This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: HcgPy/GsyTFbCIj5c3+017nJ7/Ut+HNHx8PEc9+8lUk= Subject key identifier: E2:1F:5A:C9:AD:67:42:0F:DB:39:A0:35:95:13:C9:48:B9:E9:D3:F3 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 394E4412822BD114CE820C4EBC92EBCCA09C8471 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 05B1 Signing time: Tue 16 Dec 2025 22:00:04 +0000 Manifest this update: Tue 16 Dec 2025 21:55:04 +0000 Manifest next update: Sat 20 Dec 2025 04:59:04 +0000 Files and hashes: 1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: 3ow9L/XhHf98clULU1SH7K70WDbO2/HERAuuW3osds0=) 2: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) 3: AS24203.roa (hash: liOvJt+yX+uMFw47nNBN9GmU7xS1CPE6TUtdH7jFgY4=) 4: AS139994.roa (hash: 3MhCOE1JfpBzQV976XNeUOb97J9ofo+CArIJ1ybLWHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4e:44:12:82:2b:d1:14:ce:82:0c:4e:bc:92:eb:cc:a0:9c:84:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Dec 16 21:55:04 2025 GMT Not After : Dec 20 04:59:04 2025 GMT Subject: CN=E21F5AC9AD67420FDB39A0359513C948B9E9D3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8e:16:da:9e:ee:94:27:a7:d1:58:85:9a:ab: fb:e7:f1:f6:2c:b9:b3:df:7a:0c:39:1b:c3:65:3b: 78:be:63:b3:8e:7c:1e:2c:cb:2e:18:99:e9:87:47: 4c:d1:c5:0e:e4:fd:60:66:8b:f3:e3:7f:06:63:25: 70:e1:3c:63:d6:44:52:49:78:c9:f1:99:04:32:f6: a2:82:7a:da:f3:92:a4:2c:aa:21:95:d7:de:dc:fa: 8a:fe:49:dc:5e:6f:1c:11:03:6a:2e:0a:8a:45:a0: 94:ad:ad:cc:da:24:cb:8d:bd:1c:7b:2a:43:94:40: 88:ff:1c:3a:1e:0d:c5:d0:32:3b:f8:3c:b3:cb:d4: c2:40:23:ef:0c:55:27:80:b6:3a:ac:47:1c:b4:c6: a8:e2:f7:17:a2:18:20:94:24:a2:85:66:1f:d7:48: 3a:fc:38:12:91:be:f9:fd:2c:1a:9b:4f:2a:c3:69: e1:ca:d1:38:04:41:38:3b:a7:fd:5d:40:41:1e:05: 07:e4:45:d7:e0:ca:56:cd:aa:97:b6:70:a7:17:b1: b0:68:af:32:bd:c9:c4:39:7c:c5:8f:d7:c2:10:a8: 06:15:ca:de:a5:d2:94:43:84:50:9b:0c:25:d9:28: b0:9f:23:8f:46:2d:3b:a0:c2:ef:44:5a:d3:b2:cf: 51:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1F:5A:C9:AD:67:42:0F:DB:39:A0:35:95:13:C9:48:B9:E9:D3:F3 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fc:01:ea:a8:62:f8:a4:50:9c:4d:33:5d:f2:3d:a7:7d:7c: c9:20:34:97:89:f1:c8:37:dd:bd:6f:96:43:f5:85:65:f6:e4: 50:a1:62:88:31:04:44:db:3e:79:b0:6d:f9:be:5f:7e:19:f3: d1:f4:d4:94:fc:ea:08:64:92:86:69:b4:bc:58:e8:e8:4e:55: 15:6c:65:30:5e:dc:17:94:78:ee:64:88:4d:89:28:df:a7:39: 2f:80:98:17:17:4b:73:5d:d4:df:f0:aa:a9:44:8e:4b:80:14: fe:ab:3c:82:93:89:80:0a:1f:79:82:52:3f:c2:80:79:af:03: 1c:7b:39:45:25:d9:dc:fd:3c:01:23:c3:c6:d2:de:48:cb:8d: 8f:e2:09:9f:0c:d7:a9:b8:ab:66:4b:65:72:b6:2e:8a:8d:dd: be:d0:fa:a5:9e:9a:7e:26:6f:16:3b:b6:ff:73:9e:aa:b7:c8: 26:e8:68:12:35:22:9a:4e:5e:7c:f9:80:41:2b:f3:66:b7:ec: 87:4a:19:2d:82:17:88:2b:e6:59:58:4e:0a:a6:58:63:dc:bd: 7d:73:50:a2:67:0e:c8:a4:d0:65:93:8c:40:a8:50:36:53:db: c8:4a:d5:11:3f:67:6b:33:ff:9f:e8:5d:07:42:7b:60:32:bf: 97:ed:bf:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOU5EEoIr0RTOggxOvJLrzKCchHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTEyMTYyMTU1MDRaFw0yNTEyMjAwNDU5MDRaMDMxMTAvBgNV BAMTKEUyMUY1QUM5QUQ2NzQyMEZEQjM5QTAzNTk1MTNDOTQ4QjlFOUQzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvjhbanu6UJ6fRWIWaq/vn8fYs ubPfegw5G8NlO3i+Y7OOfB4syy4YmemHR0zRxQ7k/WBmi/PjfwZjJXDhPGPWRFJJ eMnxmQQy9qKCetrzkqQsqiGV197c+or+SdxebxwRA2ouCopFoJStrczaJMuNvRx7 KkOUQIj/HDoeDcXQMjv4PLPL1MJAI+8MVSeAtjqsRxy0xqji9xeiGCCUJKKFZh/X SDr8OBKRvvn9LBqbTyrDaeHK0TgEQTg7p/1dQEEeBQfkRdfgylbNqpe2cKcXsbBo rzK9ycQ5fMWP18IQqAYVyt6l0pRDhFCbDCXZKLCfI49GLTugwu9EWtOyz1GZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4h9aya1nQg/bOaA1lRPJSLnp0/MwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT8AeqoYvikUJxNM13yPad9fMkgNJeJ8cg3 3b1vlkP1hWX25FChYogxBETbPnmwbfm+X34Z89H01JT86ghkkoZptLxY6OhOVRVs ZTBe3BeUeO5kiE2JKN+nOS+AmBcXS3Nd1N/wqqlEjkuAFP6rPIKTiYAKH3mCUj/C gHmvAxx7OUUl2dz9PAEjw8bS3kjLjY/iCZ8M16m4q2ZLZXK2LoqN3b7Q+qWemn4m bxY7tv9znqq3yCboaBI1IppOXnz5gEEr82a37IdKGS2CF4gr5llYTgqmWGPcvX1z UKJnDsik0GWTjECoUDZT28hK1RE/Z2sz/5/oXQdCe2Ayv5ftvzo= -----END CERTIFICATE-----Generated at Thu Dec 18 23:17:01 2025 by rpki-client