This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft File: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft (raw, json) Hash identifier: 5FnMCimQj1a1GiYMX14E2hvAf70YaH2b6d9VfYWJytI= Subject key identifier: 89:E7:B1:84:D9:FA:2B:B8:3C:F1:93:3B:2C:8E:35:E2:49:B1:0D:9A Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B Certificate issuer: /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B Certificate serial: 080C305599C6794F7AEF1DA37BD23A7046748EF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft Manifest number: 023A Signing time: Mon 01 Dec 2025 16:52:20 +0000 Manifest this update: Mon 01 Dec 2025 16:47:20 +0000 Manifest next update: Thu 04 Dec 2025 17:30:20 +0000 Files and hashes: 1: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: uqS3f/a/mCNWGnrE+t9GmuqXdPtzmTdKMITykozV6Ak=) 2: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: lNbPUGA/82mjhGneJ7g/W99enSkyu+j5sTgsqJn2Sk0=) 3: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl (hash: qM+kV+XjAcnOt1XWbcgFUt5HTp7j5CZ6SuuOAh8XMVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0c:30:55:99:c6:79:4f:7a:ef:1d:a3:7b:d2:3a:70:46:74:8e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B Validity Not Before: Dec 1 16:47:20 2025 GMT Not After : Dec 4 17:30:20 2025 GMT Subject: CN=89E7B184D9FA2BB83CF1933B2C8E35E249B10D9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ec:60:5d:14:1f:5e:2d:49:c3:4b:2a:f8:62: fe:99:6b:09:30:68:58:06:c9:f3:7b:73:ee:9d:81: 10:10:a4:07:5e:77:08:b6:0c:eb:76:91:f0:f2:e8: 0a:73:09:9c:76:10:65:11:b1:13:60:62:72:0b:f7: 22:dc:c7:85:60:f0:6c:40:bf:85:ff:76:0a:89:47: b6:ba:02:d0:e5:ac:99:c7:50:27:54:a3:c3:a2:73: 77:7d:55:b7:80:26:e3:56:8e:45:3d:c3:47:85:b3: 74:3d:16:16:52:bd:54:32:b6:c1:fd:42:f4:45:97: be:58:a8:f7:f5:a7:6f:68:b9:6b:48:ae:84:f6:9f: 7d:fa:15:71:50:b4:f9:34:66:54:66:a2:a0:db:4b: a6:7e:ec:0a:22:7d:cc:6a:96:a8:1d:19:6b:df:36: a7:12:29:8c:fa:dc:05:44:12:10:eb:b1:4c:ec:2d: 14:2b:cd:1d:e9:c2:92:67:ff:31:94:d0:35:42:26: cb:76:e4:e5:26:0b:6f:ca:21:b6:67:19:a3:bb:61: b2:58:03:28:9c:4d:09:aa:b9:cf:8a:8b:f0:c8:fa: fe:79:c6:04:31:68:b0:ea:fd:f4:4c:63:89:85:d8: 2c:45:cf:cf:73:70:0b:b3:10:0f:8d:c0:2d:b9:f0: 5f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E7:B1:84:D9:FA:2B:B8:3C:F1:93:3B:2C:8E:35:E2:49:B1:0D:9A X509v3 Authority Key Identifier: keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:aa:88:13:14:a4:fe:3e:be:06:e4:92:7c:9a:39:f6:bd:08: ed:30:b8:ef:91:2f:7f:a5:53:cd:3b:ac:e7:0f:8b:b0:ff:85: ae:eb:0f:21:2b:f0:75:e5:5f:99:f2:54:81:98:34:f9:1c:5d: 3e:ed:a4:74:5e:f9:a8:b1:9a:3e:a5:e7:25:3d:bb:dc:1f:1b: eb:86:50:e3:0b:9a:21:56:7c:37:0c:b3:0e:f2:da:75:c6:ec: c8:5e:ed:dd:0a:0b:b2:b2:10:ad:a5:2e:23:1b:2e:ec:9e:05: 52:1b:ef:a9:7f:d5:13:00:0e:77:c8:84:ce:ef:95:72:08:98: 85:f1:99:cc:28:98:ab:ae:f8:ff:87:97:31:5e:06:17:45:e4: 76:d3:8e:8c:ec:bd:51:8c:d6:1d:c7:a1:fc:d7:68:2a:5e:72: ec:38:19:06:eb:93:c4:7e:5e:71:61:29:f9:2c:fc:a8:b6:18: f8:7f:28:ff:e2:fe:c1:e7:cc:66:4b:41:49:56:45:49:57:e2: be:8b:ba:7b:36:6e:e4:c0:e7:17:a4:b3:a4:1e:44:14:19:ec: 5d:09:31:ba:6e:4a:60:68:22:2e:f8:e5:61:63:18:3b:f0:6a: 0e:6f:58:8b:a2:bd:f7:40:1b:44:97:e5:12:77:98:07:5a:43: 26:62:a6:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAwwVZnGeU967x2je9I6cEZ0jvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0 RkY3QTQ4QjAeFw0yNTEyMDExNjQ3MjBaFw0yNTEyMDQxNzMwMjBaMDMxMTAvBgNV BAMTKDg5RTdCMTg0RDlGQTJCQjgzQ0YxOTMzQjJDOEUzNUUyNDlCMTBEOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn7GBdFB9eLUnDSyr4Yv6Zawkw aFgGyfN7c+6dgRAQpAdedwi2DOt2kfDy6ApzCZx2EGURsRNgYnIL9yLcx4Vg8GxA v4X/dgqJR7a6AtDlrJnHUCdUo8Oic3d9VbeAJuNWjkU9w0eFs3Q9FhZSvVQytsH9 QvRFl75YqPf1p29ouWtIroT2n336FXFQtPk0ZlRmoqDbS6Z+7AoifcxqlqgdGWvf NqcSKYz63AVEEhDrsUzsLRQrzR3pwpJn/zGU0DVCJst25OUmC2/KIbZnGaO7YbJY AyicTQmquc+Ki/DI+v55xgQxaLDq/fRMY4mF2CxFz89zcAuzEA+NwC258F+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUieexhNn6K7g88ZM7LI414kmxDZowHwYDVR0j BBgwFoAUJtXAY761gLOPKPPMFrlYY0/3pIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWE3NGFjOS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMC8yNkQ1QzA2M0JF QjU4MEIzOEYyOEYzQ0MxNkI5NTg2MzRGRjdBNDhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4NjM0RkY3 QTQ4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhNzRhYzktOGZhNS00MzliLThm MjEtMDhmMjg0Njc3YWEzLzAvMjZENUMwNjNCRUI1ODBCMzhGMjhGM0NDMTZCOTU4 NjM0RkY3QTQ4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiqiBMUpP4+vgbkknyaOfa9CO0wuO+RL3+l U807rOcPi7D/ha7rDyEr8HXlX5nyVIGYNPkcXT7tpHRe+aixmj6l5yU9u9wfG+uG UOMLmiFWfDcMsw7y2nXG7Mhe7d0KC7KyEK2lLiMbLuyeBVIb76l/1RMADnfIhM7v lXIImIXxmcwomKuu+P+HlzFeBhdF5HbTjozsvVGM1h3HofzXaCpecuw4GQbrk8R+ XnFhKfks/Ki2GPh/KP/i/sHnzGZLQUlWRUlX4r6Luns2buTA5xeks6QeRBQZ7F0J MbpuSmBoIi745WFjGDvwag5vWIuivfdAG0SX5RJ3mAdaQyZipps= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:45 2025 by rpki-client