This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft File: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft (raw, json) Hash identifier: iw9sDpO9fUvaqINWwoGrhmXzwsxBT95mUt0wmCMt4CQ= Subject key identifier: 41:82:3E:43:F5:5E:B8:49:16:D0:38:B2:46:29:45:66:6F:64:C2:27 Authority key identifier: 22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C Certificate issuer: /CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Certificate serial: 5D49F64437D10FE777B407A7F9496C859BEB21AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft Manifest number: 0122 Signing time: Sat 06 Dec 2025 09:31:06 +0000 Manifest this update: Sat 06 Dec 2025 09:26:06 +0000 Manifest next update: Tue 09 Dec 2025 09:31:06 +0000 Files and hashes: 1: 3130332e32332e3130302e302f32322d3234203d3e203538343030.roa (hash: X1zuW7ewqOs7galNtjkQMnHEEBdiMyZOmIpDqdwYj+Q=) 2: 22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl (hash: mrf8r0iJuCrGRPMxkwZWUVOy2psp+JKMPr0HP9Sxif0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:49:f6:44:37:d1:0f:e7:77:b4:07:a7:f9:49:6c:85:9b:eb:21:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C Validity Not Before: Dec 6 09:26:06 2025 GMT Not After : Dec 9 09:31:06 2025 GMT Subject: CN=41823E43F55EB84916D038B2462945666F64C227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:fe:f2:ea:36:0b:d3:bc:76:87:0f:d5:60: ac:9d:7e:f0:42:bd:00:a6:13:7b:d2:a9:1a:7f:2d: 1e:3a:ca:3a:a7:77:16:df:e0:10:24:92:f5:38:a1: f2:67:4b:ef:2c:77:f1:aa:01:48:cd:7f:aa:ef:ca: 0b:f6:bb:ba:55:ce:5e:34:06:ce:34:5c:48:3e:03: 7a:f2:0c:92:39:ca:c5:2d:53:08:ba:be:86:2c:c1: e2:02:83:63:3b:69:58:e8:ac:fe:b2:a7:11:86:58: 5e:26:59:2e:01:ae:4b:bc:51:8c:14:35:a2:f3:f7: fd:41:83:cd:8f:1a:5a:1a:58:c5:ab:46:08:c9:06: 77:74:ac:d0:ad:d7:9e:53:13:5d:fe:ae:55:87:1d: af:00:68:e4:7c:05:fc:f8:ac:27:48:d0:6a:7c:b4: fe:24:09:a6:41:97:61:4e:75:d4:80:79:c5:07:3a: f9:75:13:54:f0:e1:a9:b6:51:ec:c8:42:5a:c3:35: 4a:cf:70:d1:b3:28:e0:72:35:84:91:3b:1d:4d:c8: 98:1f:06:f4:3c:f6:e9:0e:8a:f1:b0:63:9b:e5:ea: 81:ee:74:d5:be:ae:e1:2f:92:21:cb:63:1e:07:28: e6:c3:39:ed:d0:2c:f2:c8:ee:d1:cc:4c:0a:4d:8e: 5f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:82:3E:43:F5:5E:B8:49:16:D0:38:B2:46:29:45:66:6F:64:C2:27 X509v3 Authority Key Identifier: keyid:22:CD:3A:20:CF:62:1A:5B:0B:99:E4:28:C8:E5:73:19:C0:A9:CE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7180704-6b64-4a40-8f3d-ffdfd5e37def/0/22CD3A20CF621A5B0B99E428C8E57319C0A9CE2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:2f:c3:34:ce:09:6a:e1:d1:df:59:bd:7a:d2:ce:58:2a:ff: 13:13:7d:e0:d6:34:b4:e6:57:32:f2:6e:ec:23:cb:02:ac:f7: fb:cb:b4:39:c8:ae:4b:0f:ef:3e:63:b4:37:b0:0f:95:ea:30: 7e:f2:30:44:fb:d5:29:b4:4a:26:df:31:9f:e6:ed:cc:60:46: 89:00:27:4b:77:c4:27:a6:a1:2b:df:e5:98:36:b6:97:9b:b3: 74:95:0d:7f:02:df:62:06:57:ff:92:ec:b5:e3:e4:b3:35:0c: 39:dd:7b:38:ee:2c:58:21:59:66:02:42:03:98:02:f0:fd:6b: c4:ec:e5:54:3b:06:64:fa:ac:3b:6a:15:91:07:15:af:33:13: a9:95:90:45:79:f6:e0:5a:bf:e4:72:7e:1a:bb:57:78:69:07: d0:00:09:7b:6a:bb:6a:94:2e:55:db:a8:6d:ee:8a:f5:ef:44: 9e:ce:07:00:06:1f:c7:97:93:36:6e:dd:e8:92:da:4a:95:0a: 76:8c:a4:59:fe:69:ca:09:e5:59:74:f9:b2:7f:16:ea:bf:6a: 1a:2a:04:21:a6:f8:87:a7:61:d6:8b:e4:09:3d:fc:8f:d4:44: cc:36:4c:98:a3:62:60:9d:7d:9d:72:4d:69:ce:2c:40:d7:76: b3:dc:f9:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXUn2RDfRD+d3tAen+UlshZvrIa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlD MEE5Q0UyQzAeFw0yNTEyMDYwOTI2MDZaFw0yNTEyMDkwOTMxMDZaMDMxMTAvBgNV BAMTKDQxODIzRTQzRjU1RUI4NDkxNkQwMzhCMjQ2Mjk0NTY2NkY2NEMyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6f7y6jYL07x2hw/VYKydfvBC vQCmE3vSqRp/LR46yjqndxbf4BAkkvU4ofJnS+8sd/GqAUjNf6rvygv2u7pVzl40 Bs40XEg+A3ryDJI5ysUtUwi6voYsweICg2M7aVjorP6ypxGGWF4mWS4Brku8UYwU NaLz9/1Bg82PGloaWMWrRgjJBnd0rNCt155TE13+rlWHHa8AaOR8Bfz4rCdI0Gp8 tP4kCaZBl2FOddSAecUHOvl1E1Tw4am2UezIQlrDNUrPcNGzKOByNYSROx1NyJgf BvQ89ukOivGwY5vl6oHudNW+ruEvkiHLYx4HKObDOe3QLPLI7tHMTApNjl8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYI+Q/VeuEkW0DiyRilFZm9kwicwHwYDVR0j BBgwFoAUIs06IM9iGlsLmeQoyOVzGcCpziwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzE4MDcwNC02YjY0LTRhNDAtOGYzZC1mZmRmZDVlMzdkZWYvMC8yMkNEM0EyMENG NjIxQTVCMEI5OUU0MjhDOEU1NzMxOUMwQTlDRTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTczMTlDMEE5 Q0UyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcxODA3MDQtNmI2NC00YTQwLThm M2QtZmZkZmQ1ZTM3ZGVmLzAvMjJDRDNBMjBDRjYyMUE1QjBCOTlFNDI4QzhFNTcz MTlDMEE5Q0UyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGovwzTOCWrh0d9ZvXrSzlgq/xMTfeDWNLTm VzLybuwjywKs9/vLtDnIrksP7z5jtDewD5XqMH7yMET71Sm0SibfMZ/m7cxgRokA J0t3xCemoSvf5Zg2tpebs3SVDX8C32IGV/+S7LXj5LM1DDndezjuLFghWWYCQgOY AvD9a8Ts5VQ7BmT6rDtqFZEHFa8zE6mVkEV59uBav+Ryfhq7V3hpB9AACXtqu2qU LlXbqG3uivXvRJ7OBwAGH8eXkzZu3eiS2kqVCnaMpFn+acoJ5Vl0+bJ/Fuq/ahoq BCGm+IenYdaL5Ak9/I/URMw2TJijYmCdfZ1yTWnOLEDXdrPc+f4= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:33 2025 by rpki-client