This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft File: 20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json) Hash identifier: 3sdIjDu/2o2rFGF/YO4OA7qSNnmu6N1eJhic0hIjVFE= Subject key identifier: 35:78:2B:FD:98:51:13:C6:34:E8:CF:4A:19:0B:44:0C:66:EF:75:CA Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 6C17EEBA0876E5B50089A4091FEC8E4B2392C143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft Manifest number: 0237 Signing time: Mon 01 Dec 2025 17:12:03 +0000 Manifest this update: Mon 01 Dec 2025 17:07:03 +0000 Manifest next update: Fri 05 Dec 2025 00:29:03 +0000 Files and hashes: 1: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: iXvstyQNlBzb6umRZYqJFMpbc+K1ErqYxxCu6CZQN2M=) 2: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: vEIWSBdkXeXYMMZ1JkgEqdYq9VUkjPtTYb4B2b9jIwo=) 3: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: iDioe3jjxT7o8WJUfZMX4dcAtJo9aoi+lZoEhp66IbU=) 4: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: gtfNgouP3xqwRZMc2rLq5YYKkcJUcC8NmXsS5NHSV5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:17:ee:ba:08:76:e5:b5:00:89:a4:09:1f:ec:8e:4b:23:92:c1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Dec 1 17:07:03 2025 GMT Not After : Dec 5 00:29:03 2025 GMT Subject: CN=35782BFD985113C634E8CF4A190B440C66EF75CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:b9:6d:f4:02:5f:e5:72:77:ac:be:b8:66: 34:59:6b:66:f6:e9:ba:a3:7e:0b:63:70:c9:e4:48: 1f:d4:46:2b:2d:ca:ee:89:7d:8a:b4:dc:3b:c9:c6: 9c:9d:73:81:5f:1f:83:d0:9e:2f:4f:08:b1:71:8c: 6b:64:d6:e5:fd:0a:7a:07:f8:b5:4c:51:93:f9:58: 1b:91:6f:bb:1f:71:a6:59:6e:58:79:a5:21:70:24: e7:a9:a1:53:dc:22:4f:f6:e3:6d:8f:14:dc:c7:c5: 5f:9a:15:7c:73:12:27:86:2e:32:7d:d4:05:ac:15: 2e:d8:03:41:df:ae:49:17:f0:cd:16:d7:0d:31:31: 51:f0:e1:bf:aa:f8:83:72:ee:07:ff:c8:57:a2:db: 6a:14:d5:04:43:f5:e4:28:c6:c0:e1:d5:03:df:7e: 4a:64:a0:e3:f2:76:cd:a0:75:d3:a8:f9:4c:be:a0: 1d:34:1b:49:69:a2:e1:73:70:51:d7:85:fd:9d:91: 80:d8:3c:9d:43:e2:c5:6b:f8:dd:4b:4e:e3:52:c4: b9:78:c5:f6:02:f2:16:19:b9:0b:ea:df:8d:e9:10: 90:18:5e:f1:57:fc:eb:2a:24:c0:f4:56:48:18:ff: 8a:92:4c:34:76:55:2b:b9:67:f3:54:c6:bd:ab:ec: c2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:78:2B:FD:98:51:13:C6:34:E8:CF:4A:19:0B:44:0C:66:EF:75:CA X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:59:c1:9a:0e:ef:f9:39:9b:fe:a8:02:b4:7f:95:26:f7:ea: c1:83:55:ab:27:84:e0:13:c6:b0:b1:6c:b2:1a:92:47:25:43: 65:1e:f1:18:52:ed:7e:23:f5:fe:26:41:a2:4c:98:98:b0:91: 81:c2:8b:9d:95:5a:cd:6a:a7:f9:4c:f2:50:35:a2:70:6e:f8: fb:09:fb:da:4f:58:c1:21:a4:71:a6:a0:92:59:b3:64:90:79: 9b:95:30:3f:c9:3c:3c:e4:d8:14:a5:52:cd:a1:aa:f5:37:ac: 7d:54:7d:97:f9:14:aa:fb:d0:d0:ed:9c:a8:2b:18:ba:a5:ca: 58:c2:ec:02:95:1e:2b:bb:e0:9a:04:71:33:45:d9:6f:7b:a7: 74:f4:9b:93:d3:12:f9:e0:12:40:82:da:ba:b9:51:a9:1a:a7: 3e:bd:28:e7:1b:ff:c2:0a:b7:ea:70:44:56:40:b3:f6:a3:ad: d5:a3:d2:ef:35:1e:a4:84:1a:64:b7:86:36:f8:8e:6a:3a:05: 08:eb:6a:dd:15:4a:1f:a0:fa:c5:5e:a0:2e:31:f1:8a:42:9f: 76:09:20:d9:aa:ab:ad:4e:92:f8:e5:1a:04:4e:d8:67:2e:b1: 76:3b:f6:1c:b4:18:f0:d4:05:3d:7d:82:ef:14:c0:76:db:e5: 65:1d:a4:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbBfuugh25bUAiaQJH+yOSyOSwUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNTEyMDExNzA3MDNaFw0yNTEyMDUwMDI5MDNaMDMxMTAvBgNV BAMTKDM1NzgyQkZEOTg1MTEzQzYzNEU4Q0Y0QTE5MEI0NDBDNjZFRjc1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC527lt9AJf5XJ3rL64ZjRZa2b2 6bqjfgtjcMnkSB/URistyu6JfYq03DvJxpydc4FfH4PQni9PCLFxjGtk1uX9CnoH +LVMUZP5WBuRb7sfcaZZblh5pSFwJOepoVPcIk/2422PFNzHxV+aFXxzEieGLjJ9 1AWsFS7YA0HfrkkX8M0W1w0xMVHw4b+q+INy7gf/yFei22oU1QRD9eQoxsDh1QPf fkpkoOPyds2gddOo+Uy+oB00G0lpouFzcFHXhf2dkYDYPJ1D4sVr+N1LTuNSxLl4 xfYC8hYZuQvq343pEJAYXvFX/OsqJMD0VkgY/4qSTDR2VSu5Z/NUxr2r7MKZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXgr/ZhRE8Y06M9KGQtEDGbvdcowHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5 MENCOTAzQjg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5ZwZoO7/k5m/6oArR/lSb36sGDVasnhOAT xrCxbLIakkclQ2Ue8RhS7X4j9f4mQaJMmJiwkYHCi52VWs1qp/lM8lA1onBu+PsJ +9pPWMEhpHGmoJJZs2SQeZuVMD/JPDzk2BSlUs2hqvU3rH1UfZf5FKr70NDtnKgr GLqlyljC7AKVHiu74JoEcTNF2W97p3T0m5PTEvngEkCC2rq5Uakapz69KOcb/8IK t+pwRFZAs/ajrdWj0u81HqSEGmS3hjb4jmo6BQjrat0VSh+g+sVeoC4x8YpCn3YJ INmqq61OkvjlGgRO2GcusXY79hy0GPDUBT19gu8UwHbb5WUdpFc= -----END CERTIFICATE-----Generated at Wed Dec 3 15:41:53 2025 by rpki-client