This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: GJWOzZypGJGE39fabukLTK5b6M5wIfo8HXGd33j9SEs= Subject key identifier: 98:C8:D1:B6:D3:85:BB:73:EA:8C:1E:04:51:CF:1C:EC:2F:7D:9D:F6 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 3A2BC6C6395E59A9DC75DF2076BA8DE3E165E676 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 01BE Signing time: Wed 03 Dec 2025 09:21:52 +0000 Manifest this update: Wed 03 Dec 2025 09:16:52 +0000 Manifest next update: Sat 06 Dec 2025 13:01:52 +0000 Files and hashes: 1: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: JGx1swxH3JJcx9uyPM9bl5/bcWYwLRoMY4GNajOCfrE=) 2: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: 2Aghezf2z7P1qZlnkDBkv3wvvtG5c1l4SMgNAsKv8N0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2b:c6:c6:39:5e:59:a9:dc:75:df:20:76:ba:8d:e3:e1:65:e6:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Dec 3 09:16:52 2025 GMT Not After : Dec 6 13:01:52 2025 GMT Subject: CN=98C8D1B6D385BB73EA8C1E0451CF1CEC2F7D9DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:59:cb:16:50:d1:2a:bc:b5:2b:1e:6a:18: d7:92:b3:6f:e0:96:d3:86:3e:ec:69:24:23:9b:9e: 4d:90:20:6d:c1:2d:05:a7:85:f6:ad:f1:d0:b7:6d: 2e:c9:14:dc:ba:08:59:37:82:e2:00:71:48:80:7e: 31:69:1f:02:9c:45:5f:8c:f7:2b:f7:24:c9:b2:19: 86:5c:de:95:ea:df:b2:b1:2a:1b:0c:8b:e7:24:d2: 34:89:30:d8:bc:f1:91:fa:ac:35:7d:e7:b9:04:df: 34:13:96:41:8d:18:a1:62:ff:7b:b8:8a:1b:85:c6: f3:c4:93:56:de:5c:40:98:53:bf:d2:2a:22:f7:2c: 2f:fe:ee:5d:bb:22:98:32:74:15:83:12:2f:e3:46: a1:d1:eb:84:d2:f4:83:0d:c5:fb:b3:90:b4:65:30: 34:eb:54:66:22:23:05:44:af:59:44:7c:bd:cc:e6: 35:28:16:00:9c:8d:95:f9:02:17:22:e2:77:dc:2c: 38:12:c1:b3:cf:3d:92:01:2b:81:b8:5f:40:d3:86: ce:b7:15:29:95:28:92:4c:98:8d:f9:49:1d:41:3b: fb:ef:a1:33:b0:ea:54:e0:d5:ca:30:91:96:7d:ad: a3:85:79:6b:43:c7:7b:f2:22:ea:d5:71:41:0b:62: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C8:D1:B6:D3:85:BB:73:EA:8C:1E:04:51:CF:1C:EC:2F:7D:9D:F6 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:93:1e:65:b2:74:6f:b1:3c:49:d0:b6:19:1b:4a:5a:c0:ae: 71:d6:7c:dc:13:1f:56:2b:f8:19:71:40:91:67:0b:ee:f3:e6: 20:91:8e:23:c6:84:fb:ef:59:45:00:b3:3a:8f:da:84:a0:0b: 6c:49:4f:be:d1:cd:a9:98:b9:e6:a8:16:29:99:45:37:77:c1: 3f:05:40:37:60:ad:84:36:f4:41:96:6b:20:d5:ad:18:34:20: 27:9e:4b:ac:6d:53:62:33:d5:76:a9:ea:41:bc:1a:9e:ed:64: fa:cd:65:d7:1e:bb:f5:e2:c9:76:ed:50:a9:ea:06:16:6a:14: af:5b:cc:64:c2:b4:81:d5:14:f6:73:50:1c:35:68:a6:0c:c4: 35:ad:a9:df:6d:5a:94:0a:33:02:66:ca:75:d5:f0:a6:3f:ce: 3f:96:9c:4c:d1:c8:2b:01:f0:48:19:f0:12:d1:b7:4c:05:78: f1:3e:7e:aa:4c:85:86:5c:4c:dc:b8:ef:45:4b:44:72:0f:e5: c9:66:f5:cd:5e:6b:81:45:4e:0c:11:30:fb:16:c8:62:30:57: 6f:9e:d6:fe:57:ca:90:2e:8b:ee:31:17:40:30:f8:7c:92:05: 85:7d:21:8c:52:44:15:fb:4a:8b:0e:f6:e0:36:0e:4e:00:6a: 35:3b:41:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOivGxjleWancdd8gdrqN4+Fl5nYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNTEyMDMwOTE2NTJaFw0yNTEyMDYxMzAxNTJaMDMxMTAvBgNV BAMTKDk4QzhEMUI2RDM4NUJCNzNFQThDMUUwNDUxQ0YxQ0VDMkY3RDlERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ElnLFlDRKry1Kx5qGNeSs2/g ltOGPuxpJCObnk2QIG3BLQWnhfat8dC3bS7JFNy6CFk3guIAcUiAfjFpHwKcRV+M 9yv3JMmyGYZc3pXq37KxKhsMi+ck0jSJMNi88ZH6rDV957kE3zQTlkGNGKFi/3u4 ihuFxvPEk1beXECYU7/SKiL3LC/+7l27IpgydBWDEi/jRqHR64TS9IMNxfuzkLRl MDTrVGYiIwVEr1lEfL3M5jUoFgCcjZX5Ahci4nfcLDgSwbPPPZIBK4G4X0DThs63 FSmVKJJMmI35SR1BO/vvoTOw6lTg1cowkZZ9raOFeWtDx3vyIurVcUELYuRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmMjRttOFu3PqjB4EUc8c7C99nfYwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECTHmWydG+xPEnQthkbSlrArnHWfNwTH1Yr +BlxQJFnC+7z5iCRjiPGhPvvWUUAszqP2oSgC2xJT77RzamYueaoFimZRTd3wT8F QDdgrYQ29EGWayDVrRg0ICeeS6xtU2Iz1Xap6kG8Gp7tZPrNZdceu/XiyXbtUKnq BhZqFK9bzGTCtIHVFPZzUBw1aKYMxDWtqd9tWpQKMwJmynXV8KY/zj+WnEzRyCsB 8EgZ8BLRt0wFePE+fqpMhYZcTNy470VLRHIP5clm9c1ea4FFTgwRMPsWyGIwV2+e 1v5XypAui+4xF0Aw+HySBYV9IYxSRBX7SosO9uA2Dk4AajU7QXc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:57:24 2025 by rpki-client