This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft File: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft (raw, json) Hash identifier: iZt8o9ioU3y2sPjRHSjAkaSyKJ7FNwEeZsSZBaAWfWs= Subject key identifier: 64:D9:A0:4C:4A:45:76:54:0F:1E:AA:44:43:D1:19:F1:8A:B7:6A:C7 Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 Certificate issuer: /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Certificate serial: 78933104AE52C6EB2A70D54E1F478AB64D1069C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft Manifest number: 0219 Signing time: Wed 17 Dec 2025 10:01:04 +0000 Manifest this update: Wed 17 Dec 2025 09:56:04 +0000 Manifest next update: Sat 20 Dec 2025 16:21:04 +0000 Files and hashes: 1: 3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (hash: 8iq0XosbzhiWPtcHfo4nGBPqnMxkt+Ua/0NUs9QHFi0=) 2: 3130332e3231342e3130322e302f32342d3234203d3e203634303237.roa (hash: BHin+uya4bqzrUKtuCcm95zQM4QjV0bw8TFtDxFQplU=) 3: 3130332e3231342e3130332e302f32342d3234203d3e203634303237.roa (hash: iOkCV36uArsFxOyMUHtzF7wNM0XpfATD2EMHBB13ovA=) 4: 3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (hash: mA1v4/gF9RPJu0MW7l0pzYLVjmcmm1alZXrEuL5aYbI=) 5: 132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl (hash: 8IpJJhq4AEyXnQTRVFLdJL2y6LNC7t3wBkb7fUR4czQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:21:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:93:31:04:ae:52:c6:eb:2a:70:d5:4e:1f:47:8a:b6:4d:10:69:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410 Validity Not Before: Dec 17 09:56:04 2025 GMT Not After : Dec 20 16:21:04 2025 GMT Subject: CN=64D9A04C4A4576540F1EAA4443D119F18AB76AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:21:4e:2c:76:d9:ab:0d:2d:43:76:0d:96: f1:d8:5a:cf:ba:4f:29:c5:c5:e4:66:00:30:ab:55: 66:93:5f:49:bb:79:ce:9b:dd:92:45:9d:44:2b:b0: b5:20:a6:f3:78:cb:ab:69:d5:60:80:23:ce:4b:a6: 7f:d7:99:47:8b:c8:48:6e:ea:19:29:b1:81:4f:20: d0:66:c4:e4:93:9c:54:b0:88:15:db:9b:7e:de:05: d7:49:66:ff:8e:3e:87:b6:15:42:3b:87:27:a4:c8: ce:41:97:2d:63:01:5d:91:6e:83:50:75:45:8d:e7: b1:0d:96:0b:c6:89:78:2a:46:4b:7e:46:02:e6:f8: 9e:7e:3c:14:60:0a:20:11:bb:f7:33:6f:f9:65:0a: 16:0e:bd:e8:53:76:8c:88:23:ce:3e:ba:19:06:80: 0c:4a:93:70:14:a7:2b:99:1a:2e:89:32:dc:9a:21: b8:37:10:a7:eb:f8:2a:9b:23:a5:8a:bf:28:4a:9c: 62:0f:ce:e3:cf:a1:b8:fa:5a:81:5b:c9:63:0a:3a: 00:f4:47:c6:1b:31:67:80:08:3a:ba:05:d6:ea:c9: ac:18:5f:ea:91:ca:d6:db:b5:c5:9f:e9:31:71:f4: f8:ed:03:42:0f:90:e8:13:6a:d4:dd:3d:3c:26:69: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D9:A0:4C:4A:45:76:54:0F:1E:AA:44:43:D1:19:F1:8A:B7:6A:C7 X509v3 Authority Key Identifier: keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:26:94:0b:2c:e2:30:07:5f:fd:c8:6b:3a:bb:a0:9b:14:32: b2:da:b3:f7:c5:d1:d6:7c:38:02:db:a0:d8:40:b4:9e:41:e9: 7f:ce:b8:07:23:ea:02:7a:3b:b8:1c:ba:9a:7b:94:1f:d2:31: d9:8a:e0:cd:20:a0:c3:29:18:e7:22:6e:ac:58:ff:b8:4b:69: 33:16:60:ee:7b:9f:f6:96:76:73:9f:f0:40:6f:ff:6c:0a:92: 16:3d:42:66:b5:83:3e:30:af:6e:db:c6:64:5f:62:9a:6b:51: 7e:e8:62:6c:23:40:a3:98:d2:ea:60:da:60:8f:ec:f6:41:9c: e8:d0:0e:f5:97:02:18:5c:7a:1f:e2:f5:8c:c7:1b:ea:f6:42: 8d:40:70:0e:16:2e:31:57:f5:37:04:e1:62:6f:c3:f2:a1:8c: a7:42:3b:26:3a:be:c1:34:fa:90:b5:57:74:72:3a:96:74:64: ee:ab:12:cd:24:cd:cf:2c:30:e8:38:6f:10:9d:e9:72:fe:a9: ee:2b:a2:e6:5d:fc:4d:6a:d5:c2:10:b1:94:48:02:31:bd:bb: 98:3a:a7:88:b8:53:45:18:ae:1a:02:d0:f1:26:ce:91:0f:d0: 93:67:1b:20:ca:6e:e4:8b:65:b3:36:50:11:60:26:0d:0b:6d: b8:de:22:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJMxBK5SxusqcNVOH0eKtk0QacMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0Qz OEQwNDQxMDAeFw0yNTEyMTcwOTU2MDRaFw0yNTEyMjAxNjIxMDRaMDMxMTAvBgNV BAMTKDY0RDlBMDRDNEE0NTc2NTQwRjFFQUE0NDQzRDExOUYxOEFCNzZBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16SFOLHbZqw0tQ3YNlvHYWs+6 TynFxeRmADCrVWaTX0m7ec6b3ZJFnUQrsLUgpvN4y6tp1WCAI85Lpn/XmUeLyEhu 6hkpsYFPINBmxOSTnFSwiBXbm37eBddJZv+OPoe2FUI7hyekyM5Bly1jAV2RboNQ dUWN57ENlgvGiXgqRkt+RgLm+J5+PBRgCiARu/czb/llChYOvehTdoyII84+uhkG gAxKk3AUpyuZGi6JMtyaIbg3EKfr+CqbI6WKvyhKnGIPzuPPobj6WoFbyWMKOgD0 R8YbMWeACDq6BdbqyawYX+qRytbbtcWf6TFx9PjtA0IPkOgTatTdPTwmaVvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZNmgTEpFdlQPHqpEQ9EZ8Yq3ascwHwYDVR0j BBgwFoAUEyu9+dnybwAcwPDvlZAzPTjQRBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWU1MTg3NS01MDg3LTQyNjQtYThiZC00MTU2ZjU1YmFhYWIvMC8xMzJCQkRGOUQ5 RjI2RjAwMUNDMEYwRUY5NTkwMzMzRDM4RDA0NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMzM0QzOEQw NDQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVlNTE4NzUtNTA4Ny00MjY0LWE4 YmQtNDE1NmY1NWJhYWFiLzAvMTMyQkJERjlEOUYyNkYwMDFDQzBGMEVGOTU5MDMz M0QzOEQwNDQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMmlAss4jAHX/3Iazq7oJsUMrLas/fF0dZ8 OALboNhAtJ5B6X/OuAcj6gJ6O7gcupp7lB/SMdmK4M0goMMpGOcibqxY/7hLaTMW YO57n/aWdnOf8EBv/2wKkhY9Qma1gz4wr27bxmRfYpprUX7oYmwjQKOY0upg2mCP 7PZBnOjQDvWXAhhceh/i9YzHG+r2Qo1AcA4WLjFX9TcE4WJvw/KhjKdCOyY6vsE0 +pC1V3RyOpZ0ZO6rEs0kzc8sMOg4bxCd6XL+qe4rouZd/E1q1cIQsZRIAjG9u5g6 p4i4U0UYrhoC0PEmzpEP0JNnGyDKbuSLZbM2UBFgJg0LbbjeIv0= -----END CERTIFICATE-----Generated at Fri Dec 19 04:52:31 2025 by rpki-client