This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft File: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft (raw, json) Hash identifier: x8SeWWLWY6ZFeCFw7xBzWKpbKDvZVqL5WX464AzfiRI= Subject key identifier: A9:E0:1C:FE:34:3F:81:8C:94:B9:F2:07:45:EB:E8:F5:09:0C:AC:4E Authority key identifier: 04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 Certificate issuer: /CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Certificate serial: 5A65847CF95A516D46AF37ABE0103E2CE7B24CD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft Manifest number: 0198 Signing time: Wed 17 Dec 2025 07:21:51 +0000 Manifest this update: Wed 17 Dec 2025 07:16:51 +0000 Manifest next update: Sat 20 Dec 2025 18:04:51 +0000 Files and hashes: 1: 3130332e3135322e3134302e302f32332d3234203d3e20313430343832.roa (hash: JjGwrreU07/24H7WUf6CfxqCT99P1b99nl4/zwhCTDo=) 2: 3130332e3233312e3137312e302f32342d3234203d3e20313430343832.roa (hash: Ruo+EyZLal8wuDVq0rDNTqbZhSofbWumTXD3E7q865Y=) 3: 0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl (hash: mxxMjJwgwLeapd8EvieCA/MOSW0JjQ543MBXnCktp6s=) 4: 32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (hash: gFVtcUFWWZdWFm0J2smh588ex3+/T+ET5wQOfsP825A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:65:84:7c:f9:5a:51:6d:46:af:37:ab:e0:10:3e:2c:e7:b2:4c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0421CA2FC5BF656F8F905B02A3D7EE4648B22045 Validity Not Before: Dec 17 07:16:51 2025 GMT Not After : Dec 20 18:04:51 2025 GMT Subject: CN=A9E01CFE343F818C94B9F20745EBE8F5090CAC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:7d:bf:da:5f:97:ea:bd:94:c3:c6:6e:51: 5b:d6:52:ea:93:1f:47:de:0b:8c:f0:5c:7a:37:ec: 9f:7d:20:0c:14:dc:aa:32:b9:f4:ba:a9:bd:c8:df: ed:c9:e3:a3:3f:d3:ab:37:cc:7b:3e:2c:b4:3a:f6: ae:fd:43:f7:6a:d9:0e:7f:f2:11:f6:2f:8b:d6:d7: c3:7b:1e:f8:a9:cf:20:12:ec:54:8a:f0:f6:53:28: 4a:e8:1c:78:29:0a:fb:a4:1a:98:7e:ca:cc:cb:9d: 84:1d:42:d8:69:57:ed:7b:4c:55:e7:1f:8a:2d:67: ad:fa:85:9e:6b:12:50:cf:4e:67:c2:f4:3a:6e:b5: 66:18:0e:a0:d2:8d:8e:4d:21:53:a3:a1:67:54:6d: 20:53:64:67:d4:06:29:3e:a3:97:70:ec:ec:b9:c6: 73:fe:31:fb:1f:c8:b4:55:b2:14:f8:1a:b4:5f:fd: a2:0b:5a:fc:8a:c9:f0:3f:e8:c2:a0:9f:03:15:ac: a3:2b:8e:80:82:c7:69:f3:bc:30:8e:51:46:4c:fe: 0f:a5:2e:81:51:f2:fc:19:f0:4a:37:e6:7a:b0:81: 9f:f6:0d:6f:07:29:dc:5b:84:67:5e:91:3a:f9:a6: bb:57:15:fe:a4:22:4e:17:8f:d7:e3:a3:73:d8:85: 31:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E0:1C:FE:34:3F:81:8C:94:B9:F2:07:45:EB:E8:F5:09:0C:AC:4E X509v3 Authority Key Identifier: keyid:04:21:CA:2F:C5:BF:65:6F:8F:90:5B:02:A3:D7:EE:46:48:B2:20:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e6ff38d-e547-4f73-bb30-2b14c08c89fb/0/0421CA2FC5BF656F8F905B02A3D7EE4648B22045.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f7:e4:c6:a1:24:5a:4c:77:b6:27:a3:86:a9:a7:e0:4c:e2: fa:3f:ec:62:4a:4a:f2:f0:4f:3f:72:06:f8:78:f7:36:89:19: b4:3c:7a:7b:db:c1:6d:49:fe:b9:bf:e3:71:9b:da:88:67:07: 1a:1e:6e:54:1a:a8:07:11:22:2e:47:e4:14:4f:42:02:09:10: ac:11:5f:f4:8b:97:72:47:fb:b1:4a:3d:58:ca:70:b6:28:72: aa:86:35:41:c6:fa:9c:cd:02:2c:3b:d7:26:b9:e9:3c:d2:67: e5:d3:14:fb:b3:be:4c:0e:72:6d:d1:db:e3:7a:a5:99:99:85: 6d:b3:e3:e2:f7:f0:b6:65:12:a6:4d:bf:44:7d:8a:c3:6e:d2: 17:94:f9:fa:3b:cc:b1:37:9f:ad:ec:ef:67:0b:e1:92:d6:44: 3e:ba:a7:1e:a5:6d:9a:42:6d:24:20:51:f7:d8:f8:4a:be:ea: ad:69:28:79:a5:65:df:23:6b:04:1f:c5:04:a8:a8:0d:00:05: a7:29:8e:81:2a:4e:83:6b:d8:5a:e7:42:4f:93:ec:c3:11:db: db:2d:e0:18:64:ba:db:7f:3c:ab:b1:28:01:4b:eb:b5:e7:ac: df:57:79:49:73:47:59:f2:bd:91:1d:c5:3d:59:08:23:82:31: 88:cf:1c:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWmWEfPlaUW1Grzer4BA+LOeyTNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0 OEIyMjA0NTAeFw0yNTEyMTcwNzE2NTFaFw0yNTEyMjAxODA0NTFaMDMxMTAvBgNV BAMTKEE5RTAxQ0ZFMzQzRjgxOEM5NEI5RjIwNzQ1RUJFOEY1MDkwQ0FDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqT32/2l+X6r2Uw8ZuUVvWUuqT H0feC4zwXHo37J99IAwU3KoyufS6qb3I3+3J46M/06s3zHs+LLQ69q79Q/dq2Q5/ 8hH2L4vW18N7HvipzyAS7FSK8PZTKEroHHgpCvukGph+yszLnYQdQthpV+17TFXn H4otZ636hZ5rElDPTmfC9DputWYYDqDSjY5NIVOjoWdUbSBTZGfUBik+o5dw7Oy5 xnP+MfsfyLRVshT4GrRf/aILWvyKyfA/6MKgnwMVrKMrjoCCx2nzvDCOUUZM/g+l LoFR8vwZ8Eo35nqwgZ/2DW8HKdxbhGdekTr5prtXFf6kIk4Xj9fjo3PYhTHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeAc/jQ/gYyUufIHRevo9QkMrE4wHwYDVR0j BBgwFoAUBCHKL8W/ZW+PkFsCo9fuRkiyIEUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTZmZjM4ZC1lNTQ3LTRmNzMtYmIzMC0yYjE0YzA4Yzg5ZmIvMC8wNDIxQ0EyRkM1 QkY2NTZGOEY5MDVCMDJBM0Q3RUU0NjQ4QjIyMDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VFNDY0OEIy MjA0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU2ZmYzOGQtZTU0Ny00ZjczLWJi MzAtMmIxNGMwOGM4OWZiLzAvMDQyMUNBMkZDNUJGNjU2RjhGOTA1QjAyQTNEN0VF NDY0OEIyMjA0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFL35MahJFpMd7Yno4app+BM4vo/7GJKSvLw Tz9yBvh49zaJGbQ8envbwW1J/rm/43Gb2ohnBxoeblQaqAcRIi5H5BRPQgIJEKwR X/SLl3JH+7FKPVjKcLYocqqGNUHG+pzNAiw71ya56TzSZ+XTFPuzvkwOcm3R2+N6 pZmZhW2z4+L38LZlEqZNv0R9isNu0heU+fo7zLE3n63s72cL4ZLWRD66px6lbZpC bSQgUffY+Eq+6q1pKHmlZd8jawQfxQSoqA0ABacpjoEqToNr2FrnQk+T7MMR29st 4Bhkutt/PKuxKAFL67XnrN9XeUlzR1nyvZEdxT1ZCCOCMYjPHOc= -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:05 2025 by rpki-client