This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft File: 21AC220B77A77D0516BC73B4C29C8363DD00911B.mft (raw, json) Hash identifier: dkKM3peaq8RYEZ9/ZgH65QZSnKQUeWUP1fHO79TzzxI= Subject key identifier: 98:1B:18:1A:EE:E0:7A:C8:E0:FD:29:92:3F:6B:1D:78:04:0E:BD:B0 Authority key identifier: 21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B Certificate issuer: /CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Certificate serial: 5250EB81F10BB233E3F547FF7F357010A21DB60B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft Manifest number: 04E8 Signing time: Mon 01 Dec 2025 17:41:03 +0000 Manifest this update: Mon 01 Dec 2025 17:36:03 +0000 Manifest next update: Thu 04 Dec 2025 19:39:03 +0000 Files and hashes: 1: 21AC220B77A77D0516BC73B4C29C8363DD00911B.crl (hash: oU0b/ERCXnTmizB6XD6KYdEdQ8+rNT++y9rHJUsPOag=) 2: 3130332e39342e3136382e302f32322d3234203d3e20313336313139.roa (hash: IywsBHZCpESzPvpzBYMa3aM5xr+uzQrgr/hs4zyGEfk=) 3: 323430313a343863303a3a2f33322d3438203d3e20313336313139.roa (hash: J7Eqzk0rLCECjOwGjEdw1vCeBneDceSExg8FEmGDsVA=) 4: 3230322e31302e35382e302f32342d3234203d3e20313336313139.roa (hash: FqumLAE5ExkmaatbD11ff744L2iTMEhUHWhZUQWOtLU=) 5: 3230322e31302e35392e302f32342d3234203d3e20313336313139.roa (hash: p7znIjGrzIeqiJgSyw1Go9JzIhUPDTiZx2kzEBcMX+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:50:eb:81:f1:0b:b2:33:e3:f5:47:ff:7f:35:70:10:a2:1d:b6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AC220B77A77D0516BC73B4C29C8363DD00911B Validity Not Before: Dec 1 17:36:03 2025 GMT Not After : Dec 4 19:39:03 2025 GMT Subject: CN=981B181AEEE07AC8E0FD29923F6B1D78040EBDB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0f:ab:5e:6c:1e:35:ce:a0:15:4f:4f:b9:29: 00:b5:ae:84:9c:1c:26:d8:38:60:6f:32:d5:37:e8: 91:61:b5:3e:6f:4b:5f:a8:97:e3:39:4a:5c:e1:ac: bb:5a:67:90:c3:46:89:eb:af:92:ca:0d:8d:48:5d: 68:7b:65:33:5b:f3:14:de:f0:d8:47:2e:62:dd:b4: f8:20:67:b2:50:f7:f7:86:0c:ee:a0:07:ab:e3:90: b6:34:93:7c:c0:29:cb:ed:dd:b3:2c:18:e3:96:ab: 51:de:e4:b0:0a:9e:51:15:91:58:e6:5f:b0:34:a6: 84:f3:15:66:f6:72:4d:eb:a5:00:8d:c2:c6:93:13: 27:5b:be:5f:a7:c5:42:38:72:12:18:a9:83:d3:7b: 5a:4a:12:ca:71:ec:d4:bd:55:cf:18:9c:71:59:62: dd:86:42:89:a7:d1:a4:ed:db:50:95:4c:db:68:2d: 1c:60:6c:7b:07:3f:95:d8:a2:fe:2b:f0:8b:a6:43: cc:aa:c0:87:85:22:9a:c8:e4:77:52:44:48:d5:89: 8b:7b:f9:84:7e:9e:16:33:31:81:de:d5:92:fc:f1: b9:f6:46:83:53:20:ce:51:e5:92:e3:95:54:5c:5c: 0f:cb:23:f2:cf:06:19:2b:93:3b:77:7c:6f:d5:c8: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:1B:18:1A:EE:E0:7A:C8:E0:FD:29:92:3F:6B:1D:78:04:0E:BD:B0 X509v3 Authority Key Identifier: keyid:21:AC:22:0B:77:A7:7D:05:16:BC:73:B4:C2:9C:83:63:DD:00:91:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AC220B77A77D0516BC73B4C29C8363DD00911B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdabc0ba-9222-4c45-8342-eb8643c4967d/0/21AC220B77A77D0516BC73B4C29C8363DD00911B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5d:53:d8:bf:a6:7d:91:e5:18:c1:19:4e:0d:2a:6e:5f:a9: f4:8d:6c:26:21:3c:6c:3b:1f:60:e0:46:6a:be:d2:66:e8:61: 95:50:44:73:10:e5:89:6e:b5:b1:5e:f3:0a:5c:d0:52:51:5d: f3:c6:02:c3:37:c5:1d:87:b1:36:90:9f:26:f8:86:eb:ff:a3: 93:13:80:4c:9b:b3:c4:4c:2b:dd:4a:7f:d9:22:25:83:10:ea: 76:d7:99:c7:e3:ac:c4:0a:25:8d:05:29:b2:a6:ab:19:44:18: ad:2b:be:7c:b3:fc:f0:2a:2c:f7:be:c3:1b:5d:98:87:7f:86: 20:0f:f6:d5:45:97:48:1e:0b:3b:82:5d:65:d2:b0:14:e0:64: 9f:91:1e:93:bc:c6:fa:18:af:d1:54:06:0f:6f:42:9b:27:85: e7:78:c9:61:23:ea:87:2d:2e:67:0c:a2:10:ff:20:08:67:32: fa:e6:55:87:76:c4:b6:43:d2:b3:4f:eb:36:bd:97:6b:22:77: 2c:ec:f7:0e:72:06:b7:36:8e:19:7d:d9:78:f6:68:23:0a:f4: fb:9b:6b:b4:67:84:44:32:62:c9:bc:e2:2c:0e:bb:74:64:ea: a9:04:47:5e:47:84:f2:4e:0b:e3:c4:eb:ba:36:03:a9:2d:7d: 6d:fc:5b:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlDrgfELsjPj9Uf/fzVwEKIdtgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNE RDAwOTExQjAeFw0yNTEyMDExNzM2MDNaFw0yNTEyMDQxOTM5MDNaMDMxMTAvBgNV BAMTKDk4MUIxODFBRUVFMDdBQzhFMEZEMjk5MjNGNkIxRDc4MDQwRUJEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfD6tebB41zqAVT0+5KQC1roSc HCbYOGBvMtU36JFhtT5vS1+ol+M5SlzhrLtaZ5DDRonrr5LKDY1IXWh7ZTNb8xTe 8NhHLmLdtPggZ7JQ9/eGDO6gB6vjkLY0k3zAKcvt3bMsGOOWq1He5LAKnlEVkVjm X7A0poTzFWb2ck3rpQCNwsaTEydbvl+nxUI4chIYqYPTe1pKEspx7NS9Vc8YnHFZ Yt2GQomn0aTt21CVTNtoLRxgbHsHP5XYov4r8IumQ8yqwIeFIprI5HdSREjViYt7 +YR+nhYzMYHe1ZL88bn2RoNTIM5R5ZLjlVRcXA/LI/LPBhkrkzt3fG/VyFtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmBsYGu7gesjg/SmSP2sdeAQOvbAwHwYDVR0j BBgwFoAUIawiC3enfQUWvHO0wpyDY90AkRswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGFiYzBiYS05MjIyLTRjNDUtODM0Mi1lYjg2NDNjNDk2N2QvMC8yMUFDMjIwQjc3 QTc3RDA1MTZCQzczQjRDMjlDODM2M0REMDA5MTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5QzgzNjNERDAw OTExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRhYmMwYmEtOTIyMi00YzQ1LTgz NDItZWI4NjQzYzQ5NjdkLzAvMjFBQzIyMEI3N0E3N0QwNTE2QkM3M0I0QzI5Qzgz NjNERDAwOTExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNdU9i/pn2R5RjBGU4NKm5fqfSNbCYhPGw7 H2DgRmq+0mboYZVQRHMQ5YlutbFe8wpc0FJRXfPGAsM3xR2HsTaQnyb4huv/o5MT gEybs8RMK91Kf9kiJYMQ6nbXmcfjrMQKJY0FKbKmqxlEGK0rvnyz/PAqLPe+wxtd mId/hiAP9tVFl0geCzuCXWXSsBTgZJ+RHpO8xvoYr9FUBg9vQpsnhed4yWEj6oct LmcMohD/IAhnMvrmVYd2xLZD0rNP6za9l2sidyzs9w5yBrc2jhl92Xj2aCMK9Pub a7RnhEQyYsm84iwOu3Rk6qkER15HhPJOC+PE67o2A6ktfW38W3s= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:27 2025 by rpki-client