This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft File: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft (raw, json) Hash identifier: NiPAWD115BqKRXjjwUoJ4YfbjCu94UfZVrAD7qINEnQ= Subject key identifier: 63:CF:78:E4:74:5F:9C:D5:52:12:EB:AA:A0:8B:5B:29:72:D2:1B:EF Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 Certificate issuer: /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Certificate serial: 3CBE73D73EBD7E905960572690A482A6272A35D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft Manifest number: 021A Signing time: Tue 02 Dec 2025 06:21:26 +0000 Manifest this update: Tue 02 Dec 2025 06:16:26 +0000 Manifest next update: Fri 05 Dec 2025 06:55:26 +0000 Files and hashes: 1: 3130332e3139332e3136362e302f32332d3233203d3e20313530313835.roa (hash: 6gMRYCDTA91uCrSpOJHQwzXcDUzZZQ/fPopmQLU54uQ=) 2: 210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl (hash: bbRRIwrEgtQCDs+MMUQEnMxG2icPwGAwQghbAkBBRE8=) 3: 3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (hash: GK6TjIFHP3OKYpdF9mQ2NlZ0xI3zyr1c1AWcP5mkKcw=) 4: 3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (hash: jkr10nu1KheD3rFITjZKu8+8qzjxbIrM8OjPSducB+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:be:73:d7:3e:bd:7e:90:59:60:57:26:90:a4:82:a6:27:2a:35:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7 Validity Not Before: Dec 2 06:16:26 2025 GMT Not After : Dec 5 06:55:26 2025 GMT Subject: CN=63CF78E4745F9CD55212EBAAA08B5B2972D21BEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:e9:7f:54:5b:8f:b6:e0:b1:93:70:cd:e1: d0:0c:30:3c:15:df:57:66:e5:35:6f:5b:50:aa:3b: d5:53:65:01:96:a4:26:1d:c1:06:67:7f:e7:31:4f: 8a:f1:44:c3:f2:2a:37:15:93:25:18:de:d5:16:93: 9e:8e:4e:3d:53:a3:73:aa:7f:41:d5:b8:6c:35:1e: 42:77:e7:9f:aa:49:54:b4:f5:71:f9:2f:f1:69:fc: bc:b7:b7:33:64:00:1d:26:7b:20:04:0a:74:43:07: 04:b6:ee:84:63:f8:2b:12:f8:00:98:a0:cc:d3:55: 43:0b:81:97:63:d9:0c:de:49:b4:10:6d:10:0a:20: 93:5f:d3:72:9c:59:24:01:e3:50:52:bd:e7:ce:2c: 78:32:c4:ea:05:d6:f4:4b:2e:a2:d3:bb:80:25:e7: c5:32:4d:b4:43:d9:98:45:51:ac:9f:09:d4:f9:ed: 30:00:40:b0:cd:62:2c:9e:99:26:a4:1f:d0:84:a6: fe:9c:d6:54:d3:b0:e0:0e:89:b8:a8:a0:61:9d:67: 04:1b:8f:bf:77:67:14:88:96:d4:2c:81:a3:7f:66: c1:8c:58:5d:86:14:6a:d9:2d:59:ba:6c:5e:44:d1: 2c:20:8d:a6:8a:05:ec:96:80:cd:35:5a:26:9a:e4: 00:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CF:78:E4:74:5F:9C:D5:52:12:EB:AA:A0:8B:5B:29:72:D2:1B:EF X509v3 Authority Key Identifier: keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:07:50:34:d2:07:cc:3a:77:9c:62:34:d8:38:4b:df:76:56: bd:2d:ed:19:b5:ca:0c:46:10:d8:a4:ad:a9:1c:fb:5d:c6:81: bf:78:71:f7:10:dc:9f:4e:21:64:76:f2:fa:bd:6e:4a:27:7e: 15:fa:1b:9d:67:c3:47:81:d2:07:b4:6e:7f:67:0d:c0:4b:05: 49:e0:2e:d6:41:ed:41:ab:19:f4:15:3d:23:08:a7:4e:f7:19: 1e:82:da:05:95:ff:61:4f:95:d5:ec:9f:d8:9f:c7:54:8a:22: 19:7b:2b:bb:dc:07:3d:f1:e8:eb:2d:bb:a7:af:5f:88:36:76: 88:a4:48:36:b4:91:a9:1f:8f:4e:70:f6:c2:c9:0b:fc:bd:cf: 95:46:c2:da:d5:35:96:e8:74:cb:16:3f:c5:62:f8:01:65:04: f3:6a:e5:99:04:29:66:ee:d9:8c:d0:1b:bf:46:a8:d8:ed:4a: 85:71:c2:05:c7:5d:de:84:f0:35:63:9a:a8:0c:ab:55:f2:49: 62:26:f4:51:3c:58:a8:53:c5:0f:5c:96:ca:ea:eb:cc:61:ba: 8a:c9:52:a0:e2:fc:6e:71:df:e6:e6:92:17:82:ab:a7:21:76: 9f:32:08:0b:42:53:d1:db:b8:c2:39:10:c0:96:2f:52:01:72: 83:08:31:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPL5z1z69fpBZYFcmkKSCpicqNdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJE QzlCODFBNzAeFw0yNTEyMDIwNjE2MjZaFw0yNTEyMDUwNjU1MjZaMDMxMTAvBgNV BAMTKDYzQ0Y3OEU0NzQ1RjlDRDU1MjEyRUJBQUEwOEI1QjI5NzJEMjFCRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+VOl/VFuPtuCxk3DN4dAMMDwV 31dm5TVvW1CqO9VTZQGWpCYdwQZnf+cxT4rxRMPyKjcVkyUY3tUWk56OTj1To3Oq f0HVuGw1HkJ355+qSVS09XH5L/Fp/Ly3tzNkAB0meyAECnRDBwS27oRj+CsS+ACY oMzTVUMLgZdj2QzeSbQQbRAKIJNf03KcWSQB41BSvefOLHgyxOoF1vRLLqLTu4Al 58UyTbRD2ZhFUayfCdT57TAAQLDNYiyemSakH9CEpv6c1lTTsOAOibiooGGdZwQb j793ZxSIltQsgaN/ZsGMWF2GFGrZLVm6bF5E0SwgjaaKBeyWgM01Wiaa5AAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8945HRfnNVSEuuqoItbKXLSG+8wHwYDVR0j BBgwFoAUIQvnvVEvEi/WP+kFen8VItybgacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzAzNjk3NC04MTMxLTQ1YWYtOTRjZS1mNDliNDgxMWMxNzMvMC8yMTBCRTdCRDUx MkYxMjJGRDYzRkU5MDU3QTdGMTUyMkRDOUI4MUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1MjJEQzlC ODFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcwMzY5NzQtODEzMS00NWFmLTk0 Y2UtZjQ5YjQ4MTFjMTczLzAvMjEwQkU3QkQ1MTJGMTIyRkQ2M0ZFOTA1N0E3RjE1 MjJEQzlCODFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQHUDTSB8w6d5xiNNg4S992Vr0t7Rm1ygxG ENikrakc+13Ggb94cfcQ3J9OIWR28vq9bkonfhX6G51nw0eB0ge0bn9nDcBLBUng LtZB7UGrGfQVPSMIp073GR6C2gWV/2FPldXsn9ifx1SKIhl7K7vcBz3x6Ostu6ev X4g2doikSDa0kakfj05w9sLJC/y9z5VGwtrVNZbodMsWP8Vi+AFlBPNq5ZkEKWbu 2YzQG79GqNjtSoVxwgXHXd6E8DVjmqgMq1XySWIm9FE8WKhTxQ9clsrq68xhuorJ UqDi/G5x3+bmkheCq6chdp8yCAtCU9HbuMI5EMCWL1IBcoMIMbQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:36 2025 by rpki-client