This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft File: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft (raw, json) Hash identifier: 56x8XVW8S8AII44GNMtoCy8uUrkBkfiASavRlQKZodM= Subject key identifier: 46:5E:50:5E:1B:95:4D:53:E2:BE:21:85:75:85:C0:C1:4C:80:F5:C0 Authority key identifier: 20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE Certificate issuer: /CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Certificate serial: 560E226E11A1901E6AF52A0A43BE63E5363507A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft Manifest number: 021F Signing time: Fri 05 Dec 2025 01:00:51 +0000 Manifest this update: Fri 05 Dec 2025 00:55:51 +0000 Manifest next update: Mon 08 Dec 2025 10:39:51 +0000 Files and hashes: 1: 20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl (hash: q7YGH5n+0Yp7ZKtQi6GPDySX8yKKKBf9cezWUyv06N4=) 2: 3130332e3135362e3134362e302f32332d3234203d3e20313431303933.roa (hash: m4Ck3HJw6h63iOESyQS/p69JGf3Gj+AMerXfQa9rjpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:0e:22:6e:11:a1:90:1e:6a:f5:2a:0a:43:be:63:e5:36:35:07:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20FD166550369352D6C4C8AB8E9E4203C5D9ABEE Validity Not Before: Dec 5 00:55:51 2025 GMT Not After : Dec 8 10:39:51 2025 GMT Subject: CN=465E505E1B954D53E2BE21857585C0C14C80F5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:45:f1:7c:b4:83:d2:18:30:40:34:5d:6b: 1d:9f:3d:35:7c:21:d3:e5:8c:70:4e:25:45:c5:33: 6a:9e:c6:30:d5:4a:af:2c:50:1f:d3:8a:57:6e:7f: a3:f8:75:5c:05:f7:a9:de:76:e0:2d:c5:5d:c7:92: 3c:8c:1e:62:e1:87:62:82:01:f9:22:6f:97:41:cb: 13:1e:43:5a:d9:9b:f4:bd:85:f4:63:6d:44:3c:97: 77:9d:26:6f:da:6a:12:91:55:5b:0d:ce:f4:d2:8e: e3:ee:e1:99:c3:f0:ef:10:07:45:55:2b:73:83:29: 62:f7:f1:eb:10:af:c3:99:67:b8:ed:a7:9f:6d:13: b4:a8:cc:86:f2:7e:7c:84:7f:77:a0:7a:6a:39:3a: a4:d3:2f:c8:0b:f4:1a:75:b6:33:96:44:83:e6:51: 6c:c3:6b:dd:5f:68:53:3c:b8:c2:9f:54:3f:c4:ba: 13:a5:9d:11:f8:bb:1a:3d:f0:88:8f:de:b6:f9:24: 2a:31:ac:a9:f0:d8:88:61:75:7d:0a:48:6f:be:58: b2:87:62:49:00:a8:32:88:d2:03:af:8d:e9:2f:1c: 41:44:bf:8f:c8:a2:88:55:21:9b:f9:7b:2a:dd:b6: e9:20:bd:6d:d7:90:25:5b:90:51:39:9e:f0:21:7c: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:50:5E:1B:95:4D:53:E2:BE:21:85:75:85:C0:C1:4C:80:F5:C0 X509v3 Authority Key Identifier: keyid:20:FD:16:65:50:36:93:52:D6:C4:C8:AB:8E:9E:42:03:C5:D9:AB:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b899a15b-d5ae-45ec-8012-a6caab3dd88b/0/20FD166550369352D6C4C8AB8E9E4203C5D9ABEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0f:2c:e9:65:03:ba:92:ee:b1:cf:fb:af:9a:f6:05:f7:bc: 02:8b:53:62:74:26:c6:12:7a:61:59:e7:d5:e6:b9:08:93:33: 73:85:fd:8e:df:ad:09:24:0d:38:49:f1:82:ca:88:26:e2:27: e5:a6:ac:0e:3d:a5:81:a3:42:7b:c1:56:7f:ff:dd:6f:7e:40: d9:cf:e4:e7:fe:63:48:5e:a1:2b:10:57:8b:3f:57:62:90:64: 3d:4f:d7:4a:ed:72:7b:9f:57:ad:3c:1c:7c:cc:0d:61:21:0e: f5:54:2e:9b:88:c5:16:2a:b7:9a:4c:b1:99:c5:52:ae:27:9c: b5:32:a6:5e:dc:f5:67:fe:87:ad:2b:9e:9c:54:2b:b9:5f:fa: 6b:8b:ce:9d:16:a1:5e:92:38:68:ad:92:6f:61:e5:15:b1:e4: c2:1b:02:94:c3:40:f8:76:a7:07:7a:3a:3e:a9:e4:9e:68:98: b9:a8:cd:ae:fd:f7:3f:3d:b4:09:38:01:d0:d3:bd:28:25:4a: f6:ef:69:71:0a:30:22:79:db:24:1a:b8:cd:6a:40:c2:65:3e: a7:4d:2d:75:a6:b4:98:dc:5e:f7:60:3d:b1:a2:5f:29:60:62: f9:62:b2:83:d2:45:66:cf:5f:cd:a1:3d:f4:08:ed:28:1f:3d: 8a:e9:b8:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVg4ibhGhkB5q9SoKQ75j5TY1B6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDND NUQ5QUJFRTAeFw0yNTEyMDUwMDU1NTFaFw0yNTEyMDgxMDM5NTFaMDMxMTAvBgNV BAMTKDQ2NUU1MDVFMUI5NTRENTNFMkJFMjE4NTc1ODVDMEMxNEM4MEY1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11UXxfLSD0hgwQDRdax2fPTV8 IdPljHBOJUXFM2qexjDVSq8sUB/Tilduf6P4dVwF96neduAtxV3HkjyMHmLhh2KC Afkib5dByxMeQ1rZm/S9hfRjbUQ8l3edJm/aahKRVVsNzvTSjuPu4ZnD8O8QB0VV K3ODKWL38esQr8OZZ7jtp59tE7SozIbyfnyEf3egemo5OqTTL8gL9Bp1tjOWRIPm UWzDa91faFM8uMKfVD/EuhOlnRH4uxo98IiP3rb5JCoxrKnw2IhhdX0KSG++WLKH YkkAqDKI0gOvjekvHEFEv4/IoohVIZv5eyrdtukgvW3XkCVbkFE5nvAhfFVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURl5QXhuVTVPiviGFdYXAwUyA9cAwHwYDVR0j BBgwFoAUIP0WZVA2k1LWxMirjp5CA8XZq+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODk5YTE1Yi1kNWFlLTQ1ZWMtODAxMi1hNmNhYWIzZGQ4OGIvMC8yMEZEMTY2NTUw MzY5MzUyRDZDNEM4QUI4RTlFNDIwM0M1RDlBQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQyMDNDNUQ5 QUJFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg5OWExNWItZDVhZS00NWVjLTgw MTItYTZjYWFiM2RkODhiLzAvMjBGRDE2NjU1MDM2OTM1MkQ2QzRDOEFCOEU5RTQy MDNDNUQ5QUJFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcPLOllA7qS7rHP+6+a9gX3vAKLU2J0JsYS emFZ59XmuQiTM3OF/Y7frQkkDThJ8YLKiCbiJ+WmrA49pYGjQnvBVn//3W9+QNnP 5Of+Y0heoSsQV4s/V2KQZD1P10rtcnufV608HHzMDWEhDvVULpuIxRYqt5pMsZnF Uq4nnLUypl7c9Wf+h60rnpxUK7lf+muLzp0WoV6SOGitkm9h5RWx5MIbApTDQPh2 pwd6Oj6p5J5omLmoza799z89tAk4AdDTvSglSvbvaXEKMCJ52yQauM1qQMJlPqdN LXWmtJjcXvdgPbGiXylgYvlisoPSRWbPX82hPfQI7SgfPYrpuCs= -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:22 2025 by rpki-client