This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft File: 21F8D88DCD7D814618247F203F04126E51C2D65E.mft (raw, json) Hash identifier: 5K4VZ3UvUGAPdj+IoYn+bXtq2XD9Lz/VBg2D/712cXg= Subject key identifier: F6:AD:BF:59:95:DC:2C:F9:15:29:67:5D:BE:65:D7:49:89:E9:C5:E3 Authority key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Certificate issuer: /CN=21F8D88DCD7D814618247F203F04126E51C2D65E Certificate serial: 785DEE6F30492FB64A83A678BF2248DEE3E4F2D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft Manifest number: 0235 Signing time: Sat 06 Dec 2025 14:31:50 +0000 Manifest this update: Sat 06 Dec 2025 14:26:50 +0000 Manifest next update: Tue 09 Dec 2025 17:15:50 +0000 Files and hashes: 1: 21F8D88DCD7D814618247F203F04126E51C2D65E.crl (hash: RKKvyKZ9UT3fSoIstud0tL5mXSApiaXXm0k7ebAPmHI=) 2: 3130332e342e3234302e302f32342d3234203d3e20313439363834.roa (hash: FXE5GAFeqGpeEgNYhdu+NiOVWPi7nwVOKlyxLEU4cy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5d:ee:6f:30:49:2f:b6:4a:83:a6:78:bf:22:48:de:e3:e4:f2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Validity Not Before: Dec 6 14:26:50 2025 GMT Not After : Dec 9 17:15:50 2025 GMT Subject: CN=F6ADBF5995DC2CF91529675DBE65D74989E9C5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:b2:fe:36:40:04:7e:3c:15:a7:9d:f1:7f: ff:d5:97:b3:69:f8:ea:ce:25:18:d5:5b:23:c3:dd: 74:73:44:3d:54:49:ad:9e:1e:ab:b1:ea:5d:01:a1: 0b:b8:7f:d3:0a:07:fa:48:82:e6:70:6c:53:66:0c: a0:2f:04:ff:f9:1b:09:e8:1d:7f:0c:69:6b:e6:83: 09:0b:a0:27:5c:e1:c8:5b:31:d9:3e:7d:d5:a0:06: 72:f9:5d:80:e2:c8:a8:17:d5:60:18:b1:42:a2:b0: 67:ad:7f:4e:86:12:5a:bc:e6:37:5b:31:43:ed:b9: df:4e:87:6a:05:6d:4e:2b:c8:c3:45:88:9b:ec:68: 2e:67:3d:6d:2d:3a:73:95:f2:a1:f0:a7:26:82:de: 4c:db:83:f7:18:51:c1:34:66:87:76:a8:a2:65:c2: 40:05:35:5d:79:18:7e:c4:fe:38:12:6f:f7:bb:53: ab:af:e6:fd:c8:30:d4:1a:81:37:b2:a2:11:8f:74: ae:b4:4e:86:28:80:88:5a:50:b4:50:ae:ad:ac:d3: eb:77:95:5b:8d:2c:a9:d0:5b:c2:a2:0f:50:07:ba: d3:77:ed:64:c6:c6:83:76:b6:06:eb:fb:79:9a:02: fc:bd:9c:e2:a3:89:10:27:ae:ed:29:2a:1e:97:89: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AD:BF:59:95:DC:2C:F9:15:29:67:5D:BE:65:D7:49:89:E9:C5:E3 X509v3 Authority Key Identifier: keyid:21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a0:95:6c:d3:38:42:9e:3a:3c:3b:0b:a8:89:b3:6e:00:25: b4:fc:26:f0:de:e9:68:c1:07:6c:e9:be:89:9b:23:a4:18:3c: 02:b4:b7:f9:84:1f:a1:28:21:c6:f0:2b:45:57:ee:ac:d7:cb: e5:4d:f3:87:31:90:78:2c:32:f1:cd:61:e0:20:fe:11:a3:12: 6c:1f:82:fb:60:d8:da:17:f7:fa:f5:34:26:bc:5e:08:b6:0d: 14:83:c6:87:86:d3:23:45:a7:fb:00:b6:c8:aa:a8:ff:5c:97: 94:6c:39:74:8b:03:a8:5e:aa:84:04:49:b8:a9:14:ec:b0:08: b7:65:0e:e3:04:eb:e4:15:aa:0d:c5:3f:7a:51:1b:87:21:75: 17:54:b8:00:9c:8d:f0:64:9b:3c:50:2d:7a:5d:e4:78:80:ed: 5b:72:e2:b5:92:9a:27:94:bd:2f:1a:7d:ce:fb:0f:5d:42:a1: 62:8b:3f:30:9e:01:b6:10:22:9b:4a:fa:61:20:e0:8d:95:13: 96:4a:3b:10:b0:e8:17:4c:ad:39:da:fa:9c:10:f9:1f:71:cf: 2d:28:b8:9c:1d:ce:f7:97:09:f5:93:85:38:6c:f1:9e:78:71: 5b:82:67:47:58:1c:a8:ad:47:14:a1:c7:75:4a:e1:fc:19:ac: 2f:d2:cc:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeF3ubzBJL7ZKg6Z4vyJI3uPk8tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1 MUMyRDY1RTAeFw0yNTEyMDYxNDI2NTBaFw0yNTEyMDkxNzE1NTBaMDMxMTAvBgNV BAMTKEY2QURCRjU5OTVEQzJDRjkxNTI5Njc1REJFNjVENzQ5ODlFOUM1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEcLL+NkAEfjwVp53xf//Vl7Np +OrOJRjVWyPD3XRzRD1USa2eHqux6l0BoQu4f9MKB/pIguZwbFNmDKAvBP/5Gwno HX8MaWvmgwkLoCdc4chbMdk+fdWgBnL5XYDiyKgX1WAYsUKisGetf06GElq85jdb MUPtud9Oh2oFbU4ryMNFiJvsaC5nPW0tOnOV8qHwpyaC3kzbg/cYUcE0Zod2qKJl wkAFNV15GH7E/jgSb/e7U6uv5v3IMNQagTeyohGPdK60ToYogIhaULRQrq2s0+t3 lVuNLKnQW8KiD1AHutN37WTGxoN2tgbr+3maAvy9nOKjiRAnru0pKh6XiRHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9q2/WZXcLPkVKWddvmXXSYnpxeMwHwYDVR0j BBgwFoAUIfjYjc19gUYYJH8gPwQSblHC1l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMC8yMUY4RDg4RENE N0Q4MTQ2MTgyNDdGMjAzRjA0MTI2RTUxQzJENjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEyNkU1MUMy RDY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlOGRkNDAtYmI5NC00ZDQzLWI4 ODktOGEwOThkN2Y0NWFjLzAvMjFGOEQ4OERDRDdEODE0NjE4MjQ3RjIwM0YwNDEy NkU1MUMyRDY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSglWzTOEKeOjw7C6iJs24AJbT8JvDe6WjB B2zpvombI6QYPAK0t/mEH6EoIcbwK0VX7qzXy+VN84cxkHgsMvHNYeAg/hGjEmwf gvtg2NoX9/r1NCa8Xgi2DRSDxoeG0yNFp/sAtsiqqP9cl5RsOXSLA6heqoQESbip FOywCLdlDuME6+QVqg3FP3pRG4chdRdUuACcjfBkmzxQLXpd5HiA7Vty4rWSmieU vS8afc77D11CoWKLPzCeAbYQIptK+mEg4I2VE5ZKOxCw6BdMrTna+pwQ+R9xzy0o uJwdzveXCfWThThs8Z54cVuCZ0dYHKitRxShx3VK4fwZrC/SzAY= -----END CERTIFICATE-----Generated at Sun Dec 7 03:08:06 2025 by rpki-client