This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: vQbVxclzVNfSGEeaHaVpuH3Ll/MXl2N2FOh1znkabSk= Subject key identifier: 21:41:E1:D2:D4:90:7B:48:06:50:DA:F2:A3:74:5C:EE:C3:98:C1:35 Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 465E53E219572D70545DDC1BFB6C09FEC5E30D89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 01EA Signing time: Tue 02 Dec 2025 07:11:55 +0000 Manifest this update: Tue 02 Dec 2025 07:06:55 +0000 Manifest next update: Fri 05 Dec 2025 12:39:55 +0000 Files and hashes: 1: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) 2: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: IgvUit+JVnRvJOkjIYlvNPAALXRaIVBYKC5WzTyMkfQ=) 3: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) 4: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: C98MYNi+b9uTUxGvLeeIISzsF6l6JcymylTV8A+XXLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:5e:53:e2:19:57:2d:70:54:5d:dc:1b:fb:6c:09:fe:c5:e3:0d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Dec 2 07:06:55 2025 GMT Not After : Dec 5 12:39:55 2025 GMT Subject: CN=2141E1D2D4907B480650DAF2A3745CEEC398C135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:14:b8:f3:25:5c:09:7a:28:48:f3:91:4f: 86:e3:c0:74:e4:1b:b1:f7:af:87:e9:51:09:dc:8c: 66:0a:b2:05:9a:4b:4f:42:a3:97:23:ae:b6:f2:19: 96:0b:4c:bd:2c:68:71:51:97:1c:8b:27:9a:b1:66: f1:41:11:ec:6a:c8:e4:6f:72:01:20:b7:76:7f:bc: 82:2d:fb:24:7c:40:87:1d:4b:9e:e7:b4:f2:a4:6c: d8:5e:73:78:34:e7:5c:95:0f:0d:93:ee:96:95:ed: 42:50:80:d8:7a:80:60:05:42:b0:e3:6c:7f:7e:39: 70:d7:70:89:2a:93:a0:b6:07:b0:5e:e9:3c:98:07: 3e:0e:34:e5:17:9c:38:c5:e6:f1:cf:d3:8a:0e:59: ed:4a:3d:5e:4c:a2:1a:ff:90:e2:ae:45:e2:ff:06: b1:64:f2:cc:ee:ee:49:7c:cf:4e:fe:d6:f2:18:76: b1:c1:f1:31:14:63:81:6a:b7:0a:aa:6a:9a:c1:53: fd:54:41:1d:f2:96:e6:c7:25:94:b6:e7:8a:31:7e: b0:1a:3d:9c:35:12:c0:2f:5f:56:9b:10:7d:8c:34: 2a:71:05:48:df:6f:3d:b3:bb:36:73:fb:d7:e6:a4: b1:ca:78:bf:3c:c7:bd:44:5e:2e:52:4f:1d:a6:47: 84:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:41:E1:D2:D4:90:7B:48:06:50:DA:F2:A3:74:5C:EE:C3:98:C1:35 X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b3:4a:e4:6c:cb:0c:8f:26:8a:27:8b:f5:88:6b:57:45:aa: 8a:69:6a:a5:60:59:90:7b:8c:99:8a:22:bc:3a:5d:90:91:86: a4:86:a8:ed:2c:83:1c:e9:ca:98:55:42:ae:3d:a3:dd:d4:8f: fa:fe:fa:cd:02:30:75:a5:1d:19:00:22:fa:0a:98:3a:11:78: 06:ed:af:d7:76:60:0b:34:fa:e6:4b:59:21:14:8c:20:33:40: 85:60:46:65:e6:33:39:f1:7d:d6:97:13:eb:3d:69:7f:fa:8e: 0e:d0:97:48:20:63:f0:b4:19:ad:3e:06:94:37:97:ba:89:04: d3:8b:66:17:7d:90:f8:53:b8:11:b5:83:6b:11:57:49:9e:ed: 37:a9:81:3e:cd:66:cd:8a:76:2a:5e:38:c2:6f:d4:fc:be:65: 36:ac:4d:75:76:33:cb:a3:e5:81:d9:39:b9:a2:b3:53:a1:65: 9f:7c:16:da:80:08:ce:57:cf:45:32:1c:99:13:43:c4:ca:2e: 6b:90:d7:47:8b:9f:10:3e:36:59:2e:38:16:a3:68:f1:85:54: c4:70:b3:a0:6a:dd:6f:1f:10:56:a5:62:59:e6:38:5a:62:7b: f3:95:21:81:af:4d:3d:2d:ee:7a:9a:15:86:dc:8b:2f:d3:3a: 22:1e:66:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURl5T4hlXLXBUXdwb+2wJ/sXjDYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNTEyMDIwNzA2NTVaFw0yNTEyMDUxMjM5NTVaMDMxMTAvBgNV BAMTKDIxNDFFMUQyRDQ5MDdCNDgwNjUwREFGMkEzNzQ1Q0VFQzM5OEMxMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKexS48yVcCXooSPORT4bjwHTk G7H3r4fpUQncjGYKsgWaS09Co5cjrrbyGZYLTL0saHFRlxyLJ5qxZvFBEexqyORv cgEgt3Z/vIIt+yR8QIcdS57ntPKkbNhec3g051yVDw2T7paV7UJQgNh6gGAFQrDj bH9+OXDXcIkqk6C2B7Be6TyYBz4ONOUXnDjF5vHP04oOWe1KPV5Mohr/kOKuReL/ BrFk8szu7kl8z07+1vIYdrHB8TEUY4FqtwqqaprBU/1UQR3ylubHJZS254oxfrAa PZw1EsAvX1abEH2MNCpxBUjfbz2zuzZz+9fmpLHKeL88x71EXi5STx2mR4QxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUHh0tSQe0gGUNryo3Rc7sOYwTUwHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOzSuRsywyPJooni/WIa1dFqoppaqVgWZB7 jJmKIrw6XZCRhqSGqO0sgxzpyphVQq49o93Uj/r++s0CMHWlHRkAIvoKmDoReAbt r9d2YAs0+uZLWSEUjCAzQIVgRmXmMznxfdaXE+s9aX/6jg7Ql0ggY/C0Ga0+BpQ3 l7qJBNOLZhd9kPhTuBG1g2sRV0me7TepgT7NZs2KdipeOMJv1Py+ZTasTXV2M8uj 5YHZObmis1OhZZ98FtqACM5Xz0UyHJkTQ8TKLmuQ10eLnxA+NlkuOBajaPGFVMRw s6Bq3W8fEFalYlnmOFpie/OVIYGvTT0t7nqaFYbciy/TOiIeZtw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:28 2025 by rpki-client