This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.mft (raw, json) Hash identifier: 2Thcrv8kGbfYaC7u11I61/XWAi4BpGg1gXfSV1AhY1I= Subject key identifier: 23:70:DA:B1:47:5E:E8:39:F5:39:DD:12:E3:3E:F0:FC:2D:80:11:25 Authority key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Certificate issuer: /CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Certificate serial: 4C83C7A1BCA07A45CA146CAE3E7A6C52B6FB9F6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft Manifest number: 0143 Signing time: Fri 05 Dec 2025 01:51:38 +0000 Manifest this update: Fri 05 Dec 2025 01:46:38 +0000 Manifest next update: Mon 08 Dec 2025 10:14:38 +0000 Files and hashes: 1: 3130332e3234352e3232362e302f32342d3234203d3e203233363739.roa (hash: qKtc40b4lQF3hAURWdkBNRY70djjte8YqcsMlRaaEzM=) 2: 215123CDB8D789B3519CFF4175FFDD832853F5BE.crl (hash: eTypFcu9oppQv2QqHeHFzu9QNV5iqIqQ4SRA10EV1JM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:83:c7:a1:bc:a0:7a:45:ca:14:6c:ae:3e:7a:6c:52:b6:fb:9f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Validity Not Before: Dec 5 01:46:38 2025 GMT Not After : Dec 8 10:14:38 2025 GMT Subject: CN=2370DAB1475EE839F539DD12E33EF0FC2D801125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:41:fe:7b:4c:7c:9a:7f:9b:b3:62:ff:42: ac:e4:37:a8:6e:43:a5:d1:5c:6f:69:cd:57:99:5a: 60:b8:5d:fe:bd:2b:92:db:4d:f5:a9:45:e8:d3:e6: 15:76:f8:fe:45:af:e8:67:18:9e:b6:7e:90:df:bc: 85:60:29:a6:3b:42:b8:9f:4a:de:a2:a8:ba:d4:ca: eb:dd:89:87:ed:c3:98:5b:fd:8b:80:b0:e5:c0:58: 79:58:27:cb:64:82:c2:41:ad:f1:af:8a:5d:fd:c4: cc:bc:9a:7a:9e:02:b4:c1:92:a2:fe:dd:a6:7e:a3: d5:b3:60:5f:75:ad:3c:4e:a2:1a:f0:a7:3f:b7:ec: c1:03:ce:c7:9f:f4:91:cb:b7:33:9a:e8:c6:c6:fa: 86:88:0d:26:41:b0:9c:83:f8:49:3b:c8:59:c0:c6: a2:26:48:90:6d:21:d5:f3:cb:36:39:a0:62:eb:8a: d8:2d:01:73:ec:25:fb:83:8d:6a:e3:66:75:c1:9e: 83:50:f0:f8:4a:f2:bd:30:1a:c2:5a:e2:1f:18:34: f1:09:d1:08:38:0d:e1:32:a9:a0:73:7f:8f:13:1b: 12:67:55:91:19:20:03:06:ca:af:92:69:df:4c:d4: 28:3a:ea:3f:9b:28:2d:bb:7d:47:71:b8:e4:c1:95: 30:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:70:DA:B1:47:5E:E8:39:F5:39:DD:12:E3:3E:F0:FC:2D:80:11:25 X509v3 Authority Key Identifier: keyid:21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:21:d9:cc:86:e2:24:01:64:e6:33:74:57:51:9e:34:f5:89: df:52:f4:4c:0d:f6:bc:be:35:d1:e7:f3:95:b7:61:3b:2b:89: dd:a4:56:2f:7f:90:4b:02:37:fc:a5:06:00:58:48:05:c4:0f: cb:11:3a:44:4f:7f:49:f4:4c:0f:04:f9:94:d2:30:97:e9:58: bd:87:e9:14:44:d5:13:a9:05:4c:72:01:fc:9e:e7:42:f5:51: f4:34:e6:20:0b:7f:76:e8:97:72:cf:ec:b5:bc:bb:cf:d5:18: 14:fb:b5:b3:04:39:c5:b9:92:37:6e:55:43:72:92:d1:0d:b9: 4f:6b:b7:43:19:ce:57:c2:d6:21:1a:1f:d0:d1:ae:07:c1:f1: 50:99:b1:0e:12:86:4b:54:df:53:5b:0f:ce:14:8b:4f:1e:33: 8b:08:26:5f:8d:9d:87:14:11:ed:e8:83:86:43:12:c0:16:06: 36:4c:66:f3:64:24:d3:df:17:9b:f5:48:c2:85:92:9c:df:7c: 41:bd:78:57:55:e5:0c:3e:3d:61:ca:2f:ae:75:cb:95:28:d5: c9:3b:0c:75:e0:f1:9c:ff:01:e1:f4:8b:15:b1:da:bf:7f:9a: 25:1b:9a:90:60:b6:16:cc:ef:a3:6d:82:2f:69:9f:17:78:b9: 73:82:27:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTIPHobygekXKFGyuPnpsUrb7n20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMy ODUzRjVCRTAeFw0yNTEyMDUwMTQ2MzhaFw0yNTEyMDgxMDE0MzhaMDMxMTAvBgNV BAMTKDIzNzBEQUIxNDc1RUU4MzlGNTM5REQxMkUzM0VGMEZDMkQ4MDExMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6EH+e0x8mn+bs2L/QqzkN6hu Q6XRXG9pzVeZWmC4Xf69K5LbTfWpRejT5hV2+P5Fr+hnGJ62fpDfvIVgKaY7Qrif St6iqLrUyuvdiYftw5hb/YuAsOXAWHlYJ8tkgsJBrfGvil39xMy8mnqeArTBkqL+ 3aZ+o9WzYF91rTxOohrwpz+37MEDzsef9JHLtzOa6MbG+oaIDSZBsJyD+Ek7yFnA xqImSJBtIdXzyzY5oGLritgtAXPsJfuDjWrjZnXBnoNQ8PhK8r0wGsJa4h8YNPEJ 0Qg4DeEyqaBzf48TGxJnVZEZIAMGyq+Sad9M1Cg66j+bKC27fUdxuOTBlTAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI3DasUde6Dn1Od0S4z7w/C2AESUwHwYDVR0j BBgwFoAUIVEjzbjXibNRnP9Bdf/dgyhT9b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMC8yMTUxMjNDREI4 RDc4OUIzNTE5Q0ZGNDE3NUZGREQ4MzI4NTNGNUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkREODMyODUz RjVCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ZjZDJhNDItOTJiOS00MGE0LWEw YmYtMDliNjVhMzE4YjVlLzAvMjE1MTIzQ0RCOEQ3ODlCMzUxOUNGRjQxNzVGRkRE ODMyODUzRjVCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0h2cyG4iQBZOYzdFdRnjT1id9S9EwN9ry+ NdHn85W3YTsrid2kVi9/kEsCN/ylBgBYSAXED8sROkRPf0n0TA8E+ZTSMJfpWL2H 6RRE1ROpBUxyAfye50L1UfQ05iALf3bol3LP7LW8u8/VGBT7tbMEOcW5kjduVUNy ktENuU9rt0MZzlfC1iEaH9DRrgfB8VCZsQ4ShktU31NbD84Ui08eM4sIJl+NnYcU Ee3og4ZDEsAWBjZMZvNkJNPfF5v1SMKFkpzffEG9eFdV5Qw+PWHKL651y5Uo1ck7 DHXg8Zz/AeH0ixWx2r9/miUbmpBgthbM76Ntgi9pnxd4uXOCJxs= -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:19 2025 by rpki-client