This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json) Hash identifier: AScL7M2fjqiCIsafF6cVQ9FeHczPXq8+txlP8Qbp738= Subject key identifier: 05:CF:2C:0C:22:55:E4:40:C2:B4:9B:C7:9E:2E:C3:E1:6D:9F:73:73 Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 02987395A44816BB52F5FE38CCE9A645FC82073E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft Manifest number: 01E2 Signing time: Tue 02 Dec 2025 12:32:31 +0000 Manifest this update: Tue 02 Dec 2025 12:27:31 +0000 Manifest next update: Fri 05 Dec 2025 14:27:31 +0000 Files and hashes: 1: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: qhQA0cj7kuBqIGVwCLG9U/r/eXfYDiDRD7UKEazkyf0=) 2: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: PWfgrIEAW5Ka7/l46DQwRT/6uSCPsoFbZO34zUTjWEM=) 3: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: ngdqI+AY206ia16bdZAkWJPg7E5aJ3cq/ibuw+UPFas=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:98:73:95:a4:48:16:bb:52:f5:fe:38:cc:e9:a6:45:fc:82:07:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: Dec 2 12:27:31 2025 GMT Not After : Dec 5 14:27:31 2025 GMT Subject: CN=05CF2C0C2255E440C2B49BC79E2EC3E16D9F7373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ef:b9:9d:54:84:7c:30:5d:9e:6f:81:f8:39: a3:8a:07:bd:5b:91:f2:c6:7e:3c:c3:cb:06:3b:02: f7:11:ff:46:bd:24:37:0e:fd:89:13:9e:6f:c0:35: ef:6d:42:76:e7:ca:a5:3c:cb:ac:36:d6:ca:b7:9e: 08:cc:b5:e8:77:e3:36:47:4f:48:0c:50:f3:fb:5c: d4:26:8d:34:a4:cd:f3:72:8f:bc:ba:ee:38:55:3c: 98:5c:69:e5:e3:39:66:a9:53:f8:20:f6:74:87:bf: c5:be:43:b2:d7:62:3c:ce:23:f2:a9:41:06:b8:87: e5:60:89:c5:56:64:6f:d5:98:e5:bd:c1:a0:7e:58: fb:ed:35:70:c8:f6:4d:11:ff:02:86:b6:68:e0:cf: 30:e0:68:81:4d:ba:a4:f7:ef:23:b8:99:bc:e7:3f: 10:74:5f:1d:7c:a8:07:77:f7:f7:6e:d9:2b:7d:8c: 3d:3b:5b:2c:ea:6e:52:26:e2:e7:f5:7d:14:36:62: c6:65:c6:ec:d5:59:2f:76:a5:67:4e:66:0e:93:23: 87:05:88:d7:ae:f9:8c:aa:cf:39:35:66:dd:b8:3c: ea:b6:d5:2d:46:92:0e:4a:75:43:aa:2e:27:fc:54: 93:e6:32:74:8f:97:cc:55:e1:30:47:09:8d:6c:a6: d7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CF:2C:0C:22:55:E4:40:C2:B4:9B:C7:9E:2E:C3:E1:6D:9F:73:73 X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e4:cf:5c:4a:d0:0f:70:b3:df:94:b9:b6:37:c4:b4:57:14: bf:34:90:fa:f8:4d:1f:8a:60:c6:e9:67:62:d5:39:f3:f3:f1: bf:e0:2a:53:39:b5:70:0f:0e:8b:33:3b:8d:37:1c:25:51:a8: 75:9b:8e:ba:44:36:1c:6a:85:55:c8:b6:2e:60:74:4e:f3:c0: 26:84:23:0e:87:81:1c:7b:12:17:09:4a:63:85:9d:7a:b7:0a: f3:04:7b:87:55:48:48:f9:99:ef:30:70:1f:5b:3a:bf:eb:00: ee:52:52:1c:dd:6e:c3:44:05:08:84:02:ae:1f:17:54:87:6b: 66:a0:d5:ec:7f:29:7c:75:a9:f5:63:b4:9a:26:a6:0b:b4:65: 28:52:a5:19:42:3f:64:b1:9d:88:50:5c:f7:c9:77:e5:d1:87: a7:a2:d8:45:2f:a1:2a:ba:67:f4:e8:af:e2:c7:60:f2:90:12: 4e:0a:7b:32:89:07:45:45:25:e3:f4:79:c4:0d:17:44:53:02: de:96:d6:8f:42:be:54:40:d5:f0:19:ad:2f:fd:b2:70:17:11: 7e:1e:8c:c7:ab:e2:29:df:eb:20:e9:cd:ab:36:da:f3:c6:ef: 37:a1:b7:78:1e:dd:b3:e8:9c:0a:ff:15:c8:d5:f7:79:40:10: f0:87:4a:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAphzlaRIFrtS9f44zOmmRfyCBz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNTEyMDIxMjI3MzFaFw0yNTEyMDUxNDI3MzFaMDMxMTAvBgNV BAMTKDA1Q0YyQzBDMjI1NUU0NDBDMkI0OUJDNzlFMkVDM0UxNkQ5RjczNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl77mdVIR8MF2eb4H4OaOKB71b kfLGfjzDywY7AvcR/0a9JDcO/YkTnm/ANe9tQnbnyqU8y6w21sq3ngjMteh34zZH T0gMUPP7XNQmjTSkzfNyj7y67jhVPJhcaeXjOWapU/gg9nSHv8W+Q7LXYjzOI/Kp QQa4h+VgicVWZG/VmOW9waB+WPvtNXDI9k0R/wKGtmjgzzDgaIFNuqT37yO4mbzn PxB0Xx18qAd39/du2St9jD07WyzqblIm4uf1fRQ2YsZlxuzVWS92pWdOZg6TI4cF iNeu+Yyqzzk1Zt24POq21S1Gkg5KdUOqLif8VJPmMnSPl8xV4TBHCY1sptedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBc8sDCJV5EDCtJvHni7D4W2fc3MwHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBjNzNhZjUtYTJjMC00MjRkLTg2 MmUtMTEyYzU4YjcyNzBlLzAvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNE QkI0OTNCNUQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHkz1xK0A9ws9+UubY3xLRXFL80kPr4TR+K YMbpZ2LVOfPz8b/gKlM5tXAPDoszO403HCVRqHWbjrpENhxqhVXIti5gdE7zwCaE Iw6HgRx7EhcJSmOFnXq3CvMEe4dVSEj5me8wcB9bOr/rAO5SUhzdbsNEBQiEAq4f F1SHa2ag1ex/KXx1qfVjtJompgu0ZShSpRlCP2SxnYhQXPfJd+XRh6ei2EUvoSq6 Z/Tor+LHYPKQEk4KezKJB0VFJeP0ecQNF0RTAt6W1o9CvlRA1fAZrS/9snAXEX4e jMer4inf6yDpzas22vPG7zeht3ge3bPonAr/FcjV93lAEPCHSn0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:44 2025 by rpki-client