This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: UkYE8elfwhYAnfyIc330CC0blpxojqX9ArklhQ/afO8= Subject key identifier: B8:81:80:5C:8B:04:E8:BC:6A:47:BB:0C:56:9A:30:ED:93:C9:03:08 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 145548D1172C942C5425A23F3616E870B797EF67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 037E Signing time: Sun 14 Dec 2025 16:52:01 +0000 Manifest this update: Sun 14 Dec 2025 16:47:01 +0000 Manifest next update: Thu 18 Dec 2025 03:00:01 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: yhKeiwU+JCs9UN8oh228h1Q0h11o4+yJwLGZRxsDQjM=) 2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: KGeHvvLL7YUj6ruPXwXmEedVa7petv8U3MdeekZgjts=) 3: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: yVuF8M944W040OvH7Je8xMIUcWYDhskJr5cdDMgM53M=) 4: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: /rt35EUSw4Ix6/cmxLUEYEesdVZ42xEum9IJJSBZ0aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 03:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:55:48:d1:17:2c:94:2c:54:25:a2:3f:36:16:e8:70:b7:97:ef:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Dec 14 16:47:01 2025 GMT Not After : Dec 18 03:00:01 2025 GMT Subject: CN=B881805C8B04E8BC6A47BB0C569A30ED93C90308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:45:1b:15:6f:71:55:ef:35:73:31:7e:7f:c0: e9:a8:2d:68:00:3b:36:dc:f1:1b:32:f4:c7:c0:a0: dc:11:15:7c:7d:a0:31:2b:27:85:b0:b7:58:7b:8c: 01:e9:a0:f8:ee:5a:e0:e9:5a:d9:16:d5:68:76:4f: 4a:65:c2:16:60:da:35:7e:82:c5:28:33:e9:f6:83: 7e:3e:1f:30:d1:2f:d8:9b:b6:26:8c:3b:e8:d4:25: b9:13:ec:a9:85:5b:ca:5a:57:49:79:19:dc:b5:66: 47:54:0e:58:97:1a:ef:fb:06:b3:ac:bd:e3:64:21: ec:40:0e:87:8f:11:55:af:cd:36:98:4a:1d:cd:0c: fe:0e:da:a9:59:ec:12:59:a5:0e:68:b2:a5:2f:5d: 59:78:b1:73:5b:f7:cd:65:8d:36:af:63:78:05:8e: bc:7e:e4:b2:32:5e:37:b0:d6:87:5d:69:55:a5:82: f7:6c:e2:e4:16:78:65:f7:7d:9b:ca:6b:42:f0:14: 0f:f3:83:78:d9:9d:26:d3:bc:3d:20:5f:d0:97:96: 8f:96:e6:42:70:cd:f8:19:b5:ae:d9:2c:33:6a:07: 6f:1e:50:32:20:b4:98:3d:b1:76:bf:a1:15:16:df: 2c:63:cc:db:52:a3:55:2e:78:f6:07:f1:a0:1f:f8: 61:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:81:80:5C:8B:04:E8:BC:6A:47:BB:0C:56:9A:30:ED:93:C9:03:08 X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:71:cb:34:b6:e6:b5:ab:44:82:36:59:97:c4:d2:ed:a7:ee: a7:1f:b3:96:41:9e:f5:75:0f:94:2e:bd:34:1a:ba:26:78:46: c5:e9:62:88:90:65:7a:61:c5:0f:74:2a:84:f0:b1:45:dd:39: 78:cd:c0:ba:6d:c7:00:0d:e6:2b:1b:78:b1:aa:5e:48:a4:f9: 2a:69:4b:6d:9e:dd:40:9d:b9:1e:8e:3a:05:ec:d5:96:23:db: 41:b7:19:18:05:c9:65:19:8c:ea:12:d3:03:42:93:8e:33:a4: 84:6c:14:e8:07:88:39:91:8b:f7:b6:6b:5f:e3:a8:e6:d1:c7: 98:a4:89:40:15:ea:d3:c8:8f:11:6a:a5:88:e1:bb:d3:0f:f2: 5c:36:4a:6e:62:e6:13:09:d1:8f:20:22:c0:3c:a2:a3:69:04: d1:fe:a2:ea:70:bb:46:15:13:34:64:9d:ec:cd:27:61:ae:92: 6a:f9:7f:fe:8f:d3:c9:cc:4f:ae:b7:7e:95:6b:f6:8f:5f:64: 45:0a:95:d8:26:d6:f1:e4:12:b2:f2:da:6c:00:f7:f2:b1:47: 6d:44:8b:09:2e:e8:d5:d5:c4:2e:06:be:cc:96:25:f0:b7:d6: 70:5f:78:79:74:dc:1d:be:3a:24:58:41:35:49:a2:0f:5c:ff: 33:48:01:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFVI0RcslCxUJaI/NhbocLeX72cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNTEyMTQxNjQ3MDFaFw0yNTEyMTgwMzAwMDFaMDMxMTAvBgNV BAMTKEI4ODE4MDVDOEIwNEU4QkM2QTQ3QkIwQzU2OUEzMEVEOTNDOTAzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRRsVb3FV7zVzMX5/wOmoLWgA Ozbc8Rsy9MfAoNwRFXx9oDErJ4Wwt1h7jAHpoPjuWuDpWtkW1Wh2T0plwhZg2jV+ gsUoM+n2g34+HzDRL9ibtiaMO+jUJbkT7KmFW8paV0l5Gdy1ZkdUDliXGu/7BrOs veNkIexADoePEVWvzTaYSh3NDP4O2qlZ7BJZpQ5osqUvXVl4sXNb981ljTavY3gF jrx+5LIyXjew1oddaVWlgvds4uQWeGX3fZvKa0LwFA/zg3jZnSbTvD0gX9CXlo+W 5kJwzfgZta7ZLDNqB28eUDIgtJg9sXa/oRUW3yxjzNtSo1UuePYH8aAf+GFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuIGAXIsE6LxqR7sMVpow7ZPJAwgwHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpxyzS25rWrRII2WZfE0u2n7qcfs5ZBnvV1 D5QuvTQauiZ4RsXpYoiQZXphxQ90KoTwsUXdOXjNwLptxwAN5isbeLGqXkik+Spp S22e3UCduR6OOgXs1ZYj20G3GRgFyWUZjOoS0wNCk44zpIRsFOgHiDmRi/e2a1/j qObRx5ikiUAV6tPIjxFqpYjhu9MP8lw2Sm5i5hMJ0Y8gIsA8oqNpBNH+oupwu0YV EzRknezNJ2Gukmr5f/6P08nMT663fpVr9o9fZEUKldgm1vHkErLy2mwA9/KxR21E iwku6NXVxC4GvsyWJfC31nBfeHl03B2+OiRYQTVJog9c/zNIAdM= -----END CERTIFICATE-----Generated at Tue Dec 16 23:14:14 2025 by rpki-client