This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft File: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft (raw, json) Hash identifier: Rv+eLTkJT6TTf5Z1aqiMn3ELVJ2XHCTh+5HHBytEFvw= Subject key identifier: B3:21:22:1D:A6:C5:51:17:17:40:C5:BA:E1:ED:EB:31:AA:E2:3F:B1 Authority key identifier: D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 Certificate issuer: /CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Certificate serial: 5BC0D3E0878A592AB934ED690D2E3A0FD5DFD226 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft Manifest number: 0273 Signing time: Mon 15 Dec 2025 15:01:33 +0000 Manifest this update: Mon 15 Dec 2025 14:56:33 +0000 Manifest next update: Fri 19 Dec 2025 01:52:33 +0000 Files and hashes: 1: D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl (hash: vJTbilaBeB/MU+A9EtfYIL3NYBkoDqewEfMk98M7eBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 01:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c0:d3:e0:87:8a:59:2a:b9:34:ed:69:0d:2e:3a:0f:d5:df:d2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2248A04D994A2569A8FF645D4B025A9F7CB2FE7 Validity Not Before: Dec 15 14:56:33 2025 GMT Not After : Dec 19 01:52:33 2025 GMT Subject: CN=B321221DA6C551171740C5BAE1EDEB31AAE23FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:a1:ed:eb:03:97:4e:0a:01:00:7d:68:0a: 67:40:e6:0e:19:04:28:76:37:b8:94:f0:4c:8e:63: 17:10:6e:00:d2:e8:de:9a:fd:5e:79:30:c4:86:37: b8:0c:12:05:2f:96:76:31:4a:78:4f:51:22:fe:30: 65:f5:6c:50:a5:ee:d2:45:c5:94:6a:12:ff:53:05: 50:fd:1b:55:c1:b8:e7:8e:0b:62:15:25:27:75:84: 6a:fe:dd:19:bd:a6:22:21:9e:a1:96:7a:c4:3e:34: 0f:6c:72:ef:33:97:4c:4c:c3:e3:c0:82:85:d4:51: 09:74:26:56:67:ca:f6:f2:07:de:ef:36:69:48:ed: 40:ee:f2:3c:d2:d3:b2:ac:ec:26:13:a8:d0:d0:6f: 0c:f1:d9:93:17:44:76:cd:4a:71:9d:e6:bb:52:c4: 2f:35:9e:5f:ec:b1:cd:d9:51:70:24:be:94:ce:88: 25:90:6a:aa:bf:ea:24:e4:ea:6e:fc:cd:90:52:1e: b3:31:de:2b:68:bf:81:19:90:a4:6d:ba:e6:3b:18: bd:cc:b3:b6:16:99:91:f2:1f:8e:7c:a1:ef:02:d7: c7:01:ff:19:08:01:83:6f:05:d5:d9:e0:64:9f:26: de:ed:86:9b:cd:f6:b4:0e:d8:8d:7a:41:43:e8:cc: ea:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:21:22:1D:A6:C5:51:17:17:40:C5:BA:E1:ED:EB:31:AA:E2:3F:B1 X509v3 Authority Key Identifier: keyid:D2:24:8A:04:D9:94:A2:56:9A:8F:F6:45:D4:B0:25:A9:F7:CB:2F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a3cc2c1-146c-48a9-b003-7bd83822084d/0/D2248A04D994A2569A8FF645D4B025A9F7CB2FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:64:5b:8f:f6:5f:ca:f6:3b:63:9b:e4:9f:c2:22:9b:c6:5e: af:db:06:a2:17:9e:ee:eb:da:91:fd:76:ee:ca:0a:f6:fa:e5: 86:89:4a:8a:b7:a9:7d:91:7d:55:8b:20:db:64:e6:cc:1d:25: bd:fb:92:5f:d5:66:98:26:62:1c:a9:e9:91:71:c2:06:d3:a3: b3:96:29:d9:79:f1:c3:ac:df:3f:a9:1a:f2:f9:4b:ff:6a:08: c4:4b:25:6e:b4:47:59:cc:5c:40:eb:a5:9b:5c:10:fe:94:54: 05:1f:62:1d:a4:a9:51:05:bd:12:bc:3f:eb:54:ee:89:8a:2b: 89:32:ee:ed:f2:86:8b:6f:50:7c:4a:62:02:f5:1a:89:88:72: 40:df:c9:e3:98:d9:6c:d1:8a:44:55:e1:4a:52:eb:6d:93:4c: 87:8e:9b:25:c3:29:28:d3:5e:cc:a6:92:de:b1:49:a2:94:9e: bc:f4:e7:f8:4b:95:6d:17:b3:da:7e:4d:a3:2f:eb:21:50:fc: 71:e0:d7:a1:f8:d4:7d:85:19:80:63:76:b8:fd:18:17:2b:55: 78:2c:3c:cc:d9:9e:63:fa:8d:b2:52:fa:0e:c5:db:c6:e6:70: 47:1d:5c:fd:99:3e:c2:65:82:02:45:19:8e:dc:fc:2f:2a:a7: be:20:ca:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8DT4IeKWSq5NO1pDS46D9Xf0iYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlG N0NCMkZFNzAeFw0yNTEyMTUxNDU2MzNaFw0yNTEyMTkwMTUyMzNaMDMxMTAvBgNV BAMTKEIzMjEyMjFEQTZDNTUxMTcxNzQwQzVCQUUxRURFQjMxQUFFMjNGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJqHt6wOXTgoBAH1oCmdA5g4Z BCh2N7iU8EyOYxcQbgDS6N6a/V55MMSGN7gMEgUvlnYxSnhPUSL+MGX1bFCl7tJF xZRqEv9TBVD9G1XBuOeOC2IVJSd1hGr+3Rm9piIhnqGWesQ+NA9scu8zl0xMw+PA goXUUQl0JlZnyvbyB97vNmlI7UDu8jzS07Ks7CYTqNDQbwzx2ZMXRHbNSnGd5rtS xC81nl/ssc3ZUXAkvpTOiCWQaqq/6iTk6m78zZBSHrMx3itov4EZkKRtuuY7GL3M s7YWmZHyH458oe8C18cB/xkIAYNvBdXZ4GSfJt7thpvN9rQO2I16QUPozOphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsyEiHabFURcXQMW64e3rMariP7EwHwYDVR0j BBgwFoAU0iSKBNmUolaaj/ZF1LAlqffLL+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTNjYzJjMS0xNDZjLTQ4YTktYjAwMy03YmQ4MzgyMjA4NGQvMC9EMjI0OEEwNEQ5 OTRBMjU2OUE4RkY2NDVENEIwMjVBOUY3Q0IyRkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1QTlGN0NC MkZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWEzY2MyYzEtMTQ2Yy00OGE5LWIw MDMtN2JkODM4MjIwODRkLzAvRDIyNDhBMDREOTk0QTI1NjlBOEZGNjQ1RDRCMDI1 QTlGN0NCMkZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1kW4/2X8r2O2Ob5J/CIpvGXq/bBqIXnu7r 2pH9du7KCvb65YaJSoq3qX2RfVWLINtk5swdJb37kl/VZpgmYhyp6ZFxwgbTo7OW Kdl58cOs3z+pGvL5S/9qCMRLJW60R1nMXEDrpZtcEP6UVAUfYh2kqVEFvRK8P+tU 7omKK4ky7u3yhotvUHxKYgL1GomIckDfyeOY2WzRikRV4UpS622TTIeOmyXDKSjT Xsymkt6xSaKUnrz05/hLlW0Xs9p+TaMv6yFQ/HHg16H41H2FGYBjdrj9GBcrVXgs PMzZnmP6jbJS+g7F28bmcEcdXP2ZPsJlggJFGY7c/C8qp74gyjg= -----END CERTIFICATE-----Generated at Tue Dec 16 07:00:58 2025 by rpki-client