This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft File: 22476F90C7B08131974F5B19834906C325ABEF12.mft (raw, json) Hash identifier: lgZ4QuYZbiK2PvSRLSfLs77dmYwRvdUw6EHqBiLQ5KY= Subject key identifier: 02:09:AE:C0:28:98:57:6F:98:F2:02:62:FF:2C:FF:CF:04:9D:0E:4C Authority key identifier: 22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 Certificate issuer: /CN=22476F90C7B08131974F5B19834906C325ABEF12 Certificate serial: 5356B2DB0225800A13CD0395BD98993C17D04A34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft Manifest number: DB Signing time: Mon 15 Dec 2025 23:41:29 +0000 Manifest this update: Mon 15 Dec 2025 23:36:29 +0000 Manifest next update: Fri 19 Dec 2025 07:31:29 +0000 Files and hashes: 1: 3136302e32352e36382e302f32342d3234203d3e20313532383430.roa (hash: 4w2+kmxxLlJwHRO1aqXjBz7ml3HwCrINsFeyiZehHq0=) 2: 3136302e32352e36392e302f32342d3234203d3e20313531353736.roa (hash: 80wPKmKJkybnq5BlobX/HktrEHR2US0xr2aBNpv/zlA=) 3: 22476F90C7B08131974F5B19834906C325ABEF12.crl (hash: sa3e6ekebZa5ap7jpibGufb5zkCPc2Lc87hMBi4XHUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 07:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:56:b2:db:02:25:80:0a:13:cd:03:95:bd:98:99:3c:17:d0:4a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22476F90C7B08131974F5B19834906C325ABEF12 Validity Not Before: Dec 15 23:36:29 2025 GMT Not After : Dec 19 07:31:29 2025 GMT Subject: CN=0209AEC02898576F98F20262FF2CFFCF049D0E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:49:84:f7:b5:22:85:e8:3a:ef:fc:28:37: d0:4e:d4:57:29:7a:25:04:48:cf:d4:6b:6c:4a:28: 73:d6:f8:7f:21:95:a2:73:64:46:77:b3:1a:ea:da: a0:12:9a:4c:8f:6c:2b:99:1a:bc:6c:60:92:0a:7f: f1:79:c7:47:29:44:10:03:95:f7:ac:ba:22:8c:85: 7b:91:45:02:5d:d5:20:b7:f4:49:17:5d:15:48:aa: bf:27:b1:42:95:04:8c:47:1e:ff:9a:b8:df:80:34: 94:47:56:a3:40:f5:1e:36:b1:52:af:1f:f7:04:16: fa:c3:c1:14:a3:61:6c:46:9f:7a:a1:b8:e8:3a:db: 0e:f1:9a:9d:ba:c4:8e:37:c5:d8:f4:6d:9f:a7:b7: 23:b6:0d:74:a6:70:d4:34:de:22:9f:7c:48:65:c3: f2:03:03:4b:c5:7b:3d:be:91:81:6a:42:f0:8d:b0: 9a:fb:27:e5:db:59:d9:e2:74:15:7c:69:c0:b9:d6: 8b:61:5d:a3:c3:f4:82:e1:3d:d7:b8:c0:73:b8:4a: 87:08:14:86:f3:67:32:e8:e0:45:46:90:46:07:5d: 6f:73:a6:be:45:fd:64:9d:89:ac:d8:fc:b6:3b:00: 98:ae:29:f4:d9:2f:74:f6:4d:fd:e3:31:9a:91:7d: 48:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:09:AE:C0:28:98:57:6F:98:F2:02:62:FF:2C:FF:CF:04:9D:0E:4C X509v3 Authority Key Identifier: keyid:22:47:6F:90:C7:B0:81:31:97:4F:5B:19:83:49:06:C3:25:AB:EF:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/22476F90C7B08131974F5B19834906C325ABEF12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2fbaafc-4db2-4fc4-a1a8-2d8e4c8b2ce0/0/22476F90C7B08131974F5B19834906C325ABEF12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:99:0e:f6:c5:cd:6f:4d:6b:dc:da:0e:98:a9:bd:7f:28:2a: 32:58:57:fd:df:81:af:73:c3:b3:66:93:9c:53:07:aa:7e:be: 00:2c:37:2a:5d:14:21:fa:a5:5e:b1:88:2d:56:9f:72:11:ad: a6:c2:db:1f:ff:42:84:6f:53:70:92:01:71:21:0e:fe:1a:69: 11:c9:32:4e:26:82:51:8c:75:4b:cf:fd:49:98:c1:19:29:26: 7a:e2:99:9c:ca:92:2e:2e:e7:d1:4b:67:c9:f9:be:ea:dc:3a: 63:e0:f5:87:98:71:2c:dc:7d:38:ff:ec:30:e2:04:80:cc:70: 87:f2:1e:6e:8d:53:1b:db:c5:1f:10:6c:c8:90:e7:47:1b:b4: f8:28:a6:01:26:bf:5a:57:d1:84:a6:16:28:99:e0:24:12:8e: a7:57:56:a5:74:aa:f2:21:5f:c7:04:9a:78:c1:aa:87:ee:02: 4a:48:83:14:45:a2:0b:79:cb:c2:d7:a8:24:d2:ee:a6:b7:68: 40:84:80:88:3d:df:a8:19:42:37:42:6d:96:bd:8e:17:1d:96: 53:07:7c:02:b6:06:e0:4d:0e:11:e6:45:ee:9b:c3:8b:00:38: 09:06:44:fb:d4:1a:fc:5d:51:95:1d:28:dc:05:6f:37:ec:2e: bd:2d:88:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1ay2wIlgAoTzQOVvZiZPBfQSjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMy NUFCRUYxMjAeFw0yNTEyMTUyMzM2MjlaFw0yNTEyMTkwNzMxMjlaMDMxMTAvBgNV BAMTKDAyMDlBRUMwMjg5ODU3NkY5OEYyMDI2MkZGMkNGRkNGMDQ5RDBFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClk0mE97Uiheg67/woN9BO1Fcp eiUESM/Ua2xKKHPW+H8hlaJzZEZ3sxrq2qASmkyPbCuZGrxsYJIKf/F5x0cpRBAD lfesuiKMhXuRRQJd1SC39EkXXRVIqr8nsUKVBIxHHv+auN+ANJRHVqNA9R42sVKv H/cEFvrDwRSjYWxGn3qhuOg62w7xmp26xI43xdj0bZ+ntyO2DXSmcNQ03iKffEhl w/IDA0vFez2+kYFqQvCNsJr7J+XbWdnidBV8acC51othXaPD9ILhPde4wHO4SocI FIbzZzLo4EVGkEYHXW9zpr5F/WSdiazY/LY7AJiuKfTZL3T2Tf3jMZqRfUjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAgmuwCiYV2+Y8gJi/yz/zwSdDkwwHwYDVR0j BBgwFoAUIkdvkMewgTGXT1sZg0kGwyWr7xIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmZiYWFmYy00ZGIyLTRmYzQtYTFhOC0yZDhlNGM4YjJjZTAvMC8yMjQ3NkY5MEM3 QjA4MTMxOTc0RjVCMTk4MzQ5MDZDMzI1QUJFRjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2QzMyNUFC RUYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJmYmFhZmMtNGRiMi00ZmM0LWEx YTgtMmQ4ZTRjOGIyY2UwLzAvMjI0NzZGOTBDN0IwODEzMTk3NEY1QjE5ODM0OTA2 QzMyNUFCRUYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCZDvbFzW9Na9zaDpipvX8oKjJYV/3fga9z w7Nmk5xTB6p+vgAsNypdFCH6pV6xiC1Wn3IRrabC2x//QoRvU3CSAXEhDv4aaRHJ Mk4mglGMdUvP/UmYwRkpJnrimZzKki4u59FLZ8n5vurcOmPg9YeYcSzcfTj/7DDi BIDMcIfyHm6NUxvbxR8QbMiQ50cbtPgopgEmv1pX0YSmFiiZ4CQSjqdXVqV0qvIh X8cEmnjBqofuAkpIgxRFogt5y8LXqCTS7qa3aECEgIg936gZQjdCbZa9jhcdllMH fAK2BuBNDhHmRe6bw4sAOAkGRPvUGvxdUZUdKNwFbzfsLr0tiMI= -----END CERTIFICATE-----Generated at Wed Dec 17 13:23:41 2025 by rpki-client