This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: cFaq1STSSoJYzYsmDM4t94K1mtgQ1HQ5tXxivIM0aEU= Subject key identifier: 44:B1:EB:22:59:32:66:53:21:CE:27:D1:5F:2C:1B:34:E9:2A:A4:DB Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 78A83B1AC5B479F4477A62B5EEDA688D376682AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 0221 Signing time: Thu 18 Dec 2025 18:22:11 +0000 Manifest this update: Thu 18 Dec 2025 18:17:11 +0000 Manifest next update: Sun 21 Dec 2025 19:43:11 +0000 Files and hashes: 1: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=) 2: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=) 3: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: Rg8xVPj/ud7StJJu8lmCuuxmXY1lxKfg9oAOpwpa1FY=) 4: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a8:3b:1a:c5:b4:79:f4:47:7a:62:b5:ee:da:68:8d:37:66:82:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Dec 18 18:17:11 2025 GMT Not After : Dec 21 19:43:11 2025 GMT Subject: CN=44B1EB225932665321CE27D15F2C1B34E92AA4DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:b9:09:0e:b1:7a:6a:35:bb:cd:55:24:14: c7:67:32:d3:a4:4e:fc:72:bf:47:fd:7c:30:10:e4: 9e:48:a5:a4:29:6e:29:1c:79:67:0e:f7:d2:3e:3d: c6:4c:25:68:fa:14:69:cd:f8:2a:b6:6b:15:92:71: 01:32:00:3e:6d:db:7e:ca:45:4f:f7:6c:60:95:9b: 5b:fe:4d:67:d8:5e:cc:c8:79:d1:30:1a:19:22:e3: 86:29:53:4b:af:4e:e6:28:0a:3d:81:2a:86:0d:e8: 9f:4f:d3:c7:2f:16:f6:2d:1d:c5:1e:cc:59:ed:9f: c5:ee:ef:2d:cb:38:db:7a:15:63:92:07:ef:13:fb: da:ec:95:5f:2f:18:9d:46:30:12:20:22:f6:0b:92: 2c:a5:12:c5:7d:46:a9:7f:c5:22:a1:fc:7d:53:72: 09:30:17:ce:3a:b7:53:cf:0a:14:2b:82:29:1e:b6: e5:d5:ca:0b:0d:4a:89:78:9b:cf:1a:ed:94:4b:ea: 6e:9c:79:b2:e8:78:02:03:0b:8e:ff:6a:91:9d:34: b6:7f:bd:6e:0b:5b:40:08:7e:fe:75:59:b8:1e:69: c6:1e:27:f9:61:d1:8e:f0:03:d6:a4:51:1b:a3:c3: 39:9c:93:1f:78:32:54:10:ca:8a:ac:53:d4:10:51: bd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B1:EB:22:59:32:66:53:21:CE:27:D1:5F:2C:1B:34:E9:2A:A4:DB X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:0a:ed:2f:78:62:10:eb:14:af:88:a1:67:b7:2c:91:a5:8a: bb:63:37:37:72:9c:1e:9d:cb:ce:b1:62:d7:a9:6c:56:56:58: 31:9c:9f:af:cd:17:f7:56:a9:fd:50:0a:22:e7:fe:c2:94:44: 94:13:9b:7a:e1:00:1c:20:6c:bb:ba:e1:dd:b1:1d:2b:07:fc: db:5a:20:aa:50:e3:d7:c6:72:88:ad:70:ca:08:79:c8:68:fe: a7:71:cc:be:cd:4c:40:ad:bd:35:8e:bc:18:00:32:da:53:0f: 90:80:ba:6e:5e:a4:22:b3:3b:06:58:dc:b2:9d:13:48:15:33: b3:33:96:a5:b6:d2:93:8d:17:1a:8c:03:f2:e6:a7:5d:00:36: 47:7b:69:1e:ef:8b:38:03:91:35:ff:11:a0:c9:d2:37:8a:d5: 4c:1e:dc:7b:41:93:00:c8:0d:60:60:62:34:8c:f7:9a:27:59: 6a:a2:4d:be:91:bc:04:60:68:98:b8:ea:64:28:fe:26:fd:a6: 30:51:7a:f0:32:61:24:e6:94:b3:97:1f:31:1b:2d:3a:c4:7f: 81:c8:e7:f2:ef:70:dc:42:28:f2:16:3c:f6:e5:c3:b8:cc:d1: 78:c7:18:4c:cf:a1:f5:fa:61:a3:a0:88:71:2b:01:04:4f:52: 7d:1b:af:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeKg7GsW0efRHemK17tpojTdmgqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNTEyMTgxODE3MTFaFw0yNTEyMjExOTQzMTFaMDMxMTAvBgNV BAMTKDQ0QjFFQjIyNTkzMjY2NTMyMUNFMjdEMTVGMkMxQjM0RTkyQUE0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KLkJDrF6ajW7zVUkFMdnMtOk Tvxyv0f9fDAQ5J5IpaQpbikceWcO99I+PcZMJWj6FGnN+Cq2axWScQEyAD5t237K RU/3bGCVm1v+TWfYXszIedEwGhki44YpU0uvTuYoCj2BKoYN6J9P08cvFvYtHcUe zFntn8Xu7y3LONt6FWOSB+8T+9rslV8vGJ1GMBIgIvYLkiylEsV9Rql/xSKh/H1T cgkwF846t1PPChQrgiketuXVygsNSol4m88a7ZRL6m6cebLoeAIDC47/apGdNLZ/ vW4LW0AIfv51WbgeacYeJ/lh0Y7wA9akURujwzmckx94MlQQyoqsU9QQUb37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURLHrIlkyZlMhzifRXywbNOkqpNswHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUK7S94YhDrFK+IoWe3LJGlirtjNzdynB6d y86xYtepbFZWWDGcn6/NF/dWqf1QCiLn/sKURJQTm3rhABwgbLu64d2xHSsH/Nta IKpQ49fGcoitcMoIecho/qdxzL7NTECtvTWOvBgAMtpTD5CAum5epCKzOwZY3LKd E0gVM7MzlqW20pONFxqMA/Lmp10ANkd7aR7vizgDkTX/EaDJ0jeK1Uwe3HtBkwDI DWBgYjSM95onWWqiTb6RvARgaJi46mQo/ib9pjBRevAyYSTmlLOXHzEbLTrEf4HI 5/LvcNxCKPIWPPblw7jM0XjHGEzPofX6YaOgiHErAQRPUn0br/Y= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:55 2025 by rpki-client