This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: vnFX7u3M4nwLJCZwhSNHKQHMnXGlvgAOCZ+FjsxFbPU= Subject key identifier: 82:4A:35:87:7C:C5:B1:A2:95:67:6A:EC:CE:A7:EC:5A:34:01:04:F4 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 4CF13332DD3490EB0270965F5DFC1206A0090244 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 0104 Signing time: Sat 06 Dec 2025 15:32:29 +0000 Manifest this update: Sat 06 Dec 2025 15:27:29 +0000 Manifest next update: Tue 09 Dec 2025 15:53:29 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) 2: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: z+jyP70YKbd3LJr/hMth/O92RV7T7rtF440hdGvfZPI=) 3: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f1:33:32:dd:34:90:eb:02:70:96:5f:5d:fc:12:06:a0:09:02:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Dec 6 15:27:29 2025 GMT Not After : Dec 9 15:53:29 2025 GMT Subject: CN=824A35877CC5B1A295676AECCEA7EC5A340104F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:3f:1a:5d:29:d1:94:06:47:e2:a8:b3:e6: fd:2d:a5:fe:3a:67:c8:7d:6c:75:51:c7:27:ed:88: 42:55:fe:60:ad:be:e0:5a:5d:b7:e4:09:5f:bc:e0: 95:b5:cd:08:b7:c1:e7:2b:41:40:e2:ff:33:ef:9e: b2:b1:07:3c:73:1f:26:4a:6f:31:01:98:ee:6c:15: 27:c4:25:0d:eb:53:0b:66:34:b7:67:a5:da:f8:5c: 88:6d:64:bb:24:60:01:8d:be:32:51:12:37:95:2d: b8:3a:fb:54:a4:c5:ef:8a:27:4c:c3:f6:b2:f4:f5: e0:ca:26:bf:46:b9:3e:f9:bd:3c:79:1a:17:2c:2f: 70:41:06:03:52:dc:74:02:f7:c3:42:e4:2b:54:00: 95:5b:6c:e8:30:41:13:3f:3f:ea:0c:d3:43:b3:18: 52:ab:c4:ea:2e:10:c4:1e:a6:69:97:1c:7e:ed:48: 44:33:24:40:3a:2e:1c:0b:08:4b:24:09:17:ac:ab: 08:88:e9:6d:0d:e5:14:a6:d0:9c:4c:77:e8:81:cd: d3:62:a9:9d:b7:84:47:d2:5a:29:aa:0c:af:ee:c0: fe:2d:04:6c:5c:ab:9b:54:ba:8d:69:00:75:83:03: ac:1a:9b:09:18:f9:b1:b4:a0:cb:32:94:2a:bf:31: 54:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4A:35:87:7C:C5:B1:A2:95:67:6A:EC:CE:A7:EC:5A:34:01:04:F4 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b7:44:57:87:a2:9c:60:3f:d8:1e:76:4d:91:1f:7d:99:8c: a6:43:a4:14:7e:7c:c7:d4:9a:80:c5:6d:31:b0:07:24:4e:63: d2:ec:70:3d:8b:9f:cb:4c:f0:42:99:da:2e:16:1e:db:53:b0: 72:85:78:25:d6:3e:2e:20:28:6e:d2:b4:89:00:6b:66:7e:9c: 49:e1:32:15:d1:96:86:c0:5f:19:17:75:59:c5:7f:45:14:46: f6:2f:e1:60:ec:f9:60:ad:e2:8d:b0:09:a7:0e:83:2d:38:ac: a6:4f:dd:a4:6f:f3:e6:a6:f2:d6:83:d0:80:6b:31:0d:61:54: 7c:e6:1f:8e:a8:c6:75:8f:42:25:31:5d:df:1f:43:24:85:d8: a1:cb:0d:38:d5:8e:7b:70:e9:e5:26:45:12:ad:c7:5c:a9:3f: 3c:ec:15:ba:94:8a:90:d5:ea:de:7e:a0:c3:2c:5f:87:d1:d6: 41:8e:a9:62:96:c7:62:87:e0:24:d9:b6:7c:7c:dd:42:4a:35: 2b:a7:7f:48:6a:8b:ab:41:1f:83:bb:87:8f:ad:d1:db:5a:77: 0e:5a:e3:60:f6:d1:05:6d:09:8f:af:c9:e1:8b:b5:f6:40:5c: d2:8c:83:85:a9:cd:d9:eb:50:50:d7:56:c2:61:56:4c:0a:aa: 5e:9c:a8:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTPEzMt00kOsCcJZfXfwSBqAJAkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTEyMDYxNTI3MjlaFw0yNTEyMDkxNTUzMjlaMDMxMTAvBgNV BAMTKDgyNEEzNTg3N0NDNUIxQTI5NTY3NkFFQ0NFQTdFQzVBMzQwMTA0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Xj8aXSnRlAZH4qiz5v0tpf46 Z8h9bHVRxyftiEJV/mCtvuBaXbfkCV+84JW1zQi3wecrQUDi/zPvnrKxBzxzHyZK bzEBmO5sFSfEJQ3rUwtmNLdnpdr4XIhtZLskYAGNvjJREjeVLbg6+1Skxe+KJ0zD 9rL09eDKJr9GuT75vTx5GhcsL3BBBgNS3HQC98NC5CtUAJVbbOgwQRM/P+oM00Oz GFKrxOouEMQepmmXHH7tSEQzJEA6LhwLCEskCResqwiI6W0N5RSm0JxMd+iBzdNi qZ23hEfSWimqDK/uwP4tBGxcq5tUuo1pAHWDA6wamwkY+bG0oMsylCq/MVTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgko1h3zFsaKVZ2rszqfsWjQBBPQwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe3RFeHopxgP9gedk2RH32ZjKZDpBR+fMfU moDFbTGwByROY9LscD2Ln8tM8EKZ2i4WHttTsHKFeCXWPi4gKG7StIkAa2Z+nEnh MhXRlobAXxkXdVnFf0UURvYv4WDs+WCt4o2wCacOgy04rKZP3aRv8+am8taD0IBr MQ1hVHzmH46oxnWPQiUxXd8fQySF2KHLDTjVjntw6eUmRRKtx1ypPzzsFbqUipDV 6t5+oMMsX4fR1kGOqWKWx2KH4CTZtnx83UJKNSunf0hqi6tBH4O7h4+t0dtadw5a 42D20QVtCY+vyeGLtfZAXNKMg4WpzdnrUFDXVsJhVkwKql6cqFw= -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:07 2025 by rpki-client