This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft File: 21AB9EB0A860D2619CF210410608EB831A463442.mft (raw, json) Hash identifier: z0N8vui1O5yZhvzRzTkiUzjy7TwCH4+1qKVRcgolpBY= Subject key identifier: DC:6C:ED:0B:90:F9:38:AA:AD:25:B3:98:A3:99:7D:BB:B0:CF:25:15 Authority key identifier: 21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 Certificate issuer: /CN=21AB9EB0A860D2619CF210410608EB831A463442 Certificate serial: 3937371F491A0EDE885331AD009E776851932AEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft Manifest number: DA Signing time: Fri 05 Dec 2025 17:02:04 +0000 Manifest this update: Fri 05 Dec 2025 16:57:04 +0000 Manifest next update: Mon 08 Dec 2025 19:28:04 +0000 Files and hashes: 1: 3230332e3134352e36322e302f32332d3234203d3e203436303233.roa (hash: nYNGAgZ/KHJJA/3d3uL0ysMNm9weFEF7cJoGGKweKrc=) 2: 21AB9EB0A860D2619CF210410608EB831A463442.crl (hash: Hp46b1vjOKnqiXrpSCUxks1L3Zc1xpKQqk7lbaVQF7s=) 3: 3230332e3134352e36332e302f32342d3234203d3e203436303233.roa (hash: ODR1nhecNf1PNEUsr6U6g2HSVbKZCJoeERdVZUfBxjU=) 4: 3230332e3134352e36322e302f32342d3234203d3e203436303233.roa (hash: l3iR50nUIesRrXuxRedIB5m4gPlIpbGPPv3QPItBtu8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:37:37:1f:49:1a:0e:de:88:53:31:ad:00:9e:77:68:51:93:2a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21AB9EB0A860D2619CF210410608EB831A463442 Validity Not Before: Dec 5 16:57:04 2025 GMT Not After : Dec 8 19:28:04 2025 GMT Subject: CN=DC6CED0B90F938AAAD25B398A3997DBBB0CF2515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:c4:2d:1f:f9:04:4d:c1:61:d9:c2:4e:ea: 38:63:c6:03:d7:5f:a8:a3:08:52:10:e1:82:1f:a7: 04:f3:a8:26:63:c0:93:14:a5:f4:f6:71:0e:09:87: 85:92:c2:d3:c6:b8:c8:58:b5:47:19:4e:1d:d9:90: 02:92:28:2d:bd:14:16:5d:7e:ec:7d:82:99:f2:6e: 2f:c9:1b:d6:8d:08:98:65:1f:38:fd:cf:97:0b:24: 27:90:26:1d:ff:42:5c:6b:53:a0:32:1b:bc:b4:bb: c6:fb:a5:b9:ce:3c:d4:87:d4:3d:c5:1a:e1:31:df: c3:46:6a:f1:e0:e7:ff:52:ed:bc:e0:07:38:66:df: 09:9e:28:c8:33:ba:58:66:42:db:ef:0a:2a:05:3b: fb:36:c4:6e:52:bb:55:5c:0f:75:6d:93:b6:a2:77: 7b:8c:32:58:a0:5b:c1:93:50:42:c6:43:17:db:84: f4:ed:c7:c4:ed:36:4a:34:a9:ae:ee:2b:75:a4:30: 9c:c8:4a:20:9f:3b:59:c2:f0:fc:99:15:83:ad:f8: 0a:9f:c8:d0:09:c9:50:18:77:a9:ba:20:e2:4f:75: 49:29:96:dd:da:1e:83:34:33:15:d8:39:b9:a1:a5: c0:52:c0:5f:10:5c:29:03:d3:ca:37:d7:e4:c3:1e: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:ED:0B:90:F9:38:AA:AD:25:B3:98:A3:99:7D:BB:B0:CF:25:15 X509v3 Authority Key Identifier: keyid:21:AB:9E:B0:A8:60:D2:61:9C:F2:10:41:06:08:EB:83:1A:46:34:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21AB9EB0A860D2619CF210410608EB831A463442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dda923-ea36-456b-bafe-40e6b62f50c5/0/21AB9EB0A860D2619CF210410608EB831A463442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d1:ca:83:c3:82:21:83:ff:e9:43:f3:3f:13:6b:d0:36:c7: db:84:53:d0:0f:90:6c:2e:c0:1d:9d:c0:65:2b:a3:fe:26:18: f1:b1:86:21:6b:ba:19:dc:01:ff:88:37:2a:ac:10:b6:b9:f9: 7a:6b:4f:55:5c:72:89:24:a7:f6:39:cd:d9:51:85:e5:63:75: 05:d9:d8:50:03:3c:dc:67:b2:52:ec:49:33:da:fa:9a:91:80: 4d:73:de:e7:73:57:64:16:50:83:9f:47:52:ff:28:0c:62:60: 7e:8c:2c:e4:01:e2:e1:fd:d5:3c:e8:e8:63:7b:e1:bf:cf:df: 72:98:a3:3e:77:49:00:de:86:59:41:11:87:e0:8f:a2:50:e3: aa:a6:7c:fd:07:b8:cf:7d:f1:d2:c0:8d:06:6d:cb:52:ee:08: c4:f5:e4:15:db:50:a5:be:66:7b:3d:64:29:c4:be:d4:8b:1f: c6:4e:0b:c0:b1:3c:2d:a8:bb:6b:81:4e:b9:d4:b6:46:a8:b9: 88:b1:40:fe:66:d4:79:c5:8a:37:c1:06:2d:8b:93:40:9a:46: 42:f1:9a:f2:b5:85:96:8b:8c:c5:3a:1f:4d:89:9a:b0:3b:34: 7e:39:e0:24:53:3e:16:bd:7b:a2:72:65:eb:c8:00:6b:c5:5b: 7e:f4:88:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTc3H0kaDt6IUzGtAJ53aFGTKuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMx QTQ2MzQ0MjAeFw0yNTEyMDUxNjU3MDRaFw0yNTEyMDgxOTI4MDRaMDMxMTAvBgNV BAMTKERDNkNFRDBCOTBGOTM4QUFBRDI1QjM5OEEzOTk3REJCQjBDRjI1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRMQtH/kETcFh2cJO6jhjxgPX X6ijCFIQ4YIfpwTzqCZjwJMUpfT2cQ4Jh4WSwtPGuMhYtUcZTh3ZkAKSKC29FBZd fux9gpnybi/JG9aNCJhlHzj9z5cLJCeQJh3/QlxrU6AyG7y0u8b7pbnOPNSH1D3F GuEx38NGavHg5/9S7bzgBzhm3wmeKMgzulhmQtvvCioFO/s2xG5Su1VcD3Vtk7ai d3uMMligW8GTUELGQxfbhPTtx8TtNko0qa7uK3WkMJzISiCfO1nC8PyZFYOt+Aqf yNAJyVAYd6m6IOJPdUkplt3aHoM0MxXYObmhpcBSwF8QXCkD08o31+TDHoxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3GztC5D5OKqtJbOYo5l9u7DPJRUwHwYDVR0j BBgwFoAUIauesKhg0mGc8hBBBgjrgxpGNEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RkYTkyMy1lYTM2LTQ1NmItYmFmZS00MGU2YjYyZjUwYzUvMC8yMUFCOUVCMEE4 NjBEMjYxOUNGMjEwNDEwNjA4RUI4MzFBNDYzNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVCODMxQTQ2 MzQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkZGE5MjMtZWEzNi00NTZiLWJh ZmUtNDBlNmI2MmY1MGM1LzAvMjFBQjlFQjBBODYwRDI2MTlDRjIxMDQxMDYwOEVC ODMxQTQ2MzQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7RyoPDgiGD/+lD8z8Ta9A2x9uEU9APkGwu wB2dwGUro/4mGPGxhiFruhncAf+INyqsELa5+XprT1Vccokkp/Y5zdlRheVjdQXZ 2FADPNxnslLsSTPa+pqRgE1z3udzV2QWUIOfR1L/KAxiYH6MLOQB4uH91Tzo6GN7 4b/P33KYoz53SQDehllBEYfgj6JQ46qmfP0HuM998dLAjQZty1LuCMT15BXbUKW+ Zns9ZCnEvtSLH8ZOC8CxPC2ou2uBTrnUtkaouYixQP5m1HnFijfBBi2Lk0CaRkLx mvK1hZaLjMU6H02JmrA7NH454CRTPha9e6JyZevIAGvFW370iCQ= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:22 2025 by rpki-client