This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft File: 22504F83E378CE066AD31D32EB24280CB0F6E560.mft (raw, json) Hash identifier: YIr9gcEDQ/DDp/yh9for74RVryK+M8OxXFP3DOsoXpo= Subject key identifier: 1C:45:54:E2:5D:6E:B3:50:70:E6:02:86:10:AD:7F:BE:0E:65:E1:B5 Authority key identifier: 22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 Certificate issuer: /CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Certificate serial: 35B1565A226FBB3C2132F01D49F8EBDEAB41E52C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft Manifest number: 01EB Signing time: Fri 05 Dec 2025 17:11:21 +0000 Manifest this update: Fri 05 Dec 2025 17:06:21 +0000 Manifest next update: Tue 09 Dec 2025 03:41:21 +0000 Files and hashes: 1: 22504F83E378CE066AD31D32EB24280CB0F6E560.crl (hash: ej4c4TvLH+nUNTucfmLr1cctY7Sj04xEexEbgQdo0tQ=) 2: 3130332e34362e3138372e302f32342d3234203d3e20313530343632.roa (hash: 3MFYnAUdA7YDVt9GLc9O7yMdgWVCYVJhgGeVAk7k6cA=) 3: 3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (hash: ppVHCACqlSkCk2zBbZsJHXx5IRxFz5QYyP09fnWth0M=) 4: 3130332e34362e3138362e302f32332d3233203d3e20313530343632.roa (hash: rlPDCVNSf12GT3UB6JNKAKIcKwQhkdo/IHpQgzId5qI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b1:56:5a:22:6f:bb:3c:21:32:f0:1d:49:f8:eb:de:ab:41:e5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22504F83E378CE066AD31D32EB24280CB0F6E560 Validity Not Before: Dec 5 17:06:21 2025 GMT Not After : Dec 9 03:41:21 2025 GMT Subject: CN=1C4554E25D6EB35070E6028610AD7FBE0E65E1B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:e4:e7:35:14:ff:d3:2d:8c:87:51:b7:31: b2:1a:d6:22:85:ef:ef:77:21:49:a1:02:1e:1c:4f: e3:28:89:6d:d1:bc:d2:19:90:f1:62:06:a7:5e:b4: a7:4f:02:9c:dc:d8:fd:35:87:03:e9:d0:3d:77:d7: 49:b0:12:5f:e0:7b:c3:0c:e4:69:b7:e7:15:a3:6b: 0e:e0:4c:b9:5c:75:5d:1a:66:3c:46:f5:fd:db:ab: f4:6e:0b:78:0f:ea:36:c2:39:f3:b9:bc:e1:ab:d1: bb:c7:e7:3a:9c:37:83:11:d9:eb:c2:05:97:21:f3: a7:e4:a9:c8:db:48:b0:59:97:bc:28:6e:6f:6e:3c: cd:78:5c:6c:83:f3:6b:55:51:3b:02:cb:5e:a9:90: 0a:6b:8b:66:86:f6:0c:18:9e:67:fc:18:50:a9:3b: 24:71:8f:7b:5e:24:82:58:bb:48:da:7e:91:23:67: cf:d5:a6:fa:29:18:92:03:40:a1:dc:11:15:ec:f0: d7:b3:9a:de:8d:f3:02:3d:40:17:27:f4:ee:c3:a9: 89:e6:0a:81:21:b7:0d:d2:5a:e3:ab:7c:31:0b:31: 6c:b2:f1:6c:53:dd:1f:8d:bd:36:2b:d2:b3:dd:16: 12:e7:3e:a4:42:10:58:5a:35:b7:83:dc:ec:5a:59: 99:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:45:54:E2:5D:6E:B3:50:70:E6:02:86:10:AD:7F:BE:0E:65:E1:B5 X509v3 Authority Key Identifier: keyid:22:50:4F:83:E3:78:CE:06:6A:D3:1D:32:EB:24:28:0C:B0:F6:E5:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22504F83E378CE066AD31D32EB24280CB0F6E560.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/22504F83E378CE066AD31D32EB24280CB0F6E560.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:96:db:4d:c2:a4:8c:7d:f5:f9:e9:36:09:31:13:41:88:20: f9:f9:58:eb:e5:d4:47:e6:a8:c5:8f:5f:70:19:7d:e8:03:62: a5:8e:fe:29:68:8e:59:66:83:e9:65:d0:e0:11:20:0a:41:a6: 6a:0a:dc:51:df:f5:b3:f7:b6:40:61:58:8b:db:19:4d:d6:8f: d2:26:e5:64:02:6e:06:a1:64:c2:14:15:ba:6a:65:e8:ad:29: ae:fa:d7:42:93:30:61:02:d6:73:79:ab:1e:29:d0:a2:fd:0c: 9c:b6:1b:d7:c5:0d:23:ff:6c:90:fb:4f:ef:4c:c4:e0:f3:e3: 38:72:d4:9a:11:15:24:1a:42:3c:0d:fc:2c:f9:35:f7:f1:61: a7:51:19:0c:62:42:5e:a6:5b:69:e5:d4:fe:c6:d3:70:5c:72: 58:c7:92:09:eb:48:b0:f2:f9:98:8d:a1:f3:33:d3:92:1a:58: 1b:0f:96:02:f5:e9:87:db:be:19:96:18:3e:05:d1:10:e1:9a: bc:3c:f7:82:1b:d6:fc:7c:14:76:ed:53:be:85:fe:a0:3a:65: fe:aa:a1:5e:77:23:32:90:cb:da:f2:94:c9:8e:cb:df:a9:c6: 4e:15:44:ed:3f:13:2d:b2:fe:c6:f2:a2:5b:93:09:73:e0:b2: 03:8c:12:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbFWWiJvuzwhMvAdSfjr3qtB5SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENC MEY2RTU2MDAeFw0yNTEyMDUxNzA2MjFaFw0yNTEyMDkwMzQxMjFaMDMxMTAvBgNV BAMTKDFDNDU1NEUyNUQ2RUIzNTA3MEU2MDI4NjEwQUQ3RkJFMEU2NUUxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4uTnNRT/0y2Mh1G3MbIa1iKF 7+93IUmhAh4cT+MoiW3RvNIZkPFiBqdetKdPApzc2P01hwPp0D1310mwEl/ge8MM 5Gm35xWjaw7gTLlcdV0aZjxG9f3bq/RuC3gP6jbCOfO5vOGr0bvH5zqcN4MR2evC BZch86fkqcjbSLBZl7wobm9uPM14XGyD82tVUTsCy16pkApri2aG9gwYnmf8GFCp OyRxj3teJIJYu0jafpEjZ8/VpvopGJIDQKHcERXs8Nezmt6N8wI9QBcn9O7DqYnm CoEhtw3SWuOrfDELMWyy8WxT3R+NvTYr0rPdFhLnPqRCEFhaNbeD3OxaWZmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHEVU4l1us1Bw5gKGEK1/vg5l4bUwHwYDVR0j BBgwFoAUIlBPg+N4zgZq0x0y6yQoDLD25WAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQzMjQxYi1jZmQxLTRjYmItOTIxOS1jN2EzNjIzN2MxNDgvMC8yMjUwNEY4M0Uz NzhDRTA2NkFEMzFEMzJFQjI0MjgwQ0IwRjZFNTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4MENCMEY2 RTU2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MzI0MWItY2ZkMS00Y2JiLTky MTktYzdhMzYyMzdjMTQ4LzAvMjI1MDRGODNFMzc4Q0UwNjZBRDMxRDMyRUIyNDI4 MENCMEY2RTU2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACiW203CpIx99fnpNgkxE0GIIPn5WOvl1Efm qMWPX3AZfegDYqWO/ilojllmg+ll0OARIApBpmoK3FHf9bP3tkBhWIvbGU3Wj9Im 5WQCbgahZMIUFbpqZeitKa7610KTMGEC1nN5qx4p0KL9DJy2G9fFDSP/bJD7T+9M xODz4zhy1JoRFSQaQjwN/Cz5NffxYadRGQxiQl6mW2nl1P7G03BccljHkgnrSLDy +ZiNofMz05IaWBsPlgL16YfbvhmWGD4F0RDhmrw894Ib1vx8FHbtU76F/qA6Zf6q oV53IzKQy9rylMmOy9+pxk4VRO0/Ey2y/sbyoluTCXPgsgOMEhc= -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:31 2025 by rpki-client