This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft File: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft (raw, json) Hash identifier: zr76QmzYFr8Z9psFhjsAnIU7130Buj0790hg3WbeW3Y= Subject key identifier: B2:2A:B0:B8:FB:91:8B:E2:D5:B8:77:59:38:01:28:C7:FA:33:8C:34 Authority key identifier: 0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D Certificate issuer: /CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Certificate serial: 4B0A8D48A46882696BDA087729D324E67D823277 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft Manifest number: 01BF Signing time: Fri 05 Dec 2025 13:01:52 +0000 Manifest this update: Fri 05 Dec 2025 12:56:52 +0000 Manifest next update: Mon 08 Dec 2025 21:10:52 +0000 Files and hashes: 1: 0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl (hash: 0lWy4UBqkKNJUR6DaPrk1xXScT2fu9xUS6a8PtqRO90=) 2: 3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (hash: 2Aghezf2z7P1qZlnkDBkv3wvvtG5c1l4SMgNAsKv8N0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:0a:8d:48:a4:68:82:69:6b:da:08:77:29:d3:24:e6:7d:82:32:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D Validity Not Before: Dec 5 12:56:52 2025 GMT Not After : Dec 8 21:10:52 2025 GMT Subject: CN=B22AB0B8FB918BE2D5B87759380128C7FA338C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:9d:63:06:40:02:5d:62:79:5a:b3:d2:02: 93:18:fb:ae:4c:c2:80:16:f6:b9:a9:7e:ac:f8:b6: 71:59:7b:07:67:56:7e:ed:cc:59:33:4f:78:34:01: 3f:7d:0c:14:c6:4e:fc:cc:cf:80:ef:02:66:2b:32: d1:c6:af:e1:20:b2:e8:ce:4d:47:03:ab:ce:a1:1c: 6c:32:34:ef:6b:ef:41:bc:9c:7d:71:2f:45:ab:22: fd:d0:41:f2:7f:f0:9b:0e:50:81:57:21:e5:bd:38: 28:53:f0:2b:7a:61:0b:06:4c:47:35:c6:42:f4:68: c1:b0:c7:92:de:6a:e7:6f:80:41:95:67:c9:00:40: cc:f1:c1:ac:ca:4b:e8:f9:32:77:fd:eb:b0:51:50: ff:9c:46:aa:b4:92:61:df:17:73:e6:83:8f:d9:ab: a2:42:0f:87:6b:a2:4b:9a:cd:38:40:df:ec:ed:dc: 70:46:de:21:0e:ea:22:4d:7d:92:1e:c3:7a:76:da: 47:9b:3f:79:b5:6c:0d:1d:ba:0e:ab:3e:80:b1:f0: 29:ca:48:4e:19:44:28:35:c9:48:91:ce:84:53:fb: 17:b7:44:68:e4:e2:ea:69:85:be:01:ae:5f:73:bf: 52:ae:cb:d9:d1:35:ce:74:f6:46:cd:2b:d1:98:98: 87:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2A:B0:B8:FB:91:8B:E2:D5:B8:77:59:38:01:28:C7:FA:33:8C:34 X509v3 Authority Key Identifier: keyid:0F:21:C3:EB:D5:0F:C8:F4:3F:8C:A7:A8:71:14:15:6F:74:25:DC:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/0F21C3EBD50FC8F43F8CA7A87114156F7425DC9D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6c:d8:57:d2:8d:a4:a6:7b:4e:13:e0:3a:fc:09:34:ba:bd: aa:cd:12:3c:9b:dd:f9:08:e6:66:2a:ad:78:23:b6:54:52:bf: 58:dc:04:7d:d1:1f:5d:2b:b4:d6:c7:de:ec:86:96:40:4b:9d: ec:17:7a:36:ed:72:cb:fc:05:f1:da:36:3f:71:3f:5c:d4:5a: d2:ba:fc:8b:db:00:78:6a:02:aa:bf:5c:68:ec:87:74:c6:aa: 30:8a:a8:bc:c9:57:e7:03:bc:c2:8b:82:53:fd:15:8e:cc:18: 30:01:1a:b2:ca:17:bd:dd:c3:48:50:0c:8d:4b:ac:c4:21:f6: 72:b2:83:e4:0a:ab:ad:2d:a7:40:50:0e:0e:46:c6:c0:38:b5: 80:c7:c0:d3:b4:1e:2a:39:70:b8:b8:06:53:bd:60:99:80:2c: c8:29:b9:f2:92:2b:c6:d9:b2:bb:cc:44:39:e1:05:9f:3f:4a: 4d:53:dd:8e:c2:16:73:93:a4:9c:1a:15:be:0b:96:94:02:95: ab:56:d3:87:bc:90:64:a2:bd:e4:d8:53:ba:9c:d9:ae:59:51: cc:d4:62:81:d2:df:ce:b5:9e:a0:4f:bc:2b:64:1a:05:ed:c0: 10:65:bc:4f:fd:b2:ce:e2:52:16:34:c4:99:f7:d2:00:59:cd: 7e:f4:8c:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSwqNSKRogmlr2gh3KdMk5n2CMncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3 NDI1REM5RDAeFw0yNTEyMDUxMjU2NTJaFw0yNTEyMDgyMTEwNTJaMDMxMTAvBgNV BAMTKEIyMkFCMEI4RkI5MThCRTJENUI4Nzc1OTM4MDEyOEM3RkEzMzhDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigZ1jBkACXWJ5WrPSApMY+65M woAW9rmpfqz4tnFZewdnVn7tzFkzT3g0AT99DBTGTvzMz4DvAmYrMtHGr+EgsujO TUcDq86hHGwyNO9r70G8nH1xL0WrIv3QQfJ/8JsOUIFXIeW9OChT8Ct6YQsGTEc1 xkL0aMGwx5LeaudvgEGVZ8kAQMzxwazKS+j5Mnf967BRUP+cRqq0kmHfF3Pmg4/Z q6JCD4drokuazThA3+zt3HBG3iEO6iJNfZIew3p22kebP3m1bA0dug6rPoCx8CnK SE4ZRCg1yUiRzoRT+xe3RGjk4upphb4Brl9zv1Kuy9nRNc509kbNK9GYmIdFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsiqwuPuRi+LVuHdZOAEox/ozjDQwHwYDVR0j BBgwFoAUDyHD69UPyPQ/jKeocRQVb3Ql3J0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTkzMDE4ZS03MThmLTQ3NTctYTA4Ny05M2FkNzdiODE4MjEvMC8wRjIxQzNFQkQ1 MEZDOEY0M0Y4Q0E3QTg3MTE0MTU2Rjc0MjVEQzlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1NkY3NDI1 REM5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5MzAxOGUtNzE4Zi00NzU3LWEw ODctOTNhZDc3YjgxODIxLzAvMEYyMUMzRUJENTBGQzhGNDNGOENBN0E4NzExNDE1 NkY3NDI1REM5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxs2FfSjaSme04T4Dr8CTS6varNEjyb3fkI 5mYqrXgjtlRSv1jcBH3RH10rtNbH3uyGlkBLnewXejbtcsv8BfHaNj9xP1zUWtK6 /IvbAHhqAqq/XGjsh3TGqjCKqLzJV+cDvMKLglP9FY7MGDABGrLKF73dw0hQDI1L rMQh9nKyg+QKq60tp0BQDg5GxsA4tYDHwNO0Hio5cLi4BlO9YJmALMgpufKSK8bZ srvMRDnhBZ8/Sk1T3Y7CFnOTpJwaFb4LlpQClatW04e8kGSiveTYU7qc2a5ZUczU YoHS3861nqBPvCtkGgXtwBBlvE/9ss7iUhY0xJn30gBZzX70jJ4= -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:58 2025 by rpki-client