This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft (raw, json) Hash identifier: QGHnOORltm6cXd12ZLpT17mPO+CTSWhKavZTHycVNKQ= Subject key identifier: D9:B6:4E:42:BD:1C:19:4F:E1:78:AF:C2:F5:95:44:E4:9D:57:FC:9C Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 4B78F169191B6CE2567D3D7D9C8626C3F47DD525 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft Manifest number: 053D Signing time: Tue 06 Jan 2026 11:20:48 +0000 Manifest this update: Tue 06 Jan 2026 11:15:48 +0000 Manifest next update: Fri 09 Jan 2026 20:23:48 +0000 Files and hashes: 1: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: C0CDuWEVU0SX0hds00E1HGuGHRio6g8DwzULftVgj6I=) 2: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl (hash: x82OcxzZxN2HFY6HvzZE23GDnJP+clZvqqrn8Qckg3s=) 3: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: Ks6djmjYrG5U+knwJmAadX8Vs5do9/GjSatcKmwDXgM=) 4: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: VtiYvCa1bjH6ANhQ1ZiFk2JkSbje5+lBzE3EKLizBTk=) 5: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: PKIt6KT96DVg2otgI4L6Lbo6X1IxxuQSsidS83qyqJk=) 6: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: qTnm5CGA/RYtoBdoUqEMNKhCi+L95N248VCqrGjA3NM=) 7: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: lR3gX6Bwr4ANHz1p/BofTqPyE1vSZC884k0IFEXkQqw=) 8: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: ZeQ/G35c/J7hJXCvQZ6ieAUy4NBWFOv66XK2TZxgUwU=) 9: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: hlUw25q5eNWFZZoKL6XJ7rDIzMv9Ha/qCoX1PFqE3P4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Jan 2026 20:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:78:f1:69:19:1b:6c:e2:56:7d:3d:7d:9c:86:26:c3:f4:7d:d5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: Jan 6 11:15:48 2026 GMT Not After : Jan 9 20:23:48 2026 GMT Subject: CN=D9B64E42BD1C194FE178AFC2F59544E49D57FC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:ea:27:6c:af:6a:bb:0e:fa:19:1f:2b:d5: 37:6d:8a:77:b1:a3:e5:79:e6:10:26:83:7c:73:a6: c9:6f:5f:2a:a8:41:3e:ed:c9:69:34:6c:b2:69:1c: eb:fa:17:37:48:f7:30:47:70:46:de:2e:3b:77:a5: 2b:e5:d1:4a:3a:25:04:4b:3e:2d:7a:9b:67:32:d0: bc:d3:fa:93:ab:76:27:a6:f3:e9:6e:ac:fa:5a:bb: 5a:63:22:c9:ca:0f:1c:94:f0:23:42:af:75:c7:94: 55:31:ae:a4:c5:4f:54:f8:63:b6:fe:18:9b:25:d8: 43:1d:28:79:a9:52:6f:9a:eb:9d:61:39:0a:be:72: 8a:8a:68:ba:36:f4:ba:2b:46:0f:08:b1:da:f6:08: 17:d9:14:f6:e8:0d:ce:0b:da:54:b1:bd:2b:21:77: 35:7d:90:11:43:49:ce:f6:42:ba:83:4e:e5:5c:d4: b0:c9:1b:36:7b:10:71:dc:b0:6e:53:24:25:af:00: ae:c8:6d:29:90:97:94:ee:d2:2a:e7:e2:21:f0:20: 3f:48:26:56:08:a5:be:5e:fa:25:01:23:6a:17:90: 03:d4:02:44:fc:1e:e3:52:d0:f5:2e:34:7c:3d:3b: 15:44:28:0d:39:ac:e2:4c:6f:aa:06:87:c1:b3:50: 5d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B6:4E:42:BD:1C:19:4F:E1:78:AF:C2:F5:95:44:E4:9D:57:FC:9C X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ee:39:73:ff:7d:11:3d:a6:e9:77:c0:ad:f6:46:15:1a:ba: 7e:27:54:3e:ed:e2:e9:1e:48:b3:30:1a:53:ed:63:75:aa:8c: c3:e5:65:92:e3:51:33:07:cd:c3:14:f1:8e:a3:6c:42:b9:c5: 1e:ce:ef:4c:e7:a9:78:b6:81:3e:8f:d1:e4:1a:21:e4:e3:66: a2:56:b6:24:0c:72:a1:66:94:15:ab:35:dc:14:68:be:8f:53: e1:74:59:21:37:98:c3:38:1f:8e:b8:09:c5:ef:e7:50:ab:8e: c6:54:d9:7b:7f:9e:32:fc:be:50:59:05:24:6a:a7:57:fc:bf: d2:01:83:af:3b:27:47:dd:45:47:66:47:1a:a8:37:b2:d2:f4: ba:bf:ea:81:d9:fb:b9:c0:9f:f4:76:1f:1f:2d:51:5d:1f:50: 7f:8c:ba:93:76:ac:7b:a6:48:b9:bf:8c:26:8f:06:ef:1b:c6: 50:99:f4:06:b6:ce:d4:41:6a:45:2f:21:12:df:8a:e9:b0:52: 1c:a5:c0:46:01:90:4c:3d:d6:6e:e7:68:b1:93:33:0f:df:0d: 3b:c2:d2:0e:96:7d:1f:73:27:bc:92:67:b0:2c:34:f5:6a:b1: b9:a7:32:97:ed:91:f3:da:7e:40:b6:6d:48:ff:cd:37:50:ca: fc:ac:c3:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3jxaRkbbOJWfT19nIYmw/R91SUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yNjAxMDYxMTE1NDhaFw0yNjAxMDkyMDIzNDhaMDMxMTAvBgNV BAMTKEQ5QjY0RTQyQkQxQzE5NEZFMTc4QUZDMkY1OTU0NEU0OUQ1N0ZDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDi+onbK9quw76GR8r1Tdtinex o+V55hAmg3xzpslvXyqoQT7tyWk0bLJpHOv6FzdI9zBHcEbeLjt3pSvl0Uo6JQRL Pi16m2cy0LzT+pOrdiem8+lurPpau1pjIsnKDxyU8CNCr3XHlFUxrqTFT1T4Y7b+ GJsl2EMdKHmpUm+a651hOQq+coqKaLo29LorRg8Isdr2CBfZFPboDc4L2lSxvSsh dzV9kBFDSc72QrqDTuVc1LDJGzZ7EHHcsG5TJCWvAK7IbSmQl5Tu0irn4iHwID9I JlYIpb5e+iUBI2oXkAPUAkT8HuNS0PUuNHw9OxVEKA05rOJMb6oGh8GzUF0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2bZOQr0cGU/heK/C9ZVE5J1X/JwwHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIz REM2MTQyRTVGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALuOXP/fRE9pul3wK32RhUaun4nVD7t4uke SLMwGlPtY3WqjMPlZZLjUTMHzcMU8Y6jbEK5xR7O70znqXi2gT6P0eQaIeTjZqJW tiQMcqFmlBWrNdwUaL6PU+F0WSE3mMM4H464CcXv51CrjsZU2Xt/njL8vlBZBSRq p1f8v9IBg687J0fdRUdmRxqoN7LS9Lq/6oHZ+7nAn/R2Hx8tUV0fUH+MupN2rHum SLm/jCaPBu8bxlCZ9Aa2ztRBakUvIRLfiumwUhylwEYBkEw91m7naLGTMw/fDTvC 0g6WfR9zJ7ySZ7AsNPVqsbmnMpftkfPafkC2bUj/zTdQyvysw4w= -----END CERTIFICATE-----Generated at Thu Jan 8 01:32:31 2026 by rpki-client