This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft File: 20EF9BB996F984E995F9FF0658F0B90CB903B897.mft (raw, json) Hash identifier: nyiPCaupv78aLbRj1gQp3IV9loQNG564XgyaUBIbg3o= Subject key identifier: 66:B0:AB:40:C8:3C:52:3C:5C:21:CD:8F:32:BD:3A:A7:D7:2A:D0:1C Authority key identifier: 20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 Certificate issuer: /CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Certificate serial: 46C49F535619698534A52D9943636E27C00A6DA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft Manifest number: 0239 Signing time: Sat 06 Dec 2025 08:21:59 +0000 Manifest this update: Sat 06 Dec 2025 08:16:59 +0000 Manifest next update: Tue 09 Dec 2025 19:29:59 +0000 Files and hashes: 1: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: vEIWSBdkXeXYMMZ1JkgEqdYq9VUkjPtTYb4B2b9jIwo=) 2: 20EF9BB996F984E995F9FF0658F0B90CB903B897.crl (hash: c/5SsqIpJVWJ4QKECWl594DLgpK2zXlv+RI196F0RG8=) 3: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: gtfNgouP3xqwRZMc2rLq5YYKkcJUcC8NmXsS5NHSV5Y=) 4: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: iDioe3jjxT7o8WJUfZMX4dcAtJo9aoi+lZoEhp66IbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c4:9f:53:56:19:69:85:34:a5:2d:99:43:63:6e:27:c0:0a:6d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20EF9BB996F984E995F9FF0658F0B90CB903B897 Validity Not Before: Dec 6 08:16:59 2025 GMT Not After : Dec 9 19:29:59 2025 GMT Subject: CN=66B0AB40C83C523C5C21CD8F32BD3AA7D72AD01C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6d:9b:0b:42:2b:67:da:f1:6d:16:54:47:37: ae:c9:1e:09:c4:2f:a6:f4:0f:8c:ae:28:40:b1:fe: 11:82:50:14:52:e4:64:5c:e4:0e:8a:73:22:ba:ed: 03:cd:d6:7c:c0:68:24:e5:c9:57:71:fd:8f:7e:37: a8:9e:12:b0:ea:9b:dd:2d:32:85:02:db:b9:05:bf: 8f:63:48:69:00:bf:fe:6b:ea:ca:23:05:01:84:9d: 03:e0:7f:d9:0a:75:8e:25:8c:37:2e:bc:13:c3:3d: df:41:10:85:28:ba:b7:9f:28:0c:f6:20:15:83:a9: 37:45:a7:96:60:18:54:83:8f:28:79:7b:2e:24:e6: 01:a4:68:7e:b6:b2:9a:95:ce:e9:20:70:d7:b5:b7: 05:30:01:92:12:28:49:51:43:93:2f:f9:37:3e:02: 59:aa:3b:2a:aa:21:b1:73:6f:fa:cc:40:62:70:67: 83:01:a4:b1:7e:51:04:d0:6e:a5:10:aa:5f:5b:13: f6:66:2f:b2:3a:da:d3:9a:79:77:96:e9:58:12:cb: 08:4d:cf:44:ff:67:ec:ea:04:eb:b9:c5:49:56:d3: 42:be:26:3a:eb:bb:66:09:78:44:50:7e:dd:06:99: 00:4d:3e:46:b5:73:2c:ca:2b:c1:a8:e8:56:51:11: f7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:AB:40:C8:3C:52:3C:5C:21:CD:8F:32:BD:3A:A7:D7:2A:D0:1C X509v3 Authority Key Identifier: keyid:20:EF:9B:B9:96:F9:84:E9:95:F9:FF:06:58:F0:B9:0C:B9:03:B8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20EF9BB996F984E995F9FF0658F0B90CB903B897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/20EF9BB996F984E995F9FF0658F0B90CB903B897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:db:8e:f2:c1:98:73:54:9f:63:16:69:c1:58:4c:96:d0:f1: 46:92:13:6c:e7:cf:d7:1e:d5:3e:c2:ae:8a:37:6d:0e:10:da: 0e:60:0b:f9:44:d8:d5:bf:f3:24:c8:e0:5e:2e:1a:2d:1a:25: 1e:53:cc:6f:77:76:60:b2:00:29:35:ce:c4:3b:c8:b9:29:d8: a9:51:2a:a8:2b:23:2b:f7:63:1d:de:b7:52:9a:49:88:34:88: 1b:d1:5a:e3:3f:8a:2a:aa:da:2d:1b:a2:70:d1:95:51:46:3f: 5d:eb:56:be:61:15:2d:45:07:eb:8b:d4:97:e0:d8:af:7d:2a: 28:3c:3c:1f:bd:49:12:e5:4e:05:11:70:d8:2d:99:3a:fb:b8: 70:dd:fb:b7:dc:c0:93:df:30:d2:1d:4f:27:9f:51:92:0d:fe: 03:d8:51:35:85:e1:1b:a1:8f:ea:51:37:a7:34:75:53:6e:66: d3:96:12:98:fe:b0:14:54:9a:7f:9a:a2:05:94:c7:58:af:3a: 77:31:d4:59:40:c1:eb:53:c8:55:f4:49:7c:f8:65:5f:17:97: 07:2b:57:26:4f:36:45:a6:70:35:b2:86:d3:66:32:e5:29:b7: 0a:a3:71:ab:40:1c:8b:71:54:ef:75:67:93:3e:ae:2c:fd:99: 1d:81:1b:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsSfU1YZaYU0pS2ZQ2NuJ8AKbaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENC OTAzQjg5NzAeFw0yNTEyMDYwODE2NTlaFw0yNTEyMDkxOTI5NTlaMDMxMTAvBgNV BAMTKDY2QjBBQjQwQzgzQzUyM0M1QzIxQ0Q4RjMyQkQzQUE3RDcyQUQwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlbZsLQitn2vFtFlRHN67JHgnE L6b0D4yuKECx/hGCUBRS5GRc5A6KcyK67QPN1nzAaCTlyVdx/Y9+N6ieErDqm90t MoUC27kFv49jSGkAv/5r6sojBQGEnQPgf9kKdY4ljDcuvBPDPd9BEIUourefKAz2 IBWDqTdFp5ZgGFSDjyh5ey4k5gGkaH62spqVzukgcNe1twUwAZISKElRQ5Mv+Tc+ AlmqOyqqIbFzb/rMQGJwZ4MBpLF+UQTQbqUQql9bE/ZmL7I62tOaeXeW6VgSywhN z0T/Z+zqBOu5xUlW00K+Jjrru2YJeERQft0GmQBNPka1cyzKK8Go6FZREfc5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZrCrQMg8UjxcIc2PMr06p9cq0BwwHwYDVR0j BBgwFoAUIO+buZb5hOmV+f8GWPC5DLkDuJcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDVlNWEzMC0wODAyLTRjNWMtOTQ3ZS05OGVmMjg1ZjRmNmIvMC8yMEVGOUJCOTk2 Rjk4NEU5OTVGOUZGMDY1OEYwQjkwQ0I5MDNCODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5MENCOTAz Qjg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvMjBFRjlCQjk5NkY5ODRFOTk1RjlGRjA2NThGMEI5 MENCOTAzQjg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnbjvLBmHNUn2MWacFYTJbQ8UaSE2znz9ce 1T7Croo3bQ4Q2g5gC/lE2NW/8yTI4F4uGi0aJR5TzG93dmCyACk1zsQ7yLkp2KlR KqgrIyv3Yx3et1KaSYg0iBvRWuM/iiqq2i0bonDRlVFGP13rVr5hFS1FB+uL1Jfg 2K99Kig8PB+9SRLlTgURcNgtmTr7uHDd+7fcwJPfMNIdTyefUZIN/gPYUTWF4Ruh j+pRN6c0dVNuZtOWEpj+sBRUmn+aogWUx1ivOncx1FlAwetTyFX0SXz4ZV8Xlwcr VyZPNkWmcDWyhtNmMuUptwqjcatAHItxVO91Z5M+riz9mR2BG2s= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:18 2025 by rpki-client