This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: MsVDm7NJs+TrpMY2TywyScD/Yxd/WH9Bcy2RyYFCSWI= Subject key identifier: D2:26:A6:36:CD:4A:7A:48:06:F4:92:0E:0A:88:B3:97:DF:4D:77:93 Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 18472314B21A5272D7E57EFF5AB63DF6522D3E27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: 010A Signing time: Sat 06 Dec 2025 23:52:12 +0000 Manifest this update: Sat 06 Dec 2025 23:47:12 +0000 Manifest next update: Wed 10 Dec 2025 08:24:12 +0000 Files and hashes: 1: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: bbNh5IhzL1rNJLyhy7hiFZkFXcVeHuBdSs69IB8xXPA=) 2: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: cWyOKWctYlbVooNMHms1H1vDLL9MPLPoRH1H2TKVIAo=) 3: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: Yne9MbLxQkmVpPnQRrnvfdW7z2u8agMzvFW/62iDsk4=) 4: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: SBNjwJJYCJHvL2QmCRz+yZ8PvTB10n4BHiXO1+hrRxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:47:23:14:b2:1a:52:72:d7:e5:7e:ff:5a:b6:3d:f6:52:2d:3e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Dec 6 23:47:12 2025 GMT Not After : Dec 10 08:24:12 2025 GMT Subject: CN=D226A636CD4A7A4806F4920E0A88B397DF4D7793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:a4:48:62:cd:33:18:11:49:e9:0f:bf:85: 95:b1:73:95:84:fc:df:74:30:64:0f:52:6b:bb:42: 37:dc:f9:67:8c:d6:23:fd:e0:9e:a8:2d:b1:d7:c5: d7:da:cb:c0:71:be:18:95:2e:52:89:bb:bb:6a:2b: 82:0b:21:f8:c9:00:64:3c:45:d2:1d:77:9c:72:ed: 21:1e:49:af:a8:ef:19:f8:55:14:fb:72:ed:05:ee: 4b:4f:f4:0b:40:ab:4d:d4:f3:d8:3e:eb:84:90:f4: 43:39:e4:eb:fc:b3:ac:21:8b:67:ed:e7:a6:ae:d5: 17:d4:45:08:8d:4e:aa:13:9b:32:03:2b:28:17:79: 18:c8:fe:93:8b:63:ef:84:e5:77:73:54:44:e6:20: 71:2e:20:de:3f:d9:e5:c9:d6:e9:3a:03:ee:30:9c: 13:bd:ac:c7:24:6c:1e:c7:c5:b6:36:e6:78:2a:0f: 3c:6b:9e:f0:bb:d6:52:5f:61:71:5f:41:20:00:8a: aa:2f:d6:cc:fb:2f:8a:ff:c8:30:4b:c5:d3:6b:78: 93:b1:9a:c7:3a:5d:c8:a8:85:d6:1e:d8:0f:74:6d: 2a:84:42:e7:ed:e9:d7:b2:a4:a5:5f:47:3f:6b:b1: 3c:aa:68:1b:1a:2c:23:69:4e:e0:bc:5b:54:88:49: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:26:A6:36:CD:4A:7A:48:06:F4:92:0E:0A:88:B3:97:DF:4D:77:93 X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:46:3b:df:a8:2f:7f:7e:e7:5e:a6:3f:ec:b7:bf:9c:cf:7e: 9b:59:41:58:e0:6b:12:3c:43:ed:bd:db:37:7b:f0:b8:aa:fe: 07:39:72:c1:c3:28:2e:94:57:ab:d9:b1:de:7a:c8:5a:2d:bb: 84:56:91:10:79:8a:4f:b7:b7:d9:b8:70:34:36:7c:26:4d:12: ee:c4:2f:73:a4:a5:88:12:ab:9f:9b:28:18:ba:92:7e:04:a4: 85:39:7d:28:9c:69:d3:4f:02:f6:f9:6e:4b:9a:aa:61:b1:6f: 07:c8:4f:32:38:ff:7f:40:b1:0f:21:b6:66:fd:86:8b:f4:2e: 41:b9:4f:a0:60:e0:86:fb:28:ef:82:5f:68:39:bf:bb:e0:63: 8d:15:c6:37:fd:c5:db:b7:61:70:73:07:16:6f:28:aa:af:35: 06:fb:1d:4e:67:e5:4e:c0:57:e6:4d:bf:c7:3a:8b:17:c2:b0: 7c:d9:d1:0d:9a:b2:e7:a5:39:ec:b0:93:50:db:c6:34:cc:7d: d2:ea:73:b7:ea:b9:72:2d:18:36:2d:04:86:e8:0b:86:c6:c0: 1a:2f:65:e9:69:7a:8b:b7:1a:55:71:90:8a:ae:27:54:c3:05: 88:f2:ec:66:cc:d8:b0:5e:76:ca:94:45:7b:51:8f:da:e0:a7: 74:65:6f:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEcjFLIaUnLX5X7/WrY99lItPicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNTEyMDYyMzQ3MTJaFw0yNTEyMTAwODI0MTJaMDMxMTAvBgNV BAMTKEQyMjZBNjM2Q0Q0QTdBNDgwNkY0OTIwRTBBODhCMzk3REY0RDc3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXqRIYs0zGBFJ6Q+/hZWxc5WE /N90MGQPUmu7Qjfc+WeM1iP94J6oLbHXxdfay8BxvhiVLlKJu7tqK4ILIfjJAGQ8 RdIdd5xy7SEeSa+o7xn4VRT7cu0F7ktP9AtAq03U89g+64SQ9EM55Ov8s6whi2ft 56au1RfURQiNTqoTmzIDKygXeRjI/pOLY++E5XdzVETmIHEuIN4/2eXJ1uk6A+4w nBO9rMckbB7HxbY25ngqDzxrnvC71lJfYXFfQSAAiqov1sz7L4r/yDBLxdNreJOx msc6XciohdYe2A90bSqEQuft6deypKVfRz9rsTyqaBsaLCNpTuC8W1SISehPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0iamNs1KekgG9JIOCoizl99Nd5MwHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxGO9+oL39+516mP+y3v5zPfptZQVjgaxI8 Q+292zd78Liq/gc5csHDKC6UV6vZsd56yFotu4RWkRB5ik+3t9m4cDQ2fCZNEu7E L3OkpYgSq5+bKBi6kn4EpIU5fSicadNPAvb5bkuaqmGxbwfITzI4/39AsQ8htmb9 hov0LkG5T6Bg4Ib7KO+CX2g5v7vgY40Vxjf9xdu3YXBzBxZvKKqvNQb7HU5n5U7A V+ZNv8c6ixfCsHzZ0Q2asuelOeywk1DbxjTMfdLqc7fquXItGDYtBIboC4bGwBov Zelpeou3GlVxkIquJ1TDBYjy7GbM2LBedsqURXtRj9rgp3Rlb94= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:38 2025 by rpki-client