This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft File: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft (raw, json) Hash identifier: RzBSTSHtmvUwjVjwuYNH5sVyymH7+NXNW7Pi3p5yomA= Subject key identifier: B3:34:67:7B:8C:A5:55:36:DE:C7:0B:1E:88:75:CB:11:ED:82:BA:39 Authority key identifier: 19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 Certificate issuer: /CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Certificate serial: 467A2C1C5DAF42387A345C5310C18869585894E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft Manifest number: 0238 Signing time: Sun 21 Dec 2025 02:40:43 +0000 Manifest this update: Sun 21 Dec 2025 02:35:43 +0000 Manifest next update: Wed 24 Dec 2025 14:12:43 +0000 Files and hashes: 1: 3130332e3139302e35312e302f32342d3234203d3e2039333431.roa (hash: Alr3MmF3FComiYShgHs/7REcddrGc/AGrj1Fejo7KUI=) 2: 3130332e3139302e35302e302f32332d3233203d3e2039333431.roa (hash: b9POD8lIGTkSBPPG5UCEDWwytPa4KOI/X1gSRB0o140=) 3: 3130332e3139302e35302e302f32342d3234203d3e2039333431.roa (hash: pIxViXZoycBV8A7CIi1fmiiQDu+3Ugcswhk6WPEdvN8=) 4: 199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl (hash: hLqEKLYrYyaHmPiws0YxbMFzVyfZGkA8TNmDWDcfK4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:7a:2c:1c:5d:af:42:38:7a:34:5c:53:10:c1:88:69:58:58:94:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=199D3D684ECEEFFBB17DD598A2688835A6F48CE7 Validity Not Before: Dec 21 02:35:43 2025 GMT Not After : Dec 24 14:12:43 2025 GMT Subject: CN=B334677B8CA55536DEC70B1E8875CB11ED82BA39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:6b:5c:22:8a:06:7e:9b:92:60:50:ce:fb: 7b:2e:6d:e0:d4:3b:82:43:82:2f:6c:46:a5:7f:93: 40:1d:01:55:45:a0:f0:46:db:95:96:64:eb:5e:43: f2:fd:18:f3:56:c1:91:d7:42:a6:ee:79:2d:77:ab: c5:c3:82:b6:7f:f5:76:d1:9f:84:fb:5b:a2:3c:d2: 86:30:0a:fc:87:15:44:1d:f5:1c:ba:9d:4e:7c:10: 6b:c5:b8:a7:24:bc:d5:4b:64:84:c2:7d:75:b2:32: 95:7b:c9:ae:93:48:94:78:48:af:5c:b9:ab:3e:49: a5:d7:56:01:a4:ea:77:8f:e4:73:30:44:39:7b:4f: 57:b1:b2:98:cc:e1:22:60:53:9c:8a:6a:18:3c:58: ee:ab:11:0d:ac:34:26:f5:1e:a9:d8:34:6a:77:1b: 9a:e7:cb:ee:36:d1:e5:d2:23:92:0a:c2:04:92:e7: f2:38:a8:c2:67:cb:b3:f1:c0:26:5a:c8:fb:38:3f: 0b:29:94:49:90:dc:31:1f:15:44:06:15:85:11:3d: b2:76:9a:03:97:ce:ff:ab:50:dc:5e:bc:0d:c0:3b: 5e:e9:dd:25:38:88:8f:df:62:f9:42:71:af:96:44: f3:e5:e7:94:16:6b:1b:7c:c5:49:2f:ac:f9:17:02: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:34:67:7B:8C:A5:55:36:DE:C7:0B:1E:88:75:CB:11:ED:82:BA:39 X509v3 Authority Key Identifier: keyid:19:9D:3D:68:4E:CE:EF:FB:B1:7D:D5:98:A2:68:88:35:A6:F4:8C:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f58383e2-206c-4b74-ba4a-cd8a4d7cd861/0/199D3D684ECEEFFBB17DD598A2688835A6F48CE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e7:cf:f9:b2:e1:a3:3f:5a:f6:72:29:78:c7:82:49:07:c3: 37:91:22:2c:fb:a4:97:9b:57:86:66:bb:7a:0c:4b:91:06:04: 85:f7:2c:af:6b:c3:0a:1a:10:c4:9c:6f:5e:34:19:3e:c0:62: f9:14:e8:92:1b:90:5b:b7:55:7f:3f:3c:60:a3:9a:1e:47:47: 9c:92:72:f1:49:8e:de:c3:52:2a:93:25:65:71:a6:39:20:4c: fb:4d:8e:22:20:43:8b:45:0d:bf:96:78:31:07:cb:6b:0d:b5: f4:63:6c:48:9f:13:66:cb:1b:2e:51:0f:1b:52:9d:a4:f8:00: ec:a4:21:3e:61:05:b9:ac:79:7e:e5:33:73:d3:3c:d8:37:a1: 80:30:18:ef:3d:5b:11:b2:e0:cc:d0:91:c7:32:5e:b8:18:5e: c6:97:0f:70:4a:32:49:f2:95:b1:b7:28:b2:c8:a9:d6:3e:ff: 5a:c1:1e:93:d5:64:91:53:bc:f7:e3:71:56:66:78:37:e2:31: 60:13:2f:65:a8:1f:3b:38:e0:b3:46:06:65:f4:a8:f7:58:cd: 57:89:d9:76:0d:1e:5f:b2:bb:8a:57:cd:6f:dc:72:16:9c:65: 1b:79:c8:7b:47:7a:af:68:b9:71:e8:0e:10:57:3b:d5:67:f3: 41:77:ed:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnosHF2vQjh6NFxTEMGIaVhYlOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVB NkY0OENFNzAeFw0yNTEyMjEwMjM1NDNaFw0yNTEyMjQxNDEyNDNaMDMxMTAvBgNV BAMTKEIzMzQ2NzdCOENBNTU1MzZERUM3MEIxRTg4NzVDQjExRUQ4MkJBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZOWtcIooGfpuSYFDO+3subeDU O4JDgi9sRqV/k0AdAVVFoPBG25WWZOteQ/L9GPNWwZHXQqbueS13q8XDgrZ/9XbR n4T7W6I80oYwCvyHFUQd9Ry6nU58EGvFuKckvNVLZITCfXWyMpV7ya6TSJR4SK9c uas+SaXXVgGk6neP5HMwRDl7T1exspjM4SJgU5yKahg8WO6rEQ2sNCb1HqnYNGp3 G5rny+420eXSI5IKwgSS5/I4qMJny7PxwCZayPs4PwsplEmQ3DEfFUQGFYURPbJ2 mgOXzv+rUNxevA3AO17p3SU4iI/fYvlCca+WRPPl55QWaxt8xUkvrPkXAsTXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUszRne4ylVTbexwseiHXLEe2CujkwHwYDVR0j BBgwFoAUGZ09aE7O7/uxfdWYomiINab0jOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTgzODNlMi0yMDZjLTRiNzQtYmE0YS1jZDhhNGQ3Y2Q4NjEvMC8xOTlEM0Q2ODRF Q0VFRkZCQjE3REQ1OThBMjY4ODgzNUE2RjQ4Q0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4MzVBNkY0 OENFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU4MzgzZTItMjA2Yy00Yjc0LWJh NGEtY2Q4YTRkN2NkODYxLzAvMTk5RDNENjg0RUNFRUZGQkIxN0RENTk4QTI2ODg4 MzVBNkY0OENFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTnz/my4aM/WvZyKXjHgkkHwzeRIiz7pJeb V4Zmu3oMS5EGBIX3LK9rwwoaEMScb140GT7AYvkU6JIbkFu3VX8/PGCjmh5HR5yS cvFJjt7DUiqTJWVxpjkgTPtNjiIgQ4tFDb+WeDEHy2sNtfRjbEifE2bLGy5RDxtS naT4AOykIT5hBbmseX7lM3PTPNg3oYAwGO89WxGy4MzQkccyXrgYXsaXD3BKMkny lbG3KLLIqdY+/1rBHpPVZJFTvPfjcVZmeDfiMWATL2WoHzs44LNGBmX0qPdYzVeJ 2XYNHl+yu4pXzW/cchacZRt5yHtHeq9ouXHoDhBXO9Vn80F37UQ= -----END CERTIFICATE-----Generated at Sun Dec 21 12:21:01 2025 by rpki-client