This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: P+TiyhJeJYScSDb87JM99gEwgZGWIt4hV/XMQaByD+0= Subject key identifier: A1:D5:83:86:56:8B:5C:0C:A1:BE:8A:40:FE:C9:AE:36:0F:F4:49:3C Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 287C96265BDCE8D358614521B430DFF603ABB9C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 0260 Signing time: Tue 23 Dec 2025 21:23:27 +0000 Manifest this update: Tue 23 Dec 2025 21:18:27 +0000 Manifest next update: Sat 27 Dec 2025 01:06:27 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: C0SlubeHQiHYijzOcq+1Ib4UhXbPPHt1LVJq2RygsjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 01:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7c:96:26:5b:dc:e8:d3:58:61:45:21:b4:30:df:f6:03:ab:b9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Dec 23 21:18:27 2025 GMT Not After : Dec 27 01:06:27 2025 GMT Subject: CN=A1D58386568B5C0CA1BE8A40FEC9AE360FF4493C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:c2:3d:30:58:03:b3:e5:74:b2:93:65:aa: f3:16:44:6c:d5:f8:cd:e0:cd:09:da:db:cb:17:34: 7e:5f:32:c7:bc:0c:d1:15:19:e0:53:21:3c:23:55: 28:44:c7:d2:fd:7e:5e:96:dd:73:6e:4d:27:da:07: be:81:00:9b:41:40:83:c4:98:07:5b:3f:dd:1a:2a: 1f:35:94:12:f1:3e:f3:02:28:b0:b1:f2:98:ad:a0: af:8c:ca:32:60:d6:ea:92:a0:28:29:ec:06:f2:ab: c1:95:07:06:8f:47:9a:55:48:14:38:84:3d:9a:4b: d3:90:ec:1d:05:5e:6f:44:6e:b8:1b:30:44:32:c8: 6b:d4:6a:49:42:3d:63:e9:83:b0:50:fb:92:63:a6: 94:36:2e:8b:fe:ad:a5:b4:b6:1e:a7:8a:57:1f:0c: 3e:bc:9b:e5:99:70:7f:08:f2:7e:c5:4f:7b:48:19: 5d:d9:66:e9:07:27:05:b9:92:54:48:3f:91:09:23: 9c:64:c5:d9:9b:07:01:30:db:a6:b4:e5:a4:f2:12: 8e:90:6a:db:63:c2:ff:db:9f:46:6e:87:29:38:84: 65:58:e4:ae:e7:98:c2:24:67:33:e1:ca:75:30:b8: 0f:96:8f:52:21:e6:3f:8e:56:e7:87:27:5b:b3:39: 43:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D5:83:86:56:8B:5C:0C:A1:BE:8A:40:FE:C9:AE:36:0F:F4:49:3C X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e6:84:ab:85:a6:8c:6d:34:7e:f3:cb:3b:fc:b0:0c:34:fd: 2b:1e:c8:76:5e:f7:04:2b:9b:57:f9:cf:b3:ba:58:20:ce:b9: 60:b2:63:05:75:2f:cf:35:c1:2a:f3:3d:0f:d0:9a:e9:08:c3: ff:02:b5:5c:b5:40:e3:df:04:ea:3a:ec:d2:67:15:2c:4b:fa: e2:b0:d9:a3:39:58:fb:7e:3e:70:d8:70:7b:7b:4b:81:ba:4c: a9:af:da:9b:c5:e4:65:60:ec:1c:38:fd:ed:01:a4:60:11:b3: 4f:4d:6d:2b:2a:01:ee:31:7e:05:9f:8d:ad:2a:75:af:5d:15: ed:fa:25:4c:bd:d0:08:2e:8f:5d:da:20:e3:a5:5f:47:56:a6: 5f:67:d6:58:c9:84:9c:5d:48:33:35:83:9f:09:f8:c2:a3:64: ac:c2:1e:34:75:3f:b2:42:b3:7e:87:62:47:21:1c:62:6d:c5: d0:8c:4f:53:a4:30:15:8c:34:33:a7:e8:e5:3b:72:14:1a:3d: 2e:e0:de:ef:bc:2c:7f:a4:d0:4f:cf:8c:f1:34:bc:73:84:7a: 09:db:0b:51:97:4f:b1:41:4f:00:d3:b5:0b:fe:2f:4f:67:e5: 17:ae:0c:78:ff:52:6a:ae:c8:16:99:75:38:70:5c:74:f4:07: e1:5b:1c:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHyWJlvc6NNYYUUhtDDf9gOrucIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTEyMjMyMTE4MjdaFw0yNTEyMjcwMTA2MjdaMDMxMTAvBgNV BAMTKEExRDU4Mzg2NTY4QjVDMENBMUJFOEE0MEZFQzlBRTM2MEZGNDQ5M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFsI9MFgDs+V0spNlqvMWRGzV +M3gzQna28sXNH5fMse8DNEVGeBTITwjVShEx9L9fl6W3XNuTSfaB76BAJtBQIPE mAdbP90aKh81lBLxPvMCKLCx8pitoK+MyjJg1uqSoCgp7Abyq8GVBwaPR5pVSBQ4 hD2aS9OQ7B0FXm9EbrgbMEQyyGvUaklCPWPpg7BQ+5JjppQ2Lov+raW0th6nilcf DD68m+WZcH8I8n7FT3tIGV3ZZukHJwW5klRIP5EJI5xkxdmbBwEw26a05aTyEo6Q attjwv/bn0Zuhyk4hGVY5K7nmMIkZzPhynUwuA+Wj1Ih5j+OVueHJ1uzOUPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUodWDhlaLXAyhvopA/smuNg/0STwwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADmhKuFpoxtNH7zyzv8sAw0/SseyHZe9wQr m1f5z7O6WCDOuWCyYwV1L881wSrzPQ/QmukIw/8CtVy1QOPfBOo67NJnFSxL+uKw 2aM5WPt+PnDYcHt7S4G6TKmv2pvF5GVg7Bw4/e0BpGARs09NbSsqAe4xfgWfja0q da9dFe36JUy90Aguj13aIOOlX0dWpl9n1ljJhJxdSDM1g58J+MKjZKzCHjR1P7JC s36HYkchHGJtxdCMT1OkMBWMNDOn6OU7chQaPS7g3u+8LH+k0E/PjPE0vHOEegnb C1GXT7FBTwDTtQv+L09n5ReuDHj/UmquyBaZdThwXHT0B+FbHLI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:37 2025 by rpki-client