This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: TKO4s/fkT8fuEENWd05IASljNrGNZqMTaxPKVQNBYvU= Subject key identifier: 2E:D7:82:37:B8:8D:18:40:61:24:16:FB:3A:FA:0B:8F:F5:6A:F7:67 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 3AF46ADB72F4AD2BC995014BC976063415DF6F77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: 014C Signing time: Thu 25 Dec 2025 16:01:13 +0000 Manifest this update: Thu 25 Dec 2025 15:56:13 +0000 Manifest next update: Sun 28 Dec 2025 19:00:13 +0000 Files and hashes: 1: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: M1otb8ktW5GqlShs/lSJTN99ophMd5KuNBOqxGd+OEk=) 2: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: qKtc40b4lQF3hAURWdkBNRY70djjte8YqcsMlRaaEzM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 19:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f4:6a:db:72:f4:ad:2b:c9:95:01:4b:c9:76:06:34:15:df:6f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Dec 25 15:56:13 2025 GMT Not After : Dec 28 19:00:13 2025 GMT Subject: CN=2ED78237B88D1840612416FB3AFA0B8FF56AF767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:23:25:9b:85:37:4d:45:d0:9d:70:d0:37: 28:83:c2:1f:af:89:6d:7b:38:73:ab:89:cc:54:67: 1f:d9:fe:dd:89:48:e3:86:c0:4b:10:8a:eb:67:93: 7d:d3:db:16:c2:69:f6:ca:d5:02:d0:d4:86:fc:3d: 74:16:b1:b4:4b:54:a2:ab:da:2d:8b:eb:d0:27:2f: 73:29:d2:66:3a:c9:89:e4:e7:b5:f8:58:ea:4f:8b: d8:02:63:61:bd:43:fa:c1:a1:ba:99:e5:67:5a:8a: 4f:ae:3b:a6:b9:47:e9:21:21:60:2f:28:d7:88:25: 09:df:8d:bc:3e:81:65:d5:38:6e:32:49:4f:cd:db: ff:db:cc:60:4d:de:eb:68:3b:09:9a:2c:5f:17:61: 4e:06:c4:04:a4:6a:26:c3:01:f6:0a:e5:6f:e7:cb: f9:8e:03:6c:51:c3:d9:0e:94:44:e1:81:a4:c5:d9: c8:7f:d1:c7:8e:17:a2:09:87:f7:0e:26:4f:1d:a6: 05:ae:17:92:e6:51:da:86:15:03:1b:a8:5a:2f:39: 18:18:a7:74:58:4c:29:31:cf:41:f9:d5:95:c2:13: c6:08:1c:6a:7a:fc:8d:ab:a4:49:dd:62:50:3f:32: 1d:90:ef:c2:fe:70:d7:4e:83:01:c6:30:9b:5d:78: cd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D7:82:37:B8:8D:18:40:61:24:16:FB:3A:FA:0B:8F:F5:6A:F7:67 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4d:ce:ce:ba:49:60:5d:64:61:b4:21:3b:9e:c2:4b:20:ea: 98:3e:45:22:7d:7d:2d:68:7b:9a:16:6c:28:67:1b:97:56:18: e3:6a:88:ff:dd:a6:f8:c3:a8:24:c5:12:18:34:85:ee:f1:46: 2c:75:88:29:91:b3:a3:fa:1f:a8:3b:39:5e:9b:c3:37:b3:00: 2d:15:9f:02:f5:0f:f5:32:d6:6c:6c:d5:00:64:67:13:a6:da: 64:a0:e2:ed:04:00:4c:78:ca:f7:6a:51:b4:70:b4:e7:68:bd: 7a:c3:f7:19:a5:25:96:b1:51:c1:a1:b7:49:84:27:87:1a:1a: 5c:d0:aa:40:55:33:34:58:dd:10:bd:33:b5:e1:1f:82:38:d0: 77:ef:85:dc:54:67:56:4a:63:e3:dc:80:a5:e6:2a:29:45:de: 5f:d8:8f:96:99:0b:91:c4:3f:39:3a:d7:ac:27:a6:39:e8:de: 7d:0b:8d:f7:b5:7a:fa:55:63:d9:89:c7:13:9d:a6:f2:b3:83: 84:22:c9:f2:f4:60:64:82:1f:42:36:c9:b0:ce:6f:ac:06:3e: 2c:ad:bf:26:24:66:fe:06:4f:e9:64:04:37:94:a1:e8:9c:d2: d9:f6:67:7d:db:c3:ed:a0:74:33:30:80:39:6f:d4:e2:05:04: cd:33:05:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvRq23L0rSvJlQFLyXYGNBXfb3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTEyMjUxNTU2MTNaFw0yNTEyMjgxOTAwMTNaMDMxMTAvBgNV BAMTKDJFRDc4MjM3Qjg4RDE4NDA2MTI0MTZGQjNBRkEwQjhGRjU2QUY3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3NyMlm4U3TUXQnXDQNyiDwh+v iW17OHOricxUZx/Z/t2JSOOGwEsQiutnk33T2xbCafbK1QLQ1Ib8PXQWsbRLVKKr 2i2L69AnL3Mp0mY6yYnk57X4WOpPi9gCY2G9Q/rBobqZ5Wdaik+uO6a5R+khIWAv KNeIJQnfjbw+gWXVOG4ySU/N2//bzGBN3utoOwmaLF8XYU4GxASkaibDAfYK5W/n y/mOA2xRw9kOlEThgaTF2ch/0ceOF6IJh/cOJk8dpgWuF5LmUdqGFQMbqFovORgY p3RYTCkxz0H51ZXCE8YIHGp6/I2rpEndYlA/Mh2Q78L+cNdOgwHGMJtdeM0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULteCN7iNGEBhJBb7OvoLj/Vq92cwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtNzs66SWBdZGG0ITuewksg6pg+RSJ9fS1o e5oWbChnG5dWGONqiP/dpvjDqCTFEhg0he7xRix1iCmRs6P6H6g7OV6bwzezAC0V nwL1D/Uy1mxs1QBkZxOm2mSg4u0EAEx4yvdqUbRwtOdovXrD9xmlJZaxUcGht0mE J4caGlzQqkBVMzRY3RC9M7XhH4I40HfvhdxUZ1ZKY+PcgKXmKilF3l/Yj5aZC5HE Pzk616wnpjno3n0Ljfe1evpVY9mJxxOdpvKzg4QiyfL0YGSCH0I2ybDOb6wGPiyt vyYkZv4GT+lkBDeUoeic0tn2Z33bw+2gdDMwgDlv1OIFBM0zBZo= -----END CERTIFICATE-----Generated at Sat Dec 27 08:11:44 2025 by rpki-client