This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.mft (raw, json) Hash identifier: KHN0Ai7MCV7uRrlx2PB2aXvIDrO2SATJFwYB9MpghNo= Subject key identifier: E7:F2:19:FA:BF:56:56:82:B7:1E:85:C4:59:20:6E:A3:96:B9:56:22 Authority key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Certificate issuer: /CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Certificate serial: 2AD44BAF67EA9A9030B64ABFEF185044223425 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft Manifest number: 036E Signing time: Sat 06 Dec 2025 09:50:59 +0000 Manifest this update: Sat 06 Dec 2025 09:45:59 +0000 Manifest next update: Tue 09 Dec 2025 13:03:59 +0000 Files and hashes: 1: 3130332e3136362e3136342e302f32342d3234203d3e20313431393530.roa (hash: 1pNllbLIsir5ubUfFKOtnR+KW5yaufHyWhO6BubZkPI=) 2: 0121B523CA474B24830F641FAFB3BBF25D84D66F.crl (hash: 2aYkVfBxt2pDptU+Kdh4Yiq5dvyUI2AbeAzFKXRdkGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d4:4b:af:67:ea:9a:90:30:b6:4a:bf:ef:18:50:44:22:34:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Validity Not Before: Dec 6 09:45:59 2025 GMT Not After : Dec 9 13:03:59 2025 GMT Subject: CN=E7F219FABF565682B71E85C459206EA396B95622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:19:40:e4:cb:d2:73:10:7c:de:4f:2e:e9: 7e:84:be:02:c4:b2:7b:79:7f:da:83:dc:78:c3:14: 4c:d9:83:2d:df:6a:9f:5a:da:dd:af:2e:5a:5a:dc: 87:40:2f:00:eb:53:f4:5e:eb:69:92:82:33:81:22: ef:ea:ac:cb:cf:47:44:2f:a0:a8:67:c5:3f:9f:bc: bd:97:d2:ce:87:6a:05:18:a2:45:73:af:19:ce:61: 5f:a6:96:2b:2b:23:4e:5f:ee:1c:16:f2:cb:64:e3: 3e:16:32:a5:1a:2a:10:58:c7:56:99:31:5a:b3:60: 46:ea:ec:a4:97:47:84:21:33:5b:52:a6:e5:ed:6b: 9b:bb:f8:7b:ed:d0:c2:bc:df:08:95:3a:a8:0f:0f: 0a:b5:e0:ba:c6:d7:cd:9b:42:4c:c0:11:25:09:44: 24:9c:63:22:f4:82:ff:24:50:33:e5:40:2b:36:d7: cc:18:40:02:cc:f1:c9:fa:46:44:cf:55:ed:e4:50: 44:94:62:88:bb:da:70:ba:d2:8e:24:94:0d:82:dd: 87:19:e3:43:b6:e7:8c:af:32:99:da:8c:49:a9:62: 2b:3a:df:10:b1:36:66:a5:85:ee:94:f5:eb:79:6a: 89:b7:91:4a:1a:75:83:2c:c6:e5:64:ca:e1:be:12: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F2:19:FA:BF:56:56:82:B7:1E:85:C4:59:20:6E:A3:96:B9:56:22 X509v3 Authority Key Identifier: keyid:01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:a7:b4:da:9a:64:08:97:51:0b:b9:5b:83:2f:e5:cc:aa: ec:5c:56:2e:7c:8e:fe:03:1c:8f:bf:24:4b:bd:5e:05:e3:61: 35:e9:7c:77:cb:d7:e7:53:24:a1:19:3c:31:7d:7e:a3:aa:07: bd:23:51:45:a7:e4:47:fb:f3:8b:e1:40:b4:c5:82:fc:4b:20: 3c:64:cd:55:1c:5e:ec:de:d7:69:d5:8c:1a:47:57:a9:73:b7: 03:82:bf:6d:23:94:f7:da:be:e6:f6:bf:e9:a5:b4:0f:42:d0: 67:19:b7:a8:3c:a9:44:04:ea:72:22:9e:03:fa:eb:61:ea:02: 45:31:29:95:68:bf:25:a6:86:93:e1:57:73:49:6a:d2:1e:6e: 1e:8b:4f:31:3f:a0:69:e6:07:4a:c3:71:36:47:0c:59:8e:46: 1b:6a:87:bd:a0:47:fe:5a:47:03:a0:15:d0:47:ba:11:6d:47: f1:5f:67:a4:9a:76:da:c2:e8:03:56:ac:3d:78:4c:f1:68:56: 40:32:db:54:54:27:94:ff:22:5b:f6:dc:bd:9d:c8:40:0f:f2: da:0a:eb:bc:06:6d:19:96:62:19:2c:56:c3:28:d6:01:50:f9: f3:ed:a5:65:63:6b:5c:79:40:7f:f0:5d:bb:72:65:d5:9b:a5: 1a:01:5f:23 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITKtRLr2fqmpAwtkq/7xhQRCI0JTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwMTIxQjUyM0NBNDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVE ODRENjZGMB4XDTI1MTIwNjA5NDU1OVoXDTI1MTIwOTEzMDM1OVowMzExMC8GA1UE AxMoRTdGMjE5RkFCRjU2NTY4MkI3MUU4NUM0NTkyMDZFQTM5NkI5NTYyMjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMnlGUDky9JzEHzeTy7pfoS+AsSy e3l/2oPceMMUTNmDLd9qn1ra3a8uWlrch0AvAOtT9F7raZKCM4Ei7+qsy89HRC+g qGfFP5+8vZfSzodqBRiiRXOvGc5hX6aWKysjTl/uHBbyy2TjPhYypRoqEFjHVpkx WrNgRurspJdHhCEzW1Km5e1rm7v4e+3QwrzfCJU6qA8PCrXgusbXzZtCTMARJQlE JJxjIvSC/yRQM+VAKzbXzBhAAszxyfpGRM9V7eRQRJRiiLvacLrSjiSUDYLdhxnj Q7bnjK8ymdqMSaliKzrfELE2ZqWF7pT163lqibeRShp1gyzG5WTK4b4SHPkCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTn8hn6v1ZWgrcehcRZIG6jlrlWIjAfBgNVHSME GDAWgBQBIbUjykdLJIMPZB+vs7vyXYTWbzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Vh OWI4MjJhLThiOTEtNDhkMi05YmMxLWFlMGQ5MDBiZjljNy8wLzAxMjFCNTIzQ0E0 NzRCMjQ4MzBGNjQxRkFGQjNCQkYyNUQ4NEQ2NkYuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8wMTIxQjUyM0NBNDc0QjI0ODMwRjY0MUZBRkIzQkJGMjVEODRE NjZGLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9lYTliODIyYS04YjkxLTQ4ZDItOWJj MS1hZTBkOTAwYmY5YzcvMC8wMTIxQjUyM0NBNDc0QjI0ODMwRjY0MUZBRkIzQkJG MjVEODRENjZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAi7qntNqaZAiXUQu5W4Mv5cyq7FxWLnyO/gMc j78kS71eBeNhNel8d8vX51MkoRk8MX1+o6oHvSNRRafkR/vzi+FAtMWC/EsgPGTN VRxe7N7XadWMGkdXqXO3A4K/bSOU99q+5va/6aW0D0LQZxm3qDypRATqciKeA/rr YeoCRTEplWi/JaaGk+FXc0lq0h5uHotPMT+gaeYHSsNxNkcMWY5GG2qHvaBH/lpH A6AV0Ee6EW1H8V9npJp22sLoA1asPXhM8WhWQDLbVFQnlP8iW/bcvZ3IQA/y2grr vAZtGZZiGSxWwyjWAVD58+2lZWNrXHlAf/Bdu3Jl1ZulGgFfIw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:29 2025 by rpki-client