This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: N7qWswXLFsi+B63a/r6opDLDP+wwQTteg/svjsGaaNY= Subject key identifier: 00:44:38:0E:80:4A:70:F1:EC:69:25:5A:D9:50:9B:32:BC:63:C6:C9 Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 5ABD9D5125120D1DD86A1B3086CDE4F3901A4482 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: D0 Signing time: Fri 05 Dec 2025 07:21:06 +0000 Manifest this update: Fri 05 Dec 2025 07:16:06 +0000 Manifest next update: Mon 08 Dec 2025 12:56:06 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: cgTzO11ucBqKLlVloAcF0AyVlIdsHsihk7ebNSye7ks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:bd:9d:51:25:12:0d:1d:d8:6a:1b:30:86:cd:e4:f3:90:1a:44:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Dec 5 07:16:06 2025 GMT Not After : Dec 8 12:56:06 2025 GMT Subject: CN=0044380E804A70F1EC69255AD9509B32BC63C6C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:11:49:e5:58:e2:fc:cf:5f:46:90:92:a1:de: fc:aa:0a:18:ed:8b:25:ac:7a:3f:20:87:1f:2e:df: 24:f8:1a:cf:05:39:e2:f5:b2:ff:79:67:fc:a3:c1: 48:29:ee:c4:c4:dc:92:4d:1c:1b:9a:35:73:ca:74: 98:42:68:18:eb:94:dd:36:76:20:85:76:69:f7:4f: ad:70:ef:27:fa:94:21:c2:b7:75:95:a3:07:34:bc: 34:7b:cf:72:fa:66:3c:f8:b7:6b:51:fe:9c:a0:43: d4:b5:2e:5e:24:98:bb:a5:fc:5c:40:5d:57:c0:ff: 6a:56:55:b3:0a:8f:dc:c1:c5:27:6b:bd:5c:5a:6d: 2c:99:c5:c6:8f:2d:e8:55:1f:00:a4:c3:9b:09:bb: 3f:01:45:c7:a5:9b:57:78:e2:d8:cc:29:df:ca:29: 30:75:6c:07:dd:f6:ec:27:77:0b:74:58:6b:77:d2: 07:32:24:3e:4e:85:39:ec:d5:80:82:68:0f:ef:96: 63:4c:d5:38:fc:13:41:36:e6:82:cd:7e:7e:6d:7a: 09:9e:2c:08:40:0f:f0:ef:25:a1:67:5e:99:61:2b: ad:27:7a:18:db:3c:fc:b1:2b:00:d4:2a:a2:e4:d2: ec:0d:4b:0a:e2:1d:41:ca:12:6b:cc:e2:34:08:d6: c2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:44:38:0E:80:4A:70:F1:EC:69:25:5A:D9:50:9B:32:BC:63:C6:C9 X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3e:25:b4:30:13:87:79:b1:24:eb:cd:83:14:1d:0c:06:a5: ce:b5:2f:a6:45:77:b3:7a:c7:a6:cb:a3:51:17:9b:e4:33:bd: 9b:5b:89:33:28:23:e0:55:91:8b:bb:ec:d0:d7:12:9d:53:95: b5:c7:7e:18:22:4a:81:bc:fb:db:57:0f:a7:6e:e4:42:be:84: bc:64:7c:74:b4:15:55:c1:fa:a0:df:da:e6:87:86:51:34:b1: b8:bf:fa:b2:1e:bf:d4:c0:52:59:de:03:c1:50:c9:43:e2:dd: 4c:09:96:44:4f:8a:12:32:d2:72:f0:96:bc:57:55:fa:ae:6d: 1e:65:08:be:a9:e6:e9:95:ad:af:a9:a6:12:eb:c8:ab:a9:a5: 97:73:a4:c0:28:10:d6:12:a0:f5:53:47:09:93:f2:17:1e:5b: 6e:ea:d8:e7:bf:39:e1:62:b6:5b:0e:6a:f8:7b:06:7a:19:40: 99:ec:df:89:ad:42:8e:da:72:e8:7e:c9:ed:91:e7:9b:4b:38: 0a:4f:15:0d:2d:55:43:1d:1d:d5:bc:e6:c2:88:ff:e4:df:f9: 22:51:c2:83:ef:b9:46:cb:13:1d:fb:f0:a0:bd:50:63:63:b2: 6c:71:1b:e0:a7:0b:9d:66:ea:58:2f:6c:fb:35:ff:47:1a:4c: 53:af:5c:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWr2dUSUSDR3Yahswhs3k85AaRIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTEyMDUwNzE2MDZaFw0yNTEyMDgxMjU2MDZaMDMxMTAvBgNV BAMTKDAwNDQzODBFODA0QTcwRjFFQzY5MjU1QUQ5NTA5QjMyQkM2M0M2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUEUnlWOL8z19GkJKh3vyqChjt iyWsej8ghx8u3yT4Gs8FOeL1sv95Z/yjwUgp7sTE3JJNHBuaNXPKdJhCaBjrlN02 diCFdmn3T61w7yf6lCHCt3WVowc0vDR7z3L6Zjz4t2tR/pygQ9S1Ll4kmLul/FxA XVfA/2pWVbMKj9zBxSdrvVxabSyZxcaPLehVHwCkw5sJuz8BRcelm1d44tjMKd/K KTB1bAfd9uwndwt0WGt30gcyJD5OhTns1YCCaA/vlmNM1Tj8E0E25oLNfn5tegme LAhAD/DvJaFnXplhK60nehjbPPyxKwDUKqLk0uwNSwriHUHKEmvM4jQI1sKNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAEQ4DoBKcPHsaSVa2VCbMrxjxskwHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8+JbQwE4d5sSTrzYMUHQwGpc61L6ZFd7N6 x6bLo1EXm+QzvZtbiTMoI+BVkYu77NDXEp1TlbXHfhgiSoG8+9tXD6du5EK+hLxk fHS0FVXB+qDf2uaHhlE0sbi/+rIev9TAUlneA8FQyUPi3UwJlkRPihIy0nLwlrxX VfqubR5lCL6p5umVra+pphLryKuppZdzpMAoENYSoPVTRwmT8hceW27q2Oe/OeFi tlsOavh7BnoZQJns34mtQo7acuh+ye2R55tLOApPFQ0tVUMdHdW85sKI/+Tf+SJR woPvuUbLEx378KC9UGNjsmxxG+CnC51m6lgvbPs1/0caTFOvXC8= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:23 2025 by rpki-client