This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: X1+ZL+JJfq/DEpta7/7sjLBYe6Svwzi3p/E67qP7diE= Subject key identifier: BE:66:0C:96:67:E9:E3:61:8A:10:B3:A3:7D:1E:EA:2A:4B:30:A0:14 Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 53484E9053BA65F3CFA63029A8D0815E0D19D814 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 0276 Signing time: Sun 21 Dec 2025 00:25:43 +0000 Manifest this update: Sun 21 Dec 2025 00:20:43 +0000 Manifest next update: Wed 24 Dec 2025 02:33:43 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: OmdgqmZGR5y21s+10EqNlf0rC1QkvW2yU0vxQB1civA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 02:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:48:4e:90:53:ba:65:f3:cf:a6:30:29:a8:d0:81:5e:0d:19:d8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Dec 21 00:20:43 2025 GMT Not After : Dec 24 02:33:43 2025 GMT Subject: CN=BE660C9667E9E3618A10B3A37D1EEA2A4B30A014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:fa:40:a3:1a:3a:7d:63:f0:a5:2d:7a:02: 2e:10:e4:a6:a9:da:dd:9f:91:5e:68:eb:ef:c6:dd: 98:fd:b7:f2:9e:e2:27:a5:db:4d:fd:8b:60:b8:d4: 1a:23:48:fa:38:66:df:ef:20:41:1b:e8:f3:e1:1e: 0d:03:f0:84:49:af:fc:d7:42:a0:bd:d7:69:9c:e5: 9e:a1:a8:f3:f1:44:0a:4f:12:bd:6a:0b:5c:4f:01: 1f:c8:5f:85:17:dc:ef:60:d5:07:5f:03:9f:bb:17: f0:c2:fc:ff:6a:8c:16:bc:7a:86:9e:4e:38:31:c8: 0a:e1:cd:89:59:f5:6d:d3:91:c4:cc:87:2b:c3:4a: e6:06:d7:fe:57:5a:ed:c9:2b:c1:7d:da:3f:87:40: c6:65:d9:70:cb:4c:37:68:54:70:2b:91:b5:f5:91: df:5f:43:08:62:d4:d3:a4:c9:3d:74:7f:40:4d:e6: 39:34:55:db:fe:73:e5:54:6b:c8:a0:85:a0:a6:00: f9:2c:90:2b:75:d5:7c:dc:be:b8:c3:36:87:85:b3: 37:79:4d:b8:08:52:4d:62:4e:dd:7b:52:e8:72:cf: 69:cc:cf:24:62:d9:ef:91:5d:da:9e:9f:f2:d8:58: fb:73:06:1d:1d:8e:fa:0c:84:c1:3b:59:27:cd:ce: d6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:66:0C:96:67:E9:E3:61:8A:10:B3:A3:7D:1E:EA:2A:4B:30:A0:14 X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:fb:39:8a:47:58:31:e4:d3:02:f1:3b:ef:99:22:5b:84:44: b9:0b:ac:00:0b:8f:50:ea:ab:3f:4d:12:cc:fd:f0:39:1c:d2: 3a:84:5c:0f:52:83:88:49:6b:48:a4:e8:44:42:b4:3e:03:6c: 90:5b:c3:99:99:da:0c:95:1a:92:28:d2:a4:b6:82:fa:dd:73: 80:ed:e2:21:2f:bf:cd:e6:73:fd:83:55:e0:41:e2:7b:ba:16: fe:99:b9:67:43:a3:03:3f:dd:c3:ac:b9:90:e4:f3:e2:33:d3: 45:f2:5a:87:af:61:9b:cf:13:53:7f:46:60:3b:61:24:2d:2c: 42:e1:02:49:5c:f4:53:d3:ce:02:97:91:4f:36:6c:23:5d:68: cf:d0:dd:f8:0c:f4:1f:d5:0d:f5:06:61:22:dc:da:15:af:86: 4e:28:2f:ec:26:83:24:99:0f:6d:83:c5:d8:46:f5:56:84:a6: 50:f7:49:57:94:16:00:51:d5:2b:0d:fe:80:8d:75:46:a9:d8: d2:fd:ab:7b:92:a4:1c:c8:db:24:1e:96:87:16:1f:04:c8:5b: 9d:4a:bd:08:cc:97:29:e5:d0:95:c9:72:1c:21:c0:b9:9d:7b: 79:1a:41:42:5b:1d:aa:4c:bf:fc:dc:1e:43:32:04:a0:cf:36: 8d:60:93:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0hOkFO6ZfPPpjApqNCBXg0Z2BQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNTEyMjEwMDIwNDNaFw0yNTEyMjQwMjMzNDNaMDMxMTAvBgNV BAMTKEJFNjYwQzk2NjdFOUUzNjE4QTEwQjNBMzdEMUVFQTJBNEIzMEEwMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x/pAoxo6fWPwpS16Ai4Q5Kap 2t2fkV5o6+/G3Zj9t/Ke4iel2039i2C41BojSPo4Zt/vIEEb6PPhHg0D8IRJr/zX QqC912mc5Z6hqPPxRApPEr1qC1xPAR/IX4UX3O9g1QdfA5+7F/DC/P9qjBa8eoae TjgxyArhzYlZ9W3TkcTMhyvDSuYG1/5XWu3JK8F92j+HQMZl2XDLTDdoVHArkbX1 kd9fQwhi1NOkyT10f0BN5jk0Vdv+c+VUa8ighaCmAPkskCt11XzcvrjDNoeFszd5 TbgIUk1iTt17Uuhyz2nMzyRi2e+RXdqen/LYWPtzBh0djvoMhME7WSfNztYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvmYMlmfp42GKELOjfR7qKkswoBQwHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAn7OYpHWDHk0wLxO++ZIluERLkLrAALj1Dq qz9NEsz98Dkc0jqEXA9Sg4hJa0ik6ERCtD4DbJBbw5mZ2gyVGpIo0qS2gvrdc4Dt 4iEvv83mc/2DVeBB4nu6Fv6ZuWdDowM/3cOsuZDk8+Iz00XyWoevYZvPE1N/RmA7 YSQtLELhAklc9FPTzgKXkU82bCNdaM/Q3fgM9B/VDfUGYSLc2hWvhk4oL+wmgySZ D22DxdhG9VaEplD3SVeUFgBR1SsN/oCNdUap2NL9q3uSpBzI2yQelocWHwTIW51K vQjMlynl0JXJchwhwLmde3kaQUJbHapMv/zcHkMyBKDPNo1gk7g= -----END CERTIFICATE-----Generated at Mon Dec 22 00:49:02 2025 by rpki-client