This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft File: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft (raw, json) Hash identifier: s207OwWdRBlIIdPe3Qu1M0VvftHkD0bKM7QA70e8ZbM= Subject key identifier: 99:D4:26:04:07:3C:76:F0:A8:D0:3E:8C:33:3E:B1:38:AC:2B:5E:3E Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Certificate serial: 05F1C75F760AB5C91083BDA26479E2FB385724B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft Manifest number: 0350 Signing time: Thu 11 Dec 2025 16:21:24 +0000 Manifest this update: Thu 11 Dec 2025 16:16:24 +0000 Manifest next update: Sun 14 Dec 2025 22:59:24 +0000 Files and hashes: 1: AS10217.roa (hash: AKpcdslpGED1vOq8rbDyvewGD3kNp+be//qHRk5p0rQ=) 2: AS147168.roa (hash: m6TF7dm4Aqdk4zR0G6oigljVF/cLTycPFdBhQNDMJbA=) 3: 229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl (hash: LHdJ+v0iBiygIfLDs5oosSLfiMDhm3LDNZAdAtFkGlY=) 4: AS45700.roa (hash: BXkE0BXqN50iJBAlAe18i/nlvwrKk+4GRFc684uKAn8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 22:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:f1:c7:5f:76:0a:b5:c9:10:83:bd:a2:64:79:e2:fb:38:57:24:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512 Validity Not Before: Dec 11 16:16:24 2025 GMT Not After : Dec 14 22:59:24 2025 GMT Subject: CN=99D42604073C76F0A8D03E8C333EB138AC2B5E3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:c5:5d:dd:ad:00:e8:99:37:fe:b5:3d:9e: c3:32:79:be:b8:5f:65:1e:83:50:68:8f:e8:c1:a5: 5c:50:6c:62:fb:ab:b7:e2:d2:d7:3e:5e:bb:ce:52: bb:a1:cf:ff:72:d1:8f:5e:b7:02:bf:9d:05:1d:0e: 6b:49:ed:91:50:a2:83:14:96:87:18:52:54:3a:88: df:8f:0f:a3:92:94:2a:c8:e6:5b:b8:b3:39:8e:79: 24:37:e4:78:38:68:f3:83:51:c6:4d:5e:44:93:aa: d6:61:5b:5c:cd:23:02:0f:72:02:10:7c:1d:e4:7b: 78:be:dc:6e:63:c6:ab:bf:65:12:d3:8f:ee:99:fa: e8:e6:d8:ba:d6:75:71:af:23:c2:20:5e:d5:c4:03: 7c:58:fe:e5:59:32:87:cb:db:0c:75:60:06:d5:20: 21:ee:64:3f:44:24:ce:65:7a:a9:83:35:ed:c6:75: 51:da:ed:de:6f:53:8d:45:d5:5c:6a:37:57:9d:1c: e7:03:87:98:f2:c1:b7:90:91:01:a8:22:27:3d:38: 28:a9:a6:43:fa:76:5b:dd:fe:f9:5a:34:37:6b:cd: dd:50:e9:5a:c8:4c:0a:79:1f:27:f8:d3:13:84:f2: 99:51:7c:2f:b5:b6:09:e7:82:be:fe:9e:cd:5c:59: a5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D4:26:04:07:3C:76:F0:A8:D0:3E:8C:33:3E:B1:38:AC:2B:5E:3E X509v3 Authority Key Identifier: keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a2:3c:3c:d5:63:5d:67:b3:b0:ef:75:50:3a:0c:ff:3a:45: c8:97:f5:ce:44:f2:ce:8e:39:a5:f5:68:7b:c0:2e:59:a6:b4: 09:36:00:a1:68:7f:4b:a8:c4:1c:30:a2:f3:c1:d1:f3:b4:b5: 5f:ee:ef:13:7d:02:14:ee:1b:fb:9b:d5:62:09:69:e7:27:57: 45:79:ee:55:37:e7:8a:af:24:34:14:9b:63:ea:69:38:8b:f7: cc:a9:e7:ee:91:dc:90:54:a0:46:7d:4c:5e:87:ce:65:24:6c: 15:6c:f6:96:a6:1a:73:c0:0f:ce:1e:f1:6a:20:41:49:15:c4: 4c:c5:ed:c8:35:27:f8:45:48:07:31:1d:ca:1e:1f:a7:bd:d7: 74:d0:6e:ef:88:1f:fc:75:13:0d:45:a9:b9:76:06:38:91:af: db:94:91:4f:7b:22:32:80:01:ea:30:34:5d:5c:35:52:bf:48: 32:e4:cf:47:92:bc:77:98:c7:61:f5:d8:59:76:aa:8a:c5:d3: 00:77:10:e7:2d:5d:0f:5a:72:f9:82:7d:97:7b:05:65:b7:0e: 33:49:0b:32:be:2e:76:1c:8d:bb:05:9d:11:8e:01:2f:5d:ba: b8:d1:07:75:cb:d6:87:9c:17:91:56:28:93:25:72:ca:80:81: 70:8f:17:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBfHHX3YKtckQg72iZHni+zhXJLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFF MkMzQjUxMjAeFw0yNTEyMTExNjE2MjRaFw0yNTEyMTQyMjU5MjRaMDMxMTAvBgNV BAMTKDk5RDQyNjA0MDczQzc2RjBBOEQwM0U4QzMzM0VCMTM4QUMyQjVFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5MVd3a0A6Jk3/rU9nsMyeb64 X2Ueg1Boj+jBpVxQbGL7q7fi0tc+XrvOUruhz/9y0Y9etwK/nQUdDmtJ7ZFQooMU locYUlQ6iN+PD6OSlCrI5lu4szmOeSQ35Hg4aPODUcZNXkSTqtZhW1zNIwIPcgIQ fB3ke3i+3G5jxqu/ZRLTj+6Z+ujm2LrWdXGvI8IgXtXEA3xY/uVZMofL2wx1YAbV ICHuZD9EJM5leqmDNe3GdVHa7d5vU41F1VxqN1edHOcDh5jywbeQkQGoIic9OCip pkP6dlvd/vlaNDdrzd1Q6VrITAp5Hyf40xOE8plRfC+1tgnngr7+ns1cWaWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmdQmBAc8dvCo0D6MMz6xOKwrXj4wHwYDVR0j BBgwFoAUIphmUI1tYkUj7a0qDeHoKuLDtRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmI3MDgxOC0yMzY2LTQyZTAtOWRiZC0yNTQzODEwNjllNTcvMC8yMjk4NjY1MDhE NkQ2MjQ1MjNFREFEMkEwREUxRTgyQUUyQzNCNTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4MkFFMkMz QjUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZiNzA4MTgtMjM2Ni00MmUwLTlk YmQtMjU0MzgxMDY5ZTU3LzAvMjI5ODY2NTA4RDZENjI0NTIzRURBRDJBMERFMUU4 MkFFMkMzQjUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWiPDzVY11ns7DvdVA6DP86RciX9c5E8s6O OaX1aHvALlmmtAk2AKFof0uoxBwwovPB0fO0tV/u7xN9AhTuG/ub1WIJaecnV0V5 7lU354qvJDQUm2PqaTiL98yp5+6R3JBUoEZ9TF6HzmUkbBVs9pamGnPAD84e8Wog QUkVxEzF7cg1J/hFSAcxHcoeH6e913TQbu+IH/x1Ew1Fqbl2BjiRr9uUkU97IjKA AeowNF1cNVK/SDLkz0eSvHeYx2H12Fl2qorF0wB3EOctXQ9acvmCfZd7BWW3DjNJ CzK+LnYcjbsFnRGOAS9durjRB3XL1oecF5FWKJMlcsqAgXCPF7s= -----END CERTIFICATE-----Generated at Fri Dec 12 18:50:58 2025 by rpki-client