This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft File: D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft (raw, json) Hash identifier: gnT3tg9651E4pCvvh7N6naR5sAywB/lgN/VFITRkQ+0= Subject key identifier: 42:AA:0C:C8:0E:FB:0D:38:86:F9:37:D7:F5:EF:0E:C6:39:EA:25:94 Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Certificate serial: 611E1AB03696AB95F1FDE3342F9C69E7D6C5F034 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft Manifest number: 01E5 Signing time: Wed 03 Dec 2025 07:32:26 +0000 Manifest this update: Wed 03 Dec 2025 07:27:26 +0000 Manifest next update: Sat 06 Dec 2025 08:58:26 +0000 Files and hashes: 1: D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl (hash: Kp4EVsgBirAgdY3hCbkeg+Xdk6IDTHNs37Q79Pd0lyg=) 2: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (hash: 1yTR12zVNlgV/3lhF5YF8WQX2wlBuTs2UGOXRfg1gpk=) 3: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (hash: bKAiHhmlEj4IgvE00Lo3377sGcryUEP8JoeR2a9n6WM=) 4: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (hash: Hj/Oe+Radw8pbluCv/VN2XxQ+sX4+0STYPYTyYPvjyc=) 5: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (hash: uNA/yO7Jurn3EZm3l95rlsLVpHCEIuUhUwihJjKDdLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1e:1a:b0:36:96:ab:95:f1:fd:e3:34:2f:9c:69:e7:d6:c5:f0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Validity Not Before: Dec 3 07:27:26 2025 GMT Not After : Dec 6 08:58:26 2025 GMT Subject: CN=42AA0CC80EFB0D3886F937D7F5EF0EC639EA2594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:02:c1:93:a6:b3:6f:eb:8f:78:41:d7:3c:67: 76:9e:7d:46:1c:52:c7:d0:0b:7d:77:d9:e2:0e:ab: a7:dc:7a:52:5d:14:82:60:1f:d8:6b:3e:c2:2f:5e: 2f:d6:a1:9b:6c:a4:3e:68:de:06:14:55:2c:a6:17: 96:8b:33:05:f3:d4:fd:a5:0a:29:b7:b7:d2:0b:69: 3b:b6:40:e9:ae:c0:c3:e1:ee:b7:cf:c5:e3:99:94: 3c:fe:5a:92:b7:7a:85:7d:9d:7e:ee:c2:8a:5c:00: 5d:5c:e5:09:f2:fb:a0:8d:eb:b2:f9:0c:60:5e:52: f3:14:4b:c4:93:a8:52:b1:0c:6a:ee:7d:85:7c:a7: 33:b1:87:75:94:aa:ab:49:57:37:79:9d:e7:5a:65: da:4f:70:db:23:d3:7b:99:8b:c2:c1:78:f2:62:61: a1:d3:dd:57:ca:5b:18:fb:88:40:85:0e:29:de:2c: 05:65:e8:25:42:3c:ee:3b:96:66:81:df:7e:c4:b2: 15:d0:d3:70:21:26:df:8a:2f:4d:c0:a4:30:db:02: 1a:c5:c4:a8:e1:90:b5:f6:30:a4:cf:09:d6:b3:2c: a5:76:30:d3:44:fc:1a:56:b1:f9:88:cd:be:c6:c5: e2:83:0b:6c:6f:a2:a0:57:d0:17:07:21:5d:2a:b3: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AA:0C:C8:0E:FB:0D:38:86:F9:37:D7:F5:EF:0E:C6:39:EA:25:94 X509v3 Authority Key Identifier: keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:fc:72:ac:bf:a2:e5:cb:ed:85:5e:29:b1:ac:87:f3:d3:60: 4f:a6:fa:cd:a6:45:20:62:44:86:72:c6:73:67:d3:ba:ef:81: 6a:cb:8b:92:e1:5f:77:48:a5:08:7a:38:c6:16:88:f1:ee:80: 72:33:f9:8d:9e:69:5c:65:3f:c4:df:d0:02:eb:48:61:65:cb: a5:c9:37:1d:88:70:4e:96:09:c6:af:37:02:a6:6c:51:17:71: 86:70:fe:0e:78:e9:ca:02:d5:e0:a2:05:b5:1f:72:dd:ae:ee: 16:bf:3a:04:4a:43:1d:9d:9c:b8:1c:b8:c2:21:33:71:c5:0d: 49:ec:b5:e1:60:d9:92:6e:71:43:24:ac:d3:f5:ef:8e:7d:e8: fa:d8:70:9a:95:d5:9e:7e:1f:54:ef:41:3f:29:ac:e5:3d:52: 58:42:7d:9d:d2:71:8c:1c:67:7c:10:7c:15:d3:eb:e1:12:21: 57:83:69:50:e6:55:82:79:33:91:2c:26:a0:f4:dc:2e:15:f4: bb:53:50:20:76:b3:f8:72:a7:da:d9:bf:d2:3c:cd:34:74:60: 61:74:74:75:75:cb:d0:06:8f:62:54:c4:2a:56:2a:1c:27:53: 19:f9:df:be:b3:f3:ef:3b:46:69:5e:ee:eb:31:60:7e:f9:09: f5:60:79:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYR4asDaWq5Xx/eM0L5xp59bF8DQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVF QzgyMUZGRDAeFw0yNTEyMDMwNzI3MjZaFw0yNTEyMDYwODU4MjZaMDMxMTAvBgNV BAMTKDQyQUEwQ0M4MEVGQjBEMzg4NkY5MzdEN0Y1RUYwRUM2MzlFQTI1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1AsGTprNv6494Qdc8Z3aefUYc UsfQC3132eIOq6fcelJdFIJgH9hrPsIvXi/WoZtspD5o3gYUVSymF5aLMwXz1P2l Cim3t9ILaTu2QOmuwMPh7rfPxeOZlDz+WpK3eoV9nX7uwopcAF1c5Qny+6CN67L5 DGBeUvMUS8STqFKxDGrufYV8pzOxh3WUqqtJVzd5nedaZdpPcNsj03uZi8LBePJi YaHT3VfKWxj7iECFDineLAVl6CVCPO47lmaB337EshXQ03AhJt+KL03ApDDbAhrF xKjhkLX2MKTPCdazLKV2MNNE/BpWsfmIzb7GxeKDC2xvoqBX0BcHIV0qs6DVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqoMyA77DTiG+TfX9e8OxjnqJZQwHwYDVR0j BBgwFoAU0Pedgm5D6rYaeoNOaid3xeyCH/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODQ2MzI4NS03YzI4LTQzNWEtODJiYi1mY2MzMmQ1ODAyMGUvMC9EMEY3OUQ4MjZF NDNFQUI2MUE3QTgzNEU2QTI3NzdDNUVDODIxRkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVFQzgy MUZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg0NjMyODUtN2MyOC00MzVhLTgy YmItZmNjMzJkNTgwMjBlLzAvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3 QzVFQzgyMUZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABj8cqy/ouXL7YVeKbGsh/PTYE+m+s2mRSBi RIZyxnNn07rvgWrLi5LhX3dIpQh6OMYWiPHugHIz+Y2eaVxlP8Tf0ALrSGFly6XJ Nx2IcE6WCcavNwKmbFEXcYZw/g546coC1eCiBbUfct2u7ha/OgRKQx2dnLgcuMIh M3HFDUnsteFg2ZJucUMkrNP174596PrYcJqV1Z5+H1TvQT8prOU9UlhCfZ3ScYwc Z3wQfBXT6+ESIVeDaVDmVYJ5M5EsJqD03C4V9LtTUCB2s/hyp9rZv9I8zTR0YGF0 dHV1y9AGj2JUxCpWKhwnUxn5376z8+87Rmle7usxYH75CfVgeVY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:55 2025 by rpki-client