This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: UhZrMkCK1C+pIlkj6ViEABSIaf2IYIVQO8myp7Rl8Cc= Subject key identifier: 35:6E:4F:E0:71:D9:AD:08:53:AC:0D:10:52:F2:2E:69:21:D4:6C:99 Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 6067E8DE51DE09AEACF43604B2D916848C2A4242 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 021B Signing time: Fri 05 Dec 2025 03:01:38 +0000 Manifest this update: Fri 05 Dec 2025 02:56:38 +0000 Manifest next update: Mon 08 Dec 2025 10:23:38 +0000 Files and hashes: 1: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=) 2: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: 8mMpF8JmgmzP0Dr11yb+FMCXBNqkWi9t098dDtCDJmk=) 3: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=) 4: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:67:e8:de:51:de:09:ae:ac:f4:36:04:b2:d9:16:84:8c:2a:42:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Dec 5 02:56:38 2025 GMT Not After : Dec 8 10:23:38 2025 GMT Subject: CN=356E4FE071D9AD0853AC0D1052F22E6921D46C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:54:75:90:f1:90:83:f7:ae:b0:54:77:95: b1:2c:a1:71:5f:ec:a3:49:e8:2e:da:3b:28:23:99: c8:f6:13:77:d0:eb:22:d7:0b:d1:ae:19:6d:7f:40: 10:8b:5e:bd:ef:12:39:6b:d6:fd:10:52:12:9f:08: 81:b5:61:d8:b3:07:ce:be:b8:2b:4a:2f:08:b0:aa: 34:7e:eb:ea:2c:03:be:39:03:b7:12:a7:87:45:ab: de:5f:6c:3d:64:b3:0f:1c:80:bf:cd:d0:53:dc:56: 9a:26:d3:b6:58:bb:97:4d:39:29:23:ed:4a:a7:48: 34:57:86:52:a4:9b:3b:43:2c:a5:4f:71:61:04:f9: bc:32:03:81:06:dc:43:2d:61:6a:d9:f5:cb:04:f6: 9f:ba:ff:fd:60:dc:56:19:61:a6:27:d7:70:43:f9: b2:61:e4:91:ce:ba:96:12:33:0c:9e:00:3a:6b:29: 88:3b:4b:07:64:c8:55:df:07:27:37:57:cc:cf:9b: d5:62:fb:a1:25:b0:72:1e:a7:5d:0f:07:41:31:ed: ce:db:87:1a:c4:09:cf:e3:ff:16:13:9a:55:7e:12: 14:a1:73:50:18:95:3c:6e:5c:7e:a4:d7:e4:a3:1c: d6:21:a2:dd:b1:52:5d:11:82:1b:55:30:4a:f5:50: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6E:4F:E0:71:D9:AD:08:53:AC:0D:10:52:F2:2E:69:21:D4:6C:99 X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:65:0f:97:e3:2e:a9:ba:f1:ba:65:af:25:be:8f:e0:00:1a: 91:d6:0c:8d:09:01:8f:ca:e0:ee:92:10:ce:33:5b:33:5a:5f: ee:2a:12:ef:f8:e9:3b:36:f7:77:b7:9c:82:9f:11:e4:85:4d: 23:82:98:fe:ea:7e:14:f6:7f:4c:59:bb:54:d4:a5:ec:05:15: f0:40:77:40:11:e8:00:02:61:14:4b:a1:2b:4b:0e:26:13:16: bc:f5:08:2b:05:2e:51:1c:85:7a:e2:ed:2a:05:c8:3a:74:d2: c7:27:1c:e9:2f:2c:79:99:8d:94:91:ff:b2:43:c7:46:41:93: 02:c6:e6:1e:60:ad:49:18:ac:f1:3c:f5:12:8f:db:8a:56:59: c1:e1:c7:b0:88:b1:24:7b:07:17:22:89:b2:72:58:e0:bd:e0: 71:86:72:f8:51:35:6a:9e:6c:21:17:52:ac:8d:44:38:ac:81: 23:6c:44:31:e9:27:6f:77:96:8a:dd:96:93:d9:ad:db:76:34: 6c:36:25:15:4b:46:8d:09:48:e2:74:99:7e:f1:53:e2:02:fa: 04:2f:b7:24:5c:d2:af:57:fd:3a:b4:7d:fe:f6:3c:93:78:bd: 6c:65:17:e5:7d:7b:23:25:8c:61:51:eb:67:92:cc:b5:7b:83: 2f:22:49:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYGfo3lHeCa6s9DYEstkWhIwqQkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNTEyMDUwMjU2MzhaFw0yNTEyMDgxMDIzMzhaMDMxMTAvBgNV BAMTKDM1NkU0RkUwNzFEOUFEMDg1M0FDMEQxMDUyRjIyRTY5MjFENDZDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiW1R1kPGQg/eusFR3lbEsoXFf 7KNJ6C7aOygjmcj2E3fQ6yLXC9GuGW1/QBCLXr3vEjlr1v0QUhKfCIG1YdizB86+ uCtKLwiwqjR+6+osA745A7cSp4dFq95fbD1ksw8cgL/N0FPcVpom07ZYu5dNOSkj 7UqnSDRXhlKkmztDLKVPcWEE+bwyA4EG3EMtYWrZ9csE9p+6//1g3FYZYaYn13BD +bJh5JHOupYSMwyeADprKYg7SwdkyFXfByc3V8zPm9Vi+6ElsHIep10PB0Ex7c7b hxrECc/j/xYTmlV+EhShc1AYlTxuXH6k1+SjHNYhot2xUl0RghtVMEr1UJGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNW5P4HHZrQhTrA0QUvIuaSHUbJkwHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChlD5fjLqm68bplryW+j+AAGpHWDI0JAY/K 4O6SEM4zWzNaX+4qEu/46Ts293e3nIKfEeSFTSOCmP7qfhT2f0xZu1TUpewFFfBA d0AR6AACYRRLoStLDiYTFrz1CCsFLlEchXri7SoFyDp00scnHOkvLHmZjZSR/7JD x0ZBkwLG5h5grUkYrPE89RKP24pWWcHhx7CIsSR7BxciibJyWOC94HGGcvhRNWqe bCEXUqyNRDisgSNsRDHpJ293lordlpPZrdt2NGw2JRVLRo0JSOJ0mX7xU+IC+gQv tyRc0q9X/Tq0ff72PJN4vWxlF+V9eyMljGFR62eSzLV7gy8iSbc= -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:45 2025 by rpki-client