This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.mft (raw, json) Hash identifier: DlHm0ZOnDC6JtWoEbK/miiDdcaAgt/FQV+kivYrXuqM= Subject key identifier: 33:91:C9:CE:1E:8C:89:20:20:B1:BF:FA:C1:0D:DD:47:BE:0D:0C:C0 Authority key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Certificate issuer: /CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Certificate serial: 4F10499BB5EAB41EC84A0B42E7FB1E839116E87C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft Manifest number: 0218 Signing time: Wed 03 Dec 2025 04:12:18 +0000 Manifest this update: Wed 03 Dec 2025 04:07:18 +0000 Manifest next update: Sat 06 Dec 2025 14:01:18 +0000 Files and hashes: 1: 3130332e3132332e3132302e302f32342d3234203d3e20313338303732.roa (hash: etcdt1rptra2wpD632iI4CEj+HZk7gKrmvWLBgXFbpI=) 2: 323430333a613163303a3a2f33322d3332203d3e20313338303732.roa (hash: sIMuid2cN98YAJ+u3L+3la7IfjwgED+cUwmpS2iHGMw=) 3: 3130332e3132332e3132312e302f32342d3234203d3e20313338303730.roa (hash: kHWm0ElDQFUg3ddfCvb6B3R6hoVD6v/wMJbHPMOHCH8=) 4: 579618DB6FFA608F5998FCD968B270AE61BDB97C.crl (hash: a5A+ZRIoSJU1uFYInslT/Ra0CNgEepACTVrGFONqK8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:10:49:9b:b5:ea:b4:1e:c8:4a:0b:42:e7:fb:1e:83:91:16:e8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Validity Not Before: Dec 3 04:07:18 2025 GMT Not After : Dec 6 14:01:18 2025 GMT Subject: CN=3391C9CE1E8C892020B1BFFAC10DDD47BE0D0CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:32:19:ea:f2:17:b5:4a:74:23:04:a8:62: 83:47:8d:24:42:70:9b:76:a6:7d:12:a2:72:a0:77: 48:e6:78:16:cc:2a:1d:0b:94:64:c5:73:e2:dc:0b: d2:ca:d2:6e:64:09:37:1e:74:81:54:00:03:ee:9d: 28:e2:18:48:a4:6c:18:db:c9:51:27:48:e3:d0:89: 15:83:7a:38:c1:f0:be:7a:35:cc:4c:ba:b5:f1:7c: cf:32:d1:dd:18:27:9f:e4:c1:a2:9f:8d:de:9d:a0: 96:dc:ae:b7:1d:f3:90:24:d4:7d:2e:4b:54:4a:86: 1e:5c:80:20:74:be:78:17:d0:28:f1:5b:44:d7:73: 26:8b:38:cb:c2:08:c1:83:2d:ec:a6:88:95:6f:5e: ac:5a:30:0b:79:c0:3c:85:14:5c:c5:54:be:57:d6: ec:56:b5:75:e9:b4:c8:bf:a0:44:1c:77:db:cc:05: 4d:93:1d:a6:75:df:f6:ce:b9:a8:d6:1d:83:2c:63: 7b:16:23:c6:2a:ff:51:6c:cc:4a:06:29:95:cd:de: 58:f9:69:a4:b1:0b:56:7b:d2:f5:25:27:c3:fa:84: ad:9a:9e:a8:a5:6c:6b:fd:b0:27:d6:b4:19:37:cd: 57:72:8e:c5:0e:5a:9c:8e:79:50:5e:87:f9:5e:8e: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:91:C9:CE:1E:8C:89:20:20:B1:BF:FA:C1:0D:DD:47:BE:0D:0C:C0 X509v3 Authority Key Identifier: keyid:57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f0:94:7c:03:da:ed:29:b5:67:3f:af:71:47:be:93:7b:72: 0c:c9:3c:f4:d4:e5:68:06:ad:8c:86:8e:a9:bf:ec:d1:2f:5e: 68:94:be:9f:9e:fe:20:2f:85:e4:e2:61:f1:64:96:fc:9f:4e: 19:76:86:e9:7d:80:67:4d:fe:c1:13:6e:70:47:62:57:4b:3e: 8d:4b:55:4c:e7:83:5b:b2:17:d2:2e:e7:2b:57:9a:ab:ac:a6: 27:92:bc:21:03:e4:8b:8a:b0:18:29:35:7a:c7:52:22:8b:6a: e7:ce:a0:8c:5b:6f:9a:83:6e:a4:71:c6:a5:1c:93:6e:d8:4a: e5:88:9b:ae:fc:fd:76:ea:f3:c0:39:57:4b:cb:59:e1:05:5c: 02:19:53:46:00:37:d1:cf:ec:6b:9a:09:a7:c0:bf:77:9a:40: bb:4c:0f:d0:b0:6d:00:4c:93:12:b6:41:b1:ba:18:c8:b0:5f: 65:93:a7:ee:1b:72:2d:cb:3f:b1:b3:8c:74:be:ad:5c:49:7c: 76:ea:01:cc:28:2f:56:83:f2:eb:e5:b2:96:fd:86:43:e9:0d: 17:a6:ff:5d:34:60:f0:45:ae:42:3f:47:f4:a1:6e:fc:f5:db: 15:8a:ec:f2:35:55:c4:da:56:b3:ba:ef:25:af:a5:18:3c:3e: f6:db:b7:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxBJm7XqtB7ISgtC5/seg5EW6HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2 MUJEQjk3QzAeFw0yNTEyMDMwNDA3MThaFw0yNTEyMDYxNDAxMThaMDMxMTAvBgNV BAMTKDMzOTFDOUNFMUU4Qzg5MjAyMEIxQkZGQUMxMERERDQ3QkUwRDBDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPRzIZ6vIXtUp0IwSoYoNHjSRC cJt2pn0SonKgd0jmeBbMKh0LlGTFc+LcC9LK0m5kCTcedIFUAAPunSjiGEikbBjb yVEnSOPQiRWDejjB8L56NcxMurXxfM8y0d0YJ5/kwaKfjd6doJbcrrcd85Ak1H0u S1RKhh5cgCB0vngX0CjxW0TXcyaLOMvCCMGDLeymiJVvXqxaMAt5wDyFFFzFVL5X 1uxWtXXptMi/oEQcd9vMBU2THaZ13/bOuajWHYMsY3sWI8Yq/1FszEoGKZXN3lj5 aaSxC1Z70vUlJ8P6hK2anqilbGv9sCfWtBk3zVdyjsUOWpyOeVBeh/lejtLtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM5HJzh6MiSAgsb/6wQ3dR74NDMAwHwYDVR0j BBgwFoAUV5YY22/6YI9ZmPzZaLJwrmG9uXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMC81Nzk2MThEQjZG RkE2MDhGNTk5OEZDRDk2OEIyNzBBRTYxQkRCOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcwQUU2MUJE Qjk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjYyNjYzOWEtOWExYy00YzBlLWJh MTctZjY3OWYwNTA2Y2JjLzAvNTc5NjE4REI2RkZBNjA4RjU5OThGQ0Q5NjhCMjcw QUU2MUJEQjk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALwlHwD2u0ptWc/r3FHvpN7cgzJPPTU5WgG rYyGjqm/7NEvXmiUvp+e/iAvheTiYfFklvyfThl2hul9gGdN/sETbnBHYldLPo1L VUzng1uyF9Iu5ytXmquspieSvCED5IuKsBgpNXrHUiKLaufOoIxbb5qDbqRxxqUc k27YSuWIm678/Xbq88A5V0vLWeEFXAIZU0YAN9HP7GuaCafAv3eaQLtMD9CwbQBM kxK2QbG6GMiwX2WTp+4bci3LP7GzjHS+rVxJfHbqAcwoL1aD8uvlspb9hkPpDRem /100YPBFrkI/R/Shbvz12xWK7PI1VcTaVrO67yWvpRg8Pvbbt0Y= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:56 2025 by rpki-client