This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft File: D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json) Hash identifier: rdepx44RuNwJLsg4UydvbKy++ZzkKuU4z/3I25BZll0= Subject key identifier: 06:19:AB:2B:23:1E:E3:1C:08:DA:7B:75:44:B8:EC:7F:68:98:6E:E4 Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 Certificate issuer: /CN=D6729321F95E264CBE7373469790C77F8B57E268 Certificate serial: 11B09B97C6BE7BB9C0FE20430F393C4A067086B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft Manifest number: 02DE Signing time: Thu 18 Dec 2025 21:50:00 +0000 Manifest this update: Thu 18 Dec 2025 21:45:00 +0000 Manifest next update: Sun 21 Dec 2025 23:23:00 +0000 Files and hashes: 1: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: Jm5D3OeBQCkQMTnDkuiO8YES7pVJSuSAodch3Lga/Wk=) 2: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: h9HWpUZjqwuAaP7uxV6EjM70C86M9FZJ3xzAzgOHeaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b0:9b:97:c6:be:7b:b9:c0:fe:20:43:0f:39:3c:4a:06:70:86:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268 Validity Not Before: Dec 18 21:45:00 2025 GMT Not After : Dec 21 23:23:00 2025 GMT Subject: CN=0619AB2B231EE31C08DA7B7544B8EC7F68986EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:dc:ef:3d:70:c1:44:da:46:41:99:46:19: a2:43:9b:2d:2c:b6:85:17:39:af:94:da:3b:96:5d: d7:9b:67:55:b6:5c:aa:c0:71:7d:fc:b0:e4:ba:f1: b4:a5:1b:9a:9f:bf:18:f6:b0:49:ce:c5:92:7b:9c: dc:52:b2:bc:97:6d:3f:d7:ec:c3:ed:9a:99:e3:b3: db:16:80:aa:3e:15:c9:52:af:f3:0f:b6:cd:4a:a7: 01:bd:b4:f8:ef:b9:51:3f:27:c7:de:24:f1:c7:1f: f2:39:04:37:84:bc:5b:65:de:79:8e:ef:00:f4:0c: 67:be:77:54:7c:12:ac:fd:44:c4:1f:69:24:d7:5d: 71:eb:2d:f0:6e:8d:36:7b:d3:61:9e:0b:11:a1:dc: e5:e0:4f:fe:73:bd:46:3b:0a:6c:29:32:63:35:9b: 54:bb:b3:d2:12:96:56:6a:b1:bd:e5:8b:0d:9b:4b: a1:45:97:2f:14:78:18:0d:3b:fb:10:00:9d:2a:f9: ed:fa:1d:81:cf:fe:02:11:80:5c:cd:11:2b:cb:58: 36:84:b8:c1:06:b2:77:ab:20:7a:ab:1a:a9:d4:aa: c1:d0:44:1d:03:67:e9:f3:8a:d8:7b:0e:eb:37:0e: 56:1d:bd:fb:5a:88:b2:0c:f7:87:4a:6a:0e:ae:aa: 5a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:19:AB:2B:23:1E:E3:1C:08:DA:7B:75:44:B8:EC:7F:68:98:6E:E4 X509v3 Authority Key Identifier: keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1a:10:c6:fc:1b:cf:83:f8:34:6c:3e:11:97:0a:cc:93:6c: 61:5b:7a:d2:31:1a:4c:31:78:a8:ce:52:52:fe:00:1d:7a:7c: c3:66:28:43:a7:67:25:aa:cf:3b:22:d4:c5:28:38:68:ad:b1: d1:b0:80:61:c9:5c:bd:ca:09:e6:a6:7f:ab:5e:ef:56:02:24: 68:25:9c:3f:1e:04:4f:bc:ab:5a:f8:e9:93:93:64:40:47:a0: c6:46:b9:96:bb:63:9a:bb:d7:79:9a:5b:cd:39:74:c6:ef:52: 02:84:b0:48:3c:a7:c4:1d:94:86:44:8a:26:ba:57:cf:1a:d3: 05:ce:77:11:d7:de:37:fe:3d:1a:ec:af:67:ea:4e:f1:f0:7f: 2f:a8:8c:93:18:16:9b:41:bf:76:5b:4a:9a:59:94:dd:ea:0a: d7:b1:90:a2:2c:78:99:cb:a0:63:b4:f2:f4:00:bd:bf:97:d9: 07:d9:d6:4b:d0:2f:27:2a:70:c0:3f:ca:26:78:27:b8:f8:14: d2:d1:80:25:ec:a7:0a:c1:c7:c5:0a:ca:cf:e2:d7:4d:dd:83: cd:3b:0f:46:19:86:75:d5:29:d1:3d:7a:ea:06:08:fb:f1:af: 4a:38:b8:46:7b:15:2c:2d:02:d0:b9:71:a8:37:fc:23:8b:10: bd:b1:c3:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEbCbl8a+e7nA/iBDDzk8SgZwhrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4 QjU3RTI2ODAeFw0yNTEyMTgyMTQ1MDBaFw0yNTEyMjEyMzIzMDBaMDMxMTAvBgNV BAMTKDA2MTlBQjJCMjMxRUUzMUMwOERBN0I3NTQ0QjhFQzdGNjg5ODZFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55NzvPXDBRNpGQZlGGaJDmy0s toUXOa+U2juWXdebZ1W2XKrAcX38sOS68bSlG5qfvxj2sEnOxZJ7nNxSsryXbT/X 7MPtmpnjs9sWgKo+FclSr/MPts1KpwG9tPjvuVE/J8feJPHHH/I5BDeEvFtl3nmO 7wD0DGe+d1R8Eqz9RMQfaSTXXXHrLfBujTZ702GeCxGh3OXgT/5zvUY7CmwpMmM1 m1S7s9ISllZqsb3liw2bS6FFly8UeBgNO/sQAJ0q+e36HYHP/gIRgFzNESvLWDaE uMEGsnerIHqrGqnUqsHQRB0DZ+nzith7Dus3DlYdvftaiLIM94dKag6uqlo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBhmrKyMe4xwI2nt1RLjsf2iYbuQwHwYDVR0j BBgwFoAU1nKTIfleJky+c3NGl5DHf4tX4mgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RjZjBhNC1hZDFiLTRiNzItODQwZi0xZjRhODA3ZjY1OTQvMC9ENjcyOTMyMUY5 NUUyNjRDQkU3MzczNDY5NzkwQzc3RjhCNTdFMjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4QjU3 RTI2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkY2YwYTQtYWQxYi00YjcyLTg0 MGYtMWY0YTgwN2Y2NTk0LzAvRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3 N0Y4QjU3RTI2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4aEMb8G8+D+DRsPhGXCsyTbGFbetIxGkwx eKjOUlL+AB16fMNmKEOnZyWqzzsi1MUoOGitsdGwgGHJXL3KCeamf6te71YCJGgl nD8eBE+8q1r46ZOTZEBHoMZGuZa7Y5q713maW805dMbvUgKEsEg8p8QdlIZEiia6 V88a0wXOdxHX3jf+PRrsr2fqTvHwfy+ojJMYFptBv3ZbSppZlN3qCtexkKIseJnL oGO08vQAvb+X2QfZ1kvQLycqcMA/yiZ4J7j4FNLRgCXspwrBx8UKys/i103dg807 D0YZhnXVKdE9euoGCPvxr0o4uEZ7FSwtAtC5cag3/COLEL2xw0Y= -----END CERTIFICATE-----Generated at Fri Dec 19 09:47:04 2025 by rpki-client