This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: qTrq4M67c6L7VTRqAqV/JFPyrWtERpJ3upypheNNAxU= Subject key identifier: 12:2B:D7:F5:2B:89:4C:4C:CB:E6:8F:DA:9C:71:EC:03:7E:0B:EA:7C Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 2A5C165BE626353E5FE897779EA04E79E494698C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 0109 Signing time: Wed 17 Dec 2025 23:32:28 +0000 Manifest this update: Wed 17 Dec 2025 23:27:28 +0000 Manifest next update: Sun 21 Dec 2025 06:08:28 +0000 Files and hashes: 1: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) 2: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: 09ucvnK6wizDj+EnkyDZ6VQzAECcamjDcvmSBcqPgfA=) 3: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:5c:16:5b:e6:26:35:3e:5f:e8:97:77:9e:a0:4e:79:e4:94:69:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Dec 17 23:27:28 2025 GMT Not After : Dec 21 06:08:28 2025 GMT Subject: CN=122BD7F52B894C4CCBE68FDA9C71EC037E0BEA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f6:51:21:6a:02:7a:63:a7:a7:94:71:5b:56: d2:e3:aa:e1:ca:01:c9:ba:d3:3c:4c:25:a3:7b:a5: f5:49:8c:ab:4a:69:e5:c5:d4:c2:09:1a:fc:af:e0: 07:25:02:9a:13:12:7a:1c:8a:5a:f5:37:4d:18:ce: fe:8a:83:42:25:57:cd:36:b0:71:7a:d8:20:44:38: 99:8b:59:88:34:6b:0d:05:32:51:c6:26:0c:81:e4: bb:27:aa:c2:83:45:fc:e3:4f:ac:9d:b0:b9:e4:b2: b5:fd:8e:c4:ca:0d:b3:08:37:4c:1f:b0:e0:49:ca: f0:da:ee:37:e2:80:86:1d:66:78:1b:e4:9b:02:ff: b6:26:ad:7d:40:06:80:54:e7:e8:5e:d4:7b:fe:ab: e0:80:58:7e:90:5b:48:ad:8e:ac:25:72:07:fe:7b: 22:7b:b4:d9:0f:1f:48:c5:de:f3:67:b8:5e:84:1b: aa:b6:8a:e3:bc:54:96:c9:17:df:94:70:b1:83:13: d6:d9:b6:d6:dc:6f:52:be:d6:d2:4f:ee:64:0d:ac: 44:00:09:0d:81:f8:42:e5:6f:42:a0:32:95:8d:db: 20:dd:70:89:1c:f9:3c:2f:30:a9:a6:ec:65:5b:aa: 3f:a1:68:6d:b2:52:33:76:76:f6:e7:3f:71:4c:89: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2B:D7:F5:2B:89:4C:4C:CB:E6:8F:DA:9C:71:EC:03:7E:0B:EA:7C X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9a:90:42:41:48:93:50:ee:88:e1:39:2c:9c:ea:46:27:3b: b0:a6:eb:ba:02:2e:65:a3:71:80:57:bf:57:c4:33:7b:10:a1: 90:4c:d8:05:26:7d:4e:d7:ec:f4:fe:60:68:56:71:d9:f4:b6: c5:b4:d1:ba:c0:71:27:d7:1f:7d:b5:78:12:57:5c:44:79:73: 35:a1:c0:09:d7:07:43:de:fe:d2:78:8f:70:1f:31:1d:ea:9a: 0f:bb:d8:1b:4e:ba:c5:9c:9f:8b:92:31:e5:41:89:62:45:fe: 84:d2:9e:47:0f:df:b9:73:f4:63:d2:4a:40:60:8c:f6:69:94: e7:1b:0c:4e:53:cd:b6:5e:32:f2:d3:73:a0:d1:d6:ad:a1:ad: 45:66:d0:a5:41:35:7c:ec:55:1b:94:c3:ea:39:ac:cb:66:bc: a1:5c:4c:31:34:8a:48:91:ad:d8:06:14:3b:f6:fc:96:fd:c2: 5c:b1:d6:4f:24:81:14:9f:f0:4b:9f:7a:16:4a:04:c4:1a:ea: 0a:85:a0:c1:88:42:38:a6:5f:66:4b:8b:d8:d1:b8:58:ce:9b: fc:70:b3:30:ca:90:13:90:26:c3:22:61:89:4f:f1:13:74:27: b8:e2:21:be:a7:01:ca:6c:a2:ac:69:d9:61:b9:09:5a:3f:35: 47:58:a1:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlwWW+YmNT5f6Jd3nqBOeeSUaYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTEyMTcyMzI3MjhaFw0yNTEyMjEwNjA4MjhaMDMxMTAvBgNV BAMTKDEyMkJEN0Y1MkI4OTRDNENDQkU2OEZEQTlDNzFFQzAzN0UwQkVBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ9lEhagJ6Y6enlHFbVtLjquHK Acm60zxMJaN7pfVJjKtKaeXF1MIJGvyv4AclApoTEnocilr1N00Yzv6Kg0IlV802 sHF62CBEOJmLWYg0aw0FMlHGJgyB5LsnqsKDRfzjT6ydsLnksrX9jsTKDbMIN0wf sOBJyvDa7jfigIYdZngb5JsC/7YmrX1ABoBU5+he1Hv+q+CAWH6QW0itjqwlcgf+ eyJ7tNkPH0jF3vNnuF6EG6q2iuO8VJbJF9+UcLGDE9bZttbcb1K+1tJP7mQNrEQA CQ2B+ELlb0KgMpWN2yDdcIkc+TwvMKmm7GVbqj+haG2yUjN2dvbnP3FMidf/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEivX9SuJTEzL5o/anHHsA34L6nwwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqakEJBSJNQ7ojhOSyc6kYnO7Cm67oCLmWj cYBXv1fEM3sQoZBM2AUmfU7X7PT+YGhWcdn0tsW00brAcSfXH321eBJXXER5czWh wAnXB0Pe/tJ4j3AfMR3qmg+72BtOusWcn4uSMeVBiWJF/oTSnkcP37lz9GPSSkBg jPZplOcbDE5TzbZeMvLTc6DR1q2hrUVm0KVBNXzsVRuUw+o5rMtmvKFcTDE0ikiR rdgGFDv2/Jb9wlyx1k8kgRSf8EufehZKBMQa6gqFoMGIQjimX2ZLi9jRuFjOm/xw szDKkBOQJsMiYYlP8RN0J7jiIb6nAcpsoqxp2WG5CVo/NUdYoeY= -----END CERTIFICATE-----Generated at Fri Dec 19 09:47:01 2025 by rpki-client