This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: +UPSrWmgiQu3CzuXHWV++s3trEAaqZ2rhqHDFnDYHvo= Subject key identifier: 72:C0:36:1F:D4:9D:8F:C8:4F:78:90:7C:A3:24:7B:94:D4:20:7F:AC Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 4469B4E9204ABFFC75F7C0FDAD9209DE3427571D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 01C5 Signing time: Wed 17 Dec 2025 02:31:51 +0000 Manifest this update: Wed 17 Dec 2025 02:26:51 +0000 Manifest next update: Sat 20 Dec 2025 11:01:51 +0000 Files and hashes: 1: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: GNZzAcmYMO24v0PgoH0PVcbzFxgNvmanVmMwCuln4aA=) 2: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: YoOGTW8Oxy1UZd4TUXKq52769CxtSBcGQF6KgCKyfiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:69:b4:e9:20:4a:bf:fc:75:f7:c0:fd:ad:92:09:de:34:27:57:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Dec 17 02:26:51 2025 GMT Not After : Dec 20 11:01:51 2025 GMT Subject: CN=72C0361FD49D8FC84F78907CA3247B94D4207FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:ce:a6:73:8b:2e:cf:9d:10:89:18:49:db: bd:43:a7:58:84:d0:f5:25:0c:9b:17:68:af:ee:a3: 06:7b:72:a8:5f:d0:2c:a7:ad:34:85:19:c3:8f:d8: 16:0c:b5:59:ed:aa:7c:f5:cd:1b:2e:9a:1a:eb:07: c9:73:4e:8d:12:4b:00:09:7c:ca:3f:fd:7c:37:cf: fa:c7:5a:ac:d5:e5:4d:04:e5:53:aa:06:14:ec:b7: 34:73:3a:e3:fb:0a:b3:8b:5e:d6:c0:f5:54:88:7a: f9:14:56:f2:30:c8:87:65:fd:e4:6f:cf:b0:a0:c5: c8:ec:f8:ba:25:09:ce:b8:03:f3:1e:6a:1a:1c:f4: f1:4e:0c:94:7a:01:db:c5:0a:c4:c3:1a:8e:f7:26: f0:e6:d7:fa:db:c1:4f:ac:d5:e0:56:14:50:fc:3c: 25:c8:9a:2a:3e:e3:21:02:d2:4d:f9:f2:63:d1:f9: 11:a6:96:1c:bd:10:5b:aa:32:0b:80:f3:dd:13:4d: b3:8f:75:6a:4f:6e:0e:7f:8b:fa:aa:85:67:3f:89: cb:b2:47:2d:f1:a3:29:40:52:d7:2e:b2:8d:b7:37: 71:28:44:d5:5d:ce:57:6c:b2:dc:6d:f3:89:dc:7b: 39:85:80:2e:a1:33:f6:30:77:d8:24:61:01:92:0a: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C0:36:1F:D4:9D:8F:C8:4F:78:90:7C:A3:24:7B:94:D4:20:7F:AC X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f3:02:79:c0:28:b0:01:ed:72:28:08:19:1c:f5:5c:5d:e1: 01:3e:89:50:54:43:56:ec:fb:85:ae:ee:c1:5b:b6:39:66:a8: 50:a6:a6:8f:c7:b3:e5:33:69:81:af:dd:9f:fe:17:82:43:55: 88:00:20:32:48:ab:3e:33:7d:c4:1e:a4:65:13:90:98:5b:53: 34:cc:89:f4:a3:48:fe:86:32:3e:2c:bf:fd:9a:4c:f0:38:bc: 68:fd:1d:20:02:b2:03:e6:51:42:5f:c6:b3:70:da:cc:1f:24: 98:67:46:f9:9d:b2:13:00:be:0a:bf:60:80:75:56:cb:60:78: b2:60:38:aa:e8:e4:94:17:75:6e:48:2d:bd:9d:47:d6:67:64: d0:6a:32:c1:9a:d2:03:5e:27:28:3a:be:1f:66:48:2e:c9:a5: 7d:df:b3:c0:ab:ad:05:f6:ad:13:e6:2d:01:55:92:22:fe:3d: e3:17:fc:60:9a:1a:ce:6a:33:2a:db:66:89:61:d7:fb:19:32: 21:8d:7b:03:e8:9e:29:c8:c0:79:dd:87:3f:e4:5a:47:0c:5d: 1b:32:0b:da:62:f3:0c:4c:26:94:7f:1d:ed:ab:a5:7b:f9:7d: 98:a2:ca:74:2c:78:20:12:53:e9:ec:46:00:28:4b:ce:ba:d6: c8:c2:f5:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGm06SBKv/x198D9rZIJ3jQnVx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNTEyMTcwMjI2NTFaFw0yNTEyMjAxMTAxNTFaMDMxMTAvBgNV BAMTKDcyQzAzNjFGRDQ5RDhGQzg0Rjc4OTA3Q0EzMjQ3Qjk0RDQyMDdGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZSM6mc4suz50QiRhJ271Dp1iE 0PUlDJsXaK/uowZ7cqhf0CynrTSFGcOP2BYMtVntqnz1zRsumhrrB8lzTo0SSwAJ fMo//Xw3z/rHWqzV5U0E5VOqBhTstzRzOuP7CrOLXtbA9VSIevkUVvIwyIdl/eRv z7Cgxcjs+LolCc64A/Meahoc9PFODJR6AdvFCsTDGo73JvDm1/rbwU+s1eBWFFD8 PCXImio+4yEC0k358mPR+RGmlhy9EFuqMguA890TTbOPdWpPbg5/i/qqhWc/icuy Ry3xoylAUtcuso23N3EoRNVdzldsstxt84ncezmFgC6hM/Ywd9gkYQGSCrQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcsA2H9Sdj8hPeJB8oyR7lNQgf6wwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjzAnnAKLAB7XIoCBkc9Vxd4QE+iVBUQ1bs +4Wu7sFbtjlmqFCmpo/Hs+UzaYGv3Z/+F4JDVYgAIDJIqz4zfcQepGUTkJhbUzTM ifSjSP6GMj4sv/2aTPA4vGj9HSACsgPmUUJfxrNw2swfJJhnRvmdshMAvgq/YIB1 VstgeLJgOKro5JQXdW5ILb2dR9ZnZNBqMsGa0gNeJyg6vh9mSC7JpX3fs8CrrQX2 rRPmLQFVkiL+PeMX/GCaGs5qMyrbZolh1/sZMiGNewPoninIwHndhz/kWkcMXRsy C9pi8wxMJpR/He2rpXv5fZiiynQseCASU+nsRgAoS8661sjC9cI= -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:10 2025 by rpki-client