This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: b6u6GGLTXB6Zsg7THb4tpq123cyCZrEop6TBznsNDDM= Subject key identifier: E5:DA:A4:F0:61:F5:BF:80:80:B3:07:83:08:C6:BB:DD:BB:45:B1:BF Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 0BF69E909E7B10CC654675F75D5E49AC74173689 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 0539 Signing time: Thu 18 Dec 2025 01:42:28 +0000 Manifest this update: Thu 18 Dec 2025 01:37:28 +0000 Manifest next update: Sun 21 Dec 2025 05:07:28 +0000 Files and hashes: 1: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) 2: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) 3: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: sMRuYz4DqXEioMa5Wlo8VppEzM4Q6VtneNwJ1uU8DDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f6:9e:90:9e:7b:10:cc:65:46:75:f7:5d:5e:49:ac:74:17:36:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Dec 18 01:37:28 2025 GMT Not After : Dec 21 05:07:28 2025 GMT Subject: CN=E5DAA4F061F5BF8080B3078308C6BBDDBB45B1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:db:07:5d:96:65:91:c2:8e:00:3c:ca:08: d0:0c:51:b1:08:27:2b:d6:f5:2e:67:51:76:af:4e: 2f:f9:86:d5:b1:f2:b9:77:59:0e:03:5d:3b:16:6e: cc:1d:9b:de:e7:69:cb:8f:a5:1f:34:0e:68:10:e4: 09:79:96:b1:c9:1a:6e:be:5c:5d:8c:4e:e2:92:f2: f9:a9:0e:fa:7f:d2:38:06:d8:df:50:9d:f1:cb:33: 6b:d3:b5:ae:e2:42:d6:02:b0:1b:22:61:4c:0c:e8: 2a:d1:85:75:aa:3b:a9:ab:26:82:69:cc:12:d7:cb: c0:15:99:96:68:9d:c6:df:b8:2c:39:f5:68:95:a1: ae:43:5b:4e:14:8d:8e:84:2f:48:11:6b:b7:18:04: 1d:6f:30:9a:89:4a:71:d3:38:25:99:c1:fe:68:1e: b8:e8:cc:ad:a7:b1:76:6c:e7:fe:08:52:de:49:8f: 00:98:98:88:35:52:aa:db:60:00:7c:a8:9f:fe:0e: 92:c1:27:60:7e:dd:46:bc:6e:b5:78:31:79:d6:64: bc:c3:f5:36:f4:62:11:50:6d:1c:1f:e2:9f:df:d0: 9c:00:31:ad:5e:8d:49:98:c2:fe:35:75:5c:ea:8a: 51:10:3b:0d:72:8b:06:d9:6d:b4:92:20:87:24:74: 3f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DA:A4:F0:61:F5:BF:80:80:B3:07:83:08:C6:BB:DD:BB:45:B1:BF X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:26:59:42:00:ae:d7:29:6d:6b:f8:b8:d0:96:fb:0b:47:59: a8:4f:a7:ad:d2:2b:08:72:35:c5:bc:fc:4a:de:94:bf:c6:5f: 09:2a:89:3c:32:27:f5:09:37:f6:0d:17:69:c1:fe:e5:67:c2: c7:5c:8c:3d:4a:7e:f7:fb:10:49:0a:82:5d:18:ab:00:27:b2: 56:ab:ad:76:a1:46:84:c5:f3:46:df:5b:f3:fd:fe:7c:e0:64: f0:7b:8c:c7:cb:07:e3:2d:fc:1b:bd:54:d1:a8:cf:c4:e1:69: 19:1e:67:cd:78:82:1b:70:f9:45:06:e1:2b:f0:2f:b5:66:1f: cd:1f:ca:6f:a2:db:24:3c:f5:5c:9f:65:4e:dd:92:61:e6:72: 27:44:90:a2:9f:2f:06:93:b7:6d:47:5f:7f:30:1e:51:14:c0: 2f:23:b5:86:02:70:9a:e2:d1:10:b9:73:dd:69:dc:be:30:92: 8a:a6:10:99:20:69:e2:a6:18:d2:d9:a1:0c:e1:17:4b:93:f9: 54:74:82:e4:d4:d1:7c:07:c0:2b:38:75:c1:26:cf:97:a0:98: a3:9e:97:50:86:3e:31:a5:ab:91:cd:01:05:71:65:cb:7c:a1: 1b:8f:31:e2:fb:16:e1:c6:45:93:8e:c4:18:30:a9:51:43:cc: 13:98:a3:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC/aekJ57EMxlRnX3XV5JrHQXNokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTEyMTgwMTM3MjhaFw0yNTEyMjEwNTA3MjhaMDMxMTAvBgNV BAMTKEU1REFBNEYwNjFGNUJGODA4MEIzMDc4MzA4QzZCQkREQkI0NUIxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtP9sHXZZlkcKOADzKCNAMUbEI JyvW9S5nUXavTi/5htWx8rl3WQ4DXTsWbswdm97nacuPpR80DmgQ5Al5lrHJGm6+ XF2MTuKS8vmpDvp/0jgG2N9QnfHLM2vTta7iQtYCsBsiYUwM6CrRhXWqO6mrJoJp zBLXy8AVmZZoncbfuCw59WiVoa5DW04UjY6EL0gRa7cYBB1vMJqJSnHTOCWZwf5o HrjozK2nsXZs5/4IUt5JjwCYmIg1UqrbYAB8qJ/+DpLBJ2B+3Ua8brV4MXnWZLzD 9Tb0YhFQbRwf4p/f0JwAMa1ejUmYwv41dVzqilEQOw1yiwbZbbSSIIckdD/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5dqk8GH1v4CAsweDCMa73btFsb8wHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAmWUIArtcpbWv4uNCW+wtHWahPp63SKwhy NcW8/ErelL/GXwkqiTwyJ/UJN/YNF2nB/uVnwsdcjD1Kfvf7EEkKgl0YqwAnslar rXahRoTF80bfW/P9/nzgZPB7jMfLB+Mt/Bu9VNGoz8ThaRkeZ814ghtw+UUG4Svw L7VmH80fym+i2yQ89VyfZU7dkmHmcidEkKKfLwaTt21HX38wHlEUwC8jtYYCcJri 0RC5c91p3L4wkoqmEJkgaeKmGNLZoQzhF0uT+VR0guTU0XwHwCs4dcEmz5egmKOe l1CGPjGlq5HNAQVxZct8oRuPMeL7FuHGRZOOxBgwqVFDzBOYo5Q= -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:39 2025 by rpki-client