This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
File: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft (raw, json)
Hash identifier: jZ1qnddwGTI5Ylf8afDxJfxCf7TBjHlCW8KFUhuCSwg=
Subject key identifier: 5E:56:B2:0D:91:40:B2:B9:BA:E4:E2:40:B0:A1:C8:0E:96:FF:7E:D4
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Certificate issuer: /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial: 120C602BCFDBF3D0D05BFCDEF7862DA359018481
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
Manifest number: 0550
Signing time: Mon 15 Dec 2025 18:31:53 +0000
Manifest this update: Mon 15 Dec 2025 18:26:53 +0000
Manifest next update: Fri 19 Dec 2025 01:30:53 +0000
Files and hashes: 1: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: OmHs2Hv0f8cTnPoIf5TvFj4+r1fzYXa48KbgCWe5XYI=)
2: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: 9vKmERWi+/y+esKTTFswCbGkU/rG05yleJxXiPBZcSM=)
3: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: TEKeHrJmyFcpTEmPwxy/NNfjYbPJYRIMg2pHG8Lg4M0=)
4: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: vAWo/sMha9Axd+Jk89itnwJrd2zfg2QgA6Bw5YCPuyc=)
5: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: murX+k5R8h8ESiT+QSuCpzrPj9+7vb21yxp17P+JmVI=)
6: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: XtqlnNzbkZSmq/aHGl1uqDBc5YB4rnEqd6nCa3Q5338=)
7: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl (hash: DN/0VB1QeNNsyo+gjmiZYL8osgucjEp0Y92fgBfIj2c=)
8: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: nHLhFUO3/d1KOlnJCoDhfh5DYlPgmeAohfDNtzLOH9U=)
9: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: zOhjFfZYvz6en5SX0bt2bwJN0UbIougWGwAhrOcMWOE=)
10: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: pSIhRfY1rarJf7HrHmCQMezY1uEqJkpoZDZU50LvaOo=)
11: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: gvli+HahlWwpXT6MXiB6a1x0yRZFhPDWq/40wV3mRrM=)
12: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: hNHUUdaz/xmcgWweg8dc6qW4ZUh/HEb8USitKT+fel0=)
13: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: L9PlBnHs/i4t9NLRoSomC1O2F1YqU8jz1M3b0qQhUUw=)
14: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: mKxNfIZaogpqoGD1v/HbTG1n+WMSkSPY8mtudPgnTgU=)
15: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: iU0rA2I2pdwjPlY87B+mW81OhT+cYHrzR6Mi5MNimIA=)
16: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: DxFUq6TU35WAi7u0l6JIZEIVxbeEPUpLur4r3SpdJtU=)
17: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: g58vS0uRqifjFt5po4KOpHYFCF7u3ZSdJUV7sz9xKFc=)
18: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: ULCLP9kZZOxNVrlIu58ZSD+j7UQRNK4nHv2XMRgGLuc=)
19: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8WvLGIqXkNW5FzU3OPJJcweW3RqCzsTdln0JFQiWe+I=)
20: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: /OpJo01cDRJlGfeBvyqLHyVTpWA1fZyMWTJSJbd+gCM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 01:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0c:60:2b:cf:db:f3:d0:d0:5b:fc:de:f7:86:2d:a3:59:01:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Validity
Not Before: Dec 15 18:26:53 2025 GMT
Not After : Dec 19 01:30:53 2025 GMT
Subject: CN=5E56B20D9140B2B9BAE4E240B0A1C80E96FF7ED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:c8:fd:bb:6b:9e:97:1d:8c:04:ca:ac:35:
54:db:74:36:a8:78:16:fe:f6:c5:01:f4:cb:56:21:
de:b6:32:de:93:d7:10:50:ac:dd:3f:28:81:8f:51:
fd:f0:68:07:3b:cd:ad:a9:cc:3b:c2:54:92:56:79:
80:44:12:01:c4:cd:c7:25:25:b6:b1:63:2e:21:cc:
2d:1d:7f:65:fa:02:cb:9f:18:e8:98:86:84:b9:94:
34:2e:b2:a5:05:6c:bb:c1:11:78:bb:83:c4:ed:1f:
de:93:fc:f2:f2:a2:91:83:a4:4a:1e:db:d4:bf:c0:
5c:e3:bb:c6:63:56:54:13:95:9d:d8:f1:42:f7:4b:
07:16:a5:d7:76:61:fe:a7:5c:69:db:04:2e:9a:c3:
c3:6b:fb:ef:0b:80:e8:14:de:c4:b6:7f:8c:ac:78:
cb:03:23:87:5c:b8:d8:14:ba:cb:52:10:42:35:8a:
b9:fa:48:99:06:79:9c:33:d8:23:a3:fa:47:96:d4:
43:1a:47:53:e9:ec:69:d6:a3:d1:78:cd:7d:75:26:
db:9f:25:f6:83:43:28:ed:fb:b6:ed:50:ba:5a:c5:
90:51:73:e0:8a:bb:ac:49:85:e5:c6:02:1f:cb:93:
60:68:af:8f:e8:03:6c:3e:4c:1b:6e:5d:5f:c8:5b:
64:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:56:B2:0D:91:40:B2:B9:BA:E4:E2:40:B0:A1:C8:0E:96:FF:7E:D4
X509v3 Authority Key Identifier:
keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7e:40:de:ca:17:66:57:b3:1e:b8:da:fe:42:f7:e7:98:28:
db:12:61:75:af:7e:26:99:3c:21:89:de:8b:b5:8a:e9:a2:bb:
13:33:94:88:37:d0:a9:21:d0:a6:43:5f:fe:c6:84:db:64:69:
57:8c:02:b0:eb:24:3a:1d:a1:f6:09:eb:ce:2a:6c:93:d2:5a:
52:86:3f:3e:3c:5f:97:21:f2:83:5b:8e:be:09:ec:33:ee:d6:
06:5f:da:fb:2f:4c:dd:b5:67:9d:7d:50:96:36:ce:4e:e0:ed:
34:48:c6:bb:9f:8e:88:87:a7:24:3b:da:83:f3:3f:6b:9f:4b:
62:5a:e6:94:b6:d5:37:16:68:7c:e8:b8:d6:14:8e:72:cb:c9:
ed:fc:92:f4:1f:f4:55:5b:ff:53:c7:ac:b2:b2:b9:56:12:fa:
b9:27:6d:60:60:a5:fc:ef:2c:c4:16:52:43:22:9f:7c:18:2b:
0d:06:b1:06:eb:82:c5:17:a0:17:c3:d8:5b:50:f7:df:72:ab:
4d:cd:89:4f:43:ad:24:f6:c0:aa:23:24:d5:30:83:64:cb:68:
6c:a6:b5:97:75:6f:02:27:36:4e:db:f8:1e:45:ca:b8:22:d9:
33:ab:22:56:be:bd:1f:8b:45:4b:a0:e1:a3:9e:ee:fd:fe:cd:
07:7b:3e:a1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEgxgK8/b89DQW/ze94Yto1kBhIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3
NEM4MUFCNzAeFw0yNTEyMTUxODI2NTNaFw0yNTEyMTkwMTMwNTNaMDMxMTAvBgNV
BAMTKDVFNTZCMjBEOTE0MEIyQjlCQUU0RTI0MEIwQTFDODBFOTZGRjdFRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07cj9u2uelx2MBMqsNVTbdDao
eBb+9sUB9MtWId62Mt6T1xBQrN0/KIGPUf3waAc7za2pzDvCVJJWeYBEEgHEzccl
JbaxYy4hzC0df2X6AsufGOiYhoS5lDQusqUFbLvBEXi7g8TtH96T/PLyopGDpEoe
29S/wFzju8ZjVlQTlZ3Y8UL3SwcWpdd2Yf6nXGnbBC6aw8Nr++8LgOgU3sS2f4ys
eMsDI4dcuNgUustSEEI1irn6SJkGeZwz2COj+keW1EMaR1Pp7GnWo9F4zX11Jtuf
JfaDQyjt+7btULpaxZBRc+CKu6xJheXGAh/Lk2Bor4/oA2w+TBtuXV/IW2SbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUXlayDZFAsrm65OJAsKHIDpb/ftQwHwYDVR0j
BBgwFoAUIp+WGK4/BmfsF8l38mayvnTIGrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMC8yMjlGOTYxOEFF
M0YwNjY3RUMxN0M5NzdGMjY2QjJCRTc0QzgxQUI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIyQkU3NEM4
MUFCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ3OTFiMWYtNmRhOS00MDBkLThi
MTQtOTkyYWFlNjM3NDZjLzAvMjI5Rjk2MThBRTNGMDY2N0VDMTdDOTc3RjI2NkIy
QkU3NEM4MUFCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABR+QN7KF2ZXsx642v5C9+eYKNsSYXWvfiaZ
PCGJ3ou1iumiuxMzlIg30Kkh0KZDX/7GhNtkaVeMArDrJDodofYJ684qbJPSWlKG
Pz48X5ch8oNbjr4J7DPu1gZf2vsvTN21Z519UJY2zk7g7TRIxrufjoiHpyQ72oPz
P2ufS2Ja5pS21TcWaHzouNYUjnLLye38kvQf9FVb/1PHrLKyuVYS+rknbWBgpfzv
LMQWUkMin3wYKw0GsQbrgsUXoBfD2FtQ999yq03NiU9DrST2wKojJNUwg2TLaGym
tZd1bwInNk7b+B5Fyrgi2TOrIla+vR+LRUug4aOe7v3+zQd7PqE=
-----END CERTIFICATE-----
Generated at Tue Dec 16 13:41:30 2025 by rpki-client