This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft (raw, json) Hash identifier: S3ZXTbduWvmqkdUwlEW++kIw44YiRZrdVFGNbS0dmG0= Subject key identifier: 9C:F5:16:47:F6:BE:90:B9:40:F7:7C:81:37:7D:6A:80:73:E9:B4:6A Authority key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Certificate issuer: /CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Certificate serial: 311478E37A2CB79633C053C31625F06074615E3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft Manifest number: 0206 Signing time: Fri 05 Dec 2025 11:51:57 +0000 Manifest this update: Fri 05 Dec 2025 11:46:57 +0000 Manifest next update: Mon 08 Dec 2025 22:39:57 +0000 Files and hashes: 1: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl (hash: S6Xh/Ph4YzNtduv//I05gnDTGXVotDbRy0sr6arSAvw=) 2: 3130332e3136362e382e302f32342d3234203d3e20313431393738.roa (hash: GtkgNmJXl7nxDiRttWokSpJjVQu0Ps6kMb8tIC7Cyu0=) 3: 3130332e3136362e392e302f32342d3234203d3e20313431393738.roa (hash: Q+1KtEBmdlGkxj3d6e36S57kBlYlwv0qk9NrHtEayyk=) 4: 3130332e3136362e382e302f32332d3233203d3e20313431393738.roa (hash: vs5RIVJc80gvdbMwYUf3UH5oDO3pPFbrNK7pJMccNgE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:14:78:e3:7a:2c:b7:96:33:c0:53:c3:16:25:f0:60:74:61:5e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Validity Not Before: Dec 5 11:46:57 2025 GMT Not After : Dec 8 22:39:57 2025 GMT Subject: CN=9CF51647F6BE90B940F77C81377D6A8073E9B46A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:31:f3:11:aa:5a:e0:0e:6a:94:ed:17:68: 66:16:f3:f1:4a:c2:55:fd:b1:77:8f:dc:bf:f4:b7: 34:09:5e:45:dc:24:53:d9:0e:b4:4f:c9:dd:f5:0b: 5d:3d:55:bb:b3:db:25:6d:25:55:7f:3b:2c:7b:3f: ff:fb:fd:7d:11:82:97:28:ec:96:5b:98:7e:bf:81: 3a:14:c6:3a:a5:b6:c1:95:bb:a3:1e:36:9e:e7:23: e4:91:c4:19:f9:27:23:da:25:3d:47:16:a2:03:49: e6:66:12:32:6e:e0:1a:5e:76:44:06:2b:75:6b:59: c9:19:2a:4f:3b:6e:7f:cc:dc:cd:21:f6:4d:50:63: 23:50:f7:74:22:8c:58:08:20:32:60:0e:b9:68:05: df:15:e9:9c:3e:7f:a8:44:96:63:09:3a:91:de:49: ac:a1:ab:dd:87:43:8f:86:fb:43:72:e0:a2:78:bf: 55:2f:1a:d9:aa:e1:8e:1d:92:bd:01:d0:b6:f8:90: 65:aa:ba:32:a7:8d:16:fb:cc:e9:1e:82:0b:c2:7f: 15:45:97:e2:f4:d8:76:9a:9b:49:69:f5:df:89:de: 0a:5d:72:2f:ab:02:dd:51:da:81:97:b1:2f:98:a4: 61:32:37:67:23:d1:2e:32:69:07:5d:92:8d:32:86: d6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:16:47:F6:BE:90:B9:40:F7:7C:81:37:7D:6A:80:73:E9:B4:6A X509v3 Authority Key Identifier: keyid:21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3a:13:b0:e2:f5:5d:14:b2:c3:6f:b9:07:5f:83:fc:4e:a1: 79:58:2a:98:23:3f:bb:a8:b1:da:b2:ce:57:da:28:07:bb:61: c3:43:80:b7:b9:a8:25:01:cd:fa:7b:38:64:bf:6f:66:21:4b: 71:96:de:13:91:09:35:8c:cf:ac:d7:9f:ef:55:46:17:90:30: 80:1b:b6:78:d9:31:b6:3f:5d:f7:0c:f3:46:ff:3d:62:a4:a8: 6d:7c:62:45:b3:1e:16:c3:f2:d3:0d:80:d9:7d:2c:9a:bc:7f: f6:4e:f4:3d:c8:78:b0:33:99:53:74:72:ea:08:de:e6:49:dd: ea:bc:16:70:73:91:35:7b:19:48:51:b9:70:d0:e8:d4:45:cf: d7:ad:5c:ca:c3:1a:9b:ab:71:c5:83:2c:3f:c4:05:1c:85:fd: 9a:11:71:27:a6:d9:66:77:e0:99:9c:bf:e7:13:0d:07:4b:85: a5:ff:53:f0:ef:b1:64:6d:cc:6d:55:a6:c8:6b:63:05:9b:7a: 5b:50:1f:16:cf:82:b1:d9:9b:35:6f:4c:91:f7:f6:89:1f:d2: 4f:9c:f6:1a:e2:14:d4:f4:81:2a:83:e1:0a:c1:e6:d4:5d:3b: 76:a3:de:87:06:d1:b1:e1:93:a4:03:23:60:47:69:74:7c:cb: 3c:62:67:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRR443ost5YzwFPDFiXwYHRhXjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIx N0U2M0JBMTAeFw0yNTEyMDUxMTQ2NTdaFw0yNTEyMDgyMjM5NTdaMDMxMTAvBgNV BAMTKDlDRjUxNjQ3RjZCRTkwQjk0MEY3N0M4MTM3N0Q2QTgwNzNFOUI0NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRTHzEapa4A5qlO0XaGYW8/FK wlX9sXeP3L/0tzQJXkXcJFPZDrRPyd31C109Vbuz2yVtJVV/Oyx7P//7/X0Rgpco 7JZbmH6/gToUxjqltsGVu6MeNp7nI+SRxBn5JyPaJT1HFqIDSeZmEjJu4BpedkQG K3VrWckZKk87bn/M3M0h9k1QYyNQ93QijFgIIDJgDrloBd8V6Zw+f6hElmMJOpHe Sayhq92HQ4+G+0Ny4KJ4v1UvGtmq4Y4dkr0B0Lb4kGWqujKnjRb7zOkeggvCfxVF l+L02Haam0lp9d+J3gpdci+rAt1R2oGXsS+YpGEyN2cj0S4yaQddko0yhta5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnPUWR/a+kLlA93yBN31qgHPptGowHwYDVR0j BBgwFoAUIeRv7gOhpMuUT2zmgorDAhfmO6EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMC8yMUU0NkZFRTAz QTFBNENCOTQ0RjZDRTY4MjhBQzMwMjE3RTYzQkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMzMDIxN0U2 M0JBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgyMjEyYzItM2Q2OC00ODY3LWI5 OWMtZmM1Y2Y0ZDBkYmYxLzAvMjFFNDZGRUUwM0ExQTRDQjk0NEY2Q0U2ODI4QUMz MDIxN0U2M0JBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABs6E7Di9V0UssNvuQdfg/xOoXlYKpgjP7uo sdqyzlfaKAe7YcNDgLe5qCUBzfp7OGS/b2YhS3GW3hORCTWMz6zXn+9VRheQMIAb tnjZMbY/XfcM80b/PWKkqG18YkWzHhbD8tMNgNl9LJq8f/ZO9D3IeLAzmVN0cuoI 3uZJ3eq8FnBzkTV7GUhRuXDQ6NRFz9etXMrDGpurccWDLD/EBRyF/ZoRcSem2WZ3 4Jmcv+cTDQdLhaX/U/DvsWRtzG1VpshrYwWbeltQHxbPgrHZmzVvTJH39okf0k+c 9hriFNT0gSqD4QrB5tRdO3aj3ocG0bHhk6QDI2BHaXR8yzxiZ5E= -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:19 2025 by rpki-client