This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: uacZXY4hXfh/BDO859kEEZWroYQLrMpa8GfSeOGz77E= Subject key identifier: C0:D4:EF:03:F8:01:E4:4C:06:A2:47:91:9C:C8:42:C8:CF:45:EB:4A Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 52B3FC7E685C0D6D735487118167F28F4EC63AE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 0222 Signing time: Sat 20 Dec 2025 19:52:12 +0000 Manifest this update: Sat 20 Dec 2025 19:47:12 +0000 Manifest next update: Wed 24 Dec 2025 02:21:12 +0000 Files and hashes: 1: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=) 2: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: 1jy9l53eAex17nkY9pbfuLjtKVGRN3w58KnMfpk8gv8=) 3: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=) 4: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 02:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b3:fc:7e:68:5c:0d:6d:73:54:87:11:81:67:f2:8f:4e:c6:3a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Dec 20 19:47:12 2025 GMT Not After : Dec 24 02:21:12 2025 GMT Subject: CN=C0D4EF03F801E44C06A247919CC842C8CF45EB4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:97:3d:c8:20:64:1c:5e:6b:25:4b:bd:22:d2: 68:a9:c5:8b:24:57:ea:2d:da:ba:a1:e9:f0:23:ce: 9d:ee:3a:3d:2b:ad:2c:70:9b:85:4c:7c:48:07:47: 70:bb:01:02:a2:13:e7:7e:10:f6:77:20:1c:4d:85: bd:7c:8e:93:b1:9c:e3:0c:53:b5:9e:6f:47:03:c9: 95:56:e8:0b:8b:f8:5e:a7:df:50:e9:4a:b1:ea:43: e5:16:d1:7c:46:be:6a:36:29:95:2b:97:6a:40:ed: ce:5a:95:7c:e9:47:0d:df:f9:6a:23:bc:fc:0c:41: 20:ad:e2:02:01:39:67:e8:9a:57:1b:71:33:69:3d: 50:59:69:9d:66:96:64:ea:69:33:29:4f:82:96:33: fe:06:07:40:f3:1b:d0:95:7e:7d:c3:02:c6:6e:ff: 66:e5:76:fc:da:c3:06:24:50:7b:bd:61:89:3d:7a: 1c:26:34:fd:b9:05:91:ab:75:52:0a:9e:58:f0:53: f2:d4:8e:52:28:70:4d:31:3f:f5:14:24:f9:84:ce: 6d:f3:d3:b8:ff:74:1f:33:59:22:64:04:69:2a:53: 66:82:42:5b:88:07:f3:b6:ef:b8:49:fa:ff:1c:91: 10:ca:e0:c9:d4:02:5a:21:e3:03:7b:da:29:4d:cd: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D4:EF:03:F8:01:E4:4C:06:A2:47:91:9C:C8:42:C8:CF:45:EB:4A X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f7:0d:61:8b:b2:b4:7d:bb:9c:45:b7:b4:a7:60:ef:58:05: 49:30:94:da:a2:d1:73:b7:fe:80:64:fe:7e:5f:cd:d9:0b:c1: 7e:e7:18:9a:9e:14:59:a9:f2:ab:59:cd:9d:c6:26:85:84:5e: cf:32:5f:70:ba:de:f0:1f:d7:aa:ec:da:c7:d9:54:aa:78:43: 9b:72:d2:d7:45:bd:e1:e9:88:bc:45:2e:3e:15:74:77:56:d1: 84:cf:c7:55:64:7f:da:cc:31:3c:70:a2:4f:d2:28:68:12:17: 36:1e:30:47:4c:b6:16:26:6e:a1:1b:5e:7a:41:ec:f2:76:24: ad:58:bb:82:84:3b:e5:6e:fc:78:ad:71:f2:ab:5f:d6:6d:fe: 1d:5d:59:da:d3:80:27:5d:02:63:5f:ba:9b:2b:fa:2d:d4:19: f1:45:98:0a:ee:7b:7b:ba:b1:95:92:07:73:5b:c8:24:9f:aa: 66:bc:9f:bc:f0:68:ff:26:ba:56:e7:cc:b9:1b:7c:74:c0:8f: 99:c8:3e:35:d3:46:2c:a1:69:61:0e:a2:c7:19:fc:85:cf:bd: 60:90:0a:9a:80:8f:62:cf:dc:6c:11:a5:52:bf:c7:dd:ba:32: 06:43:07:78:2f:e6:10:02:79:14:8a:cd:e1:98:5d:ec:ae:68: 70:27:91:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUrP8fmhcDW1zVIcRgWfyj07GOuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNTEyMjAxOTQ3MTJaFw0yNTEyMjQwMjIxMTJaMDMxMTAvBgNV BAMTKEMwRDRFRjAzRjgwMUU0NEMwNkEyNDc5MTlDQzg0MkM4Q0Y0NUVCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCilz3IIGQcXmslS70i0mipxYsk V+ot2rqh6fAjzp3uOj0rrSxwm4VMfEgHR3C7AQKiE+d+EPZ3IBxNhb18jpOxnOMM U7Web0cDyZVW6AuL+F6n31DpSrHqQ+UW0XxGvmo2KZUrl2pA7c5alXzpRw3f+Woj vPwMQSCt4gIBOWfomlcbcTNpPVBZaZ1mlmTqaTMpT4KWM/4GB0DzG9CVfn3DAsZu /2bldvzawwYkUHu9YYk9ehwmNP25BZGrdVIKnljwU/LUjlIocE0xP/UUJPmEzm3z 07j/dB8zWSJkBGkqU2aCQluIB/O277hJ+v8ckRDK4MnUAloh4wN72ilNzUThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwNTvA/gB5EwGokeRnMhCyM9F60owHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC33DWGLsrR9u5xFt7SnYO9YBUkwlNqi0XO3 /oBk/n5fzdkLwX7nGJqeFFmp8qtZzZ3GJoWEXs8yX3C63vAf16rs2sfZVKp4Q5ty 0tdFveHpiLxFLj4VdHdW0YTPx1Vkf9rMMTxwok/SKGgSFzYeMEdMthYmbqEbXnpB 7PJ2JK1Yu4KEO+Vu/HitcfKrX9Zt/h1dWdrTgCddAmNfupsr+i3UGfFFmArue3u6 sZWSB3NbyCSfqma8n7zwaP8mulbnzLkbfHTAj5nIPjXTRiyhaWEOoscZ/IXPvWCQ CpqAj2LP3GwRpVK/x926MgZDB3gv5hACeRSKzeGYXeyuaHAnkeo= -----END CERTIFICATE-----Generated at Sun Dec 21 23:12:12 2025 by rpki-client