This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft File: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft (raw, json) Hash identifier: XL3d0fko2hzM4++lC5y2tFfQ1zlcuJDjaABr9jskG+8= Subject key identifier: DF:56:53:6B:2F:79:0C:07:AE:DD:D9:90:4A:C7:00:D0:CF:A6:F8:66 Authority key identifier: 82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 Certificate issuer: /CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Certificate serial: 616554D552AF55731341DAF77FCF32CA4CFE0FBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft Manifest number: 0534 Signing time: Wed 17 Dec 2025 22:31:21 +0000 Manifest this update: Wed 17 Dec 2025 22:26:21 +0000 Manifest next update: Sun 21 Dec 2025 05:54:21 +0000 Files and hashes: 1: 3130332e35322e31362e302f32342d3234203d3e20313333383131.roa (hash: KMXBXh+Hz9t8Vs+CANui3lrLwoDdVGoivVhKoGTM+n0=) 2: 3130332e35322e31372e302f32342d3234203d3e20313333383131.roa (hash: hHPw+Xqwsov7fA4EH++xE5Fe/5zBy6SOylLmX+aVZlE=) 3: 3130332e35322e31382e302f32342d3234203d3e20313333383131.roa (hash: MpDUQT8A3dZvwWRQtlzD2B+hHv7+ces35KG+DCb4lSw=) 4: 821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl (hash: U10knsge1qO7TzrFfHxG6uH1ISW0ces1bCtP9hKM9w8=) 5: 3130332e35322e31392e302f32342d3234203d3e20313333383131.roa (hash: frS3InbJAyXvfYFJ9oqdkhlt6S7xP80lfV9ZpnmpcMc=) 6: 3130332e35322e31362e302f32322d3234203d3e20313333383131.roa (hash: E70nlSvwN/YRzt3ipt5eUpiof5ZiDppc9oAiJGHFIb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:65:54:d5:52:af:55:73:13:41:da:f7:7f:cf:32:ca:4c:fe:0f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821F16581F931A19A14B40DBF1E2B053A9C0B6A0 Validity Not Before: Dec 17 22:26:21 2025 GMT Not After : Dec 21 05:54:21 2025 GMT Subject: CN=DF56536B2F790C07AEDDD9904AC700D0CFA6F866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d3:e2:9f:d2:ec:32:f3:5d:ff:ab:85:c2:e5: 9c:03:f5:f5:88:e8:8b:16:4e:e7:66:5e:e5:bb:4f: f5:8d:15:ff:56:b7:5a:b4:dc:3a:e5:cf:ee:63:36: cd:71:31:f5:ea:d5:ab:a7:85:74:f1:8e:c1:a6:19: 3b:51:bf:f6:f0:80:d9:48:dd:8c:58:b7:1c:7e:0a: c1:b3:d1:48:5c:1a:b8:dd:43:80:eb:09:ef:58:cd: 61:0b:7f:be:fb:bf:1d:d3:d2:a8:db:51:f2:3b:64: c5:fc:18:5c:c3:0b:6a:7a:0a:99:a4:d3:21:a1:67: d0:51:da:d9:e0:a4:f1:3e:13:da:7f:a3:90:e2:ec: 38:0c:73:0a:fd:53:c5:56:1e:69:c6:4b:01:16:35: f7:a9:26:8e:12:a0:8d:df:54:db:12:6c:66:4a:b1: fd:1e:a5:92:a5:b7:f9:98:c6:7b:36:59:1b:a2:04: ae:f8:7d:b4:8f:91:2b:9c:ed:a9:4f:ad:ad:0c:80: 38:2c:71:f5:ed:ac:3e:dd:80:65:3f:2d:54:7d:1c: c2:0a:97:c1:ff:70:b3:52:b4:f0:2e:15:0e:8c:ac: e0:57:8a:2c:31:fc:4a:6c:d2:16:ef:6f:34:d2:dd: 05:c1:2a:7f:cf:34:8d:f2:f0:7a:63:8b:fe:22:30: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:56:53:6B:2F:79:0C:07:AE:DD:D9:90:4A:C7:00:D0:CF:A6:F8:66 X509v3 Authority Key Identifier: keyid:82:1F:16:58:1F:93:1A:19:A1:4B:40:DB:F1:E2:B0:53:A9:C0:B6:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fadd7c0f-02d3-4217-9fc3-0047ae1836dc/0/821F16581F931A19A14B40DBF1E2B053A9C0B6A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2b:0b:f0:0e:c2:7a:0e:5a:ca:13:e1:8b:1c:93:90:28:30: b8:9a:20:88:f5:01:cd:c8:8f:ea:cb:ba:7c:2c:4f:3f:2d:08: 7e:10:96:cd:a2:00:61:05:aa:7a:c1:ea:da:fc:17:a1:7d:4d: 96:eb:67:e2:17:48:df:dd:7f:da:67:f8:de:98:77:12:a0:51: 16:a2:8a:07:ea:8f:91:2e:9a:3a:30:c7:69:23:de:27:7d:1a: 24:cf:b8:11:33:c6:06:5e:66:48:2c:45:30:a4:93:7a:b1:f4: f4:f5:2e:64:e6:ab:d2:9f:98:2a:d8:2c:bd:28:d3:df:9c:bf: 3a:52:6d:a3:04:35:16:1a:aa:d1:d2:6f:37:a5:fe:85:94:51: de:15:67:0f:fd:5b:a2:ae:27:7c:7a:22:83:4a:69:33:b0:a3: ed:61:5a:a5:76:ca:b9:42:e6:54:17:89:6b:9a:5c:15:23:09: 72:b6:84:bb:4a:03:91:63:51:7c:8d:6e:89:61:00:7b:34:d1: f8:e6:79:13:41:c5:f5:44:54:de:fd:9a:dd:e5:9d:6d:d3:c7: 75:61:97:3c:31:fd:1f:6d:51:4b:43:bc:5c:0b:d0:69:4b:0e: dc:35:db:5a:36:5a:82:6d:d2:1b:37:c9:1a:fa:8d:be:58:4d: 2b:91:33:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWVU1VKvVXMTQdr3f88yykz+D78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNB OUMwQjZBMDAeFw0yNTEyMTcyMjI2MjFaFw0yNTEyMjEwNTU0MjFaMDMxMTAvBgNV BAMTKERGNTY1MzZCMkY3OTBDMDdBRURERDk5MDRBQzcwMEQwQ0ZBNkY4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ0+Kf0uwy813/q4XC5ZwD9fWI 6IsWTudmXuW7T/WNFf9Wt1q03Drlz+5jNs1xMfXq1aunhXTxjsGmGTtRv/bwgNlI 3YxYtxx+CsGz0UhcGrjdQ4DrCe9YzWELf777vx3T0qjbUfI7ZMX8GFzDC2p6Cpmk 0yGhZ9BR2tngpPE+E9p/o5Di7DgMcwr9U8VWHmnGSwEWNfepJo4SoI3fVNsSbGZK sf0epZKlt/mYxns2WRuiBK74fbSPkSuc7alPra0MgDgscfXtrD7dgGU/LVR9HMIK l8H/cLNStPAuFQ6MrOBXiiwx/Eps0hbvbzTS3QXBKn/PNI3y8Hpji/4iMI9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU31ZTay95DAeu3dmQSscA0M+m+GYwHwYDVR0j BBgwFoAUgh8WWB+TGhmhS0Db8eKwU6nAtqAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWRkN2MwZi0wMmQzLTQyMTctOWZjMy0wMDQ3YWUxODM2ZGMvMC84MjFGMTY1ODFG OTMxQTE5QTE0QjQwREJGMUUyQjA1M0E5QzBCNkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIwNTNBOUMw QjZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFkZDdjMGYtMDJkMy00MjE3LTlm YzMtMDA0N2FlMTgzNmRjLzAvODIxRjE2NTgxRjkzMUExOUExNEI0MERCRjFFMkIw NTNBOUMwQjZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4rC/AOwnoOWsoT4Ysck5AoMLiaIIj1Ac3I j+rLunwsTz8tCH4Qls2iAGEFqnrB6tr8F6F9TZbrZ+IXSN/df9pn+N6YdxKgURai igfqj5Eumjowx2kj3id9GiTPuBEzxgZeZkgsRTCkk3qx9PT1LmTmq9KfmCrYLL0o 09+cvzpSbaMENRYaqtHSbzel/oWUUd4VZw/9W6KuJ3x6IoNKaTOwo+1hWqV2yrlC 5lQXiWuaXBUjCXK2hLtKA5FjUXyNbolhAHs00fjmeRNBxfVEVN79mt3lnW3Tx3Vh lzwx/R9tUUtDvFwL0GlLDtw121o2WoJt0hs3yRr6jb5YTSuRM+g= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:45 2025 by rpki-client