This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft File: 20B00D67B048DAE581FE60A498995A27878149A7.mft (raw, json) Hash identifier: GtQL/T6Rgy99YI8f5F8kBsV0N2BDdm3VUz6sXdzq0E8= Subject key identifier: D3:12:81:D7:9B:DE:3F:3A:E3:1B:C3:43:20:E8:FC:A8:7B:C5:E1:A2 Authority key identifier: 20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 Certificate issuer: /CN=20B00D67B048DAE581FE60A498995A27878149A7 Certificate serial: 7D0620A497C5846BB63EDB83C892C5F59BE8AFB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft Manifest number: 01F1 Signing time: Tue 23 Dec 2025 20:21:45 +0000 Manifest this update: Tue 23 Dec 2025 20:16:45 +0000 Manifest next update: Fri 26 Dec 2025 20:33:45 +0000 Files and hashes: 1: 323430313a383234303a3a2f33322d3438203d3e203338373834.roa (hash: G8PV7882jIzL7DpesLHcinlC2gFpMWki9wF55ivTArc=) 2: 323430313a383234303a3a2f33322d3438203d3e203233393438.roa (hash: G1GO2xkJddb3+Y/gyc1CuMPONDsxmL8d7VQhnKS/oUM=) 3: 20B00D67B048DAE581FE60A498995A27878149A7.crl (hash: HvtjfTV9K6hxtS0/Ynp7Cta9XdbltYPkWc6KWCsIvYA=) 4: 3230322e37352e31362e302f32302d3234203d3e203233393438.roa (hash: 9Zia9o6pZwHOK52NvyDCb/uiHgQl9tsHUexz827si5o=) 5: 3230322e37352e32382e302f32332d3234203d3e20313338383731.roa (hash: gpotogkgRPqhq+iXjlc72dawBwQqgtK3y2i6zL2CYVg=) 6: 3230322e37352e31362e302f32302d3234203d3e203338373834.roa (hash: lK1vUk86W1WWvANWItOKCTii7JITy4ro2D+rSQqdjDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 20:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:06:20:a4:97:c5:84:6b:b6:3e:db:83:c8:92:c5:f5:9b:e8:af:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20B00D67B048DAE581FE60A498995A27878149A7 Validity Not Before: Dec 23 20:16:45 2025 GMT Not After : Dec 26 20:33:45 2025 GMT Subject: CN=D31281D79BDE3F3AE31BC34320E8FCA87BC5E1A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b2:45:dd:26:04:a1:53:94:91:23:a4:34:8d: 6e:7b:4f:11:1d:9b:69:0d:c3:15:25:cd:06:8a:2a: 51:22:46:a4:a2:95:dc:96:51:a9:4e:4f:8f:60:09: da:cd:0b:d4:4d:5d:9c:a4:05:10:d9:12:3d:af:e6: ba:00:9f:e0:35:06:ec:fa:86:92:6f:1f:8f:ef:37: 8d:08:b9:8b:b0:1f:0d:5b:d9:67:91:cc:aa:a7:59: e1:d7:ff:16:09:1a:0e:d7:5c:73:32:24:8b:73:32: ea:d0:ee:7c:12:31:68:9d:49:d3:35:80:51:4f:32: 80:32:7d:6d:84:d3:90:bc:08:34:2d:c0:24:8a:5e: 59:db:d7:6c:91:7e:1d:a0:fe:97:b8:56:26:03:9c: aa:3f:d8:4e:ba:1b:09:3c:8c:5e:a2:59:9c:e2:65: 66:d5:ea:32:63:e3:4d:8b:f7:e7:33:54:8f:ae:67: 18:35:1d:51:0d:46:76:83:0c:d9:d6:31:46:12:4d: f3:69:9d:54:8c:81:10:30:7d:6a:19:51:44:ff:9f: de:2b:bc:84:97:2f:66:f9:4a:8a:7f:07:bc:64:90: 02:e5:62:2f:0c:87:52:7a:05:9b:3f:4e:f7:e0:77: b1:a0:7e:cb:b3:52:ce:30:ae:c7:59:91:b1:60:66: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:12:81:D7:9B:DE:3F:3A:E3:1B:C3:43:20:E8:FC:A8:7B:C5:E1:A2 X509v3 Authority Key Identifier: keyid:20:B0:0D:67:B0:48:DA:E5:81:FE:60:A4:98:99:5A:27:87:81:49:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B00D67B048DAE581FE60A498995A27878149A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4547104-939e-40e3-8fc8-42522642044b/0/20B00D67B048DAE581FE60A498995A27878149A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:dc:54:4c:a2:e6:9f:df:80:c1:a5:98:c4:3c:4e:39:58:e6: 6a:be:28:c7:73:f5:67:1f:8b:05:26:14:d2:f9:6f:b5:4a:c6: 11:60:22:9c:45:11:ba:0b:b8:03:2c:e1:50:cb:29:63:2b:39: 68:e5:45:61:42:a8:cf:34:89:6b:4e:0e:ba:38:9f:a8:53:b2: f5:0d:01:db:a9:83:89:16:d3:a4:2b:00:60:12:85:2f:a3:91: b9:72:52:2c:04:d3:84:ed:96:10:73:c0:5b:f2:6b:dc:b6:58: 68:87:51:f4:58:89:cd:14:d7:81:cc:b5:98:47:6f:b1:9a:cb: bf:ad:6f:3c:94:f0:f3:f4:e3:d8:36:86:db:8c:a0:1b:e9:51: f5:3d:02:02:bb:87:a9:ee:cd:8f:87:d3:d3:4e:84:02:64:2b: 5a:09:8e:c6:98:b7:37:f7:7d:14:2e:74:73:0f:23:6e:9c:e1: 52:8c:4d:50:bb:42:8f:ab:a7:8b:cb:d5:54:cc:ed:46:04:11: 8f:08:98:ff:a0:7c:8d:9a:49:bd:f0:bb:a4:a1:ff:23:ae:9e: 7d:d2:1f:26:8d:7a:a6:48:e9:fa:51:59:52:74:71:1f:95:87: de:fb:5b:7f:e0:04:47:f0:d4:eb:fc:38:f9:bc:90:2a:ed:ee: c9:3a:e0:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQYgpJfFhGu2PtuDyJLF9Zvor7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4 NzgxNDlBNzAeFw0yNTEyMjMyMDE2NDVaFw0yNTEyMjYyMDMzNDVaMDMxMTAvBgNV BAMTKEQzMTI4MUQ3OUJERTNGM0FFMzFCQzM0MzIwRThGQ0E4N0JDNUUxQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/skXdJgShU5SRI6Q0jW57TxEd m2kNwxUlzQaKKlEiRqSildyWUalOT49gCdrNC9RNXZykBRDZEj2v5roAn+A1Buz6 hpJvH4/vN40IuYuwHw1b2WeRzKqnWeHX/xYJGg7XXHMyJItzMurQ7nwSMWidSdM1 gFFPMoAyfW2E05C8CDQtwCSKXlnb12yRfh2g/pe4ViYDnKo/2E66Gwk8jF6iWZzi ZWbV6jJj402L9+czVI+uZxg1HVENRnaDDNnWMUYSTfNpnVSMgRAwfWoZUUT/n94r vISXL2b5Sop/B7xkkALlYi8Mh1J6BZs/Tvfgd7GgfsuzUs4wrsdZkbFgZqsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xKB15vePzrjG8NDIOj8qHvF4aIwHwYDVR0j BBgwFoAUILANZ7BI2uWB/mCkmJlaJ4eBSacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU0NzEwNC05MzllLTQwZTMtOGZjOC00MjUyMjY0MjA0NGIvMC8yMEIwMEQ2N0Iw NDhEQUU1ODFGRTYwQTQ5ODk5NUEyNzg3ODE0OUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVBMjc4Nzgx NDlBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NDcxMDQtOTM5ZS00MGUzLThm YzgtNDI1MjI2NDIwNDRiLzAvMjBCMDBENjdCMDQ4REFFNTgxRkU2MEE0OTg5OTVB Mjc4NzgxNDlBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvcVEyi5p/fgMGlmMQ8TjlY5mq+KMdz9Wcf iwUmFNL5b7VKxhFgIpxFEboLuAMs4VDLKWMrOWjlRWFCqM80iWtODro4n6hTsvUN Adupg4kW06QrAGAShS+jkblyUiwE04TtlhBzwFvya9y2WGiHUfRYic0U14HMtZhH b7Gay7+tbzyU8PP049g2htuMoBvpUfU9AgK7h6nuzY+H09NOhAJkK1oJjsaYtzf3 fRQudHMPI26c4VKMTVC7Qo+rp4vL1VTM7UYEEY8ImP+gfI2aSb3wu6Sh/yOunn3S HyaNeqZI6fpRWVJ0cR+Vh977W3/gBEfw1Ov8OPm8kCrt7sk64DA= -----END CERTIFICATE-----Generated at Thu Dec 25 11:18:57 2025 by rpki-client