This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: 9/6PVqoS+oWSaUFDsjoWKVdW3EnXKqZ3U7GoEEWMqTU= Subject key identifier: 21:39:8B:B3:05:71:FA:51:70:AA:C2:7A:4B:EF:24:80:86:56:92:26 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 0CC27CC862C341E0B05996EFBDB793C0AE17128C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 01F6 Signing time: Wed 03 Dec 2025 10:31:46 +0000 Manifest this update: Wed 03 Dec 2025 10:26:46 +0000 Manifest next update: Sat 06 Dec 2025 22:27:46 +0000 Files and hashes: 1: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: +oyLitcfqLXo/SXDWVl2WJDMAFszGDl4k8cTWxpYG2s=) 2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: swZnIrS/N8jbG3MiapPB8F24idMt8GRsGrJ6YtoYjjc=) 3: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c2:7c:c8:62:c3:41:e0:b0:59:96:ef:bd:b7:93:c0:ae:17:12:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Dec 3 10:26:46 2025 GMT Not After : Dec 6 22:27:46 2025 GMT Subject: CN=21398BB30571FA5170AAC27A4BEF248086569226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:00:1e:a2:59:42:57:a9:28:cf:6b:3d:9e: e5:4c:86:12:1f:f0:d0:3b:eb:5d:e4:34:c8:1a:ab: 08:f7:06:48:99:43:72:26:70:eb:82:43:9f:62:f8: dd:6f:81:93:91:5d:e3:b6:8e:72:07:db:ea:7a:25: 65:a0:c0:f4:89:84:bc:ab:74:56:77:d9:8b:21:c4: b3:8d:4d:6b:3f:58:3b:10:b5:d1:9a:b5:4e:9e:36: a2:d6:0a:90:85:24:dc:53:e2:1c:f7:ee:9a:9f:22: d1:06:23:ed:47:6b:49:16:c7:32:24:ba:2b:5e:e8: af:85:f1:b4:1e:f0:06:35:18:55:ec:8d:ce:82:01: 57:f5:fb:c1:e8:e5:eb:45:1e:13:aa:6b:74:34:77: a0:ba:e6:ab:7e:93:67:52:71:70:95:c4:0e:fc:32: 94:53:02:b3:49:07:d0:99:d9:e1:32:1f:68:e9:c8: 68:90:29:cb:b5:4d:3f:60:3f:86:8c:f5:03:15:a7: e0:73:15:aa:b4:79:0a:12:e4:84:fb:ab:ef:66:d9: ea:28:82:67:7b:21:22:5d:ad:14:ee:fe:bb:3a:60: bb:b9:60:fa:79:e7:c3:6b:5e:0d:e6:52:59:7a:95: c9:26:16:ec:e9:10:79:3b:f6:ab:3d:d9:1e:88:bc: 21:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:39:8B:B3:05:71:FA:51:70:AA:C2:7A:4B:EF:24:80:86:56:92:26 X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:bd:f8:41:f7:ce:c1:1c:ff:56:5e:4a:56:88:64:7d:8a:0f: 23:8b:f1:f2:fe:bd:9d:9e:80:5c:53:63:41:1a:e7:12:e9:78: 6c:43:36:13:44:f2:34:bf:03:af:ae:ce:8b:bb:b5:93:96:9d: 47:74:da:9f:ea:00:ea:ea:34:79:1c:5b:13:16:15:9d:63:07: a6:c2:be:4c:93:81:7c:17:7d:19:9d:40:75:f2:68:91:a8:07: 67:b2:ab:e7:64:88:1d:09:54:62:57:39:74:24:8b:93:31:eb: d3:9e:40:4f:1a:6a:c0:6a:b3:66:9b:84:f0:34:1b:ba:12:60: 6e:7b:3a:8e:2c:d6:ce:55:8a:6b:cb:73:57:cc:09:75:0e:c7: 13:9f:19:82:b8:0c:70:1b:65:bd:34:e5:19:73:4a:a3:a0:20: 54:c3:26:b6:57:91:ce:46:23:4b:fe:20:2b:e1:78:43:45:d5: 69:d3:c1:f4:b7:20:29:4d:ce:bb:54:92:96:c8:de:bf:7e:a9: 9c:24:f2:30:b5:18:67:61:80:3e:e2:32:59:e9:a0:52:a5:13: d2:ca:d4:18:c0:bb:99:f9:34:f8:58:f2:54:31:15:f1:a8:d9: 07:bb:59:a5:00:8a:a1:7c:7a:4c:f7:e5:84:a3:d1:12:3e:f4: 97:ab:db:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMJ8yGLDQeCwWZbvvbeTwK4XEowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTEyMDMxMDI2NDZaFw0yNTEyMDYyMjI3NDZaMDMxMTAvBgNV BAMTKDIxMzk4QkIzMDU3MUZBNTE3MEFBQzI3QTRCRUYyNDgwODY1NjkyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK9AAeollCV6koz2s9nuVMhhIf 8NA7613kNMgaqwj3BkiZQ3ImcOuCQ59i+N1vgZORXeO2jnIH2+p6JWWgwPSJhLyr dFZ32YshxLONTWs/WDsQtdGatU6eNqLWCpCFJNxT4hz37pqfItEGI+1Ha0kWxzIk uite6K+F8bQe8AY1GFXsjc6CAVf1+8Ho5etFHhOqa3Q0d6C65qt+k2dScXCVxA78 MpRTArNJB9CZ2eEyH2jpyGiQKcu1TT9gP4aM9QMVp+BzFaq0eQoS5IT7q+9m2eoo gmd7ISJdrRTu/rs6YLu5YPp558NrXg3mUll6lckmFuzpEHk79qs92R6IvCHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUITmLswVx+lFwqsJ6S+8kgIZWkiYwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB29+EH3zsEc/1ZeSlaIZH2KDyOL8fL+vZ2e gFxTY0Ea5xLpeGxDNhNE8jS/A6+uzou7tZOWnUd02p/qAOrqNHkcWxMWFZ1jB6bC vkyTgXwXfRmdQHXyaJGoB2eyq+dkiB0JVGJXOXQki5Mx69OeQE8aasBqs2abhPA0 G7oSYG57Oo4s1s5VimvLc1fMCXUOxxOfGYK4DHAbZb005RlzSqOgIFTDJrZXkc5G I0v+ICvheENF1WnTwfS3IClNzrtUkpbI3r9+qZwk8jC1GGdhgD7iMlnpoFKlE9LK 1BjAu5n5NPhY8lQxFfGo2Qe7WaUAiqF8ekz35YSj0RI+9Jer2y4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:09 2025 by rpki-client