This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft File: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft (raw, json) Hash identifier: YSJnkMQLJv37BFrytHjLjm3txOmQhlk6e743JaaZ0tw= Subject key identifier: AD:96:2C:71:AD:4F:98:C6:56:F5:70:42:06:B0:81:55:CB:65:8E:78 Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 Certificate issuer: /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Certificate serial: 09493CC148B36844E8E9EDFEA22E7C12F4CEBF81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft Manifest number: 0242 Signing time: Tue 02 Dec 2025 11:01:54 +0000 Manifest this update: Tue 02 Dec 2025 10:56:54 +0000 Manifest next update: Fri 05 Dec 2025 16:35:54 +0000 Files and hashes: 1: D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl (hash: emElx/u5twBw1yn901yEY030ml7a2NHy5JvMzFWAuPw=) 2: 3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (hash: bu4LtbxxfvYhSmPVYXsHJnQ8u6QDASxNerDLPSby9+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:49:3c:c1:48:b3:68:44:e8:e9:ed:fe:a2:2e:7c:12:f4:ce:bf:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26 Validity Not Before: Dec 2 10:56:54 2025 GMT Not After : Dec 5 16:35:54 2025 GMT Subject: CN=AD962C71AD4F98C656F5704206B08155CB658E78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:ac:74:74:f0:17:20:a1:9d:b0:e1:4c:7d: 1b:ea:c1:0b:ba:00:c2:aa:c8:6c:df:fa:47:03:da: 07:7d:d8:a8:3e:b3:25:4a:c0:63:3e:b8:97:bf:bd: 2c:32:b8:81:17:17:b4:27:b8:36:e2:58:c0:a3:ff: 58:ec:d2:af:d9:f4:fc:32:d8:2b:4b:71:bc:02:c2: b4:2c:d1:94:86:80:a1:7c:be:02:19:a7:ed:32:4e: a6:ed:83:ad:aa:25:97:f4:29:12:b5:26:ce:da:1f: 3c:fe:ec:de:7d:cd:36:c7:50:d7:38:a6:96:a6:be: d2:e6:72:0f:7e:6a:6f:c3:a2:30:c7:11:62:b7:e0: 43:54:7a:54:1e:b5:29:0d:ac:6b:d1:4b:00:09:0f: 68:9f:05:ff:04:36:08:60:01:f8:68:44:bb:f7:b0: 44:4e:55:3c:1f:96:2e:c9:e6:4d:22:5a:46:2e:cc: 47:c2:fd:b2:db:a3:c0:39:b2:7e:31:39:b6:0a:f7: 0b:9a:5b:40:99:cd:0c:58:68:ff:02:78:c0:81:8e: 98:ea:7d:23:cf:aa:a0:02:71:f1:a8:4e:4e:e7:18: c4:e4:d5:6a:a1:d7:b8:35:b1:db:5c:ea:bf:d0:01: c6:95:fc:fb:e7:7e:d9:49:65:73:b0:f0:c7:06:ad: 50:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:2C:71:AD:4F:98:C6:56:F5:70:42:06:B0:81:55:CB:65:8E:78 X509v3 Authority Key Identifier: keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:62:23:6c:ae:65:13:2d:36:11:89:10:b5:6c:d7:61:4d:14: 44:7a:a8:7c:6f:51:ea:e8:40:0e:d2:1d:89:d6:22:e5:16:58: fe:95:b2:1c:e6:d3:29:98:61:31:a1:25:1e:db:54:55:fe:dc: d6:a1:76:a7:5c:f1:20:16:5c:e1:74:4c:8f:bb:92:1b:6c:ea: 32:09:b9:80:35:d4:8f:6c:48:f4:55:1d:9a:b6:d0:fe:52:7d: 51:91:e5:4c:98:53:26:9f:d9:f8:44:57:85:1a:fa:63:6f:00: 4b:a3:20:7e:02:24:76:8e:dd:9b:d1:e4:68:36:c3:05:db:3c: fb:3d:c7:3b:78:ce:13:a2:81:e3:18:46:d3:e8:c8:51:53:46: f2:72:9b:fc:84:99:e5:fd:0d:da:4f:05:df:7d:c3:01:44:25: 30:5e:da:29:6e:85:10:ee:01:83:16:c6:23:cb:ba:a2:cc:d4: a8:a3:8d:c6:12:44:a5:ab:9e:1c:12:bb:c2:a0:f8:05:a4:1a: 71:98:ba:fc:7c:b9:a0:8a:32:9f:d2:8b:ab:69:6e:fa:45:46: 88:76:6b:07:21:96:3a:3b:89:70:23:fb:b9:af:17:c6:55:da: 46:dd:9a:34:c0:68:59:e9:78:3e:db:a7:ae:d4:9a:24:ed:12: fc:1b:c0:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUk8wUizaETo6e3+oi58EvTOv4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2 NEREOUYyNjAeFw0yNTEyMDIxMDU2NTRaFw0yNTEyMDUxNjM1NTRaMDMxMTAvBgNV BAMTKEFEOTYyQzcxQUQ0Rjk4QzY1NkY1NzA0MjA2QjA4MTU1Q0I2NThFNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Jax0dPAXIKGdsOFMfRvqwQu6 AMKqyGzf+kcD2gd92Kg+syVKwGM+uJe/vSwyuIEXF7QnuDbiWMCj/1js0q/Z9Pwy 2CtLcbwCwrQs0ZSGgKF8vgIZp+0yTqbtg62qJZf0KRK1Js7aHzz+7N59zTbHUNc4 ppamvtLmcg9+am/DojDHEWK34ENUelQetSkNrGvRSwAJD2ifBf8ENghgAfhoRLv3 sEROVTwfli7J5k0iWkYuzEfC/bLbo8A5sn4xObYK9wuaW0CZzQxYaP8CeMCBjpjq fSPPqqACcfGoTk7nGMTk1Wqh17g1sdtc6r/QAcaV/PvnftlJZXOw8McGrVBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZYsca1PmMZW9XBCBrCBVctljngwHwYDVR0j BBgwFoAU0ho1l9e169mlR2gPHC7XpGTdnyYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2M1NjA1ZC1mMTdhLTQwMTAtOTI1My0yMTBjNjRmMTQ4YmQvMC9EMjFBMzU5N0Q3 QjVFQkQ5QTU0NzY4MEYxQzJFRDdBNDY0REQ5RjI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3QTQ2NERE OUYyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjNTYwNWQtZjE3YS00MDEwLTky NTMtMjEwYzY0ZjE0OGJkLzAvRDIxQTM1OTdEN0I1RUJEOUE1NDc2ODBGMUMyRUQ3 QTQ2NEREOUYyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBiI2yuZRMtNhGJELVs12FNFER6qHxvUero QA7SHYnWIuUWWP6Vshzm0ymYYTGhJR7bVFX+3Nahdqdc8SAWXOF0TI+7khts6jIJ uYA11I9sSPRVHZq20P5SfVGR5UyYUyaf2fhEV4Ua+mNvAEujIH4CJHaO3ZvR5Gg2 wwXbPPs9xzt4zhOigeMYRtPoyFFTRvJym/yEmeX9DdpPBd99wwFEJTBe2iluhRDu AYMWxiPLuqLM1KijjcYSRKWrnhwSu8Kg+AWkGnGYuvx8uaCKMp/Si6tpbvpFRoh2 awchljo7iXAj+7mvF8ZV2kbdmjTAaFnpeD7bp67UmiTtEvwbwAE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:15 2025 by rpki-client