This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft (raw, json) Hash identifier: Sq4QxUBStrJQlPWm/1pGbqiMvVQd14eXcovzolEmnyM= Subject key identifier: 12:8E:6E:83:F9:74:5B:A5:1A:C9:4D:F7:F5:03:FE:41:B8:07:51:6D Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Certificate issuer: /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Certificate serial: 4191217E80AF7E8335EC9C9648993540A0FD55CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft Manifest number: 018A Signing time: Sat 06 Dec 2025 09:22:24 +0000 Manifest this update: Sat 06 Dec 2025 09:17:24 +0000 Manifest next update: Tue 09 Dec 2025 11:01:24 +0000 Files and hashes: 1: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl (hash: Q9qYEMQ/xlHdFv5w91UenPbqciat+LkE/MNVSYF0Y6Y=) 2: 3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (hash: LGuKxagsq/7vmLaELbXZH0S7mkj0txetpKocd5RK03Y=) 3: 3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (hash: OhIKqdGLlbYOYf2QSJaf1Zp1dQFPdS35U6UJ3Ooje5Q=) 4: 3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (hash: /c44B7YWLXkTIXveICv4tGTzoppi+BEbX8keLXTbk3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:91:21:7e:80:af:7e:83:35:ec:9c:96:48:99:35:40:a0:fd:55:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Validity Not Before: Dec 6 09:17:24 2025 GMT Not After : Dec 9 11:01:24 2025 GMT Subject: CN=128E6E83F9745BA51AC94DF7F503FE41B807516D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:8e:21:d1:63:4f:36:13:34:91:eb:1e:cb: e9:54:ef:fb:92:5b:1d:29:d8:61:7f:ff:fb:ed:88: 46:dd:0c:65:90:ca:e8:78:f3:62:04:8a:ee:d7:52: a5:ad:98:01:76:31:00:ec:d7:7b:dc:e1:a4:73:9f: fb:b7:3f:37:94:f4:8a:a5:11:ba:1f:44:5b:ea:1f: be:d7:0d:e4:0d:4a:fa:94:7f:57:3f:b7:98:c2:d9: f2:b8:a9:e2:59:0d:ba:08:7d:80:42:8f:b0:2c:a7: 98:90:7c:a0:b3:14:bc:61:e3:a7:94:e3:9b:a1:c5: 70:9b:57:fb:58:bb:ac:a1:3b:25:99:e0:e5:d4:05: 54:ad:76:99:47:5d:10:7d:83:b0:21:06:a6:33:ff: 5c:15:16:9a:d3:d1:75:23:06:ab:72:81:32:e3:53: 3f:7b:84:38:d0:23:13:93:1f:47:34:ea:be:67:a2: 1f:02:a9:b6:1b:2d:a8:94:97:5e:3d:c8:50:a3:7c: 1a:8c:e8:6c:ae:4f:e3:5c:90:b4:78:01:03:bd:d4: 70:95:d0:ec:32:f8:5c:23:e2:3a:24:3c:6f:6e:74: 2b:70:d8:4f:c2:10:55:bb:75:82:f8:02:2e:39:30: 80:d6:21:8c:a6:dc:1d:c2:7b:b6:16:6b:cf:bb:68: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8E:6E:83:F9:74:5B:A5:1A:C9:4D:F7:F5:03:FE:41:B8:07:51:6D X509v3 Authority Key Identifier: keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:db:8e:8f:4b:2f:7a:79:14:9f:0e:f2:da:a4:68:1c:44:75: 20:65:ea:d7:93:f9:1b:ad:22:b2:ed:1d:3e:e4:ba:9a:ff:84: 9a:24:b4:d9:3b:a2:fd:ad:be:4d:a3:f8:5c:9a:7c:a4:da:2c: 2b:2f:96:5f:5b:6d:d9:ae:39:90:56:b6:e5:64:4e:f7:d2:ad: 43:fe:27:4f:13:0b:be:87:1a:8e:3d:90:3e:14:a9:11:07:5b: 53:9f:25:00:d3:73:8c:da:cf:e9:80:1a:66:f5:a4:1a:ae:ad: 5a:36:93:5d:7d:3d:a9:71:01:a1:16:b9:03:c1:fe:bf:0e:39: f5:22:6c:fb:77:c7:91:00:96:95:05:eb:06:79:b3:52:5a:5f: 16:fd:b9:e0:bb:a4:6f:85:6a:db:89:ce:74:6d:d9:a9:83:22: a0:60:7d:90:b9:a4:3d:b7:d8:1a:0f:8d:28:65:6d:97:18:15: 05:75:a4:b9:43:7d:3c:ed:9f:50:08:20:bb:a9:82:c3:0b:94: f5:3e:09:36:11:88:d9:b1:45:ef:22:78:2a:a3:fc:71:1f:d5: c9:03:55:01:7b:d1:4b:25:2b:b7:47:9a:40:35:b9:c6:0c:d6: a8:7a:7d:4d:ed:07:fa:6e:81:d5:d0:a7:de:ef:2b:ba:c2:24: 21:30:b5:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZEhfoCvfoM17JyWSJk1QKD9VcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB MEI4RDNCMzAeFw0yNTEyMDYwOTE3MjRaFw0yNTEyMDkxMTAxMjRaMDMxMTAvBgNV BAMTKDEyOEU2RTgzRjk3NDVCQTUxQUM5NERGN0Y1MDNGRTQxQjgwNzUxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ044h0WNPNhM0kesey+lU7/uS Wx0p2GF///vtiEbdDGWQyuh482IEiu7XUqWtmAF2MQDs13vc4aRzn/u3PzeU9Iql EbofRFvqH77XDeQNSvqUf1c/t5jC2fK4qeJZDboIfYBCj7Asp5iQfKCzFLxh46eU 45uhxXCbV/tYu6yhOyWZ4OXUBVStdplHXRB9g7AhBqYz/1wVFprT0XUjBqtygTLj Uz97hDjQIxOTH0c06r5noh8CqbYbLaiUl149yFCjfBqM6GyuT+NckLR4AQO91HCV 0Owy+Fwj4jokPG9udCtw2E/CEFW7dYL4Ai45MIDWIYym3B3Ce7YWa8+7aEg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEo5ug/l0W6UayU339QP+QbgHUW0wHwYDVR0j BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0 NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4 RDNCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzYyYmFjYzktZDI1ZC00NjEwLWFl ZTQtNjU1YTE0ZWEyZmQ2LzAvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NC NjdBMEI4RDNCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzbjo9LL3p5FJ8O8tqkaBxEdSBl6teT+Rut IrLtHT7kupr/hJoktNk7ov2tvk2j+FyafKTaLCsvll9bbdmuOZBWtuVkTvfSrUP+ J08TC76HGo49kD4UqREHW1OfJQDTc4zaz+mAGmb1pBqurVo2k119PalxAaEWuQPB /r8OOfUibPt3x5EAlpUF6wZ5s1JaXxb9ueC7pG+FatuJznRt2amDIqBgfZC5pD23 2BoPjShlbZcYFQV1pLlDfTztn1AIILupgsMLlPU+CTYRiNmxRe8ieCqj/HEf1ckD VQF70UslK7dHmkA1ucYM1qh6fU3tB/pugdXQp97vK7rCJCEwtaM= -----END CERTIFICATE-----Generated at Sun Dec 7 07:09:36 2025 by rpki-client