This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft File: B126A372835801BBB738696C56DCF255D032D42F.mft (raw, json) Hash identifier: ChgriZZvevG3UUKVqjN9okve1iGZvWmWRnyO+3Df6Xo= Subject key identifier: C5:19:1C:B0:12:23:90:C5:CE:34:A6:2F:84:EA:AD:B2:2F:20:18:CB Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F Certificate issuer: /CN=B126A372835801BBB738696C56DCF255D032D42F Certificate serial: 5FC7E5702E0A03F5AA0E04EC128883BC9F5DE691 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft Manifest number: 03AC Signing time: Thu 04 Dec 2025 15:12:02 +0000 Manifest this update: Thu 04 Dec 2025 15:07:02 +0000 Manifest next update: Mon 08 Dec 2025 00:14:02 +0000 Files and hashes: 1: 3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (hash: Nmtn3LlfweyxwcAEh/9aYsa4vVfStr8hvIJSQMmS8CI=) 2: B126A372835801BBB738696C56DCF255D032D42F.crl (hash: hTAT9zXcn5fStbKpEym8H+0QkBViQ4C/fc4y5RKsfPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c7:e5:70:2e:0a:03:f5:aa:0e:04:ec:12:88:83:bc:9f:5d:e6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F Validity Not Before: Dec 4 15:07:02 2025 GMT Not After : Dec 8 00:14:02 2025 GMT Subject: CN=C5191CB0122390C5CE34A62F84EAADB22F2018CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:35:31:9b:b5:70:fc:60:f0:ce:5f:d8:14: cf:89:09:36:52:ae:f7:58:97:29:71:9b:13:0d:ef: 4f:a6:34:e9:a2:a5:a8:cc:b5:92:d5:6e:8c:6d:c4: d3:ce:70:c2:da:4c:cc:5c:71:ad:05:1b:8a:9c:c3: 63:4d:69:29:00:6b:75:b7:a6:59:ce:7f:2c:e9:c1: 4c:5a:d2:e0:61:be:5f:33:9c:7e:f0:43:85:48:99: 6b:0e:e4:a4:6b:99:11:a0:b5:78:3e:44:fd:4a:6a: 7e:58:ec:16:95:5a:06:0f:d3:73:7e:ce:7b:d2:f2: 11:fd:1c:c5:6a:f5:0f:43:33:c1:83:fc:ec:e6:03: 77:0e:68:bf:78:0e:f1:a4:2a:3e:d0:e4:2b:a4:c7: 31:90:7b:95:fb:3d:a9:03:a6:e1:e0:65:02:1f:e3: 0a:0a:29:b2:db:03:40:0a:43:ab:6d:c9:eb:04:35: 8f:00:6d:03:1a:64:dd:8d:55:8c:c2:f6:82:ae:85: d6:3e:f2:f4:96:7b:76:a3:9c:b9:e1:b4:1d:61:32: 0a:c0:26:3c:fb:5d:87:68:40:b6:68:41:91:93:c9: 98:5a:a0:b6:1e:61:7c:6c:cb:1b:91:32:c0:98:8b: 41:cf:91:bc:60:dd:1e:f0:8c:0a:c0:ca:48:d3:46: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:19:1C:B0:12:23:90:C5:CE:34:A6:2F:84:EA:AD:B2:2F:20:18:CB X509v3 Authority Key Identifier: keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:67:34:6e:67:cf:df:65:ea:65:00:da:cf:98:2a:ec:32:bc: ec:96:10:d6:ea:34:da:4b:31:27:e7:2b:f5:8a:31:ed:cb:f5: 77:b6:e3:a1:8f:07:ce:0e:c4:37:b4:6f:c7:60:b8:47:68:91: 72:83:d6:6f:e1:13:d4:8d:34:33:56:2c:6c:34:58:63:d4:d7: dd:a4:af:0e:bd:b7:37:fa:0a:ea:96:bc:41:e7:63:a1:6f:c3: 25:e1:1d:be:bb:ec:52:0f:28:3a:94:27:f0:85:db:93:1d:06: e1:eb:14:4c:fe:73:4b:91:28:80:e1:c6:26:9d:83:e6:07:e4: af:84:c0:22:7a:04:64:a9:41:0a:c9:e3:57:af:51:a3:d8:18: d3:3c:ee:3f:77:f2:48:10:ff:60:c5:eb:2e:a2:3c:9e:0d:6d: 30:8d:37:45:31:8f:75:33:fe:37:93:35:c8:4c:4e:3f:2f:b3: 56:fd:63:f5:74:58:a5:83:31:af:eb:fb:2c:93:4f:6b:87:93: d3:ae:7f:60:fa:b5:7d:49:fe:96:f1:50:d4:fa:e7:dc:ad:70: 7e:3d:23:d0:ec:ef:b0:e3:47:4c:a2:ba:a9:fc:10:2e:9a:e3: 75:f1:15:bf:98:b1:7f:ed:e8:99:31:bb:49:6f:39:97:96:34: 2b:68:c4:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8flcC4KA/WqDgTsEoiDvJ9d5pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVE MDMyRDQyRjAeFw0yNTEyMDQxNTA3MDJaFw0yNTEyMDgwMDE0MDJaMDMxMTAvBgNV BAMTKEM1MTkxQ0IwMTIyMzkwQzVDRTM0QTYyRjg0RUFBREIyMkYyMDE4Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMTUxm7Vw/GDwzl/YFM+JCTZS rvdYlylxmxMN70+mNOmipajMtZLVboxtxNPOcMLaTMxcca0FG4qcw2NNaSkAa3W3 plnOfyzpwUxa0uBhvl8znH7wQ4VImWsO5KRrmRGgtXg+RP1Kan5Y7BaVWgYP03N+ znvS8hH9HMVq9Q9DM8GD/OzmA3cOaL94DvGkKj7Q5CukxzGQe5X7PakDpuHgZQIf 4woKKbLbA0AKQ6ttyesENY8AbQMaZN2NVYzC9oKuhdY+8vSWe3ajnLnhtB1hMgrA Jjz7XYdoQLZoQZGTyZhaoLYeYXxsyxuRMsCYi0HPkbxg3R7wjArAykjTRgKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxRkcsBIjkMXONKYvhOqtsi8gGMswHwYDVR0j BBgwFoAUsSajcoNYAbu3OGlsVtzyVdAy1C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQ0ZjkxOC05MzMyLTQyNTctYjUxMC0zODFjODU5MGZmNTQvMC9CMTI2QTM3Mjgz NTgwMUJCQjczODY5NkM1NkRDRjI1NUQwMzJENDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0YyNTVEMDMy RDQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0NGY5MTgtOTMzMi00MjU3LWI1 MTAtMzgxYzg1OTBmZjU0LzAvQjEyNkEzNzI4MzU4MDFCQkI3Mzg2OTZDNTZEQ0Yy NTVEMDMyRDQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1nNG5nz99l6mUA2s+YKuwyvOyWENbqNNpL MSfnK/WKMe3L9Xe246GPB84OxDe0b8dguEdokXKD1m/hE9SNNDNWLGw0WGPU192k rw69tzf6CuqWvEHnY6FvwyXhHb677FIPKDqUJ/CF25MdBuHrFEz+c0uRKIDhxiad g+YH5K+EwCJ6BGSpQQrJ41evUaPYGNM87j938kgQ/2DF6y6iPJ4NbTCNN0Uxj3Uz /jeTNchMTj8vs1b9Y/V0WKWDMa/r+yyTT2uHk9Ouf2D6tX1J/pbxUNT659ytcH49 I9Ds77DjR0yiuqn8EC6a43XxFb+YsX/t6Jkxu0lvOZeWNCtoxLY= -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:29 2025 by rpki-client