This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: R1zbv7hwOePa1VLPE2rMo+7YZ0lpi/sxCsYr4H8KFp8= Subject key identifier: CE:BA:B7:B3:7E:9E:92:87:EE:AA:B6:9D:F4:CF:C7:F4:54:1D:BB:FF Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 25CBF8A371575F11B9B9B901A0EFE4FD83F7CFA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: 0120 Signing time: Mon 01 Dec 2025 14:21:07 +0000 Manifest this update: Mon 01 Dec 2025 14:16:07 +0000 Manifest next update: Thu 04 Dec 2025 21:37:07 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: nsKjGIAUKGF5GP2vmoVkBozTt5fuRYsA1RGzXpLEtP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:cb:f8:a3:71:57:5f:11:b9:b9:b9:01:a0:ef:e4:fd:83:f7:cf:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Dec 1 14:16:07 2025 GMT Not After : Dec 4 21:37:07 2025 GMT Subject: CN=CEBAB7B37E9E9287EEAAB69DF4CFC7F4541DBBFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d1:a0:9b:56:f9:de:bf:4f:d7:0e:76:7a:c1: 90:52:9f:b3:54:62:42:84:32:09:7c:a8:c3:37:5a: ca:b9:22:5f:f9:72:91:6b:94:27:97:bf:13:92:b7: d5:c0:09:80:54:51:3e:75:3f:a4:0a:5b:1a:2e:8a: a3:7e:6e:57:cc:24:89:8d:d9:1f:7e:f1:f9:28:77: 95:cd:3e:68:43:b9:e8:49:81:6b:4c:6a:ba:cf:7c: dd:5d:a7:f1:a8:94:f4:35:52:43:5b:8d:64:bc:fc: 66:0f:0d:91:b0:9d:e0:96:af:ab:f4:56:f3:1e:60: b5:a5:20:c6:a2:ab:a8:3f:5d:40:5d:fc:f5:36:33: 86:aa:3e:bd:78:b2:7a:04:88:ee:79:3b:19:c6:d8: 09:4f:f1:1c:f8:36:b8:26:fa:35:6c:30:52:0b:11: f5:38:4a:8d:3f:0c:26:02:5d:e8:22:9a:10:d4:e2: a4:b3:9a:3d:b6:ed:c4:0a:f5:1a:d3:d6:be:37:90: dc:16:54:a6:2d:c7:a5:04:94:2f:cc:71:3c:15:3c: e2:f7:3c:a6:9a:91:e8:63:40:c7:83:c5:15:48:b9: fe:03:9a:3b:c6:3e:3f:d2:1e:03:c9:07:11:dc:1f: 8e:e1:a0:61:7e:a4:73:32:87:26:8c:8b:bb:d3:c8: f0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BA:B7:B3:7E:9E:92:87:EE:AA:B6:9D:F4:CF:C7:F4:54:1D:BB:FF X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6a:39:d2:86:c2:5a:0d:69:a6:d0:7b:2f:49:f5:a4:12:14: 1f:d1:b0:53:7d:fa:67:fd:a9:f1:db:a4:d9:fb:bd:94:59:0b: 1e:4c:12:20:88:d6:32:3d:56:bd:d7:57:aa:11:0f:b2:c0:c0: 66:ea:b6:b2:95:9c:4d:bd:f4:7f:f9:3d:51:f6:05:f3:38:79: 52:02:10:72:2b:ee:69:bc:c8:92:0c:01:8f:e4:ca:e8:19:07: d1:76:20:6e:8c:f9:73:7d:7c:36:58:7b:c5:9e:50:75:da:f3: c2:a4:4b:a2:7c:fa:06:97:c4:9f:9c:c1:a7:3a:5e:89:0c:83: 77:e8:f2:7f:80:2b:41:4b:b7:1a:fe:35:b4:05:fe:36:f1:b4: 7d:ea:97:99:08:5f:36:3a:5a:dd:92:8f:aa:86:99:52:7f:2c: 3c:19:50:78:34:22:6f:0f:80:da:22:d7:1b:22:5e:a5:b5:36: 55:0b:a1:f2:6a:ee:d5:1e:78:50:8e:ec:a7:9d:71:94:c4:a4: 0b:70:ec:a9:7c:39:12:04:fa:66:a5:78:cd:29:03:1e:f0:10: c7:6b:15:55:26:0e:b1:2d:db:0d:e7:73:e1:f5:a1:21:1b:ed: 26:b2:4e:e0:c7:42:46:c9:15:8a:6f:d4:f1:ce:97:f8:60:a8: bb:2d:61:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcv4o3FXXxG5ubkBoO/k/YP3z6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTEyMDExNDE2MDdaFw0yNTEyMDQyMTM3MDdaMDMxMTAvBgNV BAMTKENFQkFCN0IzN0U5RTkyODdFRUFBQjY5REY0Q0ZDN0Y0NTQxREJCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0aCbVvnev0/XDnZ6wZBSn7NU YkKEMgl8qMM3Wsq5Il/5cpFrlCeXvxOSt9XACYBUUT51P6QKWxouiqN+blfMJImN 2R9+8fkod5XNPmhDuehJgWtMarrPfN1dp/GolPQ1UkNbjWS8/GYPDZGwneCWr6v0 VvMeYLWlIMaiq6g/XUBd/PU2M4aqPr14snoEiO55OxnG2AlP8Rz4Nrgm+jVsMFIL EfU4So0/DCYCXegimhDU4qSzmj227cQK9RrT1r43kNwWVKYtx6UElC/McTwVPOL3 PKaakehjQMeDxRVIuf4DmjvGPj/SHgPJBxHcH47hoGF+pHMyhyaMi7vTyPBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzrq3s36ekofuqrad9M/H9FQdu/8wHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlqOdKGwloNaabQey9J9aQSFB/RsFN9+mf9 qfHbpNn7vZRZCx5MEiCI1jI9Vr3XV6oRD7LAwGbqtrKVnE299H/5PVH2BfM4eVIC EHIr7mm8yJIMAY/kyugZB9F2IG6M+XN9fDZYe8WeUHXa88KkS6J8+gaXxJ+cwac6 XokMg3fo8n+AK0FLtxr+NbQF/jbxtH3ql5kIXzY6Wt2Sj6qGmVJ/LDwZUHg0Im8P gNoi1xsiXqW1NlULofJq7tUeeFCO7KedcZTEpAtw7Kl8ORIE+maleM0pAx7wEMdr FVUmDrEt2w3nc+H1oSEb7SayTuDHQkbJFYpv1PHOl/hgqLstYUI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:57 2025 by rpki-client