This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: w6UNzl0Xfv0//vJ4nhVtAiF/8uTHjMsJ2GLzOid5soQ= Subject key identifier: 18:E7:05:B9:7D:EE:99:73:26:FA:FF:E5:EF:37:71:BF:74:B1:23:24 Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 12EA1EA5BC763CA5D95757BDC96F1B794A9D639D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 0530 Signing time: Fri 05 Dec 2025 14:50:43 +0000 Manifest this update: Fri 05 Dec 2025 14:45:43 +0000 Manifest next update: Tue 09 Dec 2025 02:17:43 +0000 Files and hashes: 1: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) 2: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) 3: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pEqfltHiO5idL1uFxEX2uQGcaapU/AOZ2PUbYVPk40Y=) 4: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 5: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: XJya992fgeumEsyzLHSliCXeCsu4l890cLRsCVZbrLE=) 6: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: E3o0PGx4EK3pzpEgPUbTWCIvEtIp7DFNLOKCbu/Fc10=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ea:1e:a5:bc:76:3c:a5:d9:57:57:bd:c9:6f:1b:79:4a:9d:63:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Dec 5 14:45:43 2025 GMT Not After : Dec 9 02:17:43 2025 GMT Subject: CN=18E705B97DEE997326FAFFE5EF3771BF74B12324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:7d:eb:dd:ef:63:36:c0:89:4f:62:d6:64: ca:13:ca:f8:e0:dc:58:a2:47:6d:36:76:06:8d:12: be:6c:3d:5b:fe:0f:d5:80:cb:1c:9a:92:ae:96:84: a1:71:f8:28:a4:dd:82:b1:45:f9:c3:dd:d6:e6:6f: c2:1a:7a:99:af:af:6d:b3:00:29:fb:65:eb:eb:a2: 91:6a:0b:41:74:de:9f:eb:c7:2f:d5:2f:5a:35:20: ff:22:38:2c:74:71:30:f5:c4:38:16:aa:47:66:3e: cb:94:d8:dd:5a:20:75:3b:f3:9e:58:bd:26:13:9d: 00:a9:0b:7c:36:23:22:a6:0b:bb:d9:93:3c:85:5b: b8:3c:e8:db:93:30:9c:87:0c:3b:e1:dd:2c:49:77: 23:44:bc:67:3c:04:78:80:51:49:61:79:66:95:ce: 57:75:46:9c:14:fa:31:f5:14:37:c6:f3:8a:23:7a: b9:5a:dd:46:55:3a:04:32:c5:8f:2d:d3:95:f3:f5: cf:3a:f2:ca:82:79:ef:0b:8f:35:f2:5c:b1:66:27: 82:97:b5:90:50:1c:f1:ca:3f:81:13:39:79:c9:4d: 09:de:1f:93:82:77:c6:f2:41:65:4e:ef:fd:73:ab: 14:79:1d:66:37:99:83:95:b1:f8:cc:d9:dd:8f:ce: 65:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E7:05:B9:7D:EE:99:73:26:FA:FF:E5:EF:37:71:BF:74:B1:23:24 X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:13:a1:41:80:fa:d7:94:ed:c4:89:b9:10:e0:fd:aa:e3:e8: 23:4d:7f:b3:5d:f1:c0:79:0d:24:c6:b6:9c:ee:5d:58:b8:d2: 58:2b:5e:ae:4d:8b:19:28:73:ea:0e:cf:f9:c1:19:69:53:73: 5c:e1:60:c0:21:07:fe:a2:68:cd:51:a6:6b:78:b7:75:6f:90: bf:38:39:18:65:a9:18:72:cf:3d:10:91:ac:e8:b0:ef:17:61: 20:13:5d:86:9b:f0:4c:d2:af:1e:e9:34:d3:f7:6b:1b:5c:1e: f2:c8:96:86:a7:55:a1:6c:b7:de:2a:8a:e3:c1:88:6f:a5:d8: d7:47:3f:6f:e5:71:84:1d:62:de:ad:fd:6f:c7:55:3d:6d:ed: f7:93:3e:32:3c:ca:39:85:3e:57:ed:9d:92:77:e5:1b:d5:84: bd:df:6a:5e:24:e5:26:58:0b:c7:1d:09:bd:37:9a:4a:9d:1f: 8c:86:47:78:9b:9a:59:24:28:e0:9d:0a:ac:d6:79:17:c2:c6: 93:a8:55:10:ea:2a:f6:a6:76:c2:e8:80:d1:87:44:65:c8:e5: 7b:f6:68:84:98:32:7a:54:c2:b5:f5:c9:2f:6e:2f:f3:5b:21: 4d:c6:bc:84:a5:b3:99:35:41:ee:8e:a4:3e:0f:ed:64:2f:65: 6f:60:bc:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEuoepbx2PKXZV1e9yW8beUqdY50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNTEyMDUxNDQ1NDNaFw0yNTEyMDkwMjE3NDNaMDMxMTAvBgNV BAMTKDE4RTcwNUI5N0RFRTk5NzMyNkZBRkZFNUVGMzc3MUJGNzRCMTIzMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEH3r3e9jNsCJT2LWZMoTyvjg 3FiiR202dgaNEr5sPVv+D9WAyxyakq6WhKFx+Cik3YKxRfnD3dbmb8Iaepmvr22z ACn7ZevropFqC0F03p/rxy/VL1o1IP8iOCx0cTD1xDgWqkdmPsuU2N1aIHU7855Y vSYTnQCpC3w2IyKmC7vZkzyFW7g86NuTMJyHDDvh3SxJdyNEvGc8BHiAUUlheWaV zld1RpwU+jH1FDfG84ojerla3UZVOgQyxY8t05Xz9c868sqCee8LjzXyXLFmJ4KX tZBQHPHKP4ETOXnJTQneH5OCd8byQWVO7/1zqxR5HWY3mYOVsfjM2d2PzmVZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGOcFuX3umXMm+v/l7zdxv3SxIyQwHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgToUGA+teU7cSJuRDg/arj6CNNf7Nd8cB5 DSTGtpzuXVi40lgrXq5Nixkoc+oOz/nBGWlTc1zhYMAhB/6iaM1Rpmt4t3VvkL84 ORhlqRhyzz0QkazosO8XYSATXYab8EzSrx7pNNP3axtcHvLIloanVaFst94qiuPB iG+l2NdHP2/lcYQdYt6t/W/HVT1t7feTPjI8yjmFPlftnZJ35RvVhL3fal4k5SZY C8cdCb03mkqdH4yGR3ibmlkkKOCdCqzWeRfCxpOoVRDqKvamdsLogNGHRGXI5Xv2 aISYMnpUwrX1yS9uL/NbIU3GvISls5k1Qe6OpD4P7WQvZW9gvLw= -----END CERTIFICATE-----Generated at Sun Dec 7 06:40:58 2025 by rpki-client