This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: nrdyQFrf8zxmX9Rq6BlUPeIpTzwpAnMg6HESU7wavX0= Subject key identifier: 09:27:E4:FD:B0:59:08:4D:54:89:CB:3B:B2:6F:00:5D:9E:39:35:07 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 08876B3AC2835341C9C924E98EDB01E878B8539A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 01ED Signing time: Tue 02 Dec 2025 02:31:42 +0000 Manifest this update: Tue 02 Dec 2025 02:26:42 +0000 Manifest next update: Fri 05 Dec 2025 09:22:42 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) 3: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: owTRgHiCgj4z7BzGdk40WRrvTjigjwiFh20OIl27rDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:87:6b:3a:c2:83:53:41:c9:c9:24:e9:8e:db:01:e8:78:b8:53:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Dec 2 02:26:42 2025 GMT Not After : Dec 5 09:22:42 2025 GMT Subject: CN=0927E4FDB059084D5489CB3BB26F005D9E393507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:09:76:5f:8c:73:23:2d:9b:7d:b2:6e:24: 7c:da:39:9d:9f:c3:6f:9b:f9:d2:b7:be:9c:84:5c: 9e:60:5b:64:fc:a6:92:ec:3a:d2:9e:a2:c7:e1:92: cb:9f:a0:41:c1:0b:43:29:42:f6:5c:c0:ee:a6:58: dc:f4:51:e9:51:42:78:f1:fd:c6:b0:39:19:53:aa: 9e:08:68:9e:0c:f7:3a:af:70:fa:0a:05:dc:c8:5a: dd:5a:a3:01:fe:2e:36:31:f8:24:b1:74:2b:42:3d: 0d:df:88:44:72:56:c3:9f:4d:09:33:c1:0b:70:1b: 20:46:fd:f0:eb:0e:2e:f9:5c:0e:09:d4:9b:57:15: e4:72:ae:ab:2d:6e:f4:9b:7e:f4:d7:7c:8b:6a:89: 7d:1c:d1:52:09:f1:54:4c:dd:5e:86:a4:33:de:84: 40:92:3b:01:63:7f:1f:b6:2b:9b:75:79:bd:fe:a5: df:4c:91:40:a3:05:97:48:a3:94:4b:68:08:a9:6c: 1f:b1:f6:7f:c4:e7:34:91:48:c1:df:73:97:62:5c: cc:9e:d3:56:1e:66:6f:69:67:f7:70:49:0a:25:fd: 9b:27:bd:b8:fd:4c:5e:fb:f8:05:58:28:c6:e0:e5: 91:fd:86:b6:08:68:6a:d0:25:41:d7:57:4b:9a:b5: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:27:E4:FD:B0:59:08:4D:54:89:CB:3B:B2:6F:00:5D:9E:39:35:07 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ec:25:dc:92:a6:ae:cd:0c:7e:54:0f:92:80:dd:74:7c:47: f9:32:c5:1d:88:e6:0f:56:e9:f7:48:8d:11:d5:1f:b8:52:92: 7c:84:b9:50:19:eb:e3:01:1a:64:0f:3f:bf:a9:0c:9f:6d:7d: 8d:b8:78:73:37:96:5c:85:1b:5b:91:07:bd:5a:bc:59:a3:e1: f2:a9:a2:49:6e:0a:9a:74:79:ee:7c:e6:a2:88:88:9f:50:27: 8f:15:0d:94:b4:34:86:1a:e0:a5:6b:95:45:ff:7f:e4:d0:4c: 54:76:fd:b3:05:d7:c8:f3:4b:17:52:b9:fb:b5:02:6a:03:95: 7b:73:2d:6c:92:cf:a4:ce:92:58:e6:77:fe:21:6d:6d:6f:fc: f4:93:f1:43:64:b8:23:3e:a3:42:43:8f:3e:ba:00:44:fc:25: 1e:d3:ea:6e:ba:ab:2b:53:1f:e2:4f:57:1e:3a:96:3a:98:e5: 23:fe:55:7b:94:f9:b7:36:f0:83:e1:d9:96:6e:da:be:5a:4f: 5a:78:59:1a:51:43:90:68:70:f6:38:7d:28:db:e8:1e:5a:6f: 27:98:36:7b:2f:21:70:2e:12:71:d5:e4:10:2d:7a:88:8b:6c: bf:c4:b3:48:95:23:71:2f:89:3e:5f:a5:77:2b:dd:3f:55:a0: f7:82:c0:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCIdrOsKDU0HJySTpjtsB6Hi4U5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTEyMDIwMjI2NDJaFw0yNTEyMDUwOTIyNDJaMDMxMTAvBgNV BAMTKDA5MjdFNEZEQjA1OTA4NEQ1NDg5Q0IzQkIyNkYwMDVEOUUzOTM1MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLswl2X4xzIy2bfbJuJHzaOZ2f w2+b+dK3vpyEXJ5gW2T8ppLsOtKeosfhksufoEHBC0MpQvZcwO6mWNz0UelRQnjx /cawORlTqp4IaJ4M9zqvcPoKBdzIWt1aowH+LjYx+CSxdCtCPQ3fiERyVsOfTQkz wQtwGyBG/fDrDi75XA4J1JtXFeRyrqstbvSbfvTXfItqiX0c0VIJ8VRM3V6GpDPe hECSOwFjfx+2K5t1eb3+pd9MkUCjBZdIo5RLaAipbB+x9n/E5zSRSMHfc5diXMye 01YeZm9pZ/dwSQol/Zsnvbj9TF77+AVYKMbg5ZH9hrYIaGrQJUHXV0uateKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCSfk/bBZCE1Uics7sm8AXZ45NQcwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnsJdySpq7NDH5UD5KA3XR8R/kyxR2I5g9W 6fdIjRHVH7hSknyEuVAZ6+MBGmQPP7+pDJ9tfY24eHM3llyFG1uRB71avFmj4fKp okluCpp0ee585qKIiJ9QJ48VDZS0NIYa4KVrlUX/f+TQTFR2/bMF18jzSxdSufu1 AmoDlXtzLWySz6TOkljmd/4hbW1v/PST8UNkuCM+o0JDjz66AET8JR7T6m66qytT H+JPVx46ljqY5SP+VXuU+bc28IPh2ZZu2r5aT1p4WRpRQ5BocPY4fSjb6B5abyeY NnsvIXAuEnHV5BAteoiLbL/Es0iVI3EviT5fpXcr3T9VoPeCwN4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:32 2025 by rpki-client