This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: qDmmc+tc+JkmqrUqCNtXx1BKG1Ixpn3Dzo7xWnPq94A= Subject key identifier: B1:D8:FA:33:93:0E:0A:F3:64:F0:4E:D1:4E:17:C8:41:20:FD:49:5C Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 356F23135F6649CE4F5CFE0F03A12FFABB5CD800 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 0188 Signing time: Tue 02 Dec 2025 00:32:24 +0000 Manifest this update: Tue 02 Dec 2025 00:27:24 +0000 Manifest next update: Fri 05 Dec 2025 06:38:24 +0000 Files and hashes: 1: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 2: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: z8nuVoJgo187aVLADRnGf6ivBHPH3jWc7lvFZWjndL0=) 3: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) 4: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6f:23:13:5f:66:49:ce:4f:5c:fe:0f:03:a1:2f:fa:bb:5c:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Dec 2 00:27:24 2025 GMT Not After : Dec 5 06:38:24 2025 GMT Subject: CN=B1D8FA33930E0AF364F04ED14E17C84120FD495C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:33:9a:59:bd:55:23:7c:d4:ab:5b:be:94:dd: ea:3a:5d:76:13:37:5b:2c:a5:8c:89:d8:74:f9:b2: 71:22:c1:e6:ea:51:ab:10:e3:0d:10:d2:a3:b0:85: 37:3f:47:00:69:4b:36:76:a5:db:ba:27:ed:31:70: 71:6a:3b:74:91:e0:50:8a:c5:fa:9f:54:9d:5b:de: 98:9c:8c:5c:03:e0:77:9b:1c:92:26:88:5f:13:73: ae:07:62:88:49:1f:c5:10:3d:99:44:00:51:84:20: 02:2e:68:c2:19:b7:b7:01:02:c5:1d:88:22:21:05: 0e:1a:fe:5d:63:33:16:0e:de:7f:e2:49:34:e7:10: a5:6b:cb:55:d2:b6:a5:6a:80:49:5f:b3:50:95:5a: f0:8a:cb:0a:82:55:8f:c5:08:05:36:65:48:56:dd: d4:cc:e3:a1:0d:3b:7e:2c:74:76:4c:b1:1c:ae:9a: dd:38:30:f5:07:7b:06:b8:11:ce:70:0a:53:46:d5: 89:01:75:e3:cd:a1:08:05:3c:60:0d:78:9d:ac:cc: 4a:8b:b2:84:c7:14:42:b7:e0:69:67:4e:37:85:fe: 48:43:63:72:9e:42:8d:08:03:82:92:74:b0:d8:2a: 17:af:0d:4d:66:16:4d:02:dd:57:a9:3b:ea:f2:97: 6a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D8:FA:33:93:0E:0A:F3:64:F0:4E:D1:4E:17:C8:41:20:FD:49:5C X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:66:78:57:3f:df:00:b6:bf:50:24:c3:44:be:7c:6a:c9:74: 19:99:da:30:82:93:0f:13:06:37:7a:12:bd:59:2a:d7:44:f9: 16:32:0c:75:d0:45:1c:a4:07:53:50:2e:46:ae:01:23:1e:b2: 8d:b4:e3:9f:11:44:88:92:5a:3b:89:47:b5:fe:76:a7:46:ab: 9a:7e:32:8f:91:1f:4b:68:a2:e1:31:fb:20:b2:c6:43:06:65: 9d:03:f9:25:c7:7a:98:10:44:6c:d8:24:97:b3:9f:8b:c4:0e: b6:e2:b0:03:15:2c:26:72:74:ce:ae:2b:dd:34:5e:3b:58:31: c7:90:c9:b3:46:fb:dc:49:11:b1:c2:04:fe:03:1c:08:19:cc: 8b:b4:4c:b3:f0:a6:48:45:af:7c:08:b5:b3:d7:db:97:8b:d4: c9:04:2c:bb:e4:7a:69:05:54:4d:3d:5b:c4:3c:50:c9:68:07: b9:a9:70:2b:42:d8:5d:13:ef:6b:bf:ce:e3:10:72:89:ed:4a: 01:61:87:01:81:eb:ac:42:09:19:68:90:d3:e4:30:31:c8:17: 78:dc:0d:93:e0:ae:a4:7b:7e:b4:f1:a9:5a:87:20:ec:41:50: bc:1a:6c:11:ef:27:21:d3:ac:56:e0:d0:7c:ac:05:d2:d2:28: 05:27:87:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNW8jE19mSc5PXP4PA6Ev+rtc2AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTEyMDIwMDI3MjRaFw0yNTEyMDUwNjM4MjRaMDMxMTAvBgNV BAMTKEIxRDhGQTMzOTMwRTBBRjM2NEYwNEVEMTRFMTdDODQxMjBGRDQ5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMM5pZvVUjfNSrW76U3eo6XXYT N1sspYyJ2HT5snEiwebqUasQ4w0Q0qOwhTc/RwBpSzZ2pdu6J+0xcHFqO3SR4FCK xfqfVJ1b3picjFwD4HebHJImiF8Tc64HYohJH8UQPZlEAFGEIAIuaMIZt7cBAsUd iCIhBQ4a/l1jMxYO3n/iSTTnEKVry1XStqVqgElfs1CVWvCKywqCVY/FCAU2ZUhW 3dTM46ENO34sdHZMsRyumt04MPUHewa4Ec5wClNG1YkBdePNoQgFPGANeJ2szEqL soTHFEK34GlnTjeF/khDY3KeQo0IA4KSdLDYKhevDU1mFk0C3VepO+ryl2qfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsdj6M5MOCvNk8E7RThfIQSD9SVwwHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJmeFc/3wC2v1Akw0S+fGrJdBmZ2jCCkw8T Bjd6Er1ZKtdE+RYyDHXQRRykB1NQLkauASMeso20458RRIiSWjuJR7X+dqdGq5p+ Mo+RH0toouEx+yCyxkMGZZ0D+SXHepgQRGzYJJezn4vEDrbisAMVLCZydM6uK900 XjtYMceQybNG+9xJEbHCBP4DHAgZzIu0TLPwpkhFr3wItbPX25eL1MkELLvkemkF VE09W8Q8UMloB7mpcCtC2F0T72u/zuMQcontSgFhhwGB66xCCRlokNPkMDHIF3jc DZPgrqR7frTxqVqHIOxBULwabBHvJyHTrFbg0HysBdLSKAUnhwc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:05 2025 by rpki-client