This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft File: 22504F83E378CE066AD31D32EB24280CB0F6E560.mft (raw, json) Hash identifier: ioXSHUcljtOifY6YEtcVHmMigDt1uxETQXA/fcWvY+A= Subject key identifier: AC:11:35:9F:57:68:2D:D3:5B:AE:24:30:8F:4C:3F:AF:2D:98:F2:19 Authority key identifier: 22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 Certificate issuer: /CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Certificate serial: 15A996EC73E6D62F3FEB8219CD55D479A8231E2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft Manifest number: 01E9 Signing time: Mon 01 Dec 2025 05:31:20 +0000 Manifest this update: Mon 01 Dec 2025 05:26:20 +0000 Manifest next update: Thu 04 Dec 2025 13:57:20 +0000 Files and hashes: 1: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: rlPDCVNSf12GT3UB6JNKAKIcKwQhkdo/IHpQgzId5qI=) 2: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: 3MFYnAUdA7YDVt9GLc9O7yMdgWVCYVJhgGeVAk7k6cA=) 3: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: ppVHCACqlSkCk2zBbZsJHXx5IRxFz5QYyP09fnWth0M=) 4: 22504F83E378CE066AD31D32EB24280CB0F6E560.crl (hash: uSdZ/3Fl7a+PWWyj96Xn7yRaQazKRS9ogeAtZ91ztu8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:a9:96:ec:73:e6:d6:2f:3f:eb:82:19:cd:55:d4:79:a8:23:1e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Validity Not Before: Dec 1 05:26:20 2025 GMT Not After : Dec 4 13:57:20 2025 GMT Subject: CN=AC11359F57682DD35BAE24308F4C3FAF2D98F219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:18:6c:b0:9a:66:6c:76:db:4a:ac:19:23:99: 98:de:e3:77:19:d9:52:3b:8b:7b:48:47:95:20:a4: 80:7a:00:ad:c0:22:63:9e:b3:27:10:7f:76:00:25: 11:f8:6a:ea:d2:b7:49:c8:8c:c6:fd:aa:6c:5b:7a: 82:08:98:32:c1:c2:3d:15:42:15:f8:a2:57:05:66: 98:6b:68:1f:d5:42:15:45:dd:35:84:ef:a0:cd:b8: 51:e5:fa:c8:90:17:3d:c1:67:ed:db:30:5a:8c:51: 36:12:59:b7:27:6f:0c:c3:59:96:19:d1:57:8b:9e: 21:53:90:f1:7d:69:e7:33:54:dc:ed:81:d5:72:ab: 88:5a:a4:d6:39:1f:87:ff:61:9b:14:09:a3:73:c4: 02:75:3f:69:ed:2f:5c:b5:9d:3d:c5:94:48:c3:77: 79:c0:c1:54:f5:26:cf:54:e1:c1:01:58:27:43:01: c9:1e:5a:88:a3:97:14:68:dd:9a:c8:5d:97:e6:5f: 9e:9c:93:9d:fa:12:eb:9f:33:3e:d5:18:25:7f:a0: fe:d8:74:06:69:7b:09:a0:3e:56:eb:ea:28:92:34: 30:62:d9:cd:b5:c6:1c:b3:78:ed:84:59:34:fe:5b: cb:38:12:73:90:77:49:35:cc:ba:d5:52:33:d3:8e: b5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:11:35:9F:57:68:2D:D3:5B:AE:24:30:8F:4C:3F:AF:2D:98:F2:19 X509v3 Authority Key Identifier: keyid:22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:9f:ec:a1:b9:7e:77:5b:5e:6c:3a:9c:63:c0:87:c1:3b:db: dc:1a:f1:c7:e5:07:e0:24:79:7b:7d:38:55:de:46:65:78:1d: 58:c0:11:9a:99:d2:ee:ed:18:1c:f5:95:78:c1:5a:89:3c:47: 39:c0:7a:62:3f:a9:6b:9c:fd:00:12:54:ab:03:6b:97:f5:b4: 4e:cc:9c:b7:c4:a3:db:5f:43:43:13:6c:15:54:7d:f7:b5:ee: 8a:6d:9a:af:ea:9e:1b:37:95:a2:7c:1f:97:9e:16:e4:77:89: 4f:70:a7:3e:e2:a3:a1:54:1b:41:81:5a:81:3b:e0:ed:74:b0: 50:86:ac:be:62:f9:a7:a7:6a:ec:6c:75:6e:82:d6:87:b4:23: cc:51:3e:c5:d0:ff:04:19:b5:d7:2c:fc:3f:86:f5:6d:d9:90: df:cd:89:a4:f0:15:14:14:cd:28:39:11:b3:f0:a6:a9:59:1b: d5:f8:0f:89:f7:55:d1:53:87:af:e1:8a:de:82:79:a4:cd:b8: d1:02:63:ac:0d:a9:f6:f8:dd:cd:b2:23:a6:e3:be:58:26:4d: 52:f3:76:f2:19:f8:46:9a:bc:ad:6d:c7:9f:70:17:3f:35:a2: a5:50:e2:cd:7a:7d:93:9a:e9:6b:f2:1c:d6:96:bf:e6:0e:af: aa:a1:3d:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFamW7HPm1i8/64IZzVXUeagjHi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENC MEY2RTU2MDAeFw0yNTEyMDEwNTI2MjBaFw0yNTEyMDQxMzU3MjBaMDMxMTAvBgNV BAMTKEFDMTEzNTlGNTc2ODJERDM1QkFFMjQzMDhGNEMzRkFGMkQ5OEYyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGGywmmZsdttKrBkjmZje43cZ 2VI7i3tIR5UgpIB6AK3AImOesycQf3YAJRH4aurSt0nIjMb9qmxbeoIImDLBwj0V QhX4olcFZphraB/VQhVF3TWE76DNuFHl+siQFz3BZ+3bMFqMUTYSWbcnbwzDWZYZ 0VeLniFTkPF9aeczVNztgdVyq4hapNY5H4f/YZsUCaNzxAJ1P2ntL1y1nT3FlEjD d3nAwVT1Js9U4cEBWCdDAckeWoijlxRo3ZrIXZfmX56ck536EuufMz7VGCV/oP7Y dAZpewmgPlbr6iiSNDBi2c21xhyzeO2EWTT+W8s4EnOQd0k1zLrVUjPTjrXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrBE1n1doLdNbriQwj0w/ry2Y8hkwHwYDVR0j BBgwFoAUIlBPg+N4zgZq0x0y6yQoDLD25WAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQzMjQxYi1jZmQxLTRjYmItOTIxOS1jN2EzNjIzN2MxNDgvMC8yMjUwNEY4M0Uz NzhDRTA2NkFEMzFEMzJFQjI0MjgwQ0IwRjZFNTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENCMEY2 RTU2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4 MENCMEY2RTU2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmf7KG5fndbXmw6nGPAh8E729wa8cflB+Ak eXt9OFXeRmV4HVjAEZqZ0u7tGBz1lXjBWok8RznAemI/qWuc/QASVKsDa5f1tE7M nLfEo9tfQ0MTbBVUffe17optmq/qnhs3laJ8H5eeFuR3iU9wpz7io6FUG0GBWoE7 4O10sFCGrL5i+aenauxsdW6C1oe0I8xRPsXQ/wQZtdcs/D+G9W3ZkN/NiaTwFRQU zSg5EbPwpqlZG9X4D4n3VdFTh6/hit6CeaTNuNECY6wNqfb43c2yI6bjvlgmTVLz dvIZ+EaavK1tx59wFz81oqVQ4s16fZOa6WvyHNaWv+YOr6qhPUY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:37 2025 by rpki-client