This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft (raw, json) Hash identifier: wAcPiSFRIwWwMucPJEhANLI3AdnvG5zEYi9d64jC5ZI= Subject key identifier: A4:B9:BD:6B:89:43:D6:85:33:C5:83:E5:05:B3:C8:7C:73:65:E9:3C Authority key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Certificate issuer: /CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Certificate serial: 6A39F45B188FD6E33CB0E0303EE63E3EED631672 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft Manifest number: 0532 Signing time: Tue 02 Dec 2025 19:52:29 +0000 Manifest this update: Tue 02 Dec 2025 19:47:29 +0000 Manifest next update: Fri 05 Dec 2025 21:48:29 +0000 Files and hashes: 1: 3130332e37332e3233352e302f32342d3234203d3e20313335343733.roa (hash: M3KMvxcWP6uML+3fbIDyzsZ9kLYdSiylqLgxMFpzBFk=) 2: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl (hash: wLpOZS6KGzgz0PCoODCF5XYewZvrLeXvpoH+7Wf/M38=) 3: 3130332e38322e362e302f32342d3234203d3e20313335343733.roa (hash: smjXAwBZ8gC1UI5HEgA5re887jNAObd+a11KYcB/yac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:39:f4:5b:18:8f:d6:e3:3c:b0:e0:30:3e:e6:3e:3e:ed:63:16:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Validity Not Before: Dec 2 19:47:29 2025 GMT Not After : Dec 5 21:48:29 2025 GMT Subject: CN=A4B9BD6B8943D68533C583E505B3C87C7365E93C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:45:1d:d5:2e:d0:2f:01:84:7b:4a:6c:f7: 4f:8e:b9:67:c1:3e:65:f2:df:c8:3e:73:61:0c:b1: 76:3e:2b:f5:1e:3f:24:71:c1:86:7c:0b:d8:52:93: 48:f1:7b:5e:87:52:fb:4f:c1:62:e0:2a:d1:df:85: ae:2a:e0:e0:f4:89:b4:e0:a4:21:6c:e1:fe:3d:f3: e6:52:3e:9e:4e:ed:7b:89:50:4c:3c:51:e5:80:d6: 08:59:6a:72:34:2c:d2:cb:92:15:9e:48:2f:91:17: 04:f5:f8:d3:7c:e2:6f:b5:4e:2e:02:e4:cb:d6:e5: 26:0e:33:ab:85:a3:14:36:a3:71:41:48:97:15:35: 0e:d5:95:13:63:3c:a3:7a:75:70:35:29:1f:ec:81: 5d:e2:bd:7e:ba:76:0c:5e:44:53:12:9c:77:dd:90: 22:54:b8:32:3c:fe:0c:47:70:68:06:8d:87:d7:a9: 41:e7:33:1e:b0:ea:d5:e2:68:87:8e:7f:da:c2:70: b7:93:67:a3:e1:a8:ca:93:a4:93:47:9e:04:54:87: 81:95:98:e8:2d:e7:b2:d8:ff:fc:90:ec:5b:99:ce: c8:f2:3e:07:42:d6:3c:93:45:36:4c:7a:58:33:e1: bf:0d:02:0f:93:40:b4:28:d4:96:7a:6e:ee:39:e7: e1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B9:BD:6B:89:43:D6:85:33:C5:83:E5:05:B3:C8:7C:73:65:E9:3C X509v3 Authority Key Identifier: keyid:21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:49:ec:7f:20:4a:b2:a8:24:eb:c7:66:d2:05:98:90:76:67: d5:73:5e:ec:09:9c:0a:6c:c0:fd:04:c2:7d:88:eb:e6:fc:0e: 4a:0f:0d:b2:4d:17:67:e9:e3:59:c9:b0:4e:ed:70:54:7f:3d: 6e:db:70:54:60:99:2c:19:d2:6c:8f:18:a3:f4:d0:9a:b6:1f: 74:48:ff:87:c2:e3:f1:32:4a:ff:3d:0a:25:67:04:93:8a:8d: c7:91:0f:30:fd:5b:e8:fb:c4:74:99:6b:6d:7b:ae:b4:45:d5: 38:4f:f7:bb:2f:37:bb:96:15:03:f8:8b:42:13:1d:d6:1c:22: 04:d3:cc:d6:07:31:a8:cc:91:55:7b:bc:6c:0d:7e:6a:ed:6a: 06:9d:26:37:14:57:e6:bf:36:72:50:1c:e6:f7:6b:49:84:eb: 64:17:b2:ee:69:7a:4e:25:24:ec:69:7b:19:8c:dc:10:24:35: 44:76:c8:e7:8a:bd:9b:42:fb:01:25:35:e1:7b:e0:c0:e1:8f: c1:7f:c6:f4:15:73:e2:b0:98:23:78:d6:2d:6b:6d:36:62:a2: cc:73:6a:6a:7a:f8:a6:76:dc:c2:20:e1:4f:a3:51:bb:69:86: 27:3c:c3:98:02:1b:f6:a7:86:f1:32:c3:fd:23:1a:74:9f:fb: 2d:26:d6:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajn0WxiP1uM8sOAwPuY+Pu1jFnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZC ODhBMzJBOTAeFw0yNTEyMDIxOTQ3MjlaFw0yNTEyMDUyMTQ4MjlaMDMxMTAvBgNV BAMTKEE0QjlCRDZCODk0M0Q2ODUzM0M1ODNFNTA1QjNDODdDNzM2NUU5M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWEUd1S7QLwGEe0ps90+OuWfB PmXy38g+c2EMsXY+K/UePyRxwYZ8C9hSk0jxe16HUvtPwWLgKtHfha4q4OD0ibTg pCFs4f498+ZSPp5O7XuJUEw8UeWA1ghZanI0LNLLkhWeSC+RFwT1+NN84m+1Ti4C 5MvW5SYOM6uFoxQ2o3FBSJcVNQ7VlRNjPKN6dXA1KR/sgV3ivX66dgxeRFMSnHfd kCJUuDI8/gxHcGgGjYfXqUHnMx6w6tXiaIeOf9rCcLeTZ6PhqMqTpJNHngRUh4GV mOgt57LY//yQ7FuZzsjyPgdC1jyTRTZMelgz4b8NAg+TQLQo1JZ6bu455+EBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLm9a4lD1oUzxYPlBbPIfHNl6TwwHwYDVR0j BBgwFoAUIQ/ZjrTZpNjQ/Lmy87u8f7iKMqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMC8yMTBGRDk4RUI0 RDlBNEQ4RDBGQ0I5QjJGM0JCQkM3RkI4OEEzMkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJDN0ZCODhB MzJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI3ODhjODgtY2EyYy00ZmEwLWEz NWYtM2U3YTEwODg3MjI4LzAvMjEwRkQ5OEVCNEQ5QTREOEQwRkNCOUIyRjNCQkJD N0ZCODhBMzJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClJ7H8gSrKoJOvHZtIFmJB2Z9VzXuwJnAps wP0Ewn2I6+b8DkoPDbJNF2fp41nJsE7tcFR/PW7bcFRgmSwZ0myPGKP00Jq2H3RI /4fC4/EySv89CiVnBJOKjceRDzD9W+j7xHSZa217rrRF1ThP97svN7uWFQP4i0IT HdYcIgTTzNYHMajMkVV7vGwNfmrtagadJjcUV+a/NnJQHOb3a0mE62QXsu5pek4l JOxpexmM3BAkNUR2yOeKvZtC+wElNeF74MDhj8F/xvQVc+KwmCN41i1rbTZiosxz amp6+KZ23MIg4U+jUbtphic8w5gCG/anhvEyw/0jGnSf+y0m1kE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:04 2025 by rpki-client