This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: pqwQfEUYevHhRPzlXgN+/5L1BFVdrMgtLXJqehwOjao= Subject key identifier: 14:FA:C6:DA:04:A3:77:13:3D:27:B2:97:B0:A2:B8:F8:7E:EE:F2:08 Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 4E2001F08112CBCEB008E5BD8DBDAE1D6E757308 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 026E Signing time: Thu 04 Dec 2025 21:31:31 +0000 Manifest this update: Thu 04 Dec 2025 21:26:31 +0000 Manifest next update: Mon 08 Dec 2025 05:36:31 +0000 Files and hashes: 1: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: 0cPFe9rUqq1z8Tll9qkyeTXvz96rPL+07QYuE96m5TQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:20:01:f0:81:12:cb:ce:b0:08:e5:bd:8d:bd:ae:1d:6e:75:73:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Dec 4 21:26:31 2025 GMT Not After : Dec 8 05:36:31 2025 GMT Subject: CN=14FAC6DA04A377133D27B297B0A2B8F87EEEF208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f4:75:31:44:46:a0:c8:7d:77:b3:38:5b:0d: 37:5b:79:20:36:e5:43:d5:5c:c3:b1:38:de:c8:fd: 8f:a7:51:bb:83:ba:d7:2d:1b:96:9b:e4:9c:7a:44: 18:8d:dc:29:49:df:1d:2f:68:c6:aa:c1:0d:03:de: 53:4b:d1:3c:5a:2f:dc:17:38:0b:1f:b4:33:c0:f5: 74:70:cd:af:43:1f:83:81:61:81:e3:35:db:7c:ad: 28:f8:ad:b4:47:97:bc:0e:2b:f6:d1:84:bf:95:b7: ec:bc:2b:59:cf:d9:1f:9a:80:df:ba:e4:80:0c:03: f6:ef:45:79:d8:ba:6f:64:a3:fd:97:c6:9a:17:2a: db:d9:18:87:9f:ad:70:b2:62:a1:70:67:bf:d2:b9: ac:5a:d5:39:52:b4:b8:bb:21:5d:c9:c7:bd:61:b7: 14:fe:21:e5:6f:58:3f:8c:dc:b7:95:87:46:cf:93: 1a:44:27:d2:88:4c:ac:c5:a1:0e:55:bb:08:9f:67: ca:52:9f:90:45:2b:e3:77:96:1f:bc:34:a7:42:d5: e1:07:5e:a5:d6:e2:56:d8:16:19:7b:7d:4d:28:a4: 8a:76:67:3f:4a:d9:ea:5a:b3:8c:64:04:be:7f:b4: da:7d:c6:61:c6:8b:5b:49:40:9e:69:b4:13:77:b3: ec:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FA:C6:DA:04:A3:77:13:3D:27:B2:97:B0:A2:B8:F8:7E:EE:F2:08 X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:b0:9f:c4:61:74:d3:5f:6e:88:0c:88:7b:a3:7c:af:92:a8: 1d:3f:af:c2:a3:93:e3:1d:0a:4f:84:1a:0c:be:73:a3:64:e0: 3e:36:5a:21:2c:01:82:0e:19:16:13:fe:c2:8c:0e:71:4d:68: cd:1d:8f:87:a2:93:4e:0e:1c:e1:1f:d0:4b:a3:b4:6b:72:5d: b9:8c:45:ad:ce:f2:29:8f:da:22:82:f2:74:50:6f:70:1e:7b: 2b:2b:fc:bc:65:48:66:cf:ce:fc:d4:68:87:96:5c:55:f2:81: 57:a7:c8:ce:88:4b:f5:ca:11:ad:0a:a1:b8:b4:5d:47:bf:0c: b4:2a:34:22:24:b0:4d:18:00:51:29:bf:c7:91:9e:60:00:a8: 33:a8:ae:5e:17:da:92:91:79:c7:f8:7d:3f:49:6d:b9:03:be: 4c:b1:b4:e5:bc:a8:5b:d1:15:00:cc:87:dd:30:d9:86:ed:53: 27:63:7d:42:63:7c:33:27:c0:02:47:f8:76:b2:c3:7c:de:a8: 3a:f6:10:9a:0d:90:66:65:54:5d:26:55:32:06:ee:f8:fe:cc: 46:3b:84:7b:6f:3b:63:d2:5d:b9:7f:40:a3:fb:fb:6e:a0:7d: a9:f5:e1:50:3a:78:56:9f:9e:18:58:05:d9:52:0a:fc:dd:f2: d9:7e:0b:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTiAB8IESy86wCOW9jb2uHW51cwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNTEyMDQyMTI2MzFaFw0yNTEyMDgwNTM2MzFaMDMxMTAvBgNV BAMTKDE0RkFDNkRBMDRBMzc3MTMzRDI3QjI5N0IwQTJCOEY4N0VFRUYyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ9HUxREagyH13szhbDTdbeSA2 5UPVXMOxON7I/Y+nUbuDutctG5ab5Jx6RBiN3ClJ3x0vaMaqwQ0D3lNL0TxaL9wX OAsftDPA9XRwza9DH4OBYYHjNdt8rSj4rbRHl7wOK/bRhL+Vt+y8K1nP2R+agN+6 5IAMA/bvRXnYum9ko/2XxpoXKtvZGIefrXCyYqFwZ7/Suaxa1TlStLi7IV3Jx71h txT+IeVvWD+M3LeVh0bPkxpEJ9KITKzFoQ5VuwifZ8pSn5BFK+N3lh+8NKdC1eEH XqXW4lbYFhl7fU0opIp2Zz9K2epas4xkBL5/tNp9xmHGi1tJQJ5ptBN3s+wlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFPrG2gSjdxM9J7KXsKK4+H7u8ggwHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiwn8RhdNNfbogMiHujfK+SqB0/r8Kjk+Md Ck+EGgy+c6Nk4D42WiEsAYIOGRYT/sKMDnFNaM0dj4eik04OHOEf0EujtGtyXbmM Ra3O8imP2iKC8nRQb3Aeeysr/LxlSGbPzvzUaIeWXFXygVenyM6IS/XKEa0Kobi0 XUe/DLQqNCIksE0YAFEpv8eRnmAAqDOorl4X2pKRecf4fT9JbbkDvkyxtOW8qFvR FQDMh90w2YbtUydjfUJjfDMnwAJH+Hayw3zeqDr2EJoNkGZlVF0mVTIG7vj+zEY7 hHtvO2PSXbl/QKP7+26gfan14VA6eFafnhhYBdlSCvzd8tl+C9o= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:16 2025 by rpki-client