This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: mH5xVAQeAgDUCvj3RlkxmFLYepy8Zi6Vb4O18AtABZ8= Subject key identifier: B2:CF:E4:36:FE:14:29:D7:2C:10:D3:63:25:55:B6:43:80:B4:BA:8F Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 6A55F054041BC752BFA5C37119E552E73FFF566F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: 0129 Signing time: Mon 22 Dec 2025 11:41:08 +0000 Manifest this update: Mon 22 Dec 2025 11:36:08 +0000 Manifest next update: Thu 25 Dec 2025 21:48:08 +0000 Files and hashes: 1: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: 5qbiL0LlYsXboPIVOx4wCXgiJNrpUVSm/7FD4IMM88E=) 2: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:55:f0:54:04:1b:c7:52:bf:a5:c3:71:19:e5:52:e7:3f:ff:56:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Dec 22 11:36:08 2025 GMT Not After : Dec 25 21:48:08 2025 GMT Subject: CN=B2CFE436FE1429D72C10D3632555B64380B4BA8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0f:c0:da:24:79:bb:8d:03:70:04:36:5b:11: f6:ab:5c:3d:83:85:c9:b1:20:76:3c:63:fb:83:93: 97:52:f3:8c:65:c4:86:43:31:b3:7b:02:89:e2:ae: 5d:8a:9f:64:4d:69:8e:34:e6:7e:ea:7a:be:84:69: ce:20:58:5a:15:fd:d3:3b:43:76:ba:87:74:89:0b: ef:5d:01:8c:14:07:9f:6a:29:39:91:ed:25:1b:ea: 66:cc:b9:96:ad:0c:62:e9:be:3e:67:93:de:69:3a: 2a:b8:40:81:82:d7:96:5c:22:b7:83:20:39:26:7a: 16:41:5e:da:71:c5:d5:a1:e3:5a:da:0b:28:e4:22: 44:3d:cf:d3:28:a8:86:24:a7:10:ec:01:17:79:12: 19:00:a7:42:3c:e9:d3:3a:d7:06:96:29:b1:a0:ad: 54:8a:aa:c4:69:e4:98:e9:2f:99:f0:f1:ab:f6:1e: fe:dc:d9:fa:94:8e:08:f8:5b:c0:47:59:25:71:e3: 18:f8:6f:bd:39:80:50:d6:6a:03:19:8f:45:c6:5f: be:a7:27:b5:9e:12:80:34:c9:98:0a:b3:e0:ae:8a: f9:63:60:2b:3d:3e:b8:fd:54:53:f4:ff:9e:c6:0c: 7d:a1:fc:43:94:f3:01:92:76:3f:ac:61:b9:2e:60: 75:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CF:E4:36:FE:14:29:D7:2C:10:D3:63:25:55:B6:43:80:B4:BA:8F X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ce:2d:65:bb:85:9e:f5:20:a2:57:cc:30:28:71:2f:cb:c2: 1a:79:24:32:74:bc:8a:3a:e9:16:51:eb:fd:e0:f2:21:3e:3f: 91:00:43:d5:8f:93:71:18:f7:d1:1f:a4:94:a1:28:b5:fe:72: 9d:a0:47:00:b8:a1:c8:cf:83:14:07:45:68:53:70:da:5d:98: 06:d1:94:20:b8:e4:44:23:8e:f8:54:6c:11:eb:6e:41:11:89: 21:8e:7a:1a:13:e1:3b:bb:be:23:46:ae:e5:a5:6c:e3:4b:f6: b1:ec:c2:8f:32:bf:13:64:06:1e:83:5d:27:a1:69:47:34:db: 3c:d0:82:3b:25:59:8c:bc:09:bd:dc:9a:99:09:12:af:ef:6e: cb:90:7a:13:a0:e0:09:de:d9:44:0b:25:61:57:f6:b0:ea:02: 66:dc:34:60:32:ff:e3:94:2c:60:cd:b7:c5:e1:56:5f:7e:fb: e0:e4:f1:bd:fb:8b:f7:1d:ab:a3:5e:44:7f:ad:8e:88:1b:74: d1:1b:f9:f7:d8:08:d5:97:16:06:ef:2f:7c:bf:67:39:51:c2: bf:76:bd:ef:4c:2a:7a:31:e0:10:fc:15:4c:3a:94:5c:f1:9b: 26:0f:48:71:46:2d:73:40:8e:32:06:ab:91:27:ec:14:0f:9d: ea:16:11:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUalXwVAQbx1K/pcNxGeVS5z//Vm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTEyMjIxMTM2MDhaFw0yNTEyMjUyMTQ4MDhaMDMxMTAvBgNV BAMTKEIyQ0ZFNDM2RkUxNDI5RDcyQzEwRDM2MzI1NTVCNjQzODBCNEJBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmD8DaJHm7jQNwBDZbEfarXD2D hcmxIHY8Y/uDk5dS84xlxIZDMbN7Aonirl2Kn2RNaY405n7qer6Eac4gWFoV/dM7 Q3a6h3SJC+9dAYwUB59qKTmR7SUb6mbMuZatDGLpvj5nk95pOiq4QIGC15ZcIreD IDkmehZBXtpxxdWh41raCyjkIkQ9z9MoqIYkpxDsARd5EhkAp0I86dM61waWKbGg rVSKqsRp5JjpL5nw8av2Hv7c2fqUjgj4W8BHWSVx4xj4b705gFDWagMZj0XGX76n J7WeEoA0yZgKs+CuivljYCs9Prj9VFP0/57GDH2h/EOU8wGSdj+sYbkuYHXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUss/kNv4UKdcsENNjJVW2Q4C0uo8wHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/OLWW7hZ71IKJXzDAocS/Lwhp5JDJ0vIo6 6RZR6/3g8iE+P5EAQ9WPk3EY99EfpJShKLX+cp2gRwC4ocjPgxQHRWhTcNpdmAbR lCC45EQjjvhUbBHrbkERiSGOehoT4Tu7viNGruWlbONL9rHswo8yvxNkBh6DXSeh aUc02zzQgjslWYy8Cb3cmpkJEq/vbsuQehOg4Ane2UQLJWFX9rDqAmbcNGAy/+OU LGDNt8XhVl9+++Dk8b37i/cdq6NeRH+tjogbdNEb+ffYCNWXFgbvL3y/ZzlRwr92 ve9MKnox4BD8FUw6lFzxmyYPSHFGLXNAjjIGq5En7BQPneoWEZg= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:11 2025 by rpki-client