This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft File: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft (raw, json) Hash identifier: JOPfEqoppS7AitQ4nU/KmzCbf7l2GiFWOy1YLfVi9GA= Subject key identifier: 33:4F:2F:23:F7:22:92:9A:41:74:53:83:FF:28:69:74:B4:93:CA:1B Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 Certificate issuer: /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Certificate serial: 2E52470A19E28ED81853AB1A20EA870BB6D408B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft Manifest number: 010A Signing time: Tue 23 Dec 2025 23:33:31 +0000 Manifest this update: Tue 23 Dec 2025 23:28:31 +0000 Manifest next update: Sat 27 Dec 2025 05:53:31 +0000 Files and hashes: 1: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: gKuzS0cjEmgd3PQlr3qETih9wH6v1uECgkfmF5qpn9s=) 2: B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl (hash: yxOg3k5UigRUkwqAmIkqxNu0mR/2TcNZsEfC0oE9i7o=) 3: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: DxiuVfLvcjyo+Mn8zZEZyq9g9x9MYwq6EjUmb+7l6rM=) 4: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: tHzJEc4tVJbK/5ReWDfkb8wKbAgEEvzCH+vbGF7LXac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 05:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:52:47:0a:19:e2:8e:d8:18:53:ab:1a:20:ea:87:0b:b6:d4:08:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6 Validity Not Before: Dec 23 23:28:31 2025 GMT Not After : Dec 27 05:53:31 2025 GMT Subject: CN=334F2F23F722929A41745383FF286974B493CA1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ea:13:cb:78:5e:dc:1d:c3:87:2b:79:64:d7: 66:34:b2:fa:7e:54:1b:bc:c3:1c:59:78:11:2f:de: 00:03:ec:7a:39:e3:d4:8f:bb:ec:7c:b7:68:f0:79: 79:85:7f:38:5c:5e:5b:76:ef:65:e3:6a:ce:c3:df: e3:2d:aa:12:27:ca:ba:5e:5d:c0:4d:1b:38:e5:ce: ca:cd:a8:f4:b6:73:83:da:59:cd:97:c9:91:38:be: 5c:de:f8:4e:c8:2f:52:1c:82:6b:cf:be:01:da:18: 2c:23:43:f2:79:a4:bc:c5:d7:87:8f:c7:23:b0:f3: 88:ae:f5:54:db:72:a1:1a:d0:7d:1c:c6:ee:eb:53: 4c:3d:32:db:96:2c:04:b1:a0:6d:39:c2:66:a8:70: 0e:bb:9c:25:c9:a9:63:0a:ca:2b:2d:0c:29:e2:68: 5d:ae:42:e9:54:a4:34:cc:c5:8c:9a:83:f9:df:f3: 08:43:e2:ee:d1:1b:ce:77:73:44:90:28:61:77:df: 3f:51:c2:0e:5b:18:86:97:e8:79:90:7a:28:97:cc: 3c:20:94:68:42:03:a7:4c:d6:59:7a:5e:c7:d8:ac: 05:b4:83:b1:51:2a:4b:e3:e1:3b:e7:2b:e3:7f:9c: 9d:e4:5e:3c:1c:6a:dd:79:a1:ae:0c:5b:b5:80:51: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4F:2F:23:F7:22:92:9A:41:74:53:83:FF:28:69:74:B4:93:CA:1B X509v3 Authority Key Identifier: keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:42:97:4f:84:53:8a:33:66:c5:8d:d5:f3:57:58:ef:2a:ee: 8d:b4:06:d5:d6:7c:7b:a9:37:f3:7a:b8:81:2f:73:85:88:05: 5c:71:d8:d4:19:7b:e8:aa:d0:c8:31:c4:7e:8c:4d:b7:4b:c9: 71:e8:d8:5d:b7:86:d4:58:29:30:e7:66:8b:a7:2f:9c:c1:53: 8d:71:d6:88:f0:5c:c0:3f:d6:ec:7b:33:87:96:28:50:12:9b: a4:dc:fe:e7:2b:5e:9f:13:3b:b0:7d:3f:fb:c9:16:79:3a:fc: a9:9e:e4:4a:d0:1d:b3:d5:2f:41:81:db:3e:0e:64:ff:99:39: 95:0b:22:da:69:be:8f:33:cb:82:b6:3b:8d:57:9e:74:0b:88: bf:ac:83:1b:b3:cf:81:01:d4:01:05:89:46:29:6d:4f:bf:4b: 81:8e:e2:9a:91:88:c3:dc:67:dd:06:c6:d3:d3:8f:56:05:56: 14:46:8f:1f:af:6c:2b:12:48:2e:9e:a1:40:13:3f:a4:44:7d: 9f:9b:d6:c3:36:31:6d:6f:ff:ea:80:c0:3a:8f:9b:a7:74:ea: 1d:7a:4a:f8:53:c6:f8:80:80:85:3f:a0:1b:4d:14:6d:91:78: 14:6b:8a:5e:5a:56:74:f4:15:1a:65:5f:ab:a8:3d:64:32:c8: 18:9b:e0:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULlJHChnijtgYU6saIOqHC7bUCLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2 MEMwNkFGNjAeFw0yNTEyMjMyMzI4MzFaFw0yNTEyMjcwNTUzMzFaMDMxMTAvBgNV BAMTKDMzNEYyRjIzRjcyMjkyOUE0MTc0NTM4M0ZGMjg2OTc0QjQ5M0NBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm6hPLeF7cHcOHK3lk12Y0svp+ VBu8wxxZeBEv3gAD7Ho549SPu+x8t2jweXmFfzhcXlt272Xjas7D3+MtqhInyrpe XcBNGzjlzsrNqPS2c4PaWc2XyZE4vlze+E7IL1IcgmvPvgHaGCwjQ/J5pLzF14eP xyOw84iu9VTbcqEa0H0cxu7rU0w9MtuWLASxoG05wmaocA67nCXJqWMKyistDCni aF2uQulUpDTMxYyag/nf8whD4u7RG853c0SQKGF33z9Rwg5bGIaX6HmQeiiXzDwg lGhCA6dM1ll6XsfYrAW0g7FRKkvj4TvnK+N/nJ3kXjwcat15oa4MW7WAUddBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM08vI/cikppBdFOD/yhpdLSTyhswHwYDVR0j BBgwFoAUsXhAK+3j7Fpe4uDnH3NqE2DAavYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTEyNGU2YS1mNTFiLTQ2ZDAtOGVhMy03NmIyNzQ0NTU4YTYvMC9CMTc4NDAyQkVE RTNFQzVBNUVFMkUwRTcxRjczNkExMzYwQzA2QUY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZBMTM2MEMw NkFGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvQjE3ODQwMkJFREUzRUM1QTVFRTJFMEU3MUY3MzZB MTM2MEMwNkFGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhCl0+EU4ozZsWN1fNXWO8q7o20BtXWfHup N/N6uIEvc4WIBVxx2NQZe+iq0MgxxH6MTbdLyXHo2F23htRYKTDnZounL5zBU41x 1ojwXMA/1ux7M4eWKFASm6Tc/ucrXp8TO7B9P/vJFnk6/Kme5ErQHbPVL0GB2z4O ZP+ZOZULItppvo8zy4K2O41XnnQLiL+sgxuzz4EB1AEFiUYpbU+/S4GO4pqRiMPc Z90GxtPTj1YFVhRGjx+vbCsSSC6eoUATP6REfZ+b1sM2MW1v/+qAwDqPm6d06h16 SvhTxviAgIU/oBtNFG2ReBRril5aVnT0FRplX6uoPWQyyBib4DA= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:43 2025 by rpki-client