This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft File: 20ABF702057AD5F01207F6C578160654EB44C914.mft (raw, json) Hash identifier: fDsrv9ggwh2H70yiw/EFMZCzWAR37hAqXjQR0yVG2Dg= Subject key identifier: A8:82:F5:9C:E1:E2:9B:30:C5:AC:A3:06:12:45:25:F5:5D:62:00:4E Authority key identifier: 20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 Certificate issuer: /CN=20ABF702057AD5F01207F6C578160654EB44C914 Certificate serial: 28975D2357198CA7C958EBF808CA9576AACE209F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft Manifest number: 01F4 Signing time: Fri 05 Dec 2025 08:20:41 +0000 Manifest this update: Fri 05 Dec 2025 08:15:41 +0000 Manifest next update: Mon 08 Dec 2025 12:22:41 +0000 Files and hashes: 1: 20ABF702057AD5F01207F6C578160654EB44C914.crl (hash: sL/GYgnaMTfmeAj/KgRhNAM/102JmIuVZW2aV9LN0xU=) 2: 3130332e3230392e312e302f32342d3234203d3e20313334363530.roa (hash: giWrIN8j+wY4pRI/HaMvfZbbTtdidSjlnNRfZ7I7NOU=) 3: 3130332e3136342e38302e302f32342d3234203d3e20313334363530.roa (hash: OD/D5T7a6GncQciIiADZaQN4vuFZ+yDbdXQnN4HIA9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:97:5d:23:57:19:8c:a7:c9:58:eb:f8:08:ca:95:76:aa:ce:20:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20ABF702057AD5F01207F6C578160654EB44C914 Validity Not Before: Dec 5 08:15:41 2025 GMT Not After : Dec 8 12:22:41 2025 GMT Subject: CN=A882F59CE1E29B30C5ACA306124525F55D62004E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:cf:40:94:29:c5:a2:35:62:c6:b4:6b:52: 7d:85:b1:71:b3:8c:3b:ea:3d:30:ac:82:0a:6f:9c: c1:fc:cf:e5:9e:9f:62:0c:cc:56:2d:05:d2:c3:c2: a3:a9:48:98:2c:f5:a4:e5:0c:9f:68:86:b3:e6:14: a2:4c:f2:e3:a7:fb:04:bb:d5:7a:17:85:63:5e:d3: f6:da:3c:fe:ce:cb:34:b9:53:c5:aa:3e:02:c6:9d: 94:ff:a0:87:85:ea:1c:fa:e7:b9:18:3b:a7:67:fd: b0:c2:8b:9e:82:8d:a0:ed:52:82:2f:57:4a:0b:2e: 91:5b:b2:fa:a2:9a:a4:18:65:f9:b5:76:f6:69:7c: 26:83:2c:55:63:f9:c7:5a:c6:99:eb:db:3d:c4:41: 17:21:3d:a1:52:9d:79:17:16:ee:c8:a3:bc:1f:06: 49:87:cb:ae:18:5a:85:cf:0c:30:c3:67:f5:2a:f6: eb:85:47:06:29:8a:fc:a9:bc:76:64:c2:ba:89:a6: ba:98:b9:a3:9d:4a:e7:1a:27:99:4b:4b:83:ae:31: a5:a6:88:f8:cd:74:8b:fc:6a:8d:34:cb:51:7f:32: db:2f:0b:1e:45:3d:a9:dc:95:c8:53:50:4f:59:42: 0c:96:82:62:2f:2d:49:ca:8d:84:be:2b:06:68:dd: f6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:82:F5:9C:E1:E2:9B:30:C5:AC:A3:06:12:45:25:F5:5D:62:00:4E X509v3 Authority Key Identifier: keyid:20:AB:F7:02:05:7A:D5:F0:12:07:F6:C5:78:16:06:54:EB:44:C9:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20ABF702057AD5F01207F6C578160654EB44C914.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67db23b7-9159-46c7-8853-06654ae47aed/0/20ABF702057AD5F01207F6C578160654EB44C914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:36:56:aa:79:e1:71:1b:8d:6c:87:38:c0:6a:4c:81:88:cf: 3a:99:84:fc:b8:f8:ed:fe:7b:2d:45:4f:b2:47:2c:17:d5:64: 0d:e9:72:90:30:81:ff:ed:46:80:be:94:53:9d:b2:90:cd:80: 13:0d:68:3b:00:fd:44:b6:2a:86:e5:0d:75:94:77:02:3a:0d: 6d:eb:80:14:cf:c7:73:7c:1b:b5:53:51:c9:44:36:4b:e8:b8: 91:44:d7:4d:44:48:f0:66:5b:91:68:c1:65:e4:b8:cf:b4:11: 28:10:4b:61:ac:ed:33:8e:af:d5:a1:10:dd:af:6e:31:54:2e: de:35:b2:b0:70:b0:a9:77:18:5c:db:bc:2e:09:eb:91:2b:cc: 97:28:e2:7c:d6:d2:5a:98:8c:62:30:e2:60:04:eb:a9:93:53: 9f:e1:29:f4:dc:35:1a:6a:31:46:9a:9a:dd:e4:7e:8c:d7:c1: a9:07:71:2b:ff:40:e0:54:bf:6b:e0:dd:fe:56:59:39:14:2b: 88:c5:84:b0:68:e4:33:29:91:ac:e8:ba:d9:3a:8c:a8:36:fe: 73:bb:1b:85:bb:d2:71:41:5a:a2:f5:c3:ca:a8:ed:9c:1d:f6: 85:fe:7f:53:80:8f:97:08:43:de:26:37:b6:35:93:1d:1f:10: 04:fd:40:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJddI1cZjKfJWOv4CMqVdqrOIJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRF QjQ0QzkxNDAeFw0yNTEyMDUwODE1NDFaFw0yNTEyMDgxMjIyNDFaMDMxMTAvBgNV BAMTKEE4ODJGNTlDRTFFMjlCMzBDNUFDQTMwNjEyNDUyNUY1NUQ2MjAwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7M9AlCnFojVixrRrUn2FsXGz jDvqPTCsggpvnMH8z+Wen2IMzFYtBdLDwqOpSJgs9aTlDJ9ohrPmFKJM8uOn+wS7 1XoXhWNe0/baPP7OyzS5U8WqPgLGnZT/oIeF6hz657kYO6dn/bDCi56CjaDtUoIv V0oLLpFbsvqimqQYZfm1dvZpfCaDLFVj+cdaxpnr2z3EQRchPaFSnXkXFu7Io7wf BkmHy64YWoXPDDDDZ/Uq9uuFRwYpivypvHZkwrqJprqYuaOdSucaJ5lLS4OuMaWm iPjNdIv8ao00y1F/MtsvCx5FPanclchTUE9ZQgyWgmIvLUnKjYS+KwZo3fYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqIL1nOHimzDFrKMGEkUl9V1iAE4wHwYDVR0j BBgwFoAUIKv3AgV61fASB/bFeBYGVOtEyRQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2RiMjNiNy05MTU5LTQ2YzctODg1My0wNjY1NGFlNDdhZWQvMC8yMEFCRjcwMjA1 N0FENUYwMTIwN0Y2QzU3ODE2MDY1NEVCNDRDOTE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2NTRFQjQ0 QzkxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdkYjIzYjctOTE1OS00NmM3LTg4 NTMtMDY2NTRhZTQ3YWVkLzAvMjBBQkY3MDIwNTdBRDVGMDEyMDdGNkM1NzgxNjA2 NTRFQjQ0QzkxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALg2Vqp54XEbjWyHOMBqTIGIzzqZhPy4+O3+ ey1FT7JHLBfVZA3pcpAwgf/tRoC+lFOdspDNgBMNaDsA/US2KoblDXWUdwI6DW3r gBTPx3N8G7VTUclENkvouJFE101ESPBmW5FowWXkuM+0ESgQS2Gs7TOOr9WhEN2v bjFULt41srBwsKl3GFzbvC4J65ErzJco4nzW0lqYjGIw4mAE66mTU5/hKfTcNRpq MUaamt3kfozXwakHcSv/QOBUv2vg3f5WWTkUK4jFhLBo5DMpkazoutk6jKg2/nO7 G4W70nFBWqL1w8qo7Zwd9oX+f1OAj5cIQ94mN7Y1kx0fEAT9QMY= -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:00 2025 by rpki-client