This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: 8H6QqxXD1dUoDve1dHx9k8IDI7NMui8hNk2YsEtZHKs= Subject key identifier: 3C:E2:89:81:A8:A7:93:F4:C3:A4:45:31:AF:7F:2C:2F:A5:99:57:09 Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 2C2A3140737DA0620BABBB8E6A229708F2679C19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 03B2 Signing time: Wed 17 Dec 2025 23:12:03 +0000 Manifest this update: Wed 17 Dec 2025 23:07:03 +0000 Manifest next update: Sun 21 Dec 2025 01:16:03 +0000 Files and hashes: 1: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: qqHDF1bEeRN2KsIEd3QUuYoDKnIYjk7zWBdSbKZfmRc=) 2: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2a:31:40:73:7d:a0:62:0b:ab:bb:8e:6a:22:97:08:f2:67:9c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Dec 17 23:07:03 2025 GMT Not After : Dec 21 01:16:03 2025 GMT Subject: CN=3CE28981A8A793F4C3A44531AF7F2C2FA5995709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:82:75:fa:c1:23:bc:59:dd:2d:8c:5d:a4: e0:27:2e:86:95:76:73:22:05:eb:26:22:6b:d0:50: a3:19:a9:ae:77:dd:2a:07:fc:57:28:72:73:f0:42: e3:fc:42:14:5a:0c:28:c7:d8:64:53:d6:8b:4e:7b: c3:0a:51:59:a4:32:0f:4b:77:70:49:69:58:3f:35: 1e:1a:b3:5f:b1:b9:b9:29:55:d4:e9:fe:41:46:22: 4b:81:d2:42:af:51:1c:76:d6:67:3f:b7:af:ed:88: fe:d9:34:4f:f4:b6:69:14:c7:25:8f:26:37:e8:b2: dc:a9:f8:ee:a5:1e:ed:f1:d7:fa:bc:f5:0d:50:ac: df:f0:2b:58:b5:c5:b5:fc:b5:b6:b6:4a:cb:35:fb: b6:42:a9:7e:4e:53:d7:05:b1:3e:2d:38:9f:e0:b1: 45:e0:57:79:c4:1f:a0:a3:a2:5e:d7:2a:19:88:56: 75:41:6f:63:81:3b:af:7d:8a:bc:19:ea:2a:de:8a: fc:6d:5b:92:15:73:7b:30:14:0d:e4:54:20:02:17: e8:3f:14:d6:5f:84:2c:a1:9a:81:53:80:9d:c4:7a: 93:f9:4f:d1:67:61:93:56:04:f6:8a:de:51:6a:ee: 49:9e:7f:e0:eb:ed:5d:6d:a7:30:56:b6:3f:ca:5d: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E2:89:81:A8:A7:93:F4:C3:A4:45:31:AF:7F:2C:2F:A5:99:57:09 X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a4:4f:8b:85:6f:24:52:d2:a0:a2:f5:b0:e5:b7:da:86:3f: 86:ad:95:df:7b:ff:24:45:49:31:7d:79:5c:af:62:54:6e:57: c6:99:0d:32:63:52:fd:f5:63:cf:ef:fa:80:39:85:ce:d9:59: cb:29:99:26:84:d8:b0:e1:0c:8c:b6:5c:41:84:e8:ba:21:49: 03:ca:c6:00:3d:4d:dd:09:de:12:94:5a:29:32:29:b8:27:2a: 68:7e:fc:d9:18:c4:fa:ba:b2:36:65:de:79:f3:7f:e6:09:36: f7:19:2f:2d:59:3a:54:34:f2:8f:30:f3:96:06:77:f9:a3:29: 80:8b:14:b4:3d:c2:69:a4:a8:cc:38:32:c0:41:d9:92:f4:c6: dc:7a:d9:ae:46:c7:c1:c7:d6:2a:99:47:c2:7b:39:80:41:0c: e5:84:2b:9e:e7:42:9c:3b:ff:3c:79:e4:1a:86:58:c8:ae:f2: 22:9f:46:17:2f:cc:a2:87:f5:ec:a7:cc:c6:b8:0d:d6:cb:c0: ca:3c:4f:00:bf:84:a5:cb:c6:3e:4e:64:d1:1f:41:d4:d6:b8: ea:30:fb:ca:cc:7a:a4:5a:a5:0e:5e:a4:cb:42:1d:2e:3d:d9: ba:72:bb:6d:be:6d:75:fe:1b:3e:1b:d2:fe:64:a7:63:ac:60: 0b:2b:04:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCoxQHN9oGILq7uOaiKXCPJnnBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNTEyMTcyMzA3MDNaFw0yNTEyMjEwMTE2MDNaMDMxMTAvBgNV BAMTKDNDRTI4OTgxQThBNzkzRjRDM0E0NDUzMUFGN0YyQzJGQTU5OTU3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuYJ1+sEjvFndLYxdpOAnLoaV dnMiBesmImvQUKMZqa533SoH/FcocnPwQuP8QhRaDCjH2GRT1otOe8MKUVmkMg9L d3BJaVg/NR4as1+xubkpVdTp/kFGIkuB0kKvURx21mc/t6/tiP7ZNE/0tmkUxyWP Jjfostyp+O6lHu3x1/q89Q1QrN/wK1i1xbX8tba2Sss1+7ZCqX5OU9cFsT4tOJ/g sUXgV3nEH6Cjol7XKhmIVnVBb2OBO699irwZ6ireivxtW5IVc3swFA3kVCACF+g/ FNZfhCyhmoFTgJ3EepP5T9FnYZNWBPaK3lFq7kmef+Dr7V1tpzBWtj/KXfInAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPOKJgaink/TDpEUxr38sL6WZVwkwHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADykT4uFbyRS0qCi9bDlt9qGP4atld97/yRF STF9eVyvYlRuV8aZDTJjUv31Y8/v+oA5hc7ZWcspmSaE2LDhDIy2XEGE6LohSQPK xgA9Td0J3hKUWikyKbgnKmh+/NkYxPq6sjZl3nnzf+YJNvcZLy1ZOlQ08o8w85YG d/mjKYCLFLQ9wmmkqMw4MsBB2ZL0xtx62a5Gx8HH1iqZR8J7OYBBDOWEK57nQpw7 /zx55BqGWMiu8iKfRhcvzKKH9eynzMa4DdbLwMo8TwC/hKXLxj5OZNEfQdTWuOow +8rMeqRapQ5epMtCHS492bpyu22+bXX+Gz4b0v5kp2OsYAsrBFw= -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:44 2025 by rpki-client