This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: dap9qSjFcS4oWmC0qj02DPE2RwrP6/4UXAl/ZkcLPgQ= Subject key identifier: 4E:B0:91:48:85:7F:23:29:98:43:98:36:D7:73:DB:09:D9:7A:1E:47 Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 33EFBE15DF365448CFBDD873A32361F29E3A60F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 0531 Signing time: Sun 14 Dec 2025 05:40:04 +0000 Manifest this update: Sun 14 Dec 2025 05:35:04 +0000 Manifest next update: Wed 17 Dec 2025 16:42:04 +0000 Files and hashes: 1: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: Z35pEDVPRW8+U9fI/PPiphKKE/HDfEoP6IfT2UYmgOg=) 2: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) 3: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 4: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 08:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ef:be:15:df:36:54:48:cf:bd:d8:73:a3:23:61:f2:9e:3a:60:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Dec 14 05:35:04 2025 GMT Not After : Dec 17 16:42:04 2025 GMT Subject: CN=4EB09148857F232998439836D773DB09D97A1E47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:3e:98:e7:0a:17:f6:50:2c:4f:7a:5d:d1: 5d:0c:17:9d:04:83:63:8b:3c:58:f0:be:e1:2d:27: 11:c6:ff:35:f6:11:58:9e:f5:ac:bd:0b:03:7e:25: 56:c1:62:0c:49:92:b0:6a:07:a2:1d:cf:90:92:1e: 79:9c:d9:26:2e:5d:fa:fc:92:c9:d7:e2:2a:7b:73: 9c:0a:c9:3e:f3:9b:19:91:43:94:83:f9:cf:0d:83: a3:98:10:ab:7b:8d:ef:e4:42:f3:d4:c4:82:3e:a8: aa:a9:d5:61:c3:47:20:5d:bd:24:91:7a:99:99:d8: 07:92:8b:4e:39:26:d3:3c:f6:f5:99:fa:6b:80:23: 57:10:d6:c5:3c:14:3f:8f:cf:5b:98:39:3c:20:cd: 67:9a:fe:27:0a:4c:fc:90:2a:00:5d:be:f0:5a:e5: 3c:08:f2:cb:66:60:95:20:83:22:44:9e:e3:62:9d: b2:71:f5:46:25:08:84:5d:98:fe:df:70:0a:a7:df: 99:5b:9c:59:4b:41:f2:51:1b:0b:a3:6d:74:31:bd: fe:03:7c:a5:95:99:14:6e:11:b4:40:39:66:69:86: e9:01:02:f4:24:4f:32:79:3a:29:63:4d:07:b3:fb: 76:0f:9b:74:19:ef:1e:e1:9e:4c:5d:7c:6a:e1:6f: 5f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B0:91:48:85:7F:23:29:98:43:98:36:D7:73:DB:09:D9:7A:1E:47 X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:38:49:f1:41:c7:5f:01:a6:dc:9e:c3:4c:09:2d:36:e2:cb: 8e:a2:5d:0c:fe:44:85:bb:89:b4:e4:4d:79:66:c4:00:09:67: 9d:ee:22:82:f7:b9:1d:5b:96:ee:21:6f:f9:42:a3:c6:ff:b8: 51:05:fb:cf:5b:22:16:bf:89:c1:b5:86:2f:93:13:09:f2:24: 3d:55:65:c6:79:71:6a:23:8f:db:df:8f:66:ba:b1:93:89:fa: ed:12:9e:53:0e:17:82:30:8c:85:08:d4:9a:67:47:cd:61:0b: 6e:03:81:b2:b7:00:c6:97:dd:19:69:65:fd:e8:18:1a:30:41: fe:e2:02:7f:84:84:70:b8:52:97:8d:66:b7:48:ed:2e:00:65: cd:10:dd:ae:ce:a4:49:31:43:c4:4b:a5:06:7f:fb:e9:cf:aa: 60:8f:19:1c:50:aa:b5:7f:22:45:e6:ae:87:ac:26:b4:3d:2c: 8c:b6:81:c5:93:c4:e8:ed:a4:1b:56:e0:c2:25:29:5e:f7:ef: 5d:e4:44:9b:7b:76:cd:76:bf:2c:23:dd:b8:f0:59:9c:4a:a6: d6:7f:03:09:44:f7:bf:73:2c:61:d8:2f:37:af:e8:1e:25:5f: 30:d5:1c:fc:c6:6a:34:f2:e5:ef:16:d4:1b:b7:37:84:80:8b: 43:f0:45:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM+++Fd82VEjPvdhzoyNh8p46YPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNTEyMTQwNTM1MDRaFw0yNTEyMTcxNjQyMDRaMDMxMTAvBgNV BAMTKDRFQjA5MTQ4ODU3RjIzMjk5ODQzOTgzNkQ3NzNEQjA5RDk3QTFFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhz6Y5woX9lAsT3pd0V0MF50E g2OLPFjwvuEtJxHG/zX2EVie9ay9CwN+JVbBYgxJkrBqB6Idz5CSHnmc2SYuXfr8 ksnX4ip7c5wKyT7zmxmRQ5SD+c8Ng6OYEKt7je/kQvPUxII+qKqp1WHDRyBdvSSR epmZ2AeSi045JtM89vWZ+muAI1cQ1sU8FD+Pz1uYOTwgzWea/icKTPyQKgBdvvBa 5TwI8stmYJUggyJEnuNinbJx9UYlCIRdmP7fcAqn35lbnFlLQfJRGwujbXQxvf4D fKWVmRRuEbRAOWZphukBAvQkTzJ5OiljTQez+3YPm3QZ7x7hnkxdfGrhb199AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTrCRSIV/IymYQ5g213PbCdl6HkcwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQ4SfFBx18Bptyew0wJLTbiy46iXQz+RIW7 ibTkTXlmxAAJZ53uIoL3uR1blu4hb/lCo8b/uFEF+89bIha/icG1hi+TEwnyJD1V ZcZ5cWojj9vfj2a6sZOJ+u0SnlMOF4IwjIUI1JpnR81hC24DgbK3AMaX3RlpZf3o GBowQf7iAn+EhHC4UpeNZrdI7S4AZc0Q3a7OpEkxQ8RLpQZ/++nPqmCPGRxQqrV/ IkXmroesJrQ9LIy2gcWTxOjtpBtW4MIlKV73713kRJt7ds12vywj3bjwWZxKptZ/ AwlE979zLGHYLzev6B4lXzDVHPzGajTy5e8W1Bu3N4SAi0PwRbQ= -----END CERTIFICATE-----Generated at Sun Dec 14 09:35:59 2025 by rpki-client