This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: Jr/l6ULBg0fAPXKDh7p9j4pDrf1E4GO+A2f1OxAgEmo= Subject key identifier: 98:F2:57:4E:3A:44:A7:B8:8B:92:91:CA:29:A2:BA:70:5B:23:7A:49 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 3D18C0211CA9FBE3CD425F47345818F23AD9DC4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 039A Signing time: Sun 14 Dec 2025 17:11:48 +0000 Manifest this update: Sun 14 Dec 2025 17:06:48 +0000 Manifest next update: Thu 18 Dec 2025 01:19:48 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: V55SrRvZ731QBdRNdJQZrkky8LJL3dYafi0Mx6sJdeo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 01:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:18:c0:21:1c:a9:fb:e3:cd:42:5f:47:34:58:18:f2:3a:d9:dc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Dec 14 17:06:48 2025 GMT Not After : Dec 18 01:19:48 2025 GMT Subject: CN=98F2574E3A44A7B88B9291CA29A2BA705B237A49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:de:df:b5:a3:07:aa:05:1c:4d:69:6a:ad:76: f2:1a:f7:47:ab:e9:7b:16:0a:a1:93:f5:bc:90:84: 59:69:94:d9:99:08:b2:a1:8a:af:d4:13:41:12:be: a1:e2:a9:0f:95:09:4f:a9:08:ed:dc:1a:dd:09:f7: 17:4c:5c:1c:9e:48:38:66:05:e0:de:6c:cb:76:27: d0:1d:94:81:96:6e:a0:87:6b:94:6a:23:c0:ee:1b: f5:ce:e3:eb:9a:cf:2c:54:3e:9e:28:93:6a:33:49: 2f:74:31:7d:bd:70:c6:61:c0:da:a9:d2:03:a6:8a: b9:c3:ed:00:ed:d4:47:d1:50:cd:1a:a6:dd:53:19: ca:f4:83:bb:1a:46:21:7e:ba:ab:44:94:2d:36:2a: 47:62:7b:b5:ca:90:f8:10:16:50:cd:62:19:fa:fe: 00:90:66:8c:fb:cd:b7:a3:87:41:a8:e3:64:a2:53: 02:12:b8:e9:a6:45:3b:e7:f3:1c:ea:a3:2a:2e:28: be:88:02:e6:68:02:ac:a4:d9:26:13:e5:23:3b:dd: c9:b5:37:c5:5f:56:cd:0c:92:62:f8:6f:c9:44:5d: 64:5b:19:51:84:87:28:87:06:7b:ef:04:16:02:0f: 57:b2:c0:a7:97:4b:20:96:a6:d2:b6:7c:92:12:be: ab:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F2:57:4E:3A:44:A7:B8:8B:92:91:CA:29:A2:BA:70:5B:23:7A:49 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1a:38:a9:97:82:ff:e9:66:53:bb:64:5d:2f:66:e3:59:e7: ee:c9:b5:93:ba:4d:11:42:6f:74:92:63:7c:3c:85:d7:ae:c6: b2:3a:13:9d:a4:50:98:9f:12:bb:99:dc:a8:2c:55:a2:ae:15: cc:ca:1e:d2:22:16:26:94:8b:29:69:ea:c5:6b:3f:64:4a:f7: c5:8c:b6:d6:62:af:be:f5:51:f7:9a:14:d7:8a:21:78:3f:e9: 45:9d:16:ad:4f:07:24:97:5d:b9:22:d2:fa:16:55:aa:8d:6f: 6b:81:1b:d7:dc:0b:a3:01:0a:f9:b0:de:48:cc:f0:be:4f:cf: b4:1c:c2:27:28:e2:34:7b:10:3e:bf:b3:ec:1f:5e:f8:f5:a8: 08:56:11:0d:d3:97:46:02:c2:dc:7c:f1:5b:ba:91:0a:b4:a0: 9b:b6:cf:91:2e:59:78:d5:ff:2f:86:13:56:ba:e5:68:32:8a: 24:17:82:9e:80:68:48:79:55:0d:dc:c0:cb:0f:65:e5:06:97: 9b:02:fe:82:b3:b1:96:25:cd:45:54:67:2f:81:82:8c:ae:c4: f5:66:5d:ac:6a:97:37:4b:4b:f4:ae:a5:1b:93:87:50:63:34: 88:28:91:52:d0:4d:71:86:4a:cd:f0:ff:0a:24:00:a4:ea:21: 3e:44:c2:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRjAIRyp++PNQl9HNFgY8jrZ3E0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTEyMTQxNzA2NDhaFw0yNTEyMTgwMTE5NDhaMDMxMTAvBgNV BAMTKDk4RjI1NzRFM0E0NEE3Qjg4QjkyOTFDQTI5QTJCQTcwNUIyMzdBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf3t+1oweqBRxNaWqtdvIa90er 6XsWCqGT9byQhFlplNmZCLKhiq/UE0ESvqHiqQ+VCU+pCO3cGt0J9xdMXByeSDhm BeDebMt2J9AdlIGWbqCHa5RqI8DuG/XO4+uazyxUPp4ok2ozSS90MX29cMZhwNqp 0gOmirnD7QDt1EfRUM0apt1TGcr0g7saRiF+uqtElC02Kkdie7XKkPgQFlDNYhn6 /gCQZoz7zbejh0Go42SiUwISuOmmRTvn8xzqoyouKL6IAuZoAqyk2SYT5SM73cm1 N8VfVs0MkmL4b8lEXWRbGVGEhyiHBnvvBBYCD1eywKeXSyCWptK2fJISvqsxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmPJXTjpEp7iLkpHKKaK6cFsjekkwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4aOKmXgv/pZlO7ZF0vZuNZ5+7JtZO6TRFC b3SSY3w8hdeuxrI6E52kUJifEruZ3KgsVaKuFczKHtIiFiaUiylp6sVrP2RK98WM ttZir771UfeaFNeKIXg/6UWdFq1PBySXXbki0voWVaqNb2uBG9fcC6MBCvmw3kjM 8L5Pz7Qcwico4jR7ED6/s+wfXvj1qAhWEQ3Tl0YCwtx88Vu6kQq0oJu2z5EuWXjV /y+GE1a65WgyiiQXgp6AaEh5VQ3cwMsPZeUGl5sC/oKzsZYlzUVUZy+BgoyuxPVm XaxqlzdLS/SupRuTh1BjNIgokVLQTXGGSs3w/wokAKTqIT5EwvQ= -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:29 2025 by rpki-client