a1:51:14:d4:c9:09:a1:d2:f1:37:20:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Dec 24 09:08:01 2025 GMT Not After : Dec 27 11:51:01 2025 GMT Subject: CN=48AB40E9C9E622647BC04CAF3843ED71E9EB396C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:38:40:d0:34:85:f2:0a:07:65:8c:60:22: 4b:ff:b7:fd:10:c7:f6:9e:a2:f3:d5:c2:da:72:b2: 1d:4b:17:b6:20:60:9a:4a:b6:19:22:71:14:25:7d: f3:81:96:0d:c8:72:fe:0e:9f:9f:0f:62:57:ed:46: 3f:42:2d:15:de:7c:4f:40:e9:c9:b9:0d:8a:be:e5: cf:42:98:9b:73:80:68:14:f3:b1:df:ce:4c:c5:88: f7:51:5e:8f:e3:40:96:03:7a:28:9e:3e:37:ea:b0: 7d:27:46:d1:5f:1d:8e:f5:99:c6:ae:37:e1:5c:94: ef:6d:84:8c:a3:c3:9a:35:98:f1:f3:0c:8c:0f:66: 35:94:16:61:fe:44:f9:ad:e7:42:be:95:c2:f8:40: 1a:77:15:20:ca:3d:5b:0a:83:6f:00:c1:36:ad:ce: fa:5d:d5:2a:00:4b:13:8a:ab:aa:cf:76:88:de:7c: e9:9b:35:18:16:48:46:6c:20:0a:21:31:c8:9d:6f: 2e:85:74:05:1d:5e:00:48:7f:88:a3:e6:af:27:ef: db:b5:1f:72:6a:b0:36:84:c6:2b:53:1d:10:34:ce: e5:00:77:72:5a:fb:71:af:f6:a9:98:02:3b:2b:b9: a4:17:d9:62:19:b7:9a:ad:30:a1:25:ca:00:c4:e1: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AB:40:E9:C9:E6:22:64:7B:C0:4C:AF:38:43:ED:71:E9:EB:39:6C X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:97:d8:8a:e4:03:86:a5:76:2b:e2:4c:c5:c3:da:87:8a:48: b7:e1:fd:22:fa:db:fb:72:0e:fa:91:75:97:9a:74:46:d1:43: 9a:56:34:01:5f:c1:2f:59:3f:b0:cf:d7:22:62:50:9c:23:89: 03:7d:76:df:21:ce:9e:ba:3b:da:56:97:f2:22:f2:f1:0e:71: 36:da:c6:e6:98:4d:5d:d6:ab:bb:cb:d1:40:b3:e5:6c:98:f7: 1b:30:65:c3:4c:2b:6b:b6:e6:5d:cb:23:c8:52:39:2a:51:fa: 5f:1c:16:31:e8:e6:5e:e6:17:f2:e7:77:8f:d9:d2:da:27:16: 0e:de:20:1a:84:c5:73:06:29:48:55:a7:e2:24:b8:a7:ab:b5: 98:24:f4:09:ed:ed:e9:ab:d7:a9:89:21:5d:72:f9:ef:46:07: c9:dd:22:10:69:96:06:4a:b8:bd:5e:8c:bf:4b:b7:ea:8f:cd: 8c:cc:58:d0:10:63:64:75:b3:2a:a0:f8:f7:71:bb:a4:3b:94: 2a:d3:0b:2e:ec:2b:fc:0d:d0:e9:43:d2:97:8e:a2:0d:b3:2a: f9:cc:e1:78:a6:c2:0d:b5:d7:d9:2d:73:ed:38:b9:dc:7a:aa: 6a:e0:39:d2:08:1c:ef:e8:e2:77:fe:cc:b5:09:cf:a5:f2:59: a4:b8:77:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrg95TrRJk6hURTUyQmh0vE3IKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTEyMjQwOTA4MDFaFw0yNTEyMjcxMTUxMDFaMDMxMTAvBgNV BAMTKDQ4QUI0MEU5QzlFNjIyNjQ3QkMwNENBRjM4NDNFRDcxRTlFQjM5NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqjhA0DSF8goHZYxgIkv/t/0Q x/aeovPVwtpysh1LF7YgYJpKthkicRQlffOBlg3Icv4On58PYlftRj9CLRXefE9A 6cm5DYq+5c9CmJtzgGgU87HfzkzFiPdRXo/jQJYDeiiePjfqsH0nRtFfHY71mcau N+FclO9thIyjw5o1mPHzDIwPZjWUFmH+RPmt50K+lcL4QBp3FSDKPVsKg28AwTat zvpd1SoASxOKq6rPdojefOmbNRgWSEZsIAohMcidby6FdAUdXgBIf4ij5q8n79u1 H3JqsDaExitTHRA0zuUAd3Ja+3Gv9qmYAjsruaQX2WIZt5qtMKElygDE4U5FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSKtA6cnmImR7wEyvOEPtcenrOWwwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWX2IrkA4aldiviTMXD2oeKSLfh/SL62/ty DvqRdZeadEbRQ5pWNAFfwS9ZP7DP1yJiUJwjiQN9dt8hzp66O9pWl/Ii8vEOcTba xuaYTV3Wq7vL0UCz5WyY9xswZcNMK2u25l3LI8hSOSpR+l8cFjHo5l7mF/Lnd4/Z 0tonFg7eIBqExXMGKUhVp+IkuKertZgk9Ant7emr16mJIV1y+e9GB8ndIhBplgZK uL1ejL9Lt+qPzYzMWNAQY2R1syqg+Pdxu6Q7lCrTCy7sK/wN0OlD0peOog2zKvnM 4Ximwg2119ktc+04udx6qmrgOdIIHO/o4nf+zLUJz6XyWaS4d40= -----END CERTIFICATE-----Generated at Thu Dec 25 14:21:53 2025 by rpki-client