This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft File: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft (raw, json) Hash identifier: XOB+2Q9+JotkGSnmzJGCoiDM/4sW3p8uQ0bB7IwkQ6s= Subject key identifier: D8:08:65:DD:10:1D:8C:8E:10:19:22:51:53:0F:4E:B8:D2:95:7D:FF Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 Certificate issuer: /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Certificate serial: 0926C30E2EC454A638F05145F8F2AF56F1EB965E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft Manifest number: 0237 Signing time: Wed 03 Dec 2025 05:20:57 +0000 Manifest this update: Wed 03 Dec 2025 05:15:57 +0000 Manifest next update: Sat 06 Dec 2025 10:40:57 +0000 Files and hashes: 1: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl (hash: 0LtUi3uk57Ckh3WQrZq9C8ScLUEWjCHnmLBK6tu5sH0=) 2: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: nZ1CR/rbID4ESxk42tIk0CS9T1eppeEb7s7cp74yVZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:26:c3:0e:2e:c4:54:a6:38:f0:51:45:f8:f2:af:56:f1:eb:96:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Validity Not Before: Dec 3 05:15:57 2025 GMT Not After : Dec 6 10:40:57 2025 GMT Subject: CN=D80865DD101D8C8E10192251530F4EB8D2957DFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:9d:0e:13:29:26:0e:6a:84:32:06:17:b1: 56:69:ee:52:f1:6e:62:d9:7d:15:45:d5:8c:72:94: e3:35:5c:ba:f8:9c:c4:3f:de:05:cd:8d:a1:8d:85: 70:63:33:fb:a0:14:4a:f5:67:b3:e1:19:e9:1e:db: c6:59:72:da:cb:26:04:24:82:c9:be:5d:ae:1a:5e: 1f:74:c5:1c:a9:68:a3:7f:84:03:b1:cf:87:22:6b: 8e:53:cb:d8:3b:f6:b7:20:b6:f2:4f:58:be:59:0d: 5b:5c:98:0b:99:c0:1d:a8:20:43:e4:49:0e:7e:98: eb:d7:ff:95:b4:e1:75:ea:b7:46:ca:4e:67:43:45: 81:45:f9:d4:42:8f:be:d6:c4:e7:11:4a:8d:04:16: b6:c9:3e:90:59:bd:6d:4d:aa:a9:80:7b:a6:05:6e: d9:35:b1:26:c5:d2:10:5d:4c:6d:2e:69:8a:ba:0b: 86:06:56:78:57:82:af:4f:18:88:7b:9c:d1:f6:ca: eb:8e:8f:c1:e6:d4:12:ea:3c:6c:29:11:e3:fc:7b: 5f:e3:cf:16:61:b0:ea:d2:55:5a:5a:90:d9:50:4c: 87:78:04:8c:95:33:fe:bf:4c:62:1a:3d:63:e4:4b: a1:ab:f8:8a:ff:8f:57:ad:49:11:90:83:6e:42:04: 93:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:08:65:DD:10:1D:8C:8E:10:19:22:51:53:0F:4E:B8:D2:95:7D:FF X509v3 Authority Key Identifier: keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:88:27:ec:fe:0d:27:a3:e0:31:59:ef:96:56:ff:16:d3:69: 55:1b:67:7c:9f:b7:06:6e:da:16:8a:1a:45:ad:28:9c:d8:82: dc:e4:e2:82:76:56:e6:25:52:15:a4:3a:c3:1f:7b:91:40:d4: ea:52:03:cb:c7:9d:7a:1d:c5:81:03:18:6d:3e:03:97:8c:3d: 1d:06:da:e2:be:7a:58:c5:ff:4a:f4:64:89:8f:c3:df:3b:4b: 0b:7f:c5:e0:5f:eb:f7:6a:19:c2:ad:ca:1b:d6:94:0e:ef:12: e9:05:6b:0a:ee:2c:59:0d:94:20:33:ad:c8:e5:a8:9e:bd:c4: b3:09:49:37:06:02:01:5e:b6:90:d6:c6:d7:9b:1b:68:35:61: 88:9b:46:d8:bf:a4:68:ff:a7:d5:2e:33:74:d7:45:70:11:5d: 3f:53:ee:cf:a5:98:f4:50:4e:77:cf:aa:46:3f:e1:a3:5d:47: 02:60:59:2d:cb:0f:7e:3e:18:e5:23:a0:18:d3:06:72:6e:8e: cb:ea:28:e9:05:a2:9e:d0:a1:c2:77:a5:96:39:19:82:3b:f4: 73:d9:46:d3:53:64:12:68:4c:72:81:3b:78:04:0e:3b:8b:67: ed:4e:6c:23:5b:2a:85:22:47:b0:ca:1d:b5:4c:48:18:ff:57: f8:e2:c2:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSbDDi7EVKY48FFF+PKvVvHrll4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0Iy QkE4RTJFNjAeFw0yNTEyMDMwNTE1NTdaFw0yNTEyMDYxMDQwNTdaMDMxMTAvBgNV BAMTKEQ4MDg2NUREMTAxRDhDOEUxMDE5MjI1MTUzMEY0RUI4RDI5NTdERkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlZ0OEykmDmqEMgYXsVZp7lLx bmLZfRVF1YxylOM1XLr4nMQ/3gXNjaGNhXBjM/ugFEr1Z7PhGeke28ZZctrLJgQk gsm+Xa4aXh90xRypaKN/hAOxz4cia45Ty9g79rcgtvJPWL5ZDVtcmAuZwB2oIEPk SQ5+mOvX/5W04XXqt0bKTmdDRYFF+dRCj77WxOcRSo0EFrbJPpBZvW1NqqmAe6YF btk1sSbF0hBdTG0uaYq6C4YGVnhXgq9PGIh7nNH2yuuOj8Hm1BLqPGwpEeP8e1/j zxZhsOrSVVpakNlQTId4BIyVM/6/TGIaPWPkS6Gr+Ir/j1etSRGQg25CBJPnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Ahl3RAdjI4QGSJRUw9OuNKVff8wHwYDVR0j BBgwFoAUEyaopCE3iRpws8C7MBzWyyuo4uYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjExMjZkMy0xM2JlLTQ1MDgtYjk3ZC0xM2ZlNjVhNWI0ZDYvMC8xMzI2QThBNDIx Mzc4OTFBNzBCM0MwQkIzMDFDRDZDQjJCQThFMkU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0IyQkE4 RTJFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2 Q0IyQkE4RTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyIJ+z+DSej4DFZ75ZW/xbTaVUbZ3yftwZu 2haKGkWtKJzYgtzk4oJ2VuYlUhWkOsMfe5FA1OpSA8vHnXodxYEDGG0+A5eMPR0G 2uK+eljF/0r0ZImPw987Swt/xeBf6/dqGcKtyhvWlA7vEukFawruLFkNlCAzrcjl qJ69xLMJSTcGAgFetpDWxtebG2g1YYibRti/pGj/p9UuM3TXRXARXT9T7s+lmPRQ TnfPqkY/4aNdRwJgWS3LD34+GOUjoBjTBnJujsvqKOkFop7QocJ3pZY5GYI79HPZ RtNTZBJoTHKBO3gEDjuLZ+1ObCNbKoUiR7DKHbVMSBj/V/jiwgo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:40 2025 by rpki-client