This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: J+exPzdYwpVpA3JI1llrFpXoESrHcd+VbR6LXXNCWSk= Subject key identifier: C7:94:47:EA:04:1E:28:C1:63:15:C7:B1:74:77:3C:C3:E2:01:B1:D4 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 44F408F1CA80BA0B5601E342B41AA3896805E880 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 0218 Signing time: Mon 15 Dec 2025 18:50:38 +0000 Manifest this update: Mon 15 Dec 2025 18:45:38 +0000 Manifest next update: Fri 19 Dec 2025 04:04:38 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 2: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 3: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: fHBpsvjtF+fIi3fZ0laBpoC37nkxyNDE2FV1LoZ4NVc=) 4: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 5: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 04:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f4:08:f1:ca:80:ba:0b:56:01:e3:42:b4:1a:a3:89:68:05:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Dec 15 18:45:38 2025 GMT Not After : Dec 19 04:04:38 2025 GMT Subject: CN=C79447EA041E28C16315C7B174773CC3E201B1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:d9:54:cb:98:cd:53:2c:66:0b:f5:9a:ef: af:d3:1a:47:85:a0:07:c2:15:b7:12:41:29:51:d0: 78:a9:36:bb:86:f4:75:93:3a:37:f0:67:8a:16:b2: 0b:c9:ca:22:6e:e0:7c:6e:ea:44:00:f8:7a:5d:26: a5:30:ec:26:35:08:dc:91:59:01:18:d9:43:4e:17: 67:65:be:95:49:10:33:99:b7:0d:bc:f9:14:8c:d5: 53:7b:b0:c8:18:73:c4:29:6c:a0:f4:c3:cb:9e:05: b7:6c:24:9c:16:b2:cf:4c:5a:cd:9c:e6:06:10:1d: 88:78:6e:c5:df:ec:44:4d:79:04:72:d9:e5:68:5b: 3e:d3:2f:66:97:0b:88:0b:94:c5:2b:d6:a9:dc:e9: 9a:2e:0c:46:ac:f3:c6:6d:91:74:80:de:bb:59:27: 5d:8e:37:14:90:e0:7e:e2:ab:ab:d8:2f:b7:19:b5: 4e:81:68:fb:7c:3a:02:82:0f:5e:b6:08:b8:9a:9b: f5:8b:6f:dd:be:16:de:a0:51:d9:a1:cc:81:68:1b: 83:d1:64:20:e6:5b:93:2b:89:0e:7a:e4:59:7a:84: 6e:aa:a3:ba:a3:d1:89:b3:23:97:f5:15:71:9b:ed: 33:47:68:bd:1a:e9:61:47:4d:ac:df:8d:c4:13:3a: fa:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:94:47:EA:04:1E:28:C1:63:15:C7:B1:74:77:3C:C3:E2:01:B1:D4 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:64:15:55:47:a3:83:40:33:76:80:ca:c6:b2:18:b2:fb:8d: 45:8a:12:cc:dc:71:3f:40:be:d9:13:64:a9:15:8e:90:f7:1b: e6:3e:45:53:cb:b1:d1:86:ed:cc:8a:42:c0:2f:15:cc:11:5e: d1:76:bd:bd:4f:0b:d3:18:bf:de:66:2f:24:9a:fd:4c:61:0d: b7:aa:74:95:2c:ee:2c:85:e6:4f:d5:55:35:0c:3f:80:cf:ab: 33:7a:7d:6a:9c:96:b6:56:e1:66:80:aa:73:3f:c9:3a:4d:85: 5f:b7:3f:6f:60:0b:87:22:a6:96:74:36:58:e7:86:24:b8:e0: ec:d3:3d:2b:09:b5:96:5a:ec:fb:06:0a:d8:95:af:04:0c:0d: 83:d2:fc:fd:38:8c:46:9f:81:9e:8e:e5:05:97:83:6e:2c:a8: e3:05:7f:33:4c:0d:ff:f4:d1:5a:8e:58:af:73:ef:fe:67:35: ee:ec:ea:3c:6e:13:c1:ae:e1:73:6c:57:c2:fb:c3:a4:e5:76: dc:d3:8a:35:9c:48:43:9d:47:fc:45:03:a2:ae:cb:e2:de:f9: 63:11:6a:91:59:a3:39:92:77:6a:51:64:66:26:98:b5:8f:52: da:70:08:1e:8f:aa:b1:92:ac:69:a9:39:38:ea:aa:53:06:da: 38:3c:54:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPQI8cqAugtWAeNCtBqjiWgF6IAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTEyMTUxODQ1MzhaFw0yNTEyMTkwNDA0MzhaMDMxMTAvBgNV BAMTKEM3OTQ0N0VBMDQxRTI4QzE2MzE1QzdCMTc0NzczQ0MzRTIwMUIxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0b9lUy5jNUyxmC/Wa76/TGkeF oAfCFbcSQSlR0HipNruG9HWTOjfwZ4oWsgvJyiJu4Hxu6kQA+HpdJqUw7CY1CNyR WQEY2UNOF2dlvpVJEDOZtw28+RSM1VN7sMgYc8QpbKD0w8ueBbdsJJwWss9MWs2c 5gYQHYh4bsXf7ERNeQRy2eVoWz7TL2aXC4gLlMUr1qnc6ZouDEas88ZtkXSA3rtZ J12ONxSQ4H7iq6vYL7cZtU6BaPt8OgKCD162CLiam/WLb92+Ft6gUdmhzIFoG4PR ZCDmW5MriQ565Fl6hG6qo7qj0YmzI5f1FXGb7TNHaL0a6WFHTazfjcQTOvoxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5RH6gQeKMFjFcexdHc8w+IBsdQwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVkFVVHo4NAM3aAysayGLL7jUWKEszccT9A vtkTZKkVjpD3G+Y+RVPLsdGG7cyKQsAvFcwRXtF2vb1PC9MYv95mLySa/UxhDbeq dJUs7iyF5k/VVTUMP4DPqzN6fWqclrZW4WaAqnM/yTpNhV+3P29gC4cippZ0Nljn hiS44OzTPSsJtZZa7PsGCtiVrwQMDYPS/P04jEafgZ6O5QWXg24sqOMFfzNMDf/0 0VqOWK9z7/5nNe7s6jxuE8Gu4XNsV8L7w6TldtzTijWcSEOdR/xFA6Kuy+Le+WMR apFZozmSd2pRZGYmmLWPUtpwCB6PqrGSrGmpOTjqqlMG2jg8VAA= -----END CERTIFICATE-----Generated at Tue Dec 16 07:22:52 2025 by rpki-client