This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft File: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft (raw, json) Hash identifier: hJBoph+WR3e6XlDuCXIjViMifqKsEj6ezq7NJ7H5gUE= Subject key identifier: BD:D2:B9:78:88:8A:DE:06:60:3C:D0:3A:34:7D:EC:7F:D2:20:8E:E6 Authority key identifier: 12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C Certificate issuer: /CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Certificate serial: 42467686EA6986C76886D65E25BE4E086B63BF34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft Manifest number: 0158 Signing time: Fri 05 Dec 2025 04:20:55 +0000 Manifest this update: Fri 05 Dec 2025 04:15:55 +0000 Manifest next update: Mon 08 Dec 2025 12:03:55 +0000 Files and hashes: 1: 121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl (hash: GBYXgzvSIk57sUrGU6QCNFQ/cRo5juWC9Jze9bMBRXc=) 2: 3130332e35322e3231322e302f32342d3234203d3e20313531353932.roa (hash: 9JDBXYlD9SqW2BMyADf7uhmLucs+uFWH56a3wjHsOJc=) 3: 34352e3132362e34332e302f32342d3234203d3e20313531353932.roa (hash: ewEeaR7DMfnT3bww9hZJ32z3VJCiqclbtnfFQ/sT7f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:46:76:86:ea:69:86:c7:68:86:d6:5e:25:be:4e:08:6b:63:bf:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121FC37C40B5B0AFD8F88B57216FD43E29D11E1C Validity Not Before: Dec 5 04:15:55 2025 GMT Not After : Dec 8 12:03:55 2025 GMT Subject: CN=BDD2B978888ADE06603CD03A347DEC7FD2208EE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:23:85:47:8a:86:58:31:8f:ce:24:7c:6c:e1: b2:32:b6:70:5f:b9:42:cb:c4:51:51:27:03:b0:68: f9:bf:38:39:8c:03:4a:54:7c:b3:e5:9c:8c:86:44: 57:e8:b7:2e:ce:79:84:4a:8d:df:32:63:03:ec:40: 93:4e:f5:41:e4:04:d9:de:fb:46:49:9e:bc:dc:05: de:38:86:aa:57:09:bd:2f:43:87:1b:e0:84:e7:89: 32:8d:f4:08:44:cb:bc:16:07:11:3e:77:3a:ac:45: ca:76:1a:5f:6b:a5:b4:58:e7:c5:ea:c0:a5:62:0a: a6:cf:08:33:d0:95:0c:a9:fa:c9:97:69:f4:33:3a: 09:17:cc:87:9a:11:c3:e4:e7:23:28:f7:72:a9:6d: 59:b6:02:7a:01:34:63:57:43:8f:e9:d7:35:69:6a: c0:ac:23:5a:ce:14:ba:91:3e:78:18:ad:a5:28:5e: 02:28:b6:3f:e4:4b:0a:67:e5:7a:9f:39:1f:e6:f5: 17:20:82:a5:0e:40:d9:e8:bb:63:95:fb:42:4c:21: 3e:9a:5c:7f:6d:8c:49:9f:22:ac:6a:5e:04:c5:0b: a3:79:04:e1:d4:22:e7:79:3b:9d:54:22:47:70:b2: 2f:b0:33:d2:c6:9d:c7:9c:06:2c:eb:ac:90:d3:88: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:B9:78:88:8A:DE:06:60:3C:D0:3A:34:7D:EC:7F:D2:20:8E:E6 X509v3 Authority Key Identifier: keyid:12:1F:C3:7C:40:B5:B0:AF:D8:F8:8B:57:21:6F:D4:3E:29:D1:1E:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1f7c25b-410b-482a-9436-221ab079d368/0/121FC37C40B5B0AFD8F88B57216FD43E29D11E1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:0a:cb:8a:23:aa:65:20:e4:75:72:d2:32:f9:03:7a:7d:c8: 87:58:28:56:8c:05:f1:43:e1:65:19:fa:e5:67:3e:75:5d:d6: 09:4a:20:2a:77:4c:06:9a:53:f8:be:5b:56:b6:99:33:27:7f: 1b:e8:e4:13:46:65:1e:f7:0b:9f:09:07:e5:83:bf:03:0e:b3: 63:98:aa:b0:1c:e8:8a:8c:d9:4b:73:02:3e:a2:63:78:7a:95: 49:1c:5a:e9:e6:d1:77:9b:08:61:6e:fe:9c:cf:cb:26:30:9c: 44:77:46:ad:24:6d:c9:f2:41:0e:ba:96:de:17:c4:b6:2e:82: ab:91:30:95:c6:ae:16:7a:59:66:92:a8:12:90:08:4a:c2:00: 01:cf:85:9b:86:59:1d:51:51:4c:05:a2:da:16:e7:b5:67:f1: cb:57:ac:95:ea:27:41:e1:36:51:74:10:f6:52:35:a1:e2:2c: 96:01:ca:e9:21:83:6e:75:4d:ad:3d:b0:de:45:9a:57:0a:36: 9e:33:22:0e:6c:eb:64:76:e7:c7:91:9d:0c:e5:e6:c6:96:20: 73:95:d8:bb:56:71:3e:e8:49:08:31:ef:60:2b:7e:93:49:2e: 1e:8f:ac:df:28:c8:00:b1:0d:f2:ab:91:8a:e9:d0:5e:71:84: 25:a1:7d:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkZ2hupphsdohtZeJb5OCGtjvzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0Uy OUQxMUUxQzAeFw0yNTEyMDUwNDE1NTVaFw0yNTEyMDgxMjAzNTVaMDMxMTAvBgNV BAMTKEJERDJCOTc4ODg4QURFMDY2MDNDRDAzQTM0N0RFQzdGRDIyMDhFRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUI4VHioZYMY/OJHxs4bIytnBf uULLxFFRJwOwaPm/ODmMA0pUfLPlnIyGRFfoty7OeYRKjd8yYwPsQJNO9UHkBNne +0ZJnrzcBd44hqpXCb0vQ4cb4ITniTKN9AhEy7wWBxE+dzqsRcp2Gl9rpbRY58Xq wKViCqbPCDPQlQyp+smXafQzOgkXzIeaEcPk5yMo93KpbVm2AnoBNGNXQ4/p1zVp asCsI1rOFLqRPngYraUoXgIotj/kSwpn5XqfOR/m9RcggqUOQNnou2OV+0JMIT6a XH9tjEmfIqxqXgTFC6N5BOHUIud5O51UIkdwsi+wM9LGncecBizrrJDTiLnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvdK5eIiK3gZgPNA6NH3sf9IgjuYwHwYDVR0j BBgwFoAUEh/DfEC1sK/Y+ItXIW/UPinRHhwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWY3YzI1Yi00MTBiLTQ4MmEtOTQzNi0yMjFhYjA3OWQzNjgvMC8xMjFGQzM3QzQw QjVCMEFGRDhGODhCNTcyMTZGRDQzRTI5RDExRTFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0M0UyOUQx MUUxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFmN2MyNWItNDEwYi00ODJhLTk0 MzYtMjIxYWIwNzlkMzY4LzAvMTIxRkMzN0M0MEI1QjBBRkQ4Rjg4QjU3MjE2RkQ0 M0UyOUQxMUUxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEKy4ojqmUg5HVy0jL5A3p9yIdYKFaMBfFD 4WUZ+uVnPnVd1glKICp3TAaaU/i+W1a2mTMnfxvo5BNGZR73C58JB+WDvwMOs2OY qrAc6IqM2UtzAj6iY3h6lUkcWunm0XebCGFu/pzPyyYwnER3Rq0kbcnyQQ66lt4X xLYugquRMJXGrhZ6WWaSqBKQCErCAAHPhZuGWR1RUUwFotoW57Vn8ctXrJXqJ0Hh NlF0EPZSNaHiLJYByukhg251Ta09sN5FmlcKNp4zIg5s62R258eRnQzl5saWIHOV 2LtWcT7oSQgx72ArfpNJLh6PrN8oyACxDfKrkYrp0F5xhCWhffk= -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:44 2025 by rpki-client