This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: 2vBNwrcmAmtd4iCjb/QWJjm0dkLhwE1KtBkY8LwePb4= Subject key identifier: 55:8D:19:DF:44:13:91:CF:43:02:41:47:72:F2:77:E2:AC:F3:19:A1 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 241C61E4AFE039A86279A420519619DC3106D73E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 020D Signing time: Wed 17 Dec 2025 00:40:40 +0000 Manifest this update: Wed 17 Dec 2025 00:35:40 +0000 Manifest next update: Sat 20 Dec 2025 04:10:40 +0000 Files and hashes: 1: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: 4Qw+XIg9EqlilDgKOQvBsdp1O9GJXxdDEEyQLTp5kKk=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1c:61:e4:af:e0:39:a8:62:79:a4:20:51:96:19:dc:31:06:d7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Dec 17 00:35:40 2025 GMT Not After : Dec 20 04:10:40 2025 GMT Subject: CN=558D19DF441391CF4302414772F277E2ACF319A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:1f:78:42:58:4c:ba:a9:68:6b:0f:a5:2e: a1:31:c8:81:b1:a3:8b:e5:91:bc:55:0a:08:37:14: 1f:74:d8:02:08:ca:ee:40:37:ad:25:c7:28:dd:a0: c0:54:55:78:01:a9:e2:09:6f:62:9e:03:3c:36:4c: 95:ea:d7:f3:df:81:d6:f2:f6:6f:95:16:6c:5a:ce: 5d:9f:40:00:81:ca:84:29:7c:67:b8:35:94:b2:bb: da:1e:fc:f3:3f:14:9c:43:b5:23:dd:33:cc:6e:e3: 2f:65:48:3c:d3:e7:96:d3:88:40:30:db:e3:9f:4b: e5:a0:08:ad:99:91:bc:4b:d0:fe:c3:41:08:07:76: f4:39:1d:82:b6:81:b6:6f:33:47:44:65:e6:c5:04: 16:e6:7c:39:ff:82:e4:65:6a:b6:3a:f2:69:75:b1: 0c:93:98:ec:9d:29:de:c0:04:ce:dd:c8:23:8e:5a: ee:cd:fa:ba:ea:95:ae:bf:17:ce:85:dc:ac:a5:9f: 34:70:4e:43:80:9e:f0:86:7f:2a:46:9c:91:21:28: d5:6f:f6:12:d2:0f:e0:b7:8d:e9:03:72:74:de:11: b4:5e:9f:92:b4:a1:f1:83:7d:7b:f9:5a:6f:4b:13: 0e:54:dd:09:ce:e2:97:6e:27:27:39:6c:13:91:6a: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8D:19:DF:44:13:91:CF:43:02:41:47:72:F2:77:E2:AC:F3:19:A1 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3e:eb:a1:df:fc:91:4f:03:18:c7:e0:5e:11:1f:b7:68:fc: 34:e9:3f:87:6f:12:98:7f:2a:da:e1:92:18:36:d8:d2:b2:da: cf:e3:bc:1e:c0:fa:fc:70:aa:02:45:7a:77:e4:76:91:02:39: 41:be:28:15:e5:3d:48:22:62:20:27:6c:e3:36:41:7b:db:58: 91:67:ef:89:35:dd:fb:97:ad:62:ff:a0:f8:63:36:95:a8:5f: b7:37:fd:44:c3:b3:5c:e8:45:c1:63:2a:c4:b2:21:19:1e:d3: fc:9e:a0:f0:8c:3d:c8:62:77:5d:3e:3a:85:b1:22:0c:e4:e1: 06:d8:82:79:c0:5e:6e:9b:85:87:7f:18:b8:bb:ca:5e:cc:c8: 4e:e9:ee:b4:5a:85:c2:c2:ae:a5:5b:89:99:1a:1c:10:9b:5d: c2:91:dd:8d:3a:89:16:7c:3d:68:e7:5e:5f:0a:7c:d0:b5:86: fa:70:94:35:e6:d5:55:ad:78:18:19:6e:f1:1f:f2:c1:b7:22: 1f:c6:b8:6f:ad:e6:0b:2d:d0:34:3a:0a:8a:21:16:ac:ae:3e: cf:2c:96:34:3a:35:b0:c6:ec:6d:f1:9d:e4:01:0f:37:8e:2d: bb:6c:2b:97:8f:a2:10:0d:7a:41:fe:fd:58:07:54:1d:6b:75: bf:28:69:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJBxh5K/gOahieaQgUZYZ3DEG1z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTEyMTcwMDM1NDBaFw0yNTEyMjAwNDEwNDBaMDMxMTAvBgNV BAMTKDU1OEQxOURGNDQxMzkxQ0Y0MzAyNDE0NzcyRjI3N0UyQUNGMzE5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZx94QlhMuqloaw+lLqExyIGx o4vlkbxVCgg3FB902AIIyu5AN60lxyjdoMBUVXgBqeIJb2KeAzw2TJXq1/Pfgdby 9m+VFmxazl2fQACByoQpfGe4NZSyu9oe/PM/FJxDtSPdM8xu4y9lSDzT55bTiEAw 2+OfS+WgCK2ZkbxL0P7DQQgHdvQ5HYK2gbZvM0dEZebFBBbmfDn/guRlarY68ml1 sQyTmOydKd7ABM7dyCOOWu7N+rrqla6/F86F3KylnzRwTkOAnvCGfypGnJEhKNVv 9hLSD+C3jekDcnTeEbRen5K0ofGDfXv5Wm9LEw5U3QnO4pduJyc5bBORalI1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVY0Z30QTkc9DAkFHcvJ34qzzGaEwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0+66Hf/JFPAxjH4F4RH7do/DTpP4dvEph/ Ktrhkhg22NKy2s/jvB7A+vxwqgJFenfkdpECOUG+KBXlPUgiYiAnbOM2QXvbWJFn 74k13fuXrWL/oPhjNpWoX7c3/UTDs1zoRcFjKsSyIRke0/yeoPCMPchid10+OoWx Igzk4QbYgnnAXm6bhYd/GLi7yl7MyE7p7rRahcLCrqVbiZkaHBCbXcKR3Y06iRZ8 PWjnXl8KfNC1hvpwlDXm1VWteBgZbvEf8sG3Ih/GuG+t5gst0DQ6CoohFqyuPs8s ljQ6NbDG7G3xneQBDzeOLbtsK5ePohANekH+/VgHVB1rdb8oaek= -----END CERTIFICATE-----Generated at Thu Dec 18 09:31:18 2025 by rpki-client