This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft File: 722D23AD0F959CE5CBFF927C152517F07060D195.mft (raw, json) Hash identifier: 0aY9SktOY+GNIaySnw+FaTlekr1b96Gc5xy6n3McuOM= Subject key identifier: B1:5F:CB:A5:64:4E:50:6E:3F:58:08:1D:F5:57:85:E3:8C:51:6C:4D Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Certificate issuer: /CN=722D23AD0F959CE5CBFF927C152517F07060D195 Certificate serial: 4B231CF307989744042A5B498373B7A8B5999B4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft Manifest number: 01EC Signing time: Sat 06 Dec 2025 16:11:51 +0000 Manifest this update: Sat 06 Dec 2025 16:06:51 +0000 Manifest next update: Tue 09 Dec 2025 22:35:51 +0000 Files and hashes: 1: 722D23AD0F959CE5CBFF927C152517F07060D195.crl (hash: Bpemua2EWQ+5yuHNcgmqjzQwBG17oeDNGg8qtiDKgW0=) 2: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=) 3: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: IgvUit+JVnRvJOkjIYlvNPAALXRaIVBYKC5WzTyMkfQ=) 4: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: bai8drpp5Ou2lflIGmVUiQ7O559qS/qew2SdTRLBcyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:23:1c:f3:07:98:97:44:04:2a:5b:49:83:73:b7:a8:b5:99:9b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Validity Not Before: Dec 6 16:06:51 2025 GMT Not After : Dec 9 22:35:51 2025 GMT Subject: CN=B15FCBA5644E506E3F58081DF55785E38C516C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:50:b5:4d:32:e4:c5:a0:af:4b:9a:8e:6c: 88:f1:bb:f1:2e:cc:44:de:93:88:67:be:d6:57:80: c8:4d:6f:f2:f5:2f:dc:96:94:ee:d4:02:23:58:07: e9:ec:0d:d5:21:0c:7e:64:6f:ee:56:9f:f8:08:10: a0:7a:32:7f:f3:90:ee:8a:b1:4d:54:49:12:58:62: 96:74:5a:72:75:3c:a6:da:d9:35:c9:a2:9f:a5:91: 5b:50:2a:79:60:99:0c:80:6f:c3:34:13:0c:17:1c: 84:2c:83:48:5c:a1:4b:d6:88:3f:e7:90:77:9d:a9: 5b:15:bb:ed:85:39:14:e2:11:62:d4:f3:94:17:61: a9:30:04:fa:fc:3a:b3:8d:1a:85:51:14:76:f8:d3: 1b:a4:6c:3a:e7:99:e3:d0:fe:00:19:c0:ff:db:48: ee:0e:1e:d1:10:5e:cb:b2:45:4c:be:fb:ba:f7:1a: 4a:20:12:46:51:97:f4:4d:bb:21:ac:1a:87:78:66: 28:7d:1a:39:c0:f8:ca:ee:05:1c:9b:46:7d:2b:c4: a3:36:0c:15:8e:87:cd:38:b1:a5:bd:79:c4:aa:67: 6b:f5:80:84:7d:95:f4:7a:bf:bd:28:ff:f0:18:80: 83:31:6f:eb:e0:b9:bc:06:b2:27:ae:5c:6a:c5:62: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5F:CB:A5:64:4E:50:6E:3F:58:08:1D:F5:57:85:E3:8C:51:6C:4D X509v3 Authority Key Identifier: keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:35:f1:ea:25:f0:91:9e:28:bb:94:43:f5:fb:06:31:94:08: 65:bf:ac:d4:cc:29:85:49:58:9c:52:5d:91:ae:d3:03:40:11: e2:4a:92:44:8d:0a:6f:ec:e4:4d:e5:c5:e4:88:4e:7c:30:88: 66:55:66:d7:74:7d:da:71:ee:36:ad:dc:40:68:e4:68:7d:0a: 78:24:1c:3c:2f:ef:a3:01:c7:a6:72:bc:be:c2:6f:02:ab:09: 44:00:2c:a8:78:61:4b:69:18:f0:a4:74:29:98:ee:33:46:73: 2d:58:15:a2:57:fa:1b:e7:dd:f2:2a:23:da:70:fe:fa:14:b2: af:6f:5f:c4:96:ff:d7:a5:48:f5:8f:2f:84:ba:d3:f1:fd:38: 66:64:5b:8a:22:fb:9d:3d:29:f4:46:51:1f:f9:0f:11:42:57: d4:c6:25:c5:0c:4f:70:c6:a4:b7:86:91:a3:12:09:8f:a3:9b: ef:f5:76:6a:12:e9:23:67:dd:e5:7f:87:90:81:5a:26:c3:0e: a1:e2:67:2c:71:75:3b:0d:2e:d4:ab:d3:a4:69:d8:a9:87:46: d2:ee:27:63:47:d0:38:e3:42:53:6f:8e:6e:d0:d0:4e:39:b9: a7:4b:e2:6a:b2:ad:85:a9:3c:56:1b:b3:19:89:4e:c2:04:fc: 43:7a:e3:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyMc8weYl0QEKltJg3O3qLWZm04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3 MDYwRDE5NTAeFw0yNTEyMDYxNjA2NTFaFw0yNTEyMDkyMjM1NTFaMDMxMTAvBgNV BAMTKEIxNUZDQkE1NjQ0RTUwNkUzRjU4MDgxREY1NTc4NUUzOEM1MTZDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQl1C1TTLkxaCvS5qObIjxu/Eu zETek4hnvtZXgMhNb/L1L9yWlO7UAiNYB+nsDdUhDH5kb+5Wn/gIEKB6Mn/zkO6K sU1USRJYYpZ0WnJ1PKba2TXJop+lkVtQKnlgmQyAb8M0EwwXHIQsg0hcoUvWiD/n kHedqVsVu+2FORTiEWLU85QXYakwBPr8OrONGoVRFHb40xukbDrnmePQ/gAZwP/b SO4OHtEQXsuyRUy++7r3GkogEkZRl/RNuyGsGod4Zih9GjnA+MruBRybRn0rxKM2 DBWOh804saW9ecSqZ2v1gIR9lfR6v70o//AYgIMxb+vgubwGsieuXGrFYjhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsV/LpWROUG4/WAgd9VeF44xRbE0wHwYDVR0j BBgwFoAUci0jrQ+VnOXL/5J8FSUX8HBg0ZUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x Y2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMC83MjJEMjNBRDBG OTU5Q0U1Q0JGRjkyN0MxNTI1MTdGMDcwNjBEMTk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3RjA3MDYw RDE5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh OTItZDkwZmVhOWM4ZjA1LzAvNzIyRDIzQUQwRjk1OUNFNUNCRkY5MjdDMTUyNTE3 RjA3MDYwRDE5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFc18eol8JGeKLuUQ/X7BjGUCGW/rNTMKYVJ WJxSXZGu0wNAEeJKkkSNCm/s5E3lxeSITnwwiGZVZtd0fdpx7jat3EBo5Gh9Cngk HDwv76MBx6ZyvL7CbwKrCUQALKh4YUtpGPCkdCmY7jNGcy1YFaJX+hvn3fIqI9pw /voUsq9vX8SW/9elSPWPL4S60/H9OGZkW4oi+509KfRGUR/5DxFCV9TGJcUMT3DG pLeGkaMSCY+jm+/1dmoS6SNn3eV/h5CBWibDDqHiZyxxdTsNLtSr06Rp2KmHRtLu J2NH0DjjQlNvjm7Q0E45uadL4mqyrYWpPFYbsxmJTsIE/EN64yc= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:05 2025 by rpki-client