This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json) Hash identifier: bfa0RccSApVy5O7ZzfKRzDdm2K+NVugJ5fJV9uteE7o= Subject key identifier: 21:2C:68:AB:EC:9A:13:C0:26:F8:26:38:7E:B3:B5:C6:23:8E:CD:17 Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Certificate serial: 189F8763CB5D257C580C38A584A849AB5A1A700D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft Manifest number: 022E Signing time: Sat 20 Dec 2025 14:00:53 +0000 Manifest this update: Sat 20 Dec 2025 13:55:53 +0000 Manifest next update: Tue 23 Dec 2025 15:42:53 +0000 Files and hashes: 1: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: IuigaO4Ju2g9w1Op/KhaFK/0lCqy1LLA9kzkq5Fdn/c=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9f:87:63:cb:5d:25:7c:58:0c:38:a5:84:a8:49:ab:5a:1a:70:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Validity Not Before: Dec 20 13:55:53 2025 GMT Not After : Dec 23 15:42:53 2025 GMT Subject: CN=212C68ABEC9A13C026F826387EB3B5C6238ECD17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:65:b8:57:17:cb:be:56:8b:e5:33:45:1f:b4: 2d:ad:a5:b5:ae:4e:37:00:82:4a:06:1c:32:cf:71: 8b:3f:97:f0:c1:fb:da:19:dd:8a:53:ff:16:1d:61: 78:47:b6:40:c2:3d:8a:99:66:33:9a:e9:28:f6:da: 6e:b7:bf:cd:7d:75:13:b0:ff:00:27:a1:e6:c5:15: 7f:fb:53:d2:cd:6f:83:3b:98:09:55:98:c4:06:58: 1e:03:08:94:f2:8b:12:76:9d:84:22:95:4a:21:7b: c4:77:50:a5:47:80:31:82:1a:6f:d2:41:af:20:ef: 25:38:e3:1f:46:72:eb:fa:4c:e3:1f:05:b2:7a:19: e4:1b:7c:57:96:a1:9f:d2:9f:13:d3:99:11:81:61: 42:0b:7b:02:31:a0:82:68:14:ff:45:e8:8f:82:39: d9:b4:ec:b8:47:71:f7:b3:20:85:cd:4f:a4:70:e9: a8:06:ab:35:b8:34:3d:79:80:0e:36:7c:7c:d5:a9: 90:97:0a:2a:9c:f5:de:22:13:87:6d:16:9d:82:25: 18:cf:b2:0b:bd:16:6b:76:30:12:8b:a8:a5:7d:3f: 4d:2f:31:30:db:47:8d:88:fb:e0:35:de:cf:9b:91: ed:cc:e2:50:2d:9a:b1:f0:8b:37:67:5c:89:38:5c: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2C:68:AB:EC:9A:13:C0:26:F8:26:38:7E:B3:B5:C6:23:8E:CD:17 X509v3 Authority Key Identifier: keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:02:af:00:54:ec:b4:42:90:66:98:0e:2f:fc:25:5e:80:e5: 27:49:40:92:ba:48:06:f6:87:0a:93:21:e4:55:84:a0:6f:40: ce:8d:74:30:2d:6a:f8:6a:10:1e:5d:82:59:3b:c0:ab:3b:04: cc:3b:c0:a2:8b:ca:77:ff:f3:72:08:e3:12:65:3b:72:26:be: 07:f5:81:11:9c:79:61:07:f6:35:ac:64:e8:5f:e5:39:90:93: bb:1d:7e:e0:b8:d7:47:66:9c:97:69:74:32:24:15:28:0f:df: 5f:2e:72:5b:48:04:f5:7a:38:11:f3:d0:fc:48:02:de:17:ec: ea:7c:ee:c2:fd:09:c3:7f:2a:a2:f5:00:7f:e5:72:0e:72:85: 73:36:07:6f:32:c3:fc:8e:63:45:93:48:96:67:84:ed:a6:27: 0e:6d:35:af:98:dc:47:c7:6e:89:39:98:35:45:43:51:10:e1: c9:b6:ac:e3:7c:42:bf:1d:de:04:bc:8b:61:fc:0f:b4:5d:20: ef:61:56:e2:ec:9b:b4:55:9b:84:23:81:cb:14:51:2f:5d:11: 35:3f:c2:59:e0:f0:18:42:72:90:35:67:05:7b:90:cc:e7:30: 5c:23:a9:af:16:7c:85:da:b8:9a:a7:5f:f6:fe:e8:e9:bc:8b: 0b:0a:91:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJ+HY8tdJXxYDDilhKhJq1oacA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF RTA2NEIzOTAeFw0yNTEyMjAxMzU1NTNaFw0yNTEyMjMxNTQyNTNaMDMxMTAvBgNV BAMTKDIxMkM2OEFCRUM5QTEzQzAyNkY4MjYzODdFQjNCNUM2MjM4RUNEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZbhXF8u+VovlM0UftC2tpbWu TjcAgkoGHDLPcYs/l/DB+9oZ3YpT/xYdYXhHtkDCPYqZZjOa6Sj22m63v819dROw /wAnoebFFX/7U9LNb4M7mAlVmMQGWB4DCJTyixJ2nYQilUohe8R3UKVHgDGCGm/S Qa8g7yU44x9Gcuv6TOMfBbJ6GeQbfFeWoZ/SnxPTmRGBYUILewIxoIJoFP9F6I+C Odm07LhHcfezIIXNT6Rw6agGqzW4ND15gA42fHzVqZCXCiqc9d4iE4dtFp2CJRjP sgu9Fmt2MBKLqKV9P00vMTDbR42I++A13s+bke3M4lAtmrHwizdnXIk4XPWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUISxoq+yaE8Am+CY4frO1xiOOzRcwHwYDVR0j BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2 NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3 RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4CrwBU7LRCkGaYDi/8JV6A5SdJQJK6SAb2 hwqTIeRVhKBvQM6NdDAtavhqEB5dglk7wKs7BMw7wKKLynf/83II4xJlO3Imvgf1 gRGceWEH9jWsZOhf5TmQk7sdfuC410dmnJdpdDIkFSgP318ucltIBPV6OBHz0PxI At4X7Op87sL9CcN/KqL1AH/lcg5yhXM2B28yw/yOY0WTSJZnhO2mJw5tNa+Y3EfH bok5mDVFQ1EQ4cm2rON8Qr8d3gS8i2H8D7RdIO9hVuLsm7RVm4QjgcsUUS9dETU/ wlng8BhCcpA1ZwV7kMznMFwjqa8WfIXauJqnX/b+6Om8iwsKkSo= -----END CERTIFICATE-----Generated at Sun Dec 21 03:03:15 2025 by rpki-client