This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft File: B956E5764D9917A7389654D67836D02779ED9E22.mft (raw, json) Hash identifier: hiizmmiufj+cQ19gNR+fHI8syxP8aHvyveFeJikFMO8= Subject key identifier: C1:5B:A9:40:EF:9C:AC:6E:CE:85:FF:16:78:D8:BA:14:B9:27:0F:98 Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 Certificate issuer: /CN=B956E5764D9917A7389654D67836D02779ED9E22 Certificate serial: 556AF2748427B2E01AD78F6F34C81B1EB7A3AFB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft Manifest number: 0218 Signing time: Wed 17 Dec 2025 13:31:14 +0000 Manifest this update: Wed 17 Dec 2025 13:26:14 +0000 Manifest next update: Sat 20 Dec 2025 15:26:14 +0000 Files and hashes: 1: B956E5764D9917A7389654D67836D02779ED9E22.crl (hash: 0T4CBJAXAcAHTrEG9NSOQY5pSlgNYfN/d/492v8IZZs=) 2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: xRSXhth5RPLQDUpDjvFyriqelwPeLnjETcyxKSf1xt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6a:f2:74:84:27:b2:e0:1a:d7:8f:6f:34:c8:1b:1e:b7:a3:af:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22 Validity Not Before: Dec 17 13:26:14 2025 GMT Not After : Dec 20 15:26:14 2025 GMT Subject: CN=C15BA940EF9CAC6ECE85FF1678D8BA14B9270F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:00:9a:32:95:1d:e5:53:2f:ef:05:c6:b9:fc: 6b:a4:7b:25:f4:1d:53:26:8a:f1:86:d8:ee:7e:0d: 27:a9:2d:29:30:2a:cb:a7:fd:49:98:08:31:dd:3a: c8:e6:b2:23:12:1e:4e:23:69:6e:75:a3:42:b9:6d: 77:9b:8f:13:6d:0f:0c:e3:bd:f2:e4:bc:85:87:4b: cd:56:74:59:2d:bf:ee:ae:65:61:82:d5:43:a1:22: ac:94:86:82:4e:4b:97:40:78:72:14:11:8f:75:82: 61:45:24:5d:99:db:4c:f4:53:08:a9:e5:0f:6d:66: 25:a7:0a:d3:c3:9b:eb:63:80:07:96:11:4d:64:c1: 51:9c:8a:8d:0c:48:c9:45:39:8f:31:bc:f4:30:b1: 0b:8d:6e:55:78:27:dd:5b:a6:45:c2:1f:0c:f2:2c: eb:d6:3b:c7:55:79:0d:75:d7:7e:14:0a:49:f1:ee: 1d:8d:6d:82:9e:49:a7:ad:c1:3c:a9:ab:17:70:ce: dc:05:1a:56:9c:25:f0:3c:d1:f0:d0:ca:81:b3:ca: 4e:d0:13:f1:97:31:9d:40:44:a5:04:01:70:50:49: 21:4c:1e:27:81:04:2c:28:ce:8f:d2:12:a3:4a:a0: 7b:2e:f8:99:67:e0:9d:dc:12:e6:15:6c:96:8b:fe: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5B:A9:40:EF:9C:AC:6E:CE:85:FF:16:78:D8:BA:14:B9:27:0F:98 X509v3 Authority Key Identifier: keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:2b:91:b0:40:2f:68:8c:81:6b:00:4a:6d:52:4e:7b:c8:5e: c7:2a:12:28:9f:86:66:04:54:25:9c:c9:c7:66:15:86:e9:37: 3a:f6:9f:52:95:54:60:f2:af:a8:b5:50:52:bb:16:9d:72:85: e8:1e:bd:ce:93:5e:ba:cd:20:09:a0:8b:1f:6c:e3:b7:26:58: 48:ed:1e:3a:68:ec:ea:df:40:e9:34:59:1e:77:1e:74:8e:27: 73:46:f7:65:e3:7d:f1:84:a4:28:0c:4c:35:fa:50:52:c2:ed: f6:c9:19:ab:02:93:33:c3:38:22:74:5f:56:8b:8c:9a:72:19: 0d:00:94:fa:5a:b9:80:c4:2b:92:50:60:b9:a9:e5:bc:38:f0: b4:50:24:aa:05:05:c7:d6:d3:a3:58:ef:f6:94:ba:a1:bc:e6: 04:7e:bc:b0:a8:19:28:8f:6e:f4:40:14:a7:e6:db:07:f3:f3: c8:73:6f:39:67:2e:c3:37:7a:4e:5a:a8:23:25:07:b3:38:9a: aa:f7:53:82:0d:37:67:e3:4d:5f:c6:62:2f:2b:e1:24:9d:bc: 27:37:45:13:fe:b0:3c:80:70:28:5a:86:dc:98:36:2a:c5:99: 50:2c:59:1b:ba:b5:b8:27:51:5b:27:1f:41:50:76:b8:b3:ab: f9:46:89:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWrydIQnsuAa149vNMgbHrejr7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3 OUVEOUUyMjAeFw0yNTEyMTcxMzI2MTRaFw0yNTEyMjAxNTI2MTRaMDMxMTAvBgNV BAMTKEMxNUJBOTQwRUY5Q0FDNkVDRTg1RkYxNjc4RDhCQTE0QjkyNzBGOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzAJoylR3lUy/vBca5/GukeyX0 HVMmivGG2O5+DSepLSkwKsun/UmYCDHdOsjmsiMSHk4jaW51o0K5bXebjxNtDwzj vfLkvIWHS81WdFktv+6uZWGC1UOhIqyUhoJOS5dAeHIUEY91gmFFJF2Z20z0Uwip 5Q9tZiWnCtPDm+tjgAeWEU1kwVGcio0MSMlFOY8xvPQwsQuNblV4J91bpkXCHwzy LOvWO8dVeQ11134UCknx7h2NbYKeSaetwTypqxdwztwFGlacJfA80fDQyoGzyk7Q E/GXMZ1ARKUEAXBQSSFMHieBBCwozo/SEqNKoHsu+Jln4J3cEuYVbJaL/geVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwVupQO+crG7Ohf8WeNi6FLknD5gwHwYDVR0j BBgwFoAUuVbldk2ZF6c4llTWeDbQJ3ntniIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODExN2NhOC1iNGU1LTQ2N2EtODhhOC1hNGI2M2U0MGMzZWQvMC9COTU2RTU3NjRE OTkxN0E3Mzg5NjU0RDY3ODM2RDAyNzc5RUQ5RTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQwMjc3OUVE OUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjgxMTdjYTgtYjRlNS00NjdhLTg4 YTgtYTRiNjNlNDBjM2VkLzAvQjk1NkU1NzY0RDk5MTdBNzM4OTY1NEQ2NzgzNkQw Mjc3OUVEOUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcrkbBAL2iMgWsASm1STnvIXscqEiifhmYE VCWcycdmFYbpNzr2n1KVVGDyr6i1UFK7Fp1yhegevc6TXrrNIAmgix9s47cmWEjt Hjpo7OrfQOk0WR53HnSOJ3NG92XjffGEpCgMTDX6UFLC7fbJGasCkzPDOCJ0X1aL jJpyGQ0AlPpauYDEK5JQYLmp5bw48LRQJKoFBcfW06NY7/aUuqG85gR+vLCoGSiP bvRAFKfm2wfz88hzbzlnLsM3ek5aqCMlB7M4mqr3U4INN2fjTV/GYi8r4SSdvCc3 RRP+sDyAcChahtyYNirFmVAsWRu6tbgnUVsnH0FQdrizq/lGibA= -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:22 2025 by rpki-client