This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft File: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft (raw, json) Hash identifier: VR+/rEkpFIrquj4brOu54yHTdTr6QX8BG8uUWbEwmAQ= Subject key identifier: FB:02:D3:AE:21:E9:36:CE:2B:9C:26:BE:76:77:72:5A:FA:6B:82:3F Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 0D262B24DF7365AB5967C517177DA6CFF4BA905F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft Manifest number: 04AD Signing time: Thu 04 Dec 2025 15:10:58 +0000 Manifest this update: Thu 04 Dec 2025 15:05:58 +0000 Manifest next update: Sun 07 Dec 2025 23:45:58 +0000 Files and hashes: 1: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: NxUfSTs+o4y49KJqzzCvLvRJmV1ctiR4iGydszaWllw=) 2: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl (hash: B+t3cxElrnhkMbZrJkjO592alxH+aw/WH48HlTMBiug=) 3: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: beBQaTk2//EAP6NnfuhmfkJxxOAnhB8nJqrnoVbonBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 23:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:26:2b:24:df:73:65:ab:59:67:c5:17:17:7d:a6:cf:f4:ba:90:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: Dec 4 15:05:58 2025 GMT Not After : Dec 7 23:45:58 2025 GMT Subject: CN=FB02D3AE21E936CE2B9C26BE7677725AFA6B823F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:50:ed:cd:c7:fe:66:07:03:fd:20:43:b5: 3c:7f:ca:7e:16:90:fc:f2:4a:b3:fb:14:54:fc:aa: d7:18:6d:dc:e9:5c:ce:29:66:a6:ae:cd:8f:e3:6c: 35:ac:ca:b8:d9:f7:26:a7:fe:7a:ab:15:b3:e1:10: 62:17:8a:ad:74:c8:7b:c1:78:ec:d2:98:59:e5:14: 01:97:31:5a:99:cb:eb:f6:6c:bf:73:4f:ca:11:0c: 35:e7:2b:7b:e7:11:20:99:13:b8:48:64:f5:bc:b6: fb:cb:07:3a:4f:42:2e:9a:ca:c8:f7:c0:38:0c:a7: 51:ed:95:e1:fd:e3:6e:7d:9e:d3:9b:f1:3d:ef:7a: 86:4f:3d:b1:e3:5d:9b:ec:62:cb:ed:cf:4a:c6:5b: 8d:70:9f:0c:62:ce:14:1b:5e:74:84:5c:95:6c:c6: a5:2c:48:51:c1:51:b7:b5:bb:c0:0c:21:01:ae:b9: 20:6a:33:77:05:09:0c:4c:57:3b:d8:b2:2f:68:2b: 51:cd:7f:64:43:2c:3e:36:5b:07:7d:f2:33:d6:00: a8:d9:5e:c1:ce:a9:c0:71:32:a1:6b:83:94:3e:1b: 1d:17:be:11:05:fb:93:f7:9c:53:22:97:9f:d8:8f: bf:c4:a2:9d:fe:a7:25:bf:03:39:f1:2b:75:8d:06: ee:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:02:D3:AE:21:E9:36:CE:2B:9C:26:BE:76:77:72:5A:FA:6B:82:3F X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:99:5e:0f:ae:6c:e0:13:71:60:36:4e:fa:d6:8c:e2:2e:a6: 8b:9f:0d:3c:60:35:40:50:33:60:e5:8b:84:7b:0f:87:8e:8e: 26:fa:61:9e:77:8c:55:a0:91:1e:08:6b:a8:96:8e:ee:82:a8: 1b:4d:73:de:6a:5c:cc:31:0a:c3:2d:3a:be:d9:22:b9:63:72: 76:0b:30:7f:58:28:3f:71:e9:55:cb:de:1f:71:b1:89:b7:d2: b3:d9:31:85:42:ea:96:ae:c9:08:e5:db:cc:2a:ad:dc:26:1a: 8a:31:6c:41:55:fc:68:9b:13:80:03:81:4f:58:1c:e8:5e:a3: 4d:fd:00:f1:a0:20:9e:03:c2:67:94:57:b7:a8:b0:53:2d:bf: 43:a4:88:a3:b9:3d:8b:a6:c4:47:26:4f:49:3c:e0:62:14:5f: 45:ea:fd:c8:97:4d:ab:0a:4d:cb:14:7d:bb:7d:58:e5:5e:9f: d6:8b:4d:e1:c7:b1:4a:dd:ca:1f:c2:4a:4b:af:4d:71:46:25: de:70:73:48:c6:7c:fe:ef:b6:0e:42:c2:4b:f4:d1:b2:e6:8e: 71:c0:cd:d0:aa:36:42:cc:78:00:ad:89:45:ff:3f:79:fd:4f: ca:a9:00:c9:8d:e5:6c:ed:23:2b:3f:ea:3d:19:6a:70:5a:56: 69:8b:f3:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSYrJN9zZatZZ8UXF32mz/S6kF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNTEyMDQxNTA1NThaFw0yNTEyMDcyMzQ1NThaMDMxMTAvBgNV BAMTKEZCMDJEM0FFMjFFOTM2Q0UyQjlDMjZCRTc2Nzc3MjVBRkE2QjgyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPv1Dtzcf+ZgcD/SBDtTx/yn4W kPzySrP7FFT8qtcYbdzpXM4pZqauzY/jbDWsyrjZ9yan/nqrFbPhEGIXiq10yHvB eOzSmFnlFAGXMVqZy+v2bL9zT8oRDDXnK3vnESCZE7hIZPW8tvvLBzpPQi6aysj3 wDgMp1HtleH94259ntOb8T3veoZPPbHjXZvsYsvtz0rGW41wnwxizhQbXnSEXJVs xqUsSFHBUbe1u8AMIQGuuSBqM3cFCQxMVzvYsi9oK1HNf2RDLD42Wwd98jPWAKjZ XsHOqcBxMqFrg5Q+Gx0XvhEF+5P3nFMil5/Yj7/Eop3+pyW/AznxK3WNBu7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+wLTriHpNs4rnCa+dndyWvprgj8wHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5 MjNBMDk2QjJGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSZXg+ubOATcWA2TvrWjOIupoufDTxgNUBQ M2Dli4R7D4eOjib6YZ53jFWgkR4Ia6iWju6CqBtNc95qXMwxCsMtOr7ZIrljcnYL MH9YKD9x6VXL3h9xsYm30rPZMYVC6pauyQjl28wqrdwmGooxbEFV/GibE4ADgU9Y HOheo039APGgIJ4DwmeUV7eosFMtv0OkiKO5PYumxEcmT0k84GIUX0Xq/ciXTasK TcsUfbt9WOVen9aLTeHHsUrdyh/CSkuvTXFGJd5wc0jGfP7vtg5Cwkv00bLmjnHA zdCqNkLMeACtiUX/P3n9T8qpAMmN5WztIys/6j0ZanBaVmmL80Q= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:36 2025 by rpki-client