This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft File: 821049BBD22C335A50850F16AB159C0C6BCC28E5.mft (raw, json) Hash identifier: lexA+afTYh4Pvv+mcjxq6q/AylPCsZEmvDOnd4ML1UQ= Subject key identifier: 8A:42:BB:F1:7A:64:19:BB:1B:6B:D2:82:62:D6:05:82:49:1F:1B:A2 Authority key identifier: 82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 Certificate issuer: /CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Certificate serial: 46543EBA487A90D303271DCD6FB4CDA996BF6E13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft Manifest number: 0262 Signing time: Wed 03 Dec 2025 10:01:47 +0000 Manifest this update: Wed 03 Dec 2025 09:56:47 +0000 Manifest next update: Sat 06 Dec 2025 18:35:47 +0000 Files and hashes: 1: 3130332e32312e39322e302f32342d3234203d3e20313331373338.roa (hash: ndyvXGLmi+s4jvx/l0C4JrK1SIn52emjpfzG2w+2lsw=) 2: 3130332e32312e39342e302f32342d3234203d3e20313331373338.roa (hash: KCUnGn0DyBychM59+lv18yYznYr1wdm5Tf5W0sYTxbE=) 3: 821049BBD22C335A50850F16AB159C0C6BCC28E5.crl (hash: C3du4l+RdS4m7CPnLWw06RxZmAHi5ARvQnblusPhISU=) 4: 3130332e32312e39352e302f32342d3234203d3e203435323935.roa (hash: WHp6+633q2Em0ghmTjJeCMByUXIoDLeS8IvSNmEh0gE=) 5: 3130332e32312e39332e302f32342d3234203d3e20313331373338.roa (hash: Hx5e9eX/0MDiWg+S8NREaCwOHPQ1Onm3jq45DAvThoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:54:3e:ba:48:7a:90:d3:03:27:1d:cd:6f:b4:cd:a9:96:bf:6e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821049BBD22C335A50850F16AB159C0C6BCC28E5 Validity Not Before: Dec 3 09:56:47 2025 GMT Not After : Dec 6 18:35:47 2025 GMT Subject: CN=8A42BBF17A6419BB1B6BD28262D60582491F1BA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:18:95:b1:81:9b:29:78:7b:d0:8c:f2:6a:4d: 74:0d:b3:d3:da:12:1b:8f:cc:05:48:74:07:97:ff: 45:63:97:7e:ea:d8:6c:00:f5:c6:1e:d2:43:ee:3f: b2:6c:88:02:01:86:36:aa:7a:21:c0:49:f9:b7:d9: 99:3b:87:e1:81:85:d1:ef:0a:3c:6b:51:45:b0:c0: fe:fb:21:bc:6d:1a:ae:6c:c5:c3:5e:f0:14:9b:6f: bd:8f:84:55:8b:69:71:12:45:33:55:53:a0:84:f9: 63:c0:58:f5:78:9f:89:fb:6a:f6:70:82:4f:00:61: 53:b6:59:04:c1:cb:63:df:6d:c7:e7:b7:2e:03:19: e5:68:1e:c1:de:9c:73:d6:0a:9f:fb:6e:83:2f:41: 3e:4a:74:ca:86:06:22:68:4b:01:83:ec:94:12:bc: 1b:1f:3a:87:1a:0f:03:20:42:de:1c:65:e4:06:a7: 2a:49:3d:88:4b:53:a8:78:81:75:27:cc:dc:01:d8: 13:cd:66:e0:16:39:a0:eb:39:9a:02:ed:64:5f:ff: 73:b0:12:88:9b:c1:1a:00:fb:36:26:a8:50:51:52: 94:b9:ea:44:28:d6:c0:79:39:61:79:86:a4:dc:d6: 6d:2e:35:fe:f8:d4:ac:2f:06:0f:2f:77:32:dc:39: a9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:42:BB:F1:7A:64:19:BB:1B:6B:D2:82:62:D6:05:82:49:1F:1B:A2 X509v3 Authority Key Identifier: keyid:82:10:49:BB:D2:2C:33:5A:50:85:0F:16:AB:15:9C:0C:6B:CC:28:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821049BBD22C335A50850F16AB159C0C6BCC28E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8e18d-a047-4590-9e56-464a73e23c6c/0/821049BBD22C335A50850F16AB159C0C6BCC28E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:31:01:48:f3:fb:e1:dd:dd:a5:9b:ed:d3:f9:0d:6e:22:69: 1c:22:2b:ed:cb:23:70:1f:d8:0e:bf:5a:f3:5b:59:1c:e3:ba: 4b:9d:2a:85:ac:3a:bf:7f:c8:24:e0:c8:d1:d9:60:dd:36:15: e9:7e:86:7d:da:d3:3d:1e:b3:d6:90:d7:d7:a1:18:7f:5c:c4: 23:c4:35:56:ca:0f:00:c3:5c:b0:f5:79:cb:a9:0f:be:d8:bf: bc:01:95:a4:b6:02:b0:91:8b:47:c3:56:d3:b1:ae:26:d0:3f: 57:39:30:89:a5:72:6b:54:04:04:88:80:d4:85:db:98:1d:26: a4:2b:a3:e9:2f:25:0f:60:59:03:fc:e1:4b:f2:74:3d:cb:a2: 49:4f:e3:b2:f2:a0:89:80:64:ea:14:c7:22:b5:7c:65:ed:26: 74:72:1c:c8:03:69:6c:b2:3b:b9:d7:9f:78:05:3c:15:4d:b5: 6f:f7:c6:b9:a6:55:e6:f1:8c:5e:1e:38:c9:1c:26:10:60:c2: 5b:6a:d4:e6:7c:fa:5e:b3:e0:32:fc:c7:83:bc:63:1b:76:fc: e5:88:ce:c2:5a:2c:20:7f:3e:22:dd:04:97:e6:c8:d6:e8:81: 86:77:9f:ba:df:89:b2:10:72:7e:f0:40:1b:3d:46:e0:91:4c: d1:96:00:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURlQ+ukh6kNMDJx3Nb7TNqZa/bhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2 QkNDMjhFNTAeFw0yNTEyMDMwOTU2NDdaFw0yNTEyMDYxODM1NDdaMDMxMTAvBgNV BAMTKDhBNDJCQkYxN0E2NDE5QkIxQjZCRDI4MjYyRDYwNTgyNDkxRjFCQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhGJWxgZspeHvQjPJqTXQNs9Pa EhuPzAVIdAeX/0Vjl37q2GwA9cYe0kPuP7JsiAIBhjaqeiHASfm32Zk7h+GBhdHv CjxrUUWwwP77IbxtGq5sxcNe8BSbb72PhFWLaXESRTNVU6CE+WPAWPV4n4n7avZw gk8AYVO2WQTBy2Pfbcfnty4DGeVoHsHenHPWCp/7boMvQT5KdMqGBiJoSwGD7JQS vBsfOocaDwMgQt4cZeQGpypJPYhLU6h4gXUnzNwB2BPNZuAWOaDrOZoC7WRf/3Ow EoibwRoA+zYmqFBRUpS56kQo1sB5OWF5hqTc1m0uNf741KwvBg8vdzLcOalPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUikK78XpkGbsba9KCYtYFgkkfG6IwHwYDVR0j BBgwFoAUghBJu9IsM1pQhQ8WqxWcDGvMKOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4ZTE4ZC1hMDQ3LTQ1OTAtOWU1Ni00NjRhNzNlMjNjNmMvMC84MjEwNDlCQkQy MkMzMzVBNTA4NTBGMTZBQjE1OUMwQzZCQ0MyOEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlDMEM2QkND MjhFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGUxOGQtYTA0Ny00NTkwLTll NTYtNDY0YTczZTIzYzZjLzAvODIxMDQ5QkJEMjJDMzM1QTUwODUwRjE2QUIxNTlD MEM2QkNDMjhFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJExAUjz++Hd3aWb7dP5DW4iaRwiK+3LI3Af 2A6/WvNbWRzjukudKoWsOr9/yCTgyNHZYN02Fel+hn3a0z0es9aQ19ehGH9cxCPE NVbKDwDDXLD1ecupD77Yv7wBlaS2ArCRi0fDVtOxribQP1c5MImlcmtUBASIgNSF 25gdJqQro+kvJQ9gWQP84UvydD3LoklP47LyoImAZOoUxyK1fGXtJnRyHMgDaWyy O7nXn3gFPBVNtW/3xrmmVebxjF4eOMkcJhBgwltq1OZ8+l6z4DL8x4O8Yxt2/OWI zsJaLCB/PiLdBJfmyNbogYZ3n7rfibIQcn7wQBs9RuCRTNGWAP0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:35 2025 by rpki-client