This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft File: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft (raw, json) Hash identifier: pfA1FZGOB5C8DFuzL+NZUS2gZrdUJ+HGWyP4Sgn2pnI= Subject key identifier: 67:52:AF:FA:01:EF:5D:7D:4E:25:0D:6A:BD:C3:BC:AF:DE:82:25:CF Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 Certificate issuer: /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Certificate serial: 4C7E986611C83A6281E49CDB6445F38C4C903B0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft Manifest number: 0238 Signing time: Fri 05 Dec 2025 10:40:57 +0000 Manifest this update: Fri 05 Dec 2025 10:35:57 +0000 Manifest next update: Mon 08 Dec 2025 18:12:57 +0000 Files and hashes: 1: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: nZ1CR/rbID4ESxk42tIk0CS9T1eppeEb7s7cp74yVZ4=) 2: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl (hash: N82TfdFSOr68lkz5Cm5dASHHVzBd3kGhxkgdvowp6Ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7e:98:66:11:c8:3a:62:81:e4:9c:db:64:45:f3:8c:4c:90:3b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Validity Not Before: Dec 5 10:35:57 2025 GMT Not After : Dec 8 18:12:57 2025 GMT Subject: CN=6752AFFA01EF5D7D4E250D6ABDC3BCAFDE8225CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:51:d9:00:16:c5:5b:45:42:25:63:86:f7: 7b:0e:4f:1c:d3:28:70:7a:85:0b:f4:b0:d5:8d:ba: 7c:06:c9:3c:f2:05:45:63:1c:5a:88:d7:09:ce:f1: 79:81:75:38:c6:55:c7:6d:79:b3:bb:3d:69:1a:05: 65:bc:a4:b4:79:cb:9e:0c:dd:2b:3f:3f:1d:5e:8f: c8:7b:57:64:f0:c1:d0:07:dc:9e:48:f8:96:eb:e4: 4c:af:9f:9f:00:27:99:66:08:60:91:a9:c7:47:2a: 90:48:3e:51:8e:d1:e8:8d:05:51:65:57:28:98:ec: 7b:e3:e0:30:44:88:21:6f:11:7e:16:f0:06:7b:2d: 10:d5:8c:00:28:0b:de:53:32:32:7d:80:6d:a5:49: 03:ea:ec:e5:7c:72:00:28:fc:ae:f3:00:9a:0a:52: 3a:91:c7:c3:8e:06:5f:59:af:52:34:0d:32:8f:e5: ab:21:fd:09:57:cb:73:fa:49:22:24:26:9c:45:dd: 02:f4:73:87:d7:02:84:b7:f3:23:b8:82:b4:d1:37: b9:da:8a:4f:3d:c3:4b:84:a9:86:f6:b1:dc:5d:aa: 0e:30:27:9e:e3:56:38:83:41:db:42:fc:de:0d:17: 9d:8d:ef:32:89:a7:60:14:f2:14:45:79:d3:ed:9b: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:52:AF:FA:01:EF:5D:7D:4E:25:0D:6A:BD:C3:BC:AF:DE:82:25:CF X509v3 Authority Key Identifier: keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:2e:c1:46:78:bf:18:f7:36:56:7a:64:f9:b9:87:16:b0:44: 63:53:f5:91:45:ce:7f:77:27:97:62:a1:99:f4:c6:72:60:29: 65:f0:c4:e0:c4:b7:9a:12:d8:55:8e:6b:d3:25:cf:f0:e1:c8: 46:44:3b:d8:4f:51:a4:96:1f:5a:13:01:0e:42:c9:28:7a:39: 52:90:89:ae:81:6a:26:af:04:a0:4f:8c:73:a3:e4:6a:92:86: 12:7a:73:22:f6:a6:95:6d:be:e6:47:f3:dc:64:1c:6b:cc:13: 2c:3a:a1:90:9d:6b:49:54:22:6c:06:1a:44:17:4e:8c:e0:02: 0a:e8:da:fb:e9:fd:55:52:fd:51:fe:37:bf:e6:e6:b1:82:33: d1:db:23:f7:e6:8e:fe:27:c2:f7:50:ae:ef:68:cf:9e:55:88: 5b:82:f8:de:d8:ce:a4:26:27:c3:26:d2:79:f2:80:4d:53:35: 46:54:9d:70:27:0b:fb:86:a4:bd:99:22:c6:ef:5e:ef:f9:b9: 35:d7:6e:a3:36:50:c8:98:cf:12:3f:75:7d:1d:e6:8e:e8:74: ce:20:de:80:d9:29:89:a8:fe:b9:8d:bf:5f:4a:9d:39:85:90: 19:7b:71:15:c5:ec:46:06:e2:f9:dd:62:2a:45:3e:00:38:cd: 77:0e:8e:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTH6YZhHIOmKB5JzbZEXzjEyQOwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0Iy QkE4RTJFNjAeFw0yNTEyMDUxMDM1NTdaFw0yNTEyMDgxODEyNTdaMDMxMTAvBgNV BAMTKDY3NTJBRkZBMDFFRjVEN0Q0RTI1MEQ2QUJEQzNCQ0FGREU4MjI1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjAFHZABbFW0VCJWOG93sOTxzT KHB6hQv0sNWNunwGyTzyBUVjHFqI1wnO8XmBdTjGVcdtebO7PWkaBWW8pLR5y54M 3Ss/Px1ej8h7V2TwwdAH3J5I+Jbr5Eyvn58AJ5lmCGCRqcdHKpBIPlGO0eiNBVFl VyiY7Hvj4DBEiCFvEX4W8AZ7LRDVjAAoC95TMjJ9gG2lSQPq7OV8cgAo/K7zAJoK UjqRx8OOBl9Zr1I0DTKP5ash/QlXy3P6SSIkJpxF3QL0c4fXAoS38yO4grTRN7na ik89w0uEqYb2sdxdqg4wJ57jVjiDQdtC/N4NF52N7zKJp2AU8hRFedPtmybjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ1Kv+gHvXX1OJQ1qvcO8r96CJc8wHwYDVR0j BBgwFoAUEyaopCE3iRpws8C7MBzWyyuo4uYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjExMjZkMy0xM2JlLTQ1MDgtYjk3ZC0xM2ZlNjVhNWI0ZDYvMC8xMzI2QThBNDIx Mzc4OTFBNzBCM0MwQkIzMDFDRDZDQjJCQThFMkU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0IyQkE4 RTJFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2 Q0IyQkE4RTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcuwUZ4vxj3NlZ6ZPm5hxawRGNT9ZFFzn93 J5dioZn0xnJgKWXwxODEt5oS2FWOa9Mlz/DhyEZEO9hPUaSWH1oTAQ5CySh6OVKQ ia6BaiavBKBPjHOj5GqShhJ6cyL2ppVtvuZH89xkHGvMEyw6oZCda0lUImwGGkQX TozgAgro2vvp/VVS/VH+N7/m5rGCM9HbI/fmjv4nwvdQru9oz55ViFuC+N7YzqQm J8Mm0nnygE1TNUZUnXAnC/uGpL2ZIsbvXu/5uTXXbqM2UMiYzxI/dX0d5o7odM4g 3oDZKYmo/rmNv19KnTmFkBl7cRXF7EYG4vndYipFPgA4zXcOjto= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:33 2025 by rpki-client