This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft File: B21EB18A21CA5136A04F43EC18E1AA867B348052.mft (raw, json) Hash identifier: nBEdlNhY3tJSTTUfwxCv+PG9BCc9+92MH6UaH5bTPLE= Subject key identifier: E0:4F:A4:13:04:FE:6E:04:C1:DF:62:B3:A8:51:76:DA:E6:D3:96:F2 Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 Certificate issuer: /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Certificate serial: 18CA96B231543A3C34354385F824F581C034D2F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 17:30:41 +0000 Manifest this update: Sat 06 Dec 2025 17:25:41 +0000 Manifest next update: Wed 10 Dec 2025 04:57:41 +0000 Files and hashes: 1: 3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (hash: TKog579nkq6In8X8nUtBJoNqZgMyK5lrdHp2YkNF7qI=) 2: 3130332e3138362e3230302e302f32332d3234203d3e203333363137.roa (hash: bFy9ipmHq994gZqzOrC2MrxUHNGx4j8GQXF6t3SnIIQ=) 3: 3130332e3138362e3230302e302f32342d3234203d3e20313439373231.roa (hash: XcM3RxWaZSTByybaXYEyG3ThfjQOPN7cDWh0LyekNUI=) 4: B21EB18A21CA5136A04F43EC18E1AA867B348052.crl (hash: hWN3NxiNqMPTAax+GYoOiJdijFo3dmxKW1bRtrQNo/w=) 5: 3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (hash: VPa5e+44+Id69OMYBSbsr2l/joZIe5MZEOOTHqNevEk=) 6: 3130332e3138362e3230312e302f32342d3234203d3e203438343635.roa (hash: V3FWYoEkQa8gWV4+QDqxx7HCAEDVwrNjJj0qdVF+PUc=) 7: 3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (hash: twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ca:96:b2:31:54:3a:3c:34:35:43:85:f8:24:f5:81:c0:34:d2:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052 Validity Not Before: Dec 6 17:25:41 2025 GMT Not After : Dec 10 04:57:41 2025 GMT Subject: CN=E04FA41304FE6E04C1DF62B3A85176DAE6D396F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:1d:c7:3d:88:1e:52:ea:ca:25:0a:b6:8e: cf:ba:31:04:fd:aa:7d:ea:40:f6:da:2b:c3:2e:b9: ef:25:44:eb:8a:4e:a0:75:b7:5b:33:1d:94:63:8b: 5e:11:e2:c5:7d:d5:0e:b3:42:9d:f5:8d:79:cc:44: 5d:d5:f7:a1:33:c8:3b:f9:a3:12:57:58:3d:c4:12: 7e:f3:be:fe:d7:15:05:82:3b:f9:93:05:2e:48:fb: 45:68:5c:d2:d8:d8:02:35:27:b4:93:2b:28:9f:09: 4a:48:28:c6:39:6c:5e:53:a1:53:19:ac:ae:65:5c: 77:59:93:da:76:d5:eb:8f:67:f9:83:dd:37:74:d3: 3a:48:b0:94:08:c8:bd:8d:79:41:0a:99:91:77:46: 05:8a:75:8b:fa:cc:38:38:f3:c3:3d:97:87:de:b4: 7c:60:1c:28:ca:6a:8a:3d:25:da:90:c9:53:6f:3a: 91:df:a9:9d:e0:e0:9e:b8:70:fd:87:a4:bc:44:42: 10:e5:0d:75:b7:60:47:1e:05:6a:61:19:8f:9e:5e: d9:57:29:35:4a:df:18:41:5b:7f:63:52:6d:b9:b5: a8:97:a9:82:76:bc:00:6a:89:b1:6b:77:62:81:14: 91:a5:12:12:4a:e6:62:20:69:1f:7a:ed:b3:f9:1f: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4F:A4:13:04:FE:6E:04:C1:DF:62:B3:A8:51:76:DA:E6:D3:96:F2 X509v3 Authority Key Identifier: keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fe:a1:69:a8:55:3e:ac:ef:68:53:5e:1a:96:ad:be:6d:1d: 5e:9b:ef:43:33:02:83:a7:f7:22:05:65:ee:c5:c9:6f:ca:57: 6e:b5:f1:77:82:b1:19:b3:a9:7b:da:af:e1:36:c4:85:7b:f5: b8:c2:50:25:60:cf:1f:06:73:76:64:35:16:80:b0:32:5e:aa: f1:23:a7:92:c6:99:fa:c6:6d:cf:82:52:82:cf:b0:34:cd:76: a1:04:7b:8c:32:6c:39:7d:b6:f9:fc:6a:01:ac:a6:7a:1b:fa: b9:73:65:eb:dd:c4:e3:ad:4c:4e:dd:73:c0:8d:bd:be:d3:89: 3d:9c:e6:45:7a:22:01:da:bd:fa:d4:20:61:8b:31:ad:c2:42: 10:8c:ac:00:73:a5:19:08:9c:6f:ac:ba:a4:01:0c:46:27:69: 0a:af:2c:b1:f0:33:bd:ba:cb:ca:c4:50:35:24:ca:86:8a:bf: 62:38:36:e6:ae:98:e8:7e:fd:38:7d:19:6b:42:86:7c:0b:e0: 83:3a:c9:60:aa:d1:30:70:0f:4c:c1:35:75:0e:3f:f8:a7:0e: 95:20:17:4c:d3:e8:5d:f0:97:fc:d9:a0:ee:22:3c:24:de:81: 80:df:3e:e1:f3:04:2f:d5:c2:b5:d2:b1:07:ae:5d:bf:91:e3: 5c:c4:f4:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMqWsjFUOjw0NUOF+CT1gcA00vMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3 QjM0ODA1MjAeFw0yNTEyMDYxNzI1NDFaFw0yNTEyMTAwNDU3NDFaMDMxMTAvBgNV BAMTKEUwNEZBNDEzMDRGRTZFMDRDMURGNjJCM0E4NTE3NkRBRTZEMzk2RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqAh3HPYgeUurKJQq2js+6MQT9 qn3qQPbaK8Muue8lROuKTqB1t1szHZRji14R4sV91Q6zQp31jXnMRF3V96EzyDv5 oxJXWD3EEn7zvv7XFQWCO/mTBS5I+0VoXNLY2AI1J7STKyifCUpIKMY5bF5ToVMZ rK5lXHdZk9p21euPZ/mD3Td00zpIsJQIyL2NeUEKmZF3RgWKdYv6zDg488M9l4fe tHxgHCjKaoo9JdqQyVNvOpHfqZ3g4J64cP2HpLxEQhDlDXW3YEceBWphGY+eXtlX KTVK3xhBW39jUm25taiXqYJ2vABqibFrd2KBFJGlEhJK5mIgaR967bP5H/KPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4E+kEwT+bgTB32KzqFF22ubTlvIwHwYDVR0j BBgwFoAUsh6xiiHKUTagT0PsGOGqhns0gFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTU3N2MzYy02NmNkLTQwYTQtYWZjNS02YzZmOGI2NjRhNTEvMC9CMjFFQjE4QTIx Q0E1MTM2QTA0RjQzRUMxOEUxQUE4NjdCMzQ4MDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFBODY3QjM0 ODA1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk1NzdjM2MtNjZjZC00MGE0LWFm YzUtNmM2ZjhiNjY0YTUxLzAvQjIxRUIxOEEyMUNBNTEzNkEwNEY0M0VDMThFMUFB ODY3QjM0ODA1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIr+oWmoVT6s72hTXhqWrb5tHV6b70MzAoOn 9yIFZe7FyW/KV2618XeCsRmzqXvar+E2xIV79bjCUCVgzx8Gc3ZkNRaAsDJeqvEj p5LGmfrGbc+CUoLPsDTNdqEEe4wybDl9tvn8agGspnob+rlzZevdxOOtTE7dc8CN vb7TiT2c5kV6IgHavfrUIGGLMa3CQhCMrABzpRkInG+suqQBDEYnaQqvLLHwM726 y8rEUDUkyoaKv2I4NuaumOh+/Th9GWtChnwL4IM6yWCq0TBwD0zBNXUOP/inDpUg F0zT6F3wl/zZoO4iPCTegYDfPuHzBC/VwrXSsQeuXb+R41zE9NE= -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:37 2025 by rpki-client