This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft File: 020EA2304929066809CA6F723574798639D77438.mft (raw, json) Hash identifier: V9tBGqhlbGPYdpIyRswctWVpGkGMXCyNScT9Mh0wcZg= Subject key identifier: A7:1C:CC:F9:02:6E:FB:D7:8B:25:5F:23:A0:28:A4:3D:15:4B:BF:65 Authority key identifier: 02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 Certificate issuer: /CN=020EA2304929066809CA6F723574798639D77438 Certificate serial: 7E1E1B7172CD5EE053F75952BE7C5695CF7DDB6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft Manifest number: 0103 Signing time: Sun 21 Dec 2025 12:00:46 +0000 Manifest this update: Sun 21 Dec 2025 11:55:46 +0000 Manifest next update: Wed 24 Dec 2025 15:19:46 +0000 Files and hashes: 1: 3136302e32352e35352e302f32342d3234203d3e20313533303630.roa (hash: MP77i5+UkMfE9Efc/VCdIpK7dS6PJg0LKmWtQikmXHg=) 2: 020EA2304929066809CA6F723574798639D77438.crl (hash: /TNR9JrztGFm+rdG3YQzd3Tl8cMPalE8w6dMo3gHhvI=) 3: 3136302e32352e35342e302f32342d3234203d3e20313533303630.roa (hash: F+hf6H0tQ4o5DL4EaEr99NgmrD9BB/0HbFh2DX09QTE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1e:1b:71:72:cd:5e:e0:53:f7:59:52:be:7c:56:95:cf:7d:db:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=020EA2304929066809CA6F723574798639D77438 Validity Not Before: Dec 21 11:55:46 2025 GMT Not After : Dec 24 15:19:46 2025 GMT Subject: CN=A71CCCF9026EFBD78B255F23A028A43D154BBF65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:0f:19:11:1d:78:3c:fe:ab:06:e3:18:0d: c8:6e:88:b3:5e:d6:e0:02:00:b7:9d:7a:1f:96:8f: 0f:c0:08:61:56:1c:67:03:4c:b7:43:f7:e1:9f:54: b7:b5:6f:f0:e3:3c:99:21:13:74:00:3f:45:d2:a7: 9b:39:8d:39:eb:08:0c:95:26:93:52:10:4a:94:c8: c5:eb:9a:42:8f:bd:a2:ff:d5:1b:f6:16:46:95:12: 56:c9:3b:c5:47:46:78:f2:70:d8:3d:56:6e:4e:ab: 1f:64:13:e4:6c:3e:da:13:5c:31:e8:4c:24:a1:a5: b8:20:9d:33:ca:21:c8:cc:63:97:ed:b0:cc:fa:bf: d7:c4:04:84:99:20:ea:75:47:b0:2a:31:05:d0:41: 6b:12:7b:1f:36:ee:ae:a1:52:e3:86:48:2b:03:27: d8:40:55:cc:15:2e:46:e6:99:04:c7:8d:f1:ac:59: 1d:8a:89:e9:6a:5e:ef:0f:42:70:e9:09:3e:3b:04: eb:b4:6c:40:71:85:f9:71:1c:1f:04:d0:81:41:6f: 5a:ca:23:8d:99:b5:5a:42:34:27:be:db:f4:1a:b2: 6e:52:f6:66:77:58:5a:b9:49:4d:a3:2f:d9:c2:22: a8:ae:99:48:f4:32:1f:50:f3:fb:cb:2f:62:b6:77: 7a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1C:CC:F9:02:6E:FB:D7:8B:25:5F:23:A0:28:A4:3D:15:4B:BF:65 X509v3 Authority Key Identifier: keyid:02:0E:A2:30:49:29:06:68:09:CA:6F:72:35:74:79:86:39:D7:74:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/020EA2304929066809CA6F723574798639D77438.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea26a10-58e8-43c7-947e-722173d66614/0/020EA2304929066809CA6F723574798639D77438.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fd:6c:37:c1:75:43:56:f1:d1:42:ba:f1:7c:40:3c:28:4c: d3:34:11:46:74:ff:3b:ec:5c:a1:14:a4:2f:ab:42:9f:ab:e7: 8e:5c:d0:75:54:74:b3:78:a3:6b:02:89:c8:63:1c:4c:12:85: b6:0c:67:36:d8:a6:64:59:94:23:8c:02:e4:6d:d8:2f:a9:af: 70:35:86:b3:0e:25:3b:d8:15:f7:2c:66:0a:72:4b:7c:b3:d0: ce:ac:5d:e7:7b:9b:5f:72:fc:14:4a:bc:03:f7:40:03:ba:eb: 29:21:21:8f:96:a1:9a:b5:4f:a3:d6:f7:a1:7a:f2:43:90:05: cf:db:b0:85:d3:61:0b:e9:19:f8:19:f5:90:41:14:97:ea:96: 86:a0:6b:03:d6:05:2d:7e:3c:d0:e1:d7:45:14:98:c6:67:2b: b8:0d:e2:07:d7:b7:77:b3:c4:a8:1a:d6:62:5a:96:5d:ea:22: 6d:eb:6c:83:05:2b:13:26:42:d6:af:3b:a3:24:92:96:fd:ef: 71:2d:d1:1b:a2:8b:4d:f0:60:bf:85:79:93:15:b7:cc:c1:98: 3f:a3:59:8d:2a:57:a9:93:db:79:a5:60:d4:b8:2c:a9:ea:29: d1:f2:b2:c3:5d:60:c6:8e:de:01:cd:6d:bb:cb:32:74:80:3c: 0b:57:0c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfh4bcXLNXuBT91lSvnxWlc99228wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYz OUQ3NzQzODAeFw0yNTEyMjExMTU1NDZaFw0yNTEyMjQxNTE5NDZaMDMxMTAvBgNV BAMTKEE3MUNDQ0Y5MDI2RUZCRDc4QjI1NUYyM0EwMjhBNDNEMTU0QkJGNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mg8ZER14PP6rBuMYDchuiLNe 1uACALedeh+Wjw/ACGFWHGcDTLdD9+GfVLe1b/DjPJkhE3QAP0XSp5s5jTnrCAyV JpNSEEqUyMXrmkKPvaL/1Rv2FkaVElbJO8VHRnjycNg9Vm5Oqx9kE+RsPtoTXDHo TCShpbggnTPKIcjMY5ftsMz6v9fEBISZIOp1R7AqMQXQQWsSex827q6hUuOGSCsD J9hAVcwVLkbmmQTHjfGsWR2KielqXu8PQnDpCT47BOu0bEBxhflxHB8E0IFBb1rK I42ZtVpCNCe+2/Qasm5S9mZ3WFq5SU2jL9nCIqiumUj0Mh9Q8/vLL2K2d3o/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpxzM+QJu+9eLJV8joCikPRVLv2UwHwYDVR0j BBgwFoAUAg6iMEkpBmgJym9yNXR5hjnXdDgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWEyNmExMC01OGU4LTQzYzctOTQ3ZS03MjIxNzNkNjY2MTQvMC8wMjBFQTIzMDQ5 MjkwNjY4MDlDQTZGNzIzNTc0Nzk4NjM5RDc3NDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5ODYzOUQ3 NzQzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVhMjZhMTAtNThlOC00M2M3LTk0 N2UtNzIyMTczZDY2NjE0LzAvMDIwRUEyMzA0OTI5MDY2ODA5Q0E2RjcyMzU3NDc5 ODYzOUQ3NzQzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH39bDfBdUNW8dFCuvF8QDwoTNM0EUZ0/zvs XKEUpC+rQp+r545c0HVUdLN4o2sCichjHEwShbYMZzbYpmRZlCOMAuRt2C+pr3A1 hrMOJTvYFfcsZgpyS3yz0M6sXed7m19y/BRKvAP3QAO66ykhIY+WoZq1T6PW96F6 8kOQBc/bsIXTYQvpGfgZ9ZBBFJfqloagawPWBS1+PNDh10UUmMZnK7gN4gfXt3ez xKga1mJall3qIm3rbIMFKxMmQtavO6Mkkpb973Et0Ruii03wYL+FeZMVt8zBmD+j WY0qV6mT23mlYNS4LKnqKdHyssNdYMaO3gHNbbvLMnSAPAtXDCM= -----END CERTIFICATE-----Generated at Mon Dec 22 10:04:34 2025 by rpki-client