This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: O0A4fIrXuDvOY0T0PCdNc0F1VqEoStSsyROnKMKcEe0= Subject key identifier: 57:6A:90:B8:02:DE:12:08:DE:67:14:A5:E4:D2:D1:A0:B0:42:A3:ED Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 3C19538952D379CC2847DBA6EB14D3562A7195E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 021E Signing time: Tue 02 Dec 2025 23:10:49 +0000 Manifest this update: Tue 02 Dec 2025 23:05:49 +0000 Manifest next update: Sat 06 Dec 2025 01:00:49 +0000 Files and hashes: 1: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: eSos5qVI0PapnrDGW6ymSQ1wrRjS+B8K72g5qJ7tIyk=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:19:53:89:52:d3:79:cc:28:47:db:a6:eb:14:d3:56:2a:71:95:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Dec 2 23:05:49 2025 GMT Not After : Dec 6 01:00:49 2025 GMT Subject: CN=576A90B802DE1208DE6714A5E4D2D1A0B042A3ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:14:c5:38:62:41:87:99:ae:c9:7b:92:36:d3: 8a:5f:0e:56:6d:43:f6:18:31:3b:00:b3:48:26:b3: 75:0e:d7:f6:b1:dc:e8:31:30:23:41:30:2d:ad:98: 78:dd:bd:22:dc:2d:21:c9:3c:1b:07:c0:24:68:7c: d5:4c:c2:f1:94:d9:03:55:61:fc:9f:6e:5a:b2:16: af:4a:51:c0:85:09:1a:9b:96:00:3d:10:49:e6:3a: 01:d5:ec:50:78:8e:3e:d6:1a:81:dc:69:29:de:7e: 70:90:76:29:98:d5:e8:a3:bb:be:11:68:81:16:9c: 1c:93:80:e5:c4:3c:d1:0b:0c:4a:45:9a:0e:11:6e: fe:80:ef:24:0b:6c:86:78:70:4d:4d:f2:c6:9a:f7: 21:d0:e3:20:df:2e:bd:a0:50:85:34:51:d3:d6:4a: de:78:56:3d:7b:ed:89:b6:fe:78:f1:c4:0d:40:b8: 08:99:f8:f1:bc:4e:82:33:66:e1:3d:6c:87:f5:9c: 90:99:11:d1:e0:6c:12:e6:7d:1f:e6:4c:6c:7f:61: 7c:84:41:61:5e:ed:43:90:57:3f:e6:e4:a6:10:76: b5:50:b9:6f:03:1e:3f:5c:6e:eb:56:41:06:93:03: 2c:c6:66:d6:6d:a8:b4:97:2d:1e:1d:8b:67:70:0d: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6A:90:B8:02:DE:12:08:DE:67:14:A5:E4:D2:D1:A0:B0:42:A3:ED X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:23:ea:e4:bf:24:8d:3d:ee:7f:0c:9c:74:42:7a:47:0b:66: cc:3a:0e:6b:58:1c:94:43:7c:4e:e2:5d:de:5d:b0:02:d1:c7: d2:0a:d2:d9:7c:00:0a:ac:70:40:ea:97:10:1b:01:52:96:71: e4:03:c3:5d:75:34:69:4e:11:2d:74:8f:74:a3:f4:52:3d:4f: 6d:53:78:39:cb:9f:79:f5:43:7a:d4:f6:7c:26:6a:13:84:08: ed:43:f1:b4:23:ca:40:96:82:cc:fe:a7:41:c9:df:6c:28:d4: e6:63:16:d6:78:ce:49:ab:21:ee:10:1a:39:88:96:eb:9a:bf: c8:4b:81:99:00:73:a4:11:74:4d:0b:70:2c:5b:b8:3c:fc:53: a5:2d:31:d9:2e:09:7e:f5:34:db:fa:a2:83:df:27:09:f0:ff: 24:74:46:b0:32:54:fa:23:53:c2:85:eb:79:28:7d:37:40:3e: 05:63:9d:ce:e6:30:3e:b9:06:6b:94:b3:2c:67:f7:f5:fb:9b: 51:ce:85:7f:c1:c6:74:a1:1f:57:0b:96:e2:78:3b:c8:01:5a: 01:a5:2d:7e:98:f6:be:4d:da:93:2c:68:e5:54:76:0d:e5:a0: 36:bc:63:68:a0:9f:36:18:c0:a5:26:99:14:7c:99:ce:1c:1e: 1f:aa:98:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBlTiVLTecwoR9um6xTTVipxleMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNTEyMDIyMzA1NDlaFw0yNTEyMDYwMTAwNDlaMDMxMTAvBgNV BAMTKDU3NkE5MEI4MDJERTEyMDhERTY3MTRBNUU0RDJEMUEwQjA0MkEzRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFFMU4YkGHma7Je5I204pfDlZt Q/YYMTsAs0gms3UO1/ax3OgxMCNBMC2tmHjdvSLcLSHJPBsHwCRofNVMwvGU2QNV YfyfblqyFq9KUcCFCRqblgA9EEnmOgHV7FB4jj7WGoHcaSnefnCQdimY1eiju74R aIEWnByTgOXEPNELDEpFmg4Rbv6A7yQLbIZ4cE1N8saa9yHQ4yDfLr2gUIU0UdPW St54Vj177Ym2/njxxA1AuAiZ+PG8ToIzZuE9bIf1nJCZEdHgbBLmfR/mTGx/YXyE QWFe7UOQVz/m5KYQdrVQuW8DHj9cbutWQQaTAyzGZtZtqLSXLR4di2dwDaEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV2qQuALeEgjeZxSl5NLRoLBCo+0wHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAj6uS/JI097n8MnHRCekcLZsw6DmtYHJRD fE7iXd5dsALRx9IK0tl8AAqscEDqlxAbAVKWceQDw111NGlOES10j3Sj9FI9T21T eDnLn3n1Q3rU9nwmahOECO1D8bQjykCWgsz+p0HJ32wo1OZjFtZ4zkmrIe4QGjmI luuav8hLgZkAc6QRdE0LcCxbuDz8U6UtMdkuCX71NNv6ooPfJwnw/yR0RrAyVPoj U8KF63kofTdAPgVjnc7mMD65BmuUsyxn9/X7m1HOhX/BxnShH1cLluJ4O8gBWgGl LX6Y9r5N2pMsaOVUdg3loDa8Y2ignzYYwKUmmRR8mc4cHh+qmOg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:03 2025 by rpki-client