This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: BzmWoCYFRjm77PC+UDffUKrgdrjnaTsfBzSAx57JK3s= Subject key identifier: 1E:54:06:9A:7A:99:43:B0:76:AF:3A:79:D9:99:CC:30:14:90:EF:7E Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 28D29F820F18298D587D5A0FDCB335ACA1A1FF20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 020B Signing time: Wed 17 Dec 2025 00:11:57 +0000 Manifest this update: Wed 17 Dec 2025 00:06:57 +0000 Manifest next update: Sat 20 Dec 2025 09:31:57 +0000 Files and hashes: 1: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: HoB6vhBt7jpCQIIuCZ+GwCJjd2QeRPGvhV2xsrpDDcY=) 2: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=) 3: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=) 4: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: GtkgNmJXl7nxDiRttWokSpJjVQu0Ps6kMb8tIC7Cyu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d2:9f:82:0f:18:29:8d:58:7d:5a:0f:dc:b3:35:ac:a1:a1:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Dec 17 00:06:57 2025 GMT Not After : Dec 20 09:31:57 2025 GMT Subject: CN=1E54069A7A9943B076AF3A79D999CC301490EF7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4c:05:04:f3:41:35:b2:5f:da:0d:9f:88:be: 59:51:01:d1:c9:c2:cd:5b:1a:e6:37:9a:dc:12:73: db:f2:a2:14:c1:b6:57:1e:df:89:fd:68:19:0f:e3: 7b:e3:e0:b0:17:5c:08:f2:34:f1:69:f4:b0:cd:b6: 61:a8:30:af:c1:45:be:e8:fd:a1:de:0d:6b:17:4c: bb:a5:83:74:38:27:fe:c1:83:91:d9:dd:ec:d7:09: 63:dc:a7:b3:3f:96:28:f7:b3:d4:ca:d0:4c:b7:08: 3d:43:1d:b5:95:df:08:e3:70:9b:e5:12:2e:f6:50: 8a:a4:62:38:e1:3d:31:02:2f:8a:58:a6:6f:02:f8: 16:91:cc:05:53:35:43:47:bc:cf:c7:59:73:26:af: 66:b6:54:61:29:17:03:17:13:06:78:33:3d:b6:1d: fd:4e:20:53:e7:1c:9c:76:20:32:8e:f9:ff:b3:9f: 2d:da:a5:29:f0:1b:b3:d6:32:91:66:1d:08:74:77: f3:fc:90:25:a2:bc:e2:1a:19:de:b3:82:48:37:98: 32:0d:ab:ca:7b:cc:b4:35:6e:f0:7e:f0:60:0e:85: 1a:81:c7:ca:55:2f:cb:aa:04:17:dc:63:0f:b0:45: 5c:b6:d9:3c:c9:35:0d:42:cf:4c:7c:22:bc:c5:b2: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:06:9A:7A:99:43:B0:76:AF:3A:79:D9:99:CC:30:14:90:EF:7E X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6c:86:6b:af:24:89:67:0a:05:a8:5f:4e:f6:1e:d4:fa:08: d5:64:1d:43:92:6f:57:4a:60:b5:a2:01:68:2f:21:c7:02:57: e5:94:89:8d:82:ad:f4:d8:a6:15:40:24:af:ac:7a:d1:bf:c1: b9:50:7f:be:e8:5b:51:98:be:63:bf:0e:e5:6e:12:60:8f:92: cd:77:aa:5c:a2:f8:eb:93:ce:c0:88:98:e8:4c:2e:b5:2f:8d: 2a:3f:2e:ea:e9:a2:72:e1:c6:96:0d:e7:0c:01:b7:01:ba:70: 2c:c8:5b:dc:7d:2f:ac:a3:8c:87:d5:b1:40:49:4a:03:ec:21: c5:32:d3:7a:fe:7b:58:56:a1:c7:42:aa:de:2f:29:9a:c6:ab: 89:9c:36:76:11:92:ab:2a:f7:93:cf:8f:4b:85:88:5b:9b:70: a4:1a:ee:09:5e:ce:54:3f:4b:03:cc:d7:08:02:85:42:2a:91: 5c:96:6f:83:8e:64:4d:84:5a:e0:11:72:78:25:94:fd:bd:8b: ba:d0:3b:e1:45:46:58:a7:75:25:4c:e4:26:ed:98:28:f4:97: 16:5c:4d:e6:d0:24:7d:90:99:3e:94:92:dd:6d:20:3d:a5:e7: 24:3f:fe:d5:2e:34:c7:e5:e0:89:8c:41:65:76:09:4d:68:38: 2d:49:22:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKNKfgg8YKY1YfVoP3LM1rKGh/yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNTEyMTcwMDA2NTdaFw0yNTEyMjAwOTMxNTdaMDMxMTAvBgNV BAMTKDFFNTQwNjlBN0E5OTQzQjA3NkFGM0E3OUQ5OTlDQzMwMTQ5MEVGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvTAUE80E1sl/aDZ+IvllRAdHJ ws1bGuY3mtwSc9vyohTBtlce34n9aBkP43vj4LAXXAjyNPFp9LDNtmGoMK/BRb7o /aHeDWsXTLulg3Q4J/7Bg5HZ3ezXCWPcp7M/lij3s9TK0Ey3CD1DHbWV3wjjcJvl Ei72UIqkYjjhPTECL4pYpm8C+BaRzAVTNUNHvM/HWXMmr2a2VGEpFwMXEwZ4Mz22 Hf1OIFPnHJx2IDKO+f+zny3apSnwG7PWMpFmHQh0d/P8kCWivOIaGd6zgkg3mDIN q8p7zLQ1bvB+8GAOhRqBx8pVL8uqBBfcYw+wRVy22TzJNQ1Cz0x8IrzFsvjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHlQGmnqZQ7B2rzp52ZnMMBSQ734wHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9shmuvJIlnCgWoX072HtT6CNVkHUOSb1dK YLWiAWgvIccCV+WUiY2CrfTYphVAJK+setG/wblQf77oW1GYvmO/DuVuEmCPks13 qlyi+OuTzsCImOhMLrUvjSo/LurponLhxpYN5wwBtwG6cCzIW9x9L6yjjIfVsUBJ SgPsIcUy03r+e1hWocdCqt4vKZrGq4mcNnYRkqsq95PPj0uFiFubcKQa7glezlQ/ SwPM1wgChUIqkVyWb4OOZE2EWuARcngllP29i7rQO+FFRlindSVM5CbtmCj0lxZc TebQJH2QmT6Ukt1tID2l5yQ//tUuNMfl4ImMQWV2CU1oOC1JIgQ= -----END CERTIFICATE-----Generated at Fri Dec 19 00:49:17 2025 by rpki-client