This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: dAWy83poMBvN/t9ZOxqsSYBxqs6DpXAU30/f2BD9KpI= Subject key identifier: 2A:0F:34:39:93:29:4F:E8:65:FB:12:70:69:8A:C2:42:59:75:6E:F0 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 5ABB224C68D152DDAD498127AA3B0286B40C23BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 0219 Signing time: Thu 18 Dec 2025 04:10:39 +0000 Manifest this update: Thu 18 Dec 2025 04:05:39 +0000 Manifest next update: Sun 21 Dec 2025 15:26:39 +0000 Files and hashes: 1: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) 2: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: j0zU5zNBxerw0e+KyvMXC5SwkVyUagvGQiIa+aM4WMg=) 3: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: 5tM5B92BUhK1D4oxeoTb05BYoe5Uo0jV482f67S5SOw=) 4: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 5: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:bb:22:4c:68:d1:52:dd:ad:49:81:27:aa:3b:02:86:b4:0c:23:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Dec 18 04:05:39 2025 GMT Not After : Dec 21 15:26:39 2025 GMT Subject: CN=2A0F343993294FE865FB1270698AC24259756EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:9f:2e:0f:a0:77:cc:8b:9d:4e:ba:f4:04: 87:a9:a4:69:49:a0:f1:4b:0e:f1:98:ff:cb:de:51: 1a:4f:b7:50:52:b3:ea:e7:c3:d0:fb:f9:0b:ac:c3: cf:09:bc:4b:e9:18:6d:a1:92:9c:4d:b6:13:8a:01: 56:4c:44:fe:36:e1:72:21:69:3f:9b:96:48:f1:62: e4:cc:43:f5:23:1f:b4:2d:67:6f:04:1c:11:f5:5e: 3e:4c:da:2f:ff:c2:2e:35:94:b0:b4:56:aa:9c:ca: 6d:42:ac:ef:2e:64:48:0b:70:a5:54:8c:26:43:da: 90:06:af:51:a9:f0:fd:6d:ab:d1:45:bd:cb:25:ce: ff:ac:16:7c:51:eb:7b:f5:13:21:a0:86:d0:4d:74: ad:24:cc:8c:c7:bd:fc:e8:f9:a9:47:af:ad:c8:cd: 7b:d8:f2:ae:d2:fd:6b:e8:fd:4d:7a:8a:d2:4e:1e: 9f:3a:da:d7:62:e9:76:ec:e2:44:ed:8f:2f:20:2b: ce:d6:af:3c:42:12:fe:0f:cf:6c:f0:de:d1:2d:f7: 14:43:e3:02:d8:a7:f0:a4:d0:ac:a5:61:bd:03:bf: b4:3a:cb:56:e5:c4:28:8a:90:d7:7a:bd:63:81:6a: 56:63:61:6c:27:72:43:7b:64:3e:2f:ff:30:26:27: dc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0F:34:39:93:29:4F:E8:65:FB:12:70:69:8A:C2:42:59:75:6E:F0 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4b:89:a4:41:9e:98:9c:f5:61:36:c9:06:5b:95:96:54:1b: 42:ae:ae:ac:48:cb:cf:7d:76:b6:8f:3c:d5:57:23:96:ce:b0: 50:c3:38:c7:a8:a4:d8:64:73:00:e7:71:d0:0a:13:64:7e:5a: 4e:fa:0b:d2:f6:e0:a3:90:89:62:6c:6d:06:2b:41:96:92:16: 7c:ee:d7:36:5f:10:54:1c:7b:b8:ed:13:45:b9:b2:49:64:d0: 4d:54:ac:57:d6:3c:a5:46:d0:87:8b:34:a9:1d:b5:c9:11:61: e7:b5:7d:ab:7b:fd:70:7f:73:fe:96:32:7a:20:bc:73:50:60: 8d:33:f7:f7:f6:60:40:10:00:20:eb:5b:76:b1:29:d5:a8:d5: f7:26:74:f4:55:b9:e7:37:1f:15:fb:95:5b:71:17:18:1b:8b: a2:2b:69:ef:f2:c3:da:94:c1:cb:98:a7:ac:dd:53:12:ff:36: 1e:bb:33:c2:c7:e7:91:50:e6:b3:f3:1a:51:28:2a:1d:e3:c4: 2e:b8:f2:8c:8e:cc:48:31:97:2e:ec:af:2a:38:27:09:f7:24: 7b:97:2e:c5:e9:00:18:a4:a4:66:2d:12:27:55:8a:db:cc:c8: 5c:2f:4d:85:28:67:fa:6d:f7:f2:27:23:e8:fe:08:29:37:e0: 61:4a:4f:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrsiTGjRUt2tSYEnqjsChrQMI7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNTEyMTgwNDA1MzlaFw0yNTEyMjExNTI2MzlaMDMxMTAvBgNV BAMTKDJBMEYzNDM5OTMyOTRGRTg2NUZCMTI3MDY5OEFDMjQyNTk3NTZFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvW58uD6B3zIudTrr0BIeppGlJ oPFLDvGY/8veURpPt1BSs+rnw9D7+Qusw88JvEvpGG2hkpxNthOKAVZMRP424XIh aT+blkjxYuTMQ/UjH7QtZ28EHBH1Xj5M2i//wi41lLC0Vqqcym1CrO8uZEgLcKVU jCZD2pAGr1Gp8P1tq9FFvcslzv+sFnxR63v1EyGghtBNdK0kzIzHvfzo+alHr63I zXvY8q7S/Wvo/U16itJOHp862tdi6Xbs4kTtjy8gK87WrzxCEv4Pz2zw3tEt9xRD 4wLYp/Ck0KylYb0Dv7Q6y1blxCiKkNd6vWOBalZjYWwnckN7ZD4v/zAmJ9xdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKg80OZMpT+hl+xJwaYrCQll1bvAwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZLiaRBnpic9WE2yQZblZZUG0KurqxIy899 draPPNVXI5bOsFDDOMeopNhkcwDncdAKE2R+Wk76C9L24KOQiWJsbQYrQZaSFnzu 1zZfEFQce7jtE0W5sklk0E1UrFfWPKVG0IeLNKkdtckRYee1fat7/XB/c/6WMnog vHNQYI0z9/f2YEAQACDrW3axKdWo1fcmdPRVuec3HxX7lVtxFxgbi6Irae/yw9qU wcuYp6zdUxL/Nh67M8LH55FQ5rPzGlEoKh3jxC648oyOzEgxly7sryo4Jwn3JHuX LsXpABikpGYtEidVitvMyFwvTYUoZ/pt9/InI+j+CCk34GFKT3k= -----END CERTIFICATE-----Generated at Thu Dec 18 07:07:38 2025 by rpki-client