This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft File: 10B7822CA22013D1B3095AB974949FD98A76025C.mft (raw, json) Hash identifier: hMqqrLuNpH2gjeA0wgPmswrg+IPsk/ybVUcpTdZIhWA= Subject key identifier: 14:33:36:23:F4:00:AC:2C:88:B6:29:33:2A:E5:B2:C9:E0:32:06:7C Authority key identifier: 10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C Certificate issuer: /CN=10B7822CA22013D1B3095AB974949FD98A76025C Certificate serial: 72A406AE182A88D725634B5CEAF7529AEA1065F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft Manifest number: 0154 Signing time: Fri 19 Dec 2025 09:11:53 +0000 Manifest this update: Fri 19 Dec 2025 09:06:53 +0000 Manifest next update: Mon 22 Dec 2025 12:28:53 +0000 Files and hashes: 1: 10B7822CA22013D1B3095AB974949FD98A76025C.crl (hash: KVFqYgu8vuoI9DQWwIWhmGSenb7y9cZlP+UhZijMfcQ=) 2: 3130332e3134352e3232362e302f32342d3234203d3e20313339343536.roa (hash: pdj6kWhUHiHBGDkiWMJSGwDu1DiR3cH1bD9Qa0wAwf0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 12:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a4:06:ae:18:2a:88:d7:25:63:4b:5c:ea:f7:52:9a:ea:10:65:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10B7822CA22013D1B3095AB974949FD98A76025C Validity Not Before: Dec 19 09:06:53 2025 GMT Not After : Dec 22 12:28:53 2025 GMT Subject: CN=14333623F400AC2C88B629332AE5B2C9E032067C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:50:2e:09:7e:07:db:a6:f5:25:d1:07:f6: 08:9c:e8:cd:82:a1:d9:a4:9e:bb:2d:64:b8:eb:3b: ae:98:b1:de:6f:9f:d7:a3:74:f7:6b:b7:ea:aa:92: 17:ab:a1:2d:f3:c3:28:2b:5e:f9:f0:4f:a0:f3:0d: 94:b3:d0:a6:e9:c1:21:dd:76:83:d1:7f:df:fb:6a: 3a:e2:83:b8:fb:f0:f7:f5:4f:e2:21:5b:54:6c:d0: e4:f8:2d:07:ca:c6:93:94:9f:b7:9f:7a:58:0e:7a: 5a:a4:e4:e0:78:52:c6:4c:28:4c:df:3a:0b:ad:31: 6b:ea:6a:1b:da:21:8b:16:c8:a4:77:27:62:7c:f8: 49:7d:c3:ed:65:3a:8f:17:6a:ef:d3:b9:80:92:fd: cb:49:4d:19:90:47:29:9d:be:b4:eb:3a:df:3a:17: 05:a5:6b:0a:39:bc:17:95:26:ed:8d:fd:40:31:f2: 66:60:10:ff:27:cf:57:49:3a:67:a3:2b:85:ee:86: 10:8a:f8:49:c0:ce:61:1b:68:bb:92:84:41:a2:8a: 0d:20:b5:5f:59:67:f3:a0:b4:e0:13:78:e5:00:9d: 8d:78:6a:f0:53:0f:fb:ce:72:cf:6e:54:0b:5a:c8: 25:d6:cd:7c:c2:16:88:91:e1:ed:e0:b5:b6:82:68: 5d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:33:36:23:F4:00:AC:2C:88:B6:29:33:2A:E5:B2:C9:E0:32:06:7C X509v3 Authority Key Identifier: keyid:10:B7:82:2C:A2:20:13:D1:B3:09:5A:B9:74:94:9F:D9:8A:76:02:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10B7822CA22013D1B3095AB974949FD98A76025C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e40029c7-742c-4da8-b2ee-d629ae78bf01/0/10B7822CA22013D1B3095AB974949FD98A76025C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:aa:d6:9a:ec:55:8b:51:ab:bf:ca:40:d4:fb:8e:5b:bb:f8: b5:4b:17:f7:7c:24:2b:22:fd:80:21:99:a3:5f:55:ef:d8:c2: 9b:7f:27:ce:b5:c4:0b:a7:fc:05:35:70:49:9b:c0:71:57:cd: 6b:1c:1e:a8:b0:13:62:9e:59:e1:32:42:7d:b6:cd:28:f4:be: c3:89:fc:b2:05:10:a9:70:4f:99:6d:63:6f:b0:63:4d:d0:4f: 9b:40:2e:f7:81:69:e2:79:f6:8d:4b:b0:2f:08:9f:eb:3b:07: 02:dc:bb:81:4f:95:db:cc:80:25:18:f4:7d:84:bf:f9:07:3b: 16:80:a3:f0:51:64:71:cc:81:ed:69:c9:e2:8b:c7:d7:49:29: 62:cc:fa:77:de:72:40:39:4e:dd:a8:3c:54:e3:e9:f3:e0:69: 23:4f:dd:b5:6a:eb:84:01:47:ae:ed:b3:f9:ad:58:e9:f4:91: 38:b1:01:96:5e:90:35:c3:6d:0b:e5:b2:41:ba:d0:20:79:47: 35:46:eb:99:c5:e5:59:75:f4:9f:d0:e2:6b:58:27:38:34:75: c9:90:c0:35:f2:c4:ab:d3:ec:65:a1:7e:b5:e3:58:65:72:af: 2d:d1:e2:17:72:2b:69:7b:3f:76:a0:ec:be:ab:bd:82:6a:89: 7f:d6:b3:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqQGrhgqiNclY0tc6vdSmuoQZfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4 QTc2MDI1QzAeFw0yNTEyMTkwOTA2NTNaFw0yNTEyMjIxMjI4NTNaMDMxMTAvBgNV BAMTKDE0MzMzNjIzRjQwMEFDMkM4OEI2MjkzMzJBRTVCMkM5RTAzMjA2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/1AuCX4H26b1JdEH9gic6M2C odmknrstZLjrO66Ysd5vn9ejdPdrt+qqkheroS3zwygrXvnwT6DzDZSz0KbpwSHd doPRf9/7ajrig7j78Pf1T+IhW1Rs0OT4LQfKxpOUn7efelgOelqk5OB4UsZMKEzf OgutMWvqahvaIYsWyKR3J2J8+El9w+1lOo8Xau/TuYCS/ctJTRmQRymdvrTrOt86 FwWlawo5vBeVJu2N/UAx8mZgEP8nz1dJOmejK4XuhhCK+EnAzmEbaLuShEGiig0g tV9ZZ/OgtOATeOUAnY14avBTD/vOcs9uVAtayCXWzXzCFoiR4e3gtbaCaF11AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFDM2I/QArCyItikzKuWyyeAyBnwwHwYDVR0j BBgwFoAUELeCLKIgE9GzCVq5dJSf2Yp2AlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDAwMjljNy03NDJjLTRkYTgtYjJlZS1kNjI5YWU3OGJmMDEvMC8xMEI3ODIyQ0Ey MjAxM0QxQjMwOTVBQjk3NDk0OUZEOThBNzYwMjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlGRDk4QTc2 MDI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQwMDI5YzctNzQyYy00ZGE4LWIy ZWUtZDYyOWFlNzhiZjAxLzAvMTBCNzgyMkNBMjIwMTNEMUIzMDk1QUI5NzQ5NDlG RDk4QTc2MDI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaq1prsVYtRq7/KQNT7jlu7+LVLF/d8JCsi /YAhmaNfVe/Ywpt/J861xAun/AU1cEmbwHFXzWscHqiwE2KeWeEyQn22zSj0vsOJ /LIFEKlwT5ltY2+wY03QT5tALveBaeJ59o1LsC8In+s7BwLcu4FPldvMgCUY9H2E v/kHOxaAo/BRZHHMge1pyeKLx9dJKWLM+nfeckA5Tt2oPFTj6fPgaSNP3bVq64QB R67ts/mtWOn0kTixAZZekDXDbQvlskG60CB5RzVG65nF5Vl19J/Q4mtYJzg0dcmQ wDXyxKvT7GWhfrXjWGVyry3R4hdyK2l7P3ag7L6rvYJqiX/Ws20= -----END CERTIFICATE-----Generated at Sun Dec 21 05:20:18 2025 by rpki-client