This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft File: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft (raw, json) Hash identifier: LTP5ut7iIgLH/6mHZQfiPQ83w4Eteuw1xOh8EEIvpDc= Subject key identifier: 3F:35:82:10:AA:2D:42:38:A1:2E:0F:62:8E:02:65:07:94:8D:C6:E1 Authority key identifier: 22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F Certificate issuer: /CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Certificate serial: 713E12AEA118BB85F1943B17DA3BBB4EDC7EE03E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft Manifest number: 01CE Signing time: Sat 06 Dec 2025 18:10:49 +0000 Manifest this update: Sat 06 Dec 2025 18:05:49 +0000 Manifest next update: Tue 09 Dec 2025 22:29:49 +0000 Files and hashes: 1: 22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl (hash: 7ewUxwUEmhm/dJy2VGECsg4M76LlB57S48PHugFGzqI=) 2: 3130332e3133392e3137352e302f32342d3234203d3e20313331373435.roa (hash: /z/ZhPaw5F3TCZQvmgqcleuF3rFMMJYxb+Mr//w9yXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3e:12:ae:a1:18:bb:85:f1:94:3b:17:da:3b:bb:4e:dc:7e:e0:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22825A0BEE926683AC41A0486AEF55AF8C1C228F Validity Not Before: Dec 6 18:05:49 2025 GMT Not After : Dec 9 22:29:49 2025 GMT Subject: CN=3F358210AA2D4238A12E0F628E026507948DC6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:63:76:05:5b:4a:3f:33:7f:4d:76:ed:37: 6d:0c:82:c4:0e:d3:39:35:07:78:bf:60:6d:9a:ff: 36:4d:f6:5c:26:db:b3:48:cb:80:70:16:67:8c:e6: 3a:40:37:d8:35:bf:b0:2a:c3:e8:13:cb:42:5c:bc: 1c:82:6a:f5:9c:ca:73:51:0e:2f:a5:a7:25:23:eb: f8:26:50:c1:6f:42:4b:f6:88:1a:7f:93:4e:1e:50: 8e:c7:b5:d7:e3:cc:6f:8f:35:13:cc:1a:f7:b8:68: 56:a8:fd:4c:25:56:b1:a2:2d:9d:05:53:a4:e3:fb: ce:f5:50:74:19:c0:92:e6:9b:ba:da:ce:dc:19:c7: 50:57:1a:db:26:72:83:1e:7f:0c:a8:4c:78:34:88: cb:95:b4:fa:9d:a2:d2:79:01:fc:18:23:ba:97:22: eb:96:ba:31:45:07:00:b6:d3:09:f2:b9:d8:31:de: fc:71:26:de:ae:c1:b0:93:af:8e:75:a8:54:24:5b: 7c:f8:5d:1c:13:57:d4:93:79:dc:72:51:e5:60:10: 96:39:3a:66:dd:df:af:33:87:0e:ed:57:2b:65:f5: 94:43:43:bf:8e:e8:38:f1:92:ba:5f:61:33:d8:ca: c7:00:7a:90:fb:98:74:cc:5f:ff:e8:dd:cf:8d:be: 32:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:35:82:10:AA:2D:42:38:A1:2E:0F:62:8E:02:65:07:94:8D:C6:E1 X509v3 Authority Key Identifier: keyid:22:82:5A:0B:EE:92:66:83:AC:41:A0:48:6A:EF:55:AF:8C:1C:22:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22825A0BEE926683AC41A0486AEF55AF8C1C228F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3900208b-32ac-4a26-9d92-609ad76183c1/0/22825A0BEE926683AC41A0486AEF55AF8C1C228F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:6e:ec:99:03:88:fa:88:17:7e:a1:d0:81:48:49:0f:b0:a5: 26:2c:7a:9c:d6:08:7d:2c:d6:d9:61:c2:24:94:81:1b:63:2b: 9d:7a:91:d4:38:20:6e:06:a2:c6:ae:1f:1d:1d:8f:d7:da:c1: f9:3a:38:31:e8:03:6c:61:28:ac:8f:08:72:b1:07:de:f9:20: 86:7f:23:6f:3d:6b:42:b9:49:fb:b5:2e:5b:49:0b:da:7b:42: ca:fc:fc:63:60:98:b6:a1:74:52:26:8b:4e:8a:b9:5e:53:79: 8a:c5:88:1c:1f:2d:4b:ed:39:83:1d:f5:a2:f9:a7:a0:b4:41: 6c:24:62:df:f6:ff:fd:e6:3f:41:d6:b5:15:0f:b1:3a:f6:26: 63:2e:b6:58:56:28:c0:6d:b5:0c:5c:f6:34:4c:c2:c2:00:77: 97:cc:72:00:08:ca:75:1d:2a:53:59:23:b1:9f:c1:dc:04:30: 11:59:49:96:fe:ac:32:4d:b5:53:14:5d:d1:26:9e:9a:61:d3: 29:73:e5:83:17:09:de:6a:a7:a2:df:a6:0e:3d:c9:81:d4:b9: 30:ee:4c:47:1e:9c:20:26:1a:ff:15:89:29:ec:d2:be:4c:29: 89:59:22:d8:5c:5d:af:00:65:f7:61:88:97:34:bb:43:54:88: 20:1c:85:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcT4SrqEYu4XxlDsX2ju7Ttx+4D4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4 QzFDMjI4RjAeFw0yNTEyMDYxODA1NDlaFw0yNTEyMDkyMjI5NDlaMDMxMTAvBgNV BAMTKDNGMzU4MjEwQUEyRDQyMzhBMTJFMEY2MjhFMDI2NTA3OTQ4REM2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E2N2BVtKPzN/TXbtN20MgsQO 0zk1B3i/YG2a/zZN9lwm27NIy4BwFmeM5jpAN9g1v7Aqw+gTy0JcvByCavWcynNR Di+lpyUj6/gmUMFvQkv2iBp/k04eUI7HtdfjzG+PNRPMGve4aFao/UwlVrGiLZ0F U6Tj+871UHQZwJLmm7raztwZx1BXGtsmcoMefwyoTHg0iMuVtPqdotJ5AfwYI7qX IuuWujFFBwC20wnyudgx3vxxJt6uwbCTr451qFQkW3z4XRwTV9STedxyUeVgEJY5 Ombd368zhw7tVytl9ZRDQ7+O6DjxkrpfYTPYyscAepD7mHTMX//o3c+NvjLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPzWCEKotQjihLg9ijgJlB5SNxuEwHwYDVR0j BBgwFoAUIoJaC+6SZoOsQaBIau9Vr4wcIo8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTAwMjA4Yi0zMmFjLTRhMjYtOWQ5Mi02MDlhZDc2MTgzYzEvMC8yMjgyNUEwQkVF OTI2NjgzQUM0MUEwNDg2QUVGNTVBRjhDMUMyMjhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1QUY4QzFD MjI4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkwMDIwOGItMzJhYy00YTI2LTlk OTItNjA5YWQ3NjE4M2MxLzAvMjI4MjVBMEJFRTkyNjY4M0FDNDFBMDQ4NkFFRjU1 QUY4QzFDMjI4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtu7JkDiPqIF36h0IFISQ+wpSYsepzWCH0s 1tlhwiSUgRtjK516kdQ4IG4GosauHx0dj9fawfk6ODHoA2xhKKyPCHKxB975IIZ/ I289a0K5Sfu1LltJC9p7Qsr8/GNgmLahdFImi06KuV5TeYrFiBwfLUvtOYMd9aL5 p6C0QWwkYt/2//3mP0HWtRUPsTr2JmMutlhWKMBttQxc9jRMwsIAd5fMcgAIynUd KlNZI7GfwdwEMBFZSZb+rDJNtVMUXdEmnpph0ylz5YMXCd5qp6Lfpg49yYHUuTDu TEcenCAmGv8ViSns0r5MKYlZIthcXa8AZfdhiJc0u0NUiCAchR8= -----END CERTIFICATE-----Generated at Sun Dec 7 04:45:04 2025 by rpki-client