This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft File: D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft (raw, json) Hash identifier: PjufsQ5iJYhIOm2wruCPZSxveHAywYiWjTmkSO8mklY= Subject key identifier: F4:8B:5C:9C:B4:7C:47:6B:5B:C5:54:D3:A5:83:3D:59:D1:22:37:55 Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD Certificate issuer: /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Certificate serial: 26CA4FCBB4C88079257CC13F81FF9C2286C65907 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft Manifest number: 01ED Signing time: Sat 20 Dec 2025 18:23:05 +0000 Manifest this update: Sat 20 Dec 2025 18:18:05 +0000 Manifest next update: Tue 23 Dec 2025 18:44:05 +0000 Files and hashes: 1: 3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (hash: 1yTR12zVNlgV/3lhF5YF8WQX2wlBuTs2UGOXRfg1gpk=) 2: 323030313a6466313a646663303a3a2f34382d3438203d3e20313530353233.roa (hash: bKAiHhmlEj4IgvE00Lo3377sGcryUEP8JoeR2a9n6WM=) 3: 3130332e37352e3133362e302f32332d3233203d3e20313530353233.roa (hash: Hj/Oe+Radw8pbluCv/VN2XxQ+sX4+0STYPYTyYPvjyc=) 4: 3130332e37352e3133362e302f32342d3234203d3e20313530353233.roa (hash: uNA/yO7Jurn3EZm3l95rlsLVpHCEIuUhUwihJjKDdLE=) 5: D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl (hash: QfmvAzTyH6mqiJZ1o5FKgkQsl8XBmVM8SVksJy3Q+PU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 18:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ca:4f:cb:b4:c8:80:79:25:7c:c1:3f:81:ff:9c:22:86:c6:59:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD Validity Not Before: Dec 20 18:18:05 2025 GMT Not After : Dec 23 18:44:05 2025 GMT Subject: CN=F48B5C9CB47C476B5BC554D3A5833D59D1223755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:53:a8:83:49:1b:f0:50:d9:45:50:b8:b1: 71:b6:4f:50:3b:6b:d0:c1:df:c4:9d:21:fe:a0:c2: 1f:0d:f5:38:c3:9d:1f:d9:a5:b7:6d:4b:d5:6a:42: 72:c4:a3:d6:97:8a:a4:94:3d:09:3b:5d:50:bd:1c: 8a:34:c2:ce:31:e9:c3:28:c5:09:a5:a1:c2:7d:b0: d2:1d:fc:bb:9c:02:b1:9a:22:d3:24:a3:9f:01:39: ee:23:0e:74:34:05:fa:bb:93:da:2d:4c:e0:b1:cd: 65:aa:5b:4e:27:a1:40:10:37:15:00:73:ff:40:f0: da:8a:74:45:eb:e3:01:0c:8c:f5:32:bc:f3:04:a0: 10:cc:f6:ee:c0:84:e2:92:71:eb:84:a9:56:8c:49: 9b:7f:16:e5:a6:88:70:3e:ee:f2:23:40:f6:54:09: e2:0b:98:27:eb:6f:0e:e7:c8:05:84:ac:0b:eb:89: f2:fb:c5:24:95:e6:3a:8c:f6:5b:ce:b3:01:ab:a4: 9d:f1:48:e7:f4:44:24:aa:3e:fb:b1:04:f2:0f:c4: d5:b6:5a:fe:9f:3f:35:cc:61:28:eb:f5:5f:4f:f7: f8:b4:d5:4d:e9:17:70:e5:cd:6d:b7:ff:d4:e6:f2: ee:9b:20:5c:7c:b7:ff:1a:18:40:c3:7a:11:6d:41: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8B:5C:9C:B4:7C:47:6B:5B:C5:54:D3:A5:83:3D:59:D1:22:37:55 X509v3 Authority Key Identifier: keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:76:9a:06:3e:a6:85:d2:7d:c0:3f:00:47:86:cc:c6:e9:c8: b8:2e:1c:5f:65:67:1c:69:5b:f5:f1:f1:a8:fe:48:41:d2:ad: 49:17:5d:d7:4e:a5:a4:f8:83:9d:6f:e3:54:73:0d:8a:31:e0: db:1e:42:72:5c:7f:a1:d1:13:a5:e6:14:97:d7:9a:ff:72:dd: 92:09:42:26:03:02:4b:d2:5d:69:22:5e:ec:9f:36:04:2f:a4: fb:bc:99:75:c3:ce:28:6c:43:d4:46:ac:15:fb:e6:e1:75:9a: 5f:af:7d:3e:84:db:79:6f:3d:c4:a1:e8:01:0b:a4:e7:77:3d: d1:8f:07:5d:54:26:04:c8:26:01:1c:42:4e:47:0b:fd:82:99: c6:71:e7:07:b4:6a:33:6e:1e:a1:8a:e8:9a:73:0f:0b:a4:7e: 02:82:4c:b0:8e:31:8a:1f:e7:7a:c8:ac:8b:09:0a:54:3a:6c: 10:f9:5d:14:24:15:c0:53:af:b9:59:5d:e7:c9:4b:73:9a:06: 61:96:44:72:e7:4d:ed:da:94:80:ae:20:b2:4c:5d:91:ea:74: 3d:53:71:80:69:bf:cb:c8:fb:2c:c6:dc:86:42:41:5f:4e:3d: 69:0e:c9:4b:0d:57:18:c4:53:80:bb:24:53:6b:58:ac:71:d5: 66:41:62:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJspPy7TIgHklfME/gf+cIobGWQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVF QzgyMUZGRDAeFw0yNTEyMjAxODE4MDVaFw0yNTEyMjMxODQ0MDVaMDMxMTAvBgNV BAMTKEY0OEI1QzlDQjQ3QzQ3NkI1QkM1NTREM0E1ODMzRDU5RDEyMjM3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jFOog0kb8FDZRVC4sXG2T1A7 a9DB38SdIf6gwh8N9TjDnR/ZpbdtS9VqQnLEo9aXiqSUPQk7XVC9HIo0ws4x6cMo xQmlocJ9sNId/LucArGaItMko58BOe4jDnQ0Bfq7k9otTOCxzWWqW04noUAQNxUA c/9A8NqKdEXr4wEMjPUyvPMEoBDM9u7AhOKSceuEqVaMSZt/FuWmiHA+7vIjQPZU CeILmCfrbw7nyAWErAvrifL7xSSV5jqM9lvOswGrpJ3xSOf0RCSqPvuxBPIPxNW2 Wv6fPzXMYSjr9V9P9/i01U3pF3DlzW23/9Tm8u6bIFx8t/8aGEDDehFtQbQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9ItcnLR8R2tbxVTTpYM9WdEiN1UwHwYDVR0j BBgwFoAU0Pedgm5D6rYaeoNOaid3xeyCH/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODQ2MzI4NS03YzI4LTQzNWEtODJiYi1mY2MzMmQ1ODAyMGUvMC9EMEY3OUQ4MjZF NDNFQUI2MUE3QTgzNEU2QTI3NzdDNUVDODIxRkZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVFQzgy MUZGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg0NjMyODUtN2MyOC00MzVhLTgy YmItZmNjMzJkNTgwMjBlLzAvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3 QzVFQzgyMUZGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA12mgY+poXSfcA/AEeGzMbpyLguHF9lZxxp W/Xx8aj+SEHSrUkXXddOpaT4g51v41RzDYox4NseQnJcf6HRE6XmFJfXmv9y3ZIJ QiYDAkvSXWkiXuyfNgQvpPu8mXXDzihsQ9RGrBX75uF1ml+vfT6E23lvPcSh6AEL pOd3PdGPB11UJgTIJgEcQk5HC/2CmcZx5we0ajNuHqGK6JpzDwukfgKCTLCOMYof 53rIrIsJClQ6bBD5XRQkFcBTr7lZXefJS3OaBmGWRHLnTe3alICuILJMXZHqdD1T cYBpv8vI+yzG3IZCQV9OPWkOyUsNVxjEU4C7JFNrWKxx1WZBYpU= -----END CERTIFICATE-----Generated at Mon Dec 22 20:24:16 2025 by rpki-client