This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: Gk2kFzm15g8J88zW74BpeaSLcIYxyVs4k1mDHt/b5g0= Subject key identifier: 39:3C:2B:26:7A:E4:06:0B:18:DA:7D:AC:09:9D:77:AD:25:EB:A1:84 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 78E69D003A833A965BF66D6DF8092DA16AA16846 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 021B Signing time: Mon 15 Dec 2025 20:00:43 +0000 Manifest this update: Mon 15 Dec 2025 19:55:43 +0000 Manifest next update: Fri 19 Dec 2025 07:48:43 +0000 Files and hashes: 1: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 2: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 3: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 4: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) 5: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 6: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 7: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: 8ER6q02OeMwkBSf8rFRnn+lAPY9PkpjnTvcykc/AnuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 06:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e6:9d:00:3a:83:3a:96:5b:f6:6d:6d:f8:09:2d:a1:6a:a1:68:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Dec 15 19:55:43 2025 GMT Not After : Dec 19 07:48:43 2025 GMT Subject: CN=393C2B267AE4060B18DA7DAC099D77AD25EBA184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:1b:c7:f0:41:a3:e5:ed:3a:bb:79:7c:f0: 55:24:6e:ab:8d:e5:08:3b:98:f1:18:a8:d9:4f:be: 1e:a7:97:ca:30:c6:e6:c5:7f:6a:1e:26:21:74:c0: 6b:ce:4e:76:af:5c:9c:fd:b8:a8:b7:ec:51:98:2c: 24:bc:74:fe:05:02:e7:86:94:56:06:12:37:c9:94: e5:15:3a:95:87:48:99:cf:af:3e:76:95:09:ce:5c: f1:4e:39:39:b3:36:e1:fd:9b:ee:c2:c4:32:9e:87: d7:1d:11:3f:ab:4c:d4:93:6b:01:00:a2:c8:30:fd: ca:cd:00:26:8f:59:87:63:6c:28:f0:49:65:4f:fb: 8d:60:6d:31:c4:c9:b8:fa:08:83:7d:71:ca:e2:8f: 79:74:2c:fc:5c:8f:d0:81:58:bc:13:b7:7b:4c:99: a7:89:4a:53:f1:44:1b:ac:91:3a:dd:7b:be:7e:01: 6f:1a:4b:e7:13:1c:cc:9f:70:6b:45:79:42:14:59: 95:2d:b6:1d:04:47:e9:1f:45:44:29:70:4b:5f:3d: c8:3b:e0:a2:b9:60:77:a8:e4:b9:b3:86:35:14:84: 61:ff:6a:4b:80:45:c8:29:74:62:b3:b7:87:72:c9: a0:52:37:53:d7:88:ef:a9:6f:27:ba:ed:e6:f9:fc: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3C:2B:26:7A:E4:06:0B:18:DA:7D:AC:09:9D:77:AD:25:EB:A1:84 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:bb:9a:19:1f:b4:2c:e1:a5:8a:76:6c:7e:05:ec:4b:c1:17: 4f:30:12:38:13:a7:f9:97:f9:ec:79:19:83:10:c5:b3:b6:33: 3b:4c:c2:5a:64:54:55:a7:ff:9a:b2:75:70:68:6d:b2:aa:90: 10:9f:a0:d0:9f:f4:8c:2f:8f:34:61:41:4b:7d:6e:a7:a1:ad: 69:fb:8d:80:7a:31:07:49:4a:a7:d6:b5:85:ae:12:09:66:3e: 22:79:ec:5e:9e:b3:cc:55:d9:4c:cd:32:fa:85:6e:1a:ed:2e: fd:1c:a0:fb:68:f9:4b:73:cd:75:86:cb:c1:08:b8:03:ed:87: c0:82:11:a8:d8:50:c7:53:34:93:26:40:e0:65:ee:fe:c4:13: 41:cc:ce:0f:35:73:1e:01:c4:70:6f:68:49:e3:bd:72:b2:c0: 47:6b:95:98:c4:64:aa:4b:c0:96:c3:e1:c7:33:ff:69:ac:0c: 45:53:f6:b5:d0:49:73:1f:d6:d1:de:49:c0:de:17:34:f5:89: a5:7e:d4:85:24:86:0c:dd:15:1f:50:4b:fb:00:73:c9:e7:cd: 83:56:ea:88:29:13:c5:84:ba:c3:65:35:d9:e5:9b:f4:29:12: 70:78:ef:53:a4:0a:b7:91:19:25:ad:c1:6f:ec:c0:50:01:78: e0:43:46:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOadADqDOpZb9m1t+AktoWqhaEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTEyMTUxOTU1NDNaFw0yNTEyMTkwNzQ4NDNaMDMxMTAvBgNV BAMTKDM5M0MyQjI2N0FFNDA2MEIxOERBN0RBQzA5OUQ3N0FEMjVFQkExODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANhvH8EGj5e06u3l88FUkbquN 5Qg7mPEYqNlPvh6nl8owxubFf2oeJiF0wGvOTnavXJz9uKi37FGYLCS8dP4FAueG lFYGEjfJlOUVOpWHSJnPrz52lQnOXPFOOTmzNuH9m+7CxDKeh9cdET+rTNSTawEA osgw/crNACaPWYdjbCjwSWVP+41gbTHEybj6CIN9ccrij3l0LPxcj9CBWLwTt3tM maeJSlPxRBuskTrde75+AW8aS+cTHMyfcGtFeUIUWZUtth0ER+kfRUQpcEtfPcg7 4KK5YHeo5LmzhjUUhGH/akuARcgpdGKzt4dyyaBSN1PXiO+pbye67eb5/NGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOTwrJnrkBgsY2n2sCZ13rSXroYQwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGG7mhkftCzhpYp2bH4F7EvBF08wEjgTp/mX +ex5GYMQxbO2MztMwlpkVFWn/5qydXBobbKqkBCfoNCf9IwvjzRhQUt9bqehrWn7 jYB6MQdJSqfWtYWuEglmPiJ57F6es8xV2UzNMvqFbhrtLv0coPto+UtzzXWGy8EI uAPth8CCEajYUMdTNJMmQOBl7v7EE0HMzg81cx4BxHBvaEnjvXKywEdrlZjEZKpL wJbD4ccz/2msDEVT9rXQSXMf1tHeScDeFzT1iaV+1IUkhgzdFR9QS/sAc8nnzYNW 6ogpE8WEusNlNdnlm/QpEnB471OkCreRGSWtwW/swFABeOBDRlE= -----END CERTIFICATE-----Generated at Tue Dec 16 07:26:27 2025 by rpki-client