This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: GXS6ofnwYGmjDqwDLrrMdx9Tq64gRogJMkBjZ3Q6iE0= Subject key identifier: 4B:79:DF:B4:B7:1E:DE:39:5A:50:A4:E7:6F:D9:CA:89:F2:38:F0:A3 Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 54EBBA6ACD033695DF8F13ECE5030BE412A83DFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 0535 Signing time: Mon 15 Dec 2025 21:43:48 +0000 Manifest this update: Mon 15 Dec 2025 21:38:48 +0000 Manifest next update: Fri 19 Dec 2025 01:04:48 +0000 Files and hashes: 1: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: ybbIFe2faTN9+BtrlyDcd4VBuSa/0bnevVohcpOK2xc=) 2: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: g2j4L6oa7s+Yo5r0t0sgHCPdhAYOBJ4LtHuSFZmj5UA=) 3: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: M9IqkBmv/6mvit+aqd+lb7yJ4UZJweQxalWJOia6lMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 01:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:eb:ba:6a:cd:03:36:95:df:8f:13:ec:e5:03:0b:e4:12:a8:3d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Dec 15 21:38:48 2025 GMT Not After : Dec 19 01:04:48 2025 GMT Subject: CN=4B79DFB4B71EDE395A50A4E76FD9CA89F238F0A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:61:62:9c:99:fc:df:ab:19:c6:4d:d1:82: e7:8d:a3:98:c1:1f:9d:7d:be:9e:88:e6:40:60:9b: f3:84:2f:2f:e6:0e:99:71:cc:29:5d:d9:11:9b:4e: 42:ec:9f:c5:ad:08:fd:ab:36:f0:6f:48:19:db:4f: 4c:ae:7b:a1:5d:7f:75:1f:53:bb:f4:c5:a9:9c:c3: d6:03:74:08:f9:7c:8b:e6:5e:28:24:4e:d1:06:ce: 0b:56:8b:31:04:a6:7e:8c:f4:78:dd:f1:58:4b:dd: 52:e4:72:86:24:43:5f:f0:e8:96:88:6c:c3:b5:1b: de:0f:8a:6c:ed:2a:16:8c:bf:b1:a5:c3:cb:2a:25: 35:88:3d:14:ef:ea:d2:3d:52:77:1b:a6:b3:e1:cd: 45:53:92:f7:e1:01:f6:19:c9:f1:87:cf:61:3f:4d: 04:7d:73:8b:fd:5e:a4:c3:de:59:84:8a:d7:cf:14: de:22:d8:57:2c:2f:d3:0c:01:02:ac:df:ac:09:b8: 2a:57:9e:73:4f:d7:01:61:a9:10:6a:36:fb:fe:d3: 3b:76:48:de:da:a7:ce:96:8c:c6:06:a9:24:42:cb: 94:54:12:57:89:11:e9:09:b8:18:3b:c0:01:6c:5d: 38:53:b8:40:a1:bb:ab:7b:42:a8:47:d0:76:9a:c3: e4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:DF:B4:B7:1E:DE:39:5A:50:A4:E7:6F:D9:CA:89:F2:38:F0:A3 X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:9c:21:ed:10:2f:5b:d5:c1:38:b9:3e:1d:29:d7:dc:94:06: db:24:bd:33:32:be:6f:d6:5f:8e:c1:54:b9:9f:be:53:78:67: b3:12:71:fd:1c:69:2a:da:06:59:d8:e2:32:7b:24:c9:db:6f: 26:24:98:63:c8:ff:2f:27:b1:66:29:16:3c:9e:be:22:73:15: dd:c6:48:d4:a6:16:ce:e0:85:17:d7:f0:40:36:d6:fd:55:fd: 1a:0b:57:ed:3c:e4:32:88:24:2d:ab:ab:e0:b4:6f:e2:01:14: ff:9b:e6:b0:4e:32:1e:06:52:8e:ab:88:ee:54:d3:d0:11:1f: 89:b6:b4:42:b4:45:68:0c:f8:c2:52:5b:c6:fb:73:43:b9:1d: 11:40:2c:8b:be:2b:7a:e0:ff:5c:40:ee:51:03:40:be:20:09: 41:2a:6b:52:86:ef:f5:a7:1f:55:ad:3e:4e:9d:b7:d3:d8:5a: 26:f0:cc:9b:7d:2b:77:df:01:b5:7a:8b:cd:41:1f:b0:62:27: 01:b4:d5:30:7f:96:e6:1a:e8:c8:f8:b1:9a:39:5c:60:9a:31: 54:3c:27:d9:cf:85:85:38:a4:d1:86:0f:54:2e:ba:38:ca:c7: b4:2b:62:37:b6:3b:29:30:63:90:a0:80:35:46:da:70:27:03: 87:bf:d9:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOu6as0DNpXfjxPs5QML5BKoPfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNTEyMTUyMTM4NDhaFw0yNTEyMTkwMTA0NDhaMDMxMTAvBgNV BAMTKDRCNzlERkI0QjcxRURFMzk1QTUwQTRFNzZGRDlDQTg5RjIzOEYwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2WFinJn836sZxk3RgueNo5jB H519vp6I5kBgm/OELy/mDplxzCld2RGbTkLsn8WtCP2rNvBvSBnbT0yue6Fdf3Uf U7v0xamcw9YDdAj5fIvmXigkTtEGzgtWizEEpn6M9Hjd8VhL3VLkcoYkQ1/w6JaI bMO1G94PimztKhaMv7Glw8sqJTWIPRTv6tI9UncbprPhzUVTkvfhAfYZyfGHz2E/ TQR9c4v9XqTD3lmEitfPFN4i2FcsL9MMAQKs36wJuCpXnnNP1wFhqRBqNvv+0zt2 SN7ap86WjMYGqSRCy5RUEleJEekJuBg7wAFsXThTuEChu6t7QqhH0Haaw+SNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS3nftLce3jlaUKTnb9nKifI48KMwHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqcIe0QL1vVwTi5Ph0p19yUBtskvTMyvm/W X47BVLmfvlN4Z7MScf0caSraBlnY4jJ7JMnbbyYkmGPI/y8nsWYpFjyeviJzFd3G SNSmFs7ghRfX8EA21v1V/RoLV+085DKIJC2rq+C0b+IBFP+b5rBOMh4GUo6riO5U 09ARH4m2tEK0RWgM+MJSW8b7c0O5HRFALIu+K3rg/1xA7lEDQL4gCUEqa1KG7/Wn H1WtPk6dt9PYWibwzJt9K3ffAbV6i81BH7BiJwG01TB/luYa6Mj4sZo5XGCaMVQ8 J9nPhYU4pNGGD1QuujjKx7QrYje2OykwY5CggDVG2nAnA4e/2Y4= -----END CERTIFICATE-----Generated at Tue Dec 16 19:16:45 2025 by rpki-client