This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: 1V3/jRQpgjT2Vl4sgWFYo27foG+1qImNKuBJFfC3eUk= Subject key identifier: 49:ED:26:10:0F:A8:64:F4:39:7D:75:6B:82:F9:92:72:E7:05:8E:61 Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 42A7298A38403681F22F2A5BCA8E2BA293D15005 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 0233 Signing time: Mon 01 Dec 2025 22:41:51 +0000 Manifest this update: Mon 01 Dec 2025 22:36:51 +0000 Manifest next update: Fri 05 Dec 2025 03:32:51 +0000 Files and hashes: 1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: PA26e3sSO11eG/Z83WmbZRT2lCQAd9DHDGJiP+92RWY=) 2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a7:29:8a:38:40:36:81:f2:2f:2a:5b:ca:8e:2b:a2:93:d1:50:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Dec 1 22:36:51 2025 GMT Not After : Dec 5 03:32:51 2025 GMT Subject: CN=49ED26100FA864F4397D756B82F99272E7058E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f7:f2:c1:9a:d6:fc:5b:bf:fb:a6:a9:79:cc: 70:15:8a:64:2b:85:e1:18:49:6c:2b:70:0a:32:36: d3:45:3e:e9:60:9b:8b:90:ba:6e:5b:84:bd:be:48: fa:36:95:82:35:9d:57:59:c9:2e:6a:0e:3a:ad:d2: fd:0c:5a:54:6e:4f:b2:fa:f6:d4:94:f1:e1:6f:87: 9e:f3:7f:9a:50:2e:07:78:19:29:6a:49:f7:6b:01: 3d:bd:cd:f5:65:f9:56:de:d8:1e:aa:80:4b:97:18: 45:e4:2c:ac:ed:97:ae:b0:f9:14:de:41:92:7a:fc: 40:bd:23:48:a0:49:41:2c:b8:ba:8b:bd:51:ca:d4: ac:4c:b2:95:9a:d5:1b:eb:33:12:58:c8:e8:8e:8f: ae:1e:52:27:9d:ed:fd:8d:02:37:fc:80:9b:63:65: 44:90:fd:ef:0e:bd:1f:56:91:78:ef:08:07:b3:d6: 84:c6:72:68:b2:e0:2f:38:53:5f:10:e1:4a:e5:16: ae:88:0b:6a:12:50:32:7e:e5:f3:9f:d0:db:f2:e6: cc:c9:4d:ba:7c:1b:44:1e:2c:4a:a3:76:71:f4:37: dc:96:01:73:f3:12:11:1d:57:9d:d1:70:8c:42:df: e9:f1:5a:f5:46:10:70:24:76:62:f1:d6:73:78:b6: 02:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:ED:26:10:0F:A8:64:F4:39:7D:75:6B:82:F9:92:72:E7:05:8E:61 X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ae:95:57:0f:1a:75:d6:59:f9:23:ae:cf:f5:f8:2d:36:1b: 96:d2:5a:e2:36:70:c1:f3:74:fe:0e:e7:ef:78:23:ee:56:98: b5:a4:0e:45:d8:cb:8a:7d:93:2d:5d:ea:a3:33:dc:b6:40:cf: a7:fb:97:7d:26:a4:49:7e:99:94:e5:cf:3c:40:30:a4:93:dc: dd:c5:17:c3:4b:09:4f:2f:0d:1c:9d:29:ab:8c:2e:bd:06:6d: fb:77:70:bc:9f:8d:0f:96:62:55:b2:97:04:8b:61:0d:ff:72: 26:8b:41:85:cb:95:e0:7d:f5:dd:65:3d:9b:f3:48:0f:7b:c1: bf:4c:d7:26:70:dd:8d:20:fc:dd:7a:b7:41:97:5b:5a:a6:3f: b5:83:75:17:bf:0e:60:cb:71:ee:99:53:e2:2e:89:34:35:67: f5:98:9a:e2:f4:57:06:fa:38:90:4b:28:1f:d5:34:ea:2b:95: 67:cc:ff:27:e0:bf:7a:a0:42:31:76:da:1c:81:ba:cf:33:1a: 05:18:09:de:48:57:da:c2:7b:da:99:73:6b:15:c1:fb:df:c0: fc:bd:3c:0c:f5:18:36:8e:56:7c:35:67:31:fa:07:67:43:9d: ac:cf:6d:ff:4d:18:34:a9:d4:65:dc:68:6e:13:6a:86:fd:8c: d7:c3:94:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqcpijhANoHyLypbyo4ropPRUAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNTEyMDEyMjM2NTFaFw0yNTEyMDUwMzMyNTFaMDMxMTAvBgNV BAMTKDQ5RUQyNjEwMEZBODY0RjQzOTdENzU2QjgyRjk5MjcyRTcwNThFNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9/LBmtb8W7/7pql5zHAVimQr heEYSWwrcAoyNtNFPulgm4uQum5bhL2+SPo2lYI1nVdZyS5qDjqt0v0MWlRuT7L6 9tSU8eFvh57zf5pQLgd4GSlqSfdrAT29zfVl+Vbe2B6qgEuXGEXkLKztl66w+RTe QZJ6/EC9I0igSUEsuLqLvVHK1KxMspWa1RvrMxJYyOiOj64eUied7f2NAjf8gJtj ZUSQ/e8OvR9WkXjvCAez1oTGcmiy4C84U18Q4UrlFq6IC2oSUDJ+5fOf0Nvy5szJ Tbp8G0QeLEqjdnH0N9yWAXPzEhEdV53RcIxC3+nxWvVGEHAkdmLx1nN4tgJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSe0mEA+oZPQ5fXVrgvmScucFjmEwHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCulVcPGnXWWfkjrs/1+C02G5bSWuI2cMHz dP4O5+94I+5WmLWkDkXYy4p9ky1d6qMz3LZAz6f7l30mpEl+mZTlzzxAMKST3N3F F8NLCU8vDRydKauMLr0Gbft3cLyfjQ+WYlWylwSLYQ3/ciaLQYXLleB99d1lPZvz SA97wb9M1yZw3Y0g/N16t0GXW1qmP7WDdRe/DmDLce6ZU+IuiTQ1Z/WYmuL0Vwb6 OJBLKB/VNOorlWfM/yfgv3qgQjF22hyBus8zGgUYCd5IV9rCe9qZc2sVwfvfwPy9 PAz1GDaOVnw1ZzH6B2dDnazPbf9NGDSp1GXcaG4Taob9jNfDlCk= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:30 2025 by rpki-client