This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: k+0ylMbuOwfxkGD1rvX3tEqH+SB4VNLNtBqTrl1d2Jo= Subject key identifier: 61:4F:A6:AB:20:FE:8B:82:4D:3B:88:67:23:CB:DA:C0:36:BC:2B:1F Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 3A9D639383FCC14CA909E4D2E43905F466BA3B36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 0376 Signing time: Wed 24 Dec 2025 01:21:32 +0000 Manifest this update: Wed 24 Dec 2025 01:16:32 +0000 Manifest next update: Sat 27 Dec 2025 08:44:32 +0000 Files and hashes: 1: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: plI0UH8KrgGmoPWCvFzzFUdEBpBd3365iami6U2c6Zs=) 2: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 08:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9d:63:93:83:fc:c1:4c:a9:09:e4:d2:e4:39:05:f4:66:ba:3b:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Dec 24 01:16:32 2025 GMT Not After : Dec 27 08:44:32 2025 GMT Subject: CN=614FA6AB20FE8B824D3B886723CBDAC036BC2B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:23:5f:a9:08:d3:0c:41:36:72:42:ce:d5:22: 06:26:9b:c2:b5:d1:96:58:5e:e3:da:9f:93:fe:6e: 64:35:19:38:0c:46:70:6a:91:d2:55:92:51:98:d6: 29:e7:e1:d1:0d:e1:e2:e7:4f:10:0d:37:74:fc:49: a1:06:94:3a:17:a3:a0:c0:7b:67:c7:08:86:0a:55: 0a:8b:2a:c6:fe:f7:10:a2:4e:5e:c1:78:ac:45:12: bf:67:e0:5b:38:da:77:6f:af:a1:df:4e:1f:cf:1c: 40:1a:70:3a:6e:aa:ab:42:28:ba:95:27:58:44:3a: a1:53:cb:7a:e0:ce:97:be:ae:fe:7d:f9:f7:8d:db: 3c:6d:7c:6c:40:83:01:f6:0f:e1:86:4e:54:51:37: de:cf:a4:c2:08:4b:34:43:a6:cc:ee:de:00:53:ca: 2e:1a:e3:b0:d7:22:fd:04:2e:19:cd:cd:45:8c:07: b5:59:9a:9d:19:76:c6:0d:f5:18:f9:c1:10:86:c7: ae:d2:0d:ba:04:00:02:7d:c5:46:65:92:38:06:a2: 7b:90:34:7d:a7:d1:4b:14:d8:a6:09:76:83:23:25: 63:5b:6e:08:d2:ab:5e:72:aa:ea:ee:84:b4:56:97: e7:4c:6a:1c:5d:a4:3f:c5:19:85:36:40:f6:39:67: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4F:A6:AB:20:FE:8B:82:4D:3B:88:67:23:CB:DA:C0:36:BC:2B:1F X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:29:17:08:d6:7d:ea:61:9c:94:2b:7d:44:b9:d6:0e:c9:b0: 2f:fe:5a:47:00:6c:27:80:95:35:ee:56:49:d4:d1:a5:fc:55: cd:03:e7:db:a3:c7:8c:b9:5d:c2:a6:b1:95:2d:b1:81:02:06: 51:cc:5f:50:67:a7:8f:12:d0:dd:0b:8e:c3:63:0c:0c:8d:f3: 58:f9:29:df:a9:61:23:2e:5d:68:ef:5b:8d:bc:34:cf:c1:96: f8:93:12:fb:28:86:fb:03:45:27:21:7b:ee:29:fc:65:d6:08: 7a:97:49:23:a4:a5:b0:46:8a:86:dd:3d:2a:d1:46:49:dc:a9: 29:13:da:d4:b7:95:25:c1:08:a8:93:10:5f:63:5d:8b:a0:e3: 84:4f:07:72:38:98:df:e0:0c:68:bb:79:d8:dd:ba:aa:6c:db: 4a:59:a5:85:c2:f7:5e:2e:e5:50:8e:2d:7c:c4:c4:df:25:c7: d0:42:18:7f:e6:d3:6c:59:a2:1b:58:f7:03:6e:86:61:8d:4a: 23:d2:77:10:df:ed:be:27:18:8e:73:b5:92:b7:5e:34:d3:5a: 64:bf:42:5f:c8:1f:9b:71:cf:68:20:e3:13:0f:05:79:61:62: a3:7d:84:42:0d:b5:32:84:02:38:d6:6d:7e:b2:a6:1e:aa:7d: 35:9e:a4:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOp1jk4P8wUypCeTS5DkF9Ga6OzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1 RDg0RDY2RjAeFw0yNTEyMjQwMTE2MzJaFw0yNTEyMjcwODQ0MzJaMDMxMTAvBgNV BAMTKDYxNEZBNkFCMjBGRThCODI0RDNCODg2NzIzQ0JEQUMwMzZCQzJCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGI1+pCNMMQTZyQs7VIgYmm8K1 0ZZYXuPan5P+bmQ1GTgMRnBqkdJVklGY1inn4dEN4eLnTxANN3T8SaEGlDoXo6DA e2fHCIYKVQqLKsb+9xCiTl7BeKxFEr9n4Fs42ndvr6HfTh/PHEAacDpuqqtCKLqV J1hEOqFTy3rgzpe+rv59+feN2zxtfGxAgwH2D+GGTlRRN97PpMIISzRDpszu3gBT yi4a47DXIv0ELhnNzUWMB7VZmp0ZdsYN9Rj5wRCGx67SDboEAAJ9xUZlkjgGonuQ NH2n0UsU2KYJdoMjJWNbbgjSq15yquruhLRWl+dMahxdpD/FGYU2QPY5ZyrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYU+mqyD+i4JNO4hnI8vawDa8Kx8wHwYDVR0j BBgwFoAUASG1I8pHSySDD2Qfr7O78l2E1m8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NB NDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRENjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JCRjI1RDg0 RDY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE5YjgyMmEtOGI5MS00OGQyLTli YzEtYWUwZDkwMGJmOWM3LzAvMDEyMUI1MjNDQTQ3NEIyNDgzMEY2NDFGQUZCM0JC RjI1RDg0RDY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEpFwjWfephnJQrfUS51g7JsC/+WkcAbCeA lTXuVknU0aX8Vc0D59ujx4y5XcKmsZUtsYECBlHMX1Bnp48S0N0LjsNjDAyN81j5 Kd+pYSMuXWjvW428NM/BlviTEvsohvsDRSche+4p/GXWCHqXSSOkpbBGiobdPSrR RkncqSkT2tS3lSXBCKiTEF9jXYug44RPB3I4mN/gDGi7edjduqps20pZpYXC914u 5VCOLXzExN8lx9BCGH/m02xZohtY9wNuhmGNSiPSdxDf7b4nGI5ztZK3XjTTWmS/ Ql/IH5txz2gg4xMPBXlhYqN9hEINtTKEAjjWbX6yph6qfTWepN4= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:39 2025 by rpki-client