This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: E2Rg00pcs3cpAtJq3bSTDsTwB9dGS8oURghzgDYBWbM= Subject key identifier: 0B:EC:8B:D7:50:AD:21:9D:38:59:E8:4B:C5:9F:B4:8E:53:3A:38:40 Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 72843FF694A92B926E8581D6A70C18F991E91708 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 03F5 Signing time: Tue 16 Dec 2025 21:41:07 +0000 Manifest this update: Tue 16 Dec 2025 21:36:07 +0000 Manifest next update: Fri 19 Dec 2025 21:55:07 +0000 Files and hashes: 1: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: ESAat/8qS/PvKipcKbnwRycidjZ185OjK8Jt6FCDeqM=) 2: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: qkme0GZQu5bcnD3S+kfBuJEGFLAAW5dhiAN/pZznR3U=) 3: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: HVVBklNxFKjVFH6TO24eFomBT0C6XljjJZxD5XlN9W4=) 4: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: HHkuN4t1A2wqx6T8Km6ZHp/fC31MGdbqwFI9Er2bSDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 21:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:84:3f:f6:94:a9:2b:92:6e:85:81:d6:a7:0c:18:f9:91:e9:17:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Dec 16 21:36:07 2025 GMT Not After : Dec 19 21:55:07 2025 GMT Subject: CN=0BEC8BD750AD219D3859E84BC59FB48E533A3840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:38:72:1d:a9:83:e8:7a:1a:70:3c:6b:ce: c8:e7:d1:34:84:f6:1e:fa:e7:70:30:c5:1a:ca:8e: 3f:51:4a:43:50:9c:4a:db:b0:8a:cd:db:1d:30:63: 3d:76:98:f0:fc:0b:b7:3d:5c:44:a4:ea:79:d6:46: 05:c7:9e:73:a2:a8:20:2d:43:93:bb:c0:31:1e:c0: 8c:a8:28:34:37:b0:45:10:54:f1:2f:06:cb:74:ea: c0:b2:f0:86:ec:0e:e8:2c:68:8d:97:07:54:0d:5b: 18:68:5c:4d:17:44:6f:3a:5f:7a:50:b5:9e:f3:25: c2:81:59:14:38:9d:1e:e8:ad:e7:b7:5c:d3:3a:e7: ca:f1:6b:81:25:8b:1d:8f:01:50:3a:9d:1a:11:60: 34:fe:f1:88:a9:54:f7:7c:62:66:30:26:46:45:89: bf:f3:c7:27:a4:35:91:c6:48:b0:42:c8:9b:61:5b: 84:bf:70:5a:2e:79:d4:e0:a0:b6:54:20:d6:26:2d: 66:ff:de:a9:63:cd:6f:34:3e:de:7f:e2:e6:68:09: 13:fd:19:b8:b4:08:b0:64:bf:68:33:4b:ac:0e:b8: 76:3a:f5:92:10:b1:8a:ed:4d:51:2e:bb:c7:12:ab: b6:4f:17:6b:49:49:b9:e2:85:cd:29:a4:c7:0f:a7: 34:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EC:8B:D7:50:AD:21:9D:38:59:E8:4B:C5:9F:B4:8E:53:3A:38:40 X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:80:69:40:09:5c:b7:aa:b5:9e:37:a0:8f:47:da:20:12:09: 00:d1:93:51:9a:13:32:d1:a7:77:47:40:37:a1:0a:57:89:80: 35:c7:cb:d6:68:1f:22:85:52:53:b3:69:64:90:ad:25:9e:cb: 05:14:c7:65:cb:ce:24:4e:a5:40:44:1f:6c:d1:87:c2:96:88: b8:eb:d7:5f:1b:23:16:9f:a5:35:0c:0f:40:99:99:15:2f:0b: 7b:29:d1:da:f8:ed:08:4b:a4:22:c4:0c:a0:2e:a3:76:4e:01: 82:c0:f4:f5:32:a2:99:21:0a:45:06:0f:a0:34:4e:b8:cb:1a: 2b:f6:86:2c:7e:ba:ea:7d:3c:d7:5e:6a:db:e5:a1:27:dc:14: 9c:ab:04:47:df:cd:e0:a9:6c:87:bd:72:39:f8:6d:94:06:1f: 88:fc:95:f4:75:d1:62:94:01:28:97:20:2d:7b:00:08:76:1d: 37:f2:c9:d7:04:79:31:c6:41:06:48:d2:e1:7d:d7:ac:f7:92: e8:a6:e0:df:cd:fa:ce:e9:25:0a:b9:0a:a2:7b:54:16:85:48: 83:b0:75:4f:57:69:fa:0b:b0:49:0d:13:f7:b3:a1:45:f5:f4: b1:2d:3b:18:33:0c:ac:ed:e9:53:00:69:da:5d:f9:49:99:cd: 43:db:d1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoQ/9pSpK5JuhYHWpwwY+ZHpFwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNTEyMTYyMTM2MDdaFw0yNTEyMTkyMTU1MDdaMDMxMTAvBgNV BAMTKDBCRUM4QkQ3NTBBRDIxOUQzODU5RTg0QkM1OUZCNDhFNTMzQTM4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6HjhyHamD6HoacDxrzsjn0TSE 9h7653AwxRrKjj9RSkNQnErbsIrN2x0wYz12mPD8C7c9XESk6nnWRgXHnnOiqCAt Q5O7wDEewIyoKDQ3sEUQVPEvBst06sCy8IbsDugsaI2XB1QNWxhoXE0XRG86X3pQ tZ7zJcKBWRQ4nR7oree3XNM658rxa4Elix2PAVA6nRoRYDT+8YipVPd8YmYwJkZF ib/zxyekNZHGSLBCyJthW4S/cFouedTgoLZUINYmLWb/3qljzW80Pt5/4uZoCRP9 Gbi0CLBkv2gzS6wOuHY69ZIQsYrtTVEuu8cSq7ZPF2tJSbnihc0ppMcPpzSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC+yL11CtIZ04WehLxZ+0jlM6OEAwHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeAaUAJXLeqtZ43oI9H2iASCQDRk1GaEzLR p3dHQDehCleJgDXHy9ZoHyKFUlOzaWSQrSWeywUUx2XLziROpUBEH2zRh8KWiLjr 118bIxafpTUMD0CZmRUvC3sp0dr47QhLpCLEDKAuo3ZOAYLA9PUyopkhCkUGD6A0 TrjLGiv2hix+uup9PNdeatvloSfcFJyrBEffzeCpbIe9cjn4bZQGH4j8lfR10WKU ASiXIC17AAh2HTfyydcEeTHGQQZI0uF916z3kuim4N/N+s7pJQq5CqJ7VBaFSIOw dU9XafoLsEkNE/ezoUX19LEtOxgzDKzt6VMAadpd+UmZzUPb0eU= -----END CERTIFICATE-----Generated at Thu Dec 18 09:55:31 2025 by rpki-client