This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: kauflC2n5639Rkq+C8rtOKiFS89suS/uq96AMsJBikE= Subject key identifier: 3A:0F:04:D7:A9:86:D6:C7:BD:B3:50:E4:94:CE:C1:95:BF:86:39:C1 Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 676D5C5B9E73DD010E385EBFD578777C41B9743C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 0224 Signing time: Tue 23 Dec 2025 14:51:35 +0000 Manifest this update: Tue 23 Dec 2025 14:46:35 +0000 Manifest next update: Sat 27 Dec 2025 00:16:35 +0000 Files and hashes: 1: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: CsRNM/W/sLx3YbwO1APlz39t9tsdsfnHjTuKcmYRSgk=) 2: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: uL3SdGViVTN4twtj5fvseawDw7MHu5q6qt8dKfGSkqk=) 3: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: RK/lRgQFYGeXg6Bzk3ovyOFZdgVFVtKMAYe3R6PnsZs=) 4: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: cqOcJAZKbrP9HYe2ShHrvgf1/zKk7TB83EYec3+QDIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 00:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:6d:5c:5b:9e:73:dd:01:0e:38:5e:bf:d5:78:77:7c:41:b9:74:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Dec 23 14:46:35 2025 GMT Not After : Dec 27 00:16:35 2025 GMT Subject: CN=3A0F04D7A986D6C7BDB350E494CEC195BF8639C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:99:2f:6a:b0:43:cb:c5:52:fe:aa:d8:48:c8: ac:58:88:3d:f1:0b:d0:b3:06:bd:14:ef:62:9a:08: af:39:02:31:d7:5b:0a:b3:07:ba:b3:20:7b:45:b5: 50:09:f5:76:be:9f:14:73:3e:06:b7:27:96:fb:a6: 85:04:4f:7e:69:fb:2f:e4:6a:86:c1:7b:16:2b:b4: 57:03:00:83:19:5d:75:59:8a:ef:50:e3:0c:d6:a1: 78:6f:06:4c:13:60:c7:25:d9:09:34:68:55:64:e1: 23:38:cd:e9:ff:c9:dc:57:57:35:66:7c:0e:b7:06: 12:50:98:89:3a:ec:04:29:66:aa:dc:1d:34:db:bc: e7:a6:8b:40:c4:ec:95:c0:d5:ac:4f:64:23:a9:bf: 7f:b0:e0:12:26:b2:d5:0f:d7:d9:2f:70:a3:e1:5b: 67:9a:11:f6:d7:f0:a6:2a:2d:79:01:b4:ad:5e:20: 9f:41:e0:26:e4:98:a8:82:03:39:c4:eb:29:65:5e: 09:18:d1:1c:f3:42:e1:ac:59:1b:76:5f:54:d8:64: e2:47:af:3c:62:a4:5f:10:49:0c:40:43:08:50:05: 8d:93:0c:b3:a0:15:af:ae:c4:9b:af:7d:04:f6:ad: 7f:19:a5:ed:fb:cb:a0:dd:25:4b:28:3c:f6:a9:47: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0F:04:D7:A9:86:D6:C7:BD:B3:50:E4:94:CE:C1:95:BF:86:39:C1 X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:36:1b:fa:72:79:6d:5a:aa:3b:c3:6d:13:b0:30:61:cb:4f: 61:95:7c:88:1e:b0:00:78:bc:8c:33:2f:20:eb:b5:10:e1:6f: dd:e7:5d:74:c5:b5:d2:a1:30:7a:7a:0f:73:f5:d9:d0:52:a1: ef:c7:22:5a:e5:0d:33:76:55:0d:bd:f6:64:9b:d0:9e:f4:e6: c9:12:56:da:e0:7e:b4:e3:be:fb:4f:7b:25:85:2e:63:27:1f: 12:1c:b3:c3:a6:74:92:3f:e8:a1:c9:7c:3e:56:8a:f1:b9:a0: 23:7f:1b:64:53:6c:f1:a6:e8:f0:76:bb:a2:10:d2:9e:d6:d3: 29:ce:b5:77:df:b5:2a:9e:3b:c0:9f:86:81:69:00:8b:f2:ea: b0:4d:8d:66:ce:9c:de:dd:2c:de:35:ac:67:6f:6f:49:6d:52: 4f:ad:75:1c:24:44:86:a3:7d:3d:56:ba:1d:df:f9:a4:96:8a: 29:2f:48:9a:4e:8f:ed:ec:78:75:13:10:50:7d:2a:59:c3:5a: c0:1b:6d:84:d5:16:4b:9d:e8:5d:9a:b6:02:0b:47:40:cd:86: 61:cd:23:e5:01:58:d6:e0:d5:d4:96:08:e8:65:42:0f:03:1a: 61:47:dd:a1:b7:e9:d3:88:30:b9:54:c8:75:13:dd:08:5a:f8: c0:8e:88:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ21cW55z3QEOOF6/1Xh3fEG5dDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNTEyMjMxNDQ2MzVaFw0yNTEyMjcwMDE2MzVaMDMxMTAvBgNV BAMTKDNBMEYwNEQ3QTk4NkQ2QzdCREIzNTBFNDk0Q0VDMTk1QkY4NjM5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhmS9qsEPLxVL+qthIyKxYiD3x C9CzBr0U72KaCK85AjHXWwqzB7qzIHtFtVAJ9Xa+nxRzPga3J5b7poUET35p+y/k aobBexYrtFcDAIMZXXVZiu9Q4wzWoXhvBkwTYMcl2Qk0aFVk4SM4zen/ydxXVzVm fA63BhJQmIk67AQpZqrcHTTbvOemi0DE7JXA1axPZCOpv3+w4BImstUP19kvcKPh W2eaEfbX8KYqLXkBtK1eIJ9B4CbkmKiCAznE6yllXgkY0RzzQuGsWRt2X1TYZOJH rzxipF8QSQxAQwhQBY2TDLOgFa+uxJuvfQT2rX8Zpe37y6DdJUsoPPapR4zvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOg8E16mG1se9s1DklM7Blb+GOcEwHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIk2G/pyeW1aqjvDbROwMGHLT2GVfIgesAB4 vIwzLyDrtRDhb93nXXTFtdKhMHp6D3P12dBSoe/HIlrlDTN2VQ299mSb0J705skS VtrgfrTjvvtPeyWFLmMnHxIcs8OmdJI/6KHJfD5WivG5oCN/G2RTbPGm6PB2u6IQ 0p7W0ynOtXfftSqeO8CfhoFpAIvy6rBNjWbOnN7dLN41rGdvb0ltUk+tdRwkRIaj fT1Wuh3f+aSWiikvSJpOj+3seHUTEFB9KlnDWsAbbYTVFkud6F2atgILR0DNhmHN I+UBWNbg1dSWCOhlQg8DGmFH3aG36dOIMLlUyHUT3Qha+MCOiM8= -----END CERTIFICATE-----Generated at Wed Dec 24 22:09:42 2025 by rpki-client