This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft File: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft (raw, json) Hash identifier: Q2+b4PbgmFjVJ3dr1bCTUpwXKPmWODwlKyJ59VcPtY8= Subject key identifier: 58:A6:F8:0F:9E:3D:77:FB:4A:4D:BC:60:8A:FA:E0:0F:84:A6:B8:6C Authority key identifier: 02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C Certificate issuer: /CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Certificate serial: 7E26EF5EA66940B3EEFC0807A0A62616CA68C55D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft Manifest number: 01B9 Signing time: Fri 05 Dec 2025 16:21:07 +0000 Manifest this update: Fri 05 Dec 2025 16:16:07 +0000 Manifest next update: Tue 09 Dec 2025 00:46:07 +0000 Files and hashes: 1: 3130332e36382e3233322e302f32332d3233203d3e20313530353431.roa (hash: Kc/lxVrefc+bupRrJ68EFI/hGZG8rUGEdsySG/KdUtg=) 2: 3130332e36382e3233322e302f32342d3234203d3e20313530353431.roa (hash: Wqex7ELQOaBiRryAU3Sv7VgatxwXxqLf7gFgzNpMvN8=) 3: 3130332e36382e3233332e302f32342d3234203d3e20313530353431.roa (hash: 0h4LPXefYCVhFSmqMvXpparocUGjqxewlYwtoFO4NOQ=) 4: 021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl (hash: BJnJDmw/3QSq37Ox0KNLTXloGtDFw+ay5EFalnUhxes=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:26:ef:5e:a6:69:40:b3:ee:fc:08:07:a0:a6:26:16:ca:68:c5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021C6F972C8EBDDC3336FE4951F22CE86EDADE6C Validity Not Before: Dec 5 16:16:07 2025 GMT Not After : Dec 9 00:46:07 2025 GMT Subject: CN=58A6F80F9E3D77FB4A4DBC608AFAE00F84A6B86C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:61:7b:09:85:fe:57:ee:77:c9:59:f2:0d: 57:5d:d6:b3:20:e6:e5:4e:ad:fc:bb:b6:b9:e1:17: eb:df:b1:7d:f5:d9:95:db:35:15:d8:0b:cb:2e:42: 76:78:d1:9d:e0:07:82:0e:28:c1:32:4d:63:69:19: 2e:57:12:7f:70:c6:e2:b2:8f:22:78:fe:f4:e7:78: 51:f3:ab:98:3b:2a:19:c0:68:cf:39:a6:cf:36:68: f7:03:60:e9:5c:e7:36:e0:b7:ad:3d:9b:94:79:1f: d6:1c:a4:a2:24:39:e9:65:1e:7f:17:4e:de:10:a6: 5e:93:e4:60:6f:f4:4f:b5:ce:e0:53:87:19:9c:82: b3:21:c9:6b:a2:89:22:58:42:5a:f3:1e:04:19:75: ab:33:f1:13:d3:6d:13:ab:e0:a6:89:a9:9a:33:1d: ae:35:2f:b3:19:69:55:81:25:19:91:a8:bd:23:df: f4:32:cf:53:98:86:44:ad:5c:d7:03:6b:4f:8f:95: 46:75:a0:df:58:f1:e8:af:01:1d:6f:89:d8:93:bf: d4:7a:8a:e4:11:c9:3b:93:b3:9c:f8:18:2e:b8:dc: 9a:73:d4:79:49:27:3c:24:8a:35:59:36:ab:fb:16: b7:52:5d:89:7b:f5:4d:09:19:aa:64:67:f0:80:46: b0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A6:F8:0F:9E:3D:77:FB:4A:4D:BC:60:8A:FA:E0:0F:84:A6:B8:6C X509v3 Authority Key Identifier: keyid:02:1C:6F:97:2C:8E:BD:DC:33:36:FE:49:51:F2:2C:E8:6E:DA:DE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1815545c-c996-460f-92dd-6294aec92c52/0/021C6F972C8EBDDC3336FE4951F22CE86EDADE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:97:c3:3d:28:a5:e2:c7:d1:2c:56:f0:7a:db:de:86:23:da: b3:af:4b:fe:12:87:47:9c:d0:f8:9e:c9:1d:5d:f7:46:69:ca: ab:ed:0f:0b:ab:ea:a7:e5:0d:7d:a0:9e:66:5b:b7:0e:fe:5c: dd:90:c5:ba:45:20:bb:75:2e:94:54:42:43:03:d4:6b:99:52: 30:8a:6b:87:9d:93:66:e9:2d:ea:cb:65:ab:c6:f7:35:1a:ef: ae:20:b7:25:00:76:16:ed:1b:fd:a4:5f:83:15:bd:98:f0:dc: 70:13:0b:37:8c:a2:4f:83:84:e9:5b:66:ef:58:f4:f1:13:0e: c4:37:3b:cc:2c:3f:ae:66:33:dc:da:98:b0:ba:cf:d4:6b:bd: f4:ad:9b:9f:b9:35:14:68:98:6a:42:7a:9c:1f:4c:99:f0:b1: b6:b7:f1:a7:99:13:64:98:3c:a0:93:84:bc:59:d9:4f:97:a5: 4d:43:92:30:cd:9f:6b:d8:15:5b:58:82:ea:ad:3c:e5:88:c1: d5:f5:26:26:87:11:1c:23:0d:25:fb:50:5f:59:72:5c:ca:29: f5:4e:94:8f:da:2f:5b:65:8c:b4:07:46:b0:67:6e:9d:3e:fa: f9:04:2d:e5:fe:06:73:1c:3d:6f:05:41:30:1b:4b:0a:d1:22: b8:4a:d0:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfibvXqZpQLPu/AgHoKYmFspoxV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2 RURBREU2QzAeFw0yNTEyMDUxNjE2MDdaFw0yNTEyMDkwMDQ2MDdaMDMxMTAvBgNV BAMTKDU4QTZGODBGOUUzRDc3RkI0QTREQkM2MDhBRkFFMDBGODRBNkI4NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOGF7CYX+V+53yVnyDVdd1rMg 5uVOrfy7trnhF+vfsX312ZXbNRXYC8suQnZ40Z3gB4IOKMEyTWNpGS5XEn9wxuKy jyJ4/vTneFHzq5g7KhnAaM85ps82aPcDYOlc5zbgt609m5R5H9YcpKIkOellHn8X Tt4Qpl6T5GBv9E+1zuBThxmcgrMhyWuiiSJYQlrzHgQZdasz8RPTbROr4KaJqZoz Ha41L7MZaVWBJRmRqL0j3/Qyz1OYhkStXNcDa0+PlUZ1oN9Y8eivAR1vidiTv9R6 iuQRyTuTs5z4GC643Jpz1HlJJzwkijVZNqv7FrdSXYl79U0JGapkZ/CARrAjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWKb4D549d/tKTbxgivrgD4SmuGwwHwYDVR0j BBgwFoAUAhxvlyyOvdwzNv5JUfIs6G7a3mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODE1NTQ1Yy1jOTk2LTQ2MGYtOTJkZC02Mjk0YWVjOTJjNTIvMC8wMjFDNkY5NzJD OEVCRERDMzMzNkZFNDk1MUYyMkNFODZFREFERTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJDRTg2RURB REU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgxNTU0NWMtYzk5Ni00NjBmLTky ZGQtNjI5NGFlYzkyYzUyLzAvMDIxQzZGOTcyQzhFQkREQzMzMzZGRTQ5NTFGMjJD RTg2RURBREU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaXwz0opeLH0SxW8Hrb3oYj2rOvS/4Sh0ec 0PieyR1d90ZpyqvtDwur6qflDX2gnmZbtw7+XN2QxbpFILt1LpRUQkMD1GuZUjCK a4edk2bpLerLZavG9zUa764gtyUAdhbtG/2kX4MVvZjw3HATCzeMok+DhOlbZu9Y 9PETDsQ3O8wsP65mM9zamLC6z9RrvfStm5+5NRRomGpCepwfTJnwsba38aeZE2SY PKCThLxZ2U+XpU1DkjDNn2vYFVtYguqtPOWIwdX1JiaHERwjDSX7UF9ZclzKKfVO lI/aL1tljLQHRrBnbp0++vkELeX+BnMcPW8FQTAbSwrRIrhK0GI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:43 2025 by rpki-client