This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft (raw, json) Hash identifier: yQE1olCxmeiqHYOxNCzuFrCuadJi4FiRtYNxewMEt3g= Subject key identifier: D9:E1:FB:EC:6B:82:89:63:90:CD:93:D0:00:D3:DB:A2:18:96:5F:A1 Authority key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Certificate issuer: /CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Certificate serial: 7F773AA237D70067653FC9E670BE6CAE3D75C495 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft Manifest number: 0532 Signing time: Fri 19 Dec 2025 22:10:48 +0000 Manifest this update: Fri 19 Dec 2025 22:05:48 +0000 Manifest next update: Tue 23 Dec 2025 02:46:48 +0000 Files and hashes: 1: 34332e3234322e3133322e302f32342d3234203d3e203538343736.roa (hash: ut8mKe181e+GL8gZVd8D9lpxfAhurYa657vG8sPaVZU=) 2: 34332e3234322e3133332e302f32342d3234203d3e203538343736.roa (hash: 2NAEElgvlB7IhQMwd1Atvpj3R7riVOfOU9AzMjYnGF0=) 3: 3130332e32382e3130372e302f32342d3234203d3e203538343736.roa (hash: 1UalLxKn41/lSLgzHwYn+86cGRYM0p3PY4M21eZtrAo=) 4: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl (hash: AKG9XsmWnWVdTk/NHYJqkDDoHXnqZWPI0rMPvytLjQw=) 5: 3130332e37322e3131312e302f32342d3234203d3e203538343736.roa (hash: lw8CjbCa9nau6CgaK9qo3W7fJOYahpzK8W9j4IBI5bo=) 6: 3130332e37322e3131302e302f32342d3234203d3e203538343736.roa (hash: voekDMYuoDNmVswZr7/xsWsJnvx7lZSdUg+Aq+ToSP0=) 7: 3130332e32382e3130362e302f32342d3234203d3e203538343736.roa (hash: 3CwSzY5tw6Zm4h624sLhttPd8ZN8CiHTGKhVehN+hWE=) 8: 323030313a6466303a3236663a3a2f34382d3438203d3e203538343736.roa (hash: 19ABnycRhti98EG6MJ/6S6W4a31omV6sktXNN7fCeRE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 02:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:77:3a:a2:37:d7:00:67:65:3f:c9:e6:70:be:6c:ae:3d:75:c4:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Validity Not Before: Dec 19 22:05:48 2025 GMT Not After : Dec 23 02:46:48 2025 GMT Subject: CN=D9E1FBEC6B82896390CD93D000D3DBA218965FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:e7:b6:0c:91:e1:86:b2:5c:e6:b6:61:49: 69:4b:1c:c6:57:1e:a7:d5:44:3d:75:16:4d:47:5f: cb:4a:92:a0:df:46:2e:4e:e1:d6:80:db:97:14:c2: d6:aa:62:0c:eb:dc:2a:f3:89:c0:50:1f:68:bf:c1: b8:4c:97:2a:d9:67:10:98:66:19:dd:0e:f8:1b:30: 0b:fb:35:5c:35:78:c5:05:e4:c5:f5:57:e4:14:0f: 8e:eb:a1:82:be:98:36:1d:dd:d6:81:82:b1:ee:b6: ed:b9:40:ec:4d:19:e7:42:6d:c7:80:92:89:66:8f: 79:de:f1:07:da:bf:21:40:94:e6:6f:2a:bb:3b:b7: 90:9e:bb:06:d0:8d:13:4b:93:87:52:7c:bf:32:91: 9b:6c:68:99:7a:35:74:16:57:41:5e:25:cd:d2:45: 72:8a:59:0c:e2:11:a3:73:41:c3:cc:ca:49:df:a9: 5c:9d:cb:fd:2c:9b:b8:3e:3a:8e:bd:c5:97:61:49: c7:85:5c:68:01:8f:a0:28:b6:77:5f:15:35:64:58: 6d:03:f8:05:78:d7:82:be:2d:fd:3b:2f:9e:e1:32: 3d:f7:83:ef:35:31:0d:5a:15:0e:7d:11:4b:da:72: 8d:2f:4c:62:e8:7f:a4:e9:87:0e:1e:5c:57:58:ca: ad:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E1:FB:EC:6B:82:89:63:90:CD:93:D0:00:D3:DB:A2:18:96:5F:A1 X509v3 Authority Key Identifier: keyid:B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:00:c4:a8:96:1c:dd:ba:20:fb:1c:e4:76:9e:c6:25:83:36: b5:b5:d2:07:0a:66:0e:de:9d:58:5a:a1:a0:e5:9d:b6:bb:fe: 88:a8:37:4a:59:a5:50:b3:b0:90:ee:c0:2e:13:46:03:8d:fa: 31:42:ad:5c:87:b9:1b:9f:70:9d:48:ff:3c:6f:f4:fe:ce:52: 6d:16:d4:9d:11:7a:cc:13:3b:22:e0:95:e6:24:11:60:1a:89: e6:46:b7:5d:5e:23:2b:0f:f7:32:da:1e:01:7d:03:96:70:82: a1:f9:07:60:26:07:a3:e6:3f:02:68:ac:bd:b8:e0:8b:3c:36: 32:e0:08:d4:70:1f:29:1b:76:dc:f0:46:83:d2:f7:c5:fb:41: 82:d4:4b:fc:8b:22:c2:25:f2:87:ef:fc:58:47:b9:07:6c:34: 32:e9:c3:77:5c:16:77:2e:40:94:10:4a:51:98:60:b7:ed:8e: f0:c5:db:9d:22:da:0e:b3:7b:63:c1:e2:1c:78:42:94:f5:5e: f1:7c:ae:64:be:9b:aa:d2:f4:ac:b8:d2:37:b0:a6:76:fd:c8: 38:7d:39:08:a2:cf:02:bc:8c:3d:7e:72:71:0f:22:49:78:f3: d3:44:3a:10:92:d4:64:27:6e:1e:3b:bb:e3:d7:a1:e3:be:73: 17:14:53:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3c6ojfXAGdlP8nmcL5srj11xJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VD NTAzRUYzRTAeFw0yNTEyMTkyMjA1NDhaFw0yNTEyMjMwMjQ2NDhaMDMxMTAvBgNV BAMTKEQ5RTFGQkVDNkI4Mjg5NjM5MENEOTNEMDAwRDNEQkEyMTg5NjVGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWee2DJHhhrJc5rZhSWlLHMZX HqfVRD11Fk1HX8tKkqDfRi5O4daA25cUwtaqYgzr3CrzicBQH2i/wbhMlyrZZxCY ZhndDvgbMAv7NVw1eMUF5MX1V+QUD47roYK+mDYd3daBgrHutu25QOxNGedCbceA kolmj3ne8QfavyFAlOZvKrs7t5CeuwbQjRNLk4dSfL8ykZtsaJl6NXQWV0FeJc3S RXKKWQziEaNzQcPMyknfqVydy/0sm7g+Oo69xZdhSceFXGgBj6AotndfFTVkWG0D +AV414K+Lf07L57hMj33g+81MQ1aFQ59EUvaco0vTGLof6Tphw4eXFdYyq0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2eH77GuCiWOQzZPQANPbohiWX6EwHwYDVR0j BBgwFoAUsUTk6yj2nZt2wMJJm/17PsUD7z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m N2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMC9CMTQ0RTRFQjI4 RjY5RDlCNzZDMEMyNDk5QkZEN0IzRUM1MDNFRjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdCM0VDNTAz RUYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjdmNDkwNjgtYzBjYS00YTIxLTlh OGEtZWVkMjZmY2RkMWFhLzAvQjE0NEU0RUIyOEY2OUQ5Qjc2QzBDMjQ5OUJGRDdC M0VDNTAzRUYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQAxKiWHN26IPsc5HaexiWDNrW10gcKZg7e nVhaoaDlnba7/oioN0pZpVCzsJDuwC4TRgON+jFCrVyHuRufcJ1I/zxv9P7OUm0W 1J0ReswTOyLgleYkEWAaieZGt11eIysP9zLaHgF9A5ZwgqH5B2AmB6PmPwJorL24 4Is8NjLgCNRwHykbdtzwRoPS98X7QYLUS/yLIsIl8ofv/FhHuQdsNDLpw3dcFncu QJQQSlGYYLftjvDF250i2g6ze2PB4hx4QpT1XvF8rmS+m6rS9Ky40jewpnb9yDh9 OQiizwK8jD1+cnEPIkl489NEOhCS1GQnbh47u+PXoeO+cxcUU9A= -----END CERTIFICATE-----Generated at Sun Dec 21 02:01:53 2025 by rpki-client