This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: YbFwJ2Hc/DO2O/b7AXQOL3XZZR38gd9cxgQTJLRAOHU= Subject key identifier: 7B:0E:55:8F:AE:37:40:DB:5A:00:4F:1C:3D:4C:9F:1F:F3:32:06:05 Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 6D4B03306D645E9E1693E3D7ADA14B4CC80D9640 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: FF Signing time: Tue 02 Dec 2025 05:02:27 +0000 Manifest this update: Tue 02 Dec 2025 04:57:27 +0000 Manifest next update: Fri 05 Dec 2025 08:26:27 +0000 Files and hashes: 1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: K3ZH6ZIWAcw45r2g/qdIM9HAVNibF7452ItmA+/7HTE=) 2: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: xh7+tY/N2cTA2sjOtf1cUfsN13dd1WCap68EDlPdbsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:4b:03:30:6d:64:5e:9e:16:93:e3:d7:ad:a1:4b:4c:c8:0d:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: Dec 2 04:57:27 2025 GMT Not After : Dec 5 08:26:27 2025 GMT Subject: CN=7B0E558FAE3740DB5A004F1C3D4C9F1FF3320605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:be:13:0a:6c:8f:1d:7a:56:a9:3a:19:fe:91: 52:02:e4:35:ba:14:0a:96:f3:0f:99:60:fb:be:da: a2:5e:75:02:09:2b:b9:a8:3c:3a:f9:7d:f1:54:85: 3a:f1:18:72:cc:9e:96:b1:39:94:62:a0:4b:3f:a0: 43:bf:4d:71:a6:8c:f2:1a:ae:fb:e8:45:0b:99:3e: bd:5a:1c:4b:c7:c9:9e:be:23:6d:8f:ff:4a:8b:3e: ca:16:f5:b0:11:28:6b:c7:1c:3e:84:1b:1c:84:c8: c4:6d:79:a3:a8:64:a6:72:32:ce:80:74:80:25:fe: 0a:43:a7:4a:86:79:32:63:44:06:bc:4a:5e:f2:5f: 08:f5:db:78:d3:c9:3c:d3:93:75:d1:be:e6:64:c2: a0:82:5b:21:f7:8c:0c:6c:a5:db:e4:29:ba:f7:62: 02:7d:f9:04:72:c0:0e:01:cd:07:c3:9a:e0:6b:e6: b6:35:9c:4d:c4:98:bd:99:c0:6f:9f:44:44:d2:5d: 3d:2a:c5:43:a3:5d:88:46:3b:91:1d:4f:2b:54:7a: b0:f2:68:a5:64:43:cc:52:2f:27:9f:43:e0:2f:59: 35:f3:fd:10:fa:1b:d4:80:e2:3c:25:42:2d:31:5e: 13:7b:1d:c1:f6:a1:f0:f0:32:4a:2c:0b:a6:ee:9e: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0E:55:8F:AE:37:40:DB:5A:00:4F:1C:3D:4C:9F:1F:F3:32:06:05 X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3a:98:36:35:3d:22:8a:fb:8f:fd:e2:44:40:0b:30:d6:37: 0c:68:50:fd:5a:bc:89:3e:f0:0f:6a:12:a8:70:d6:00:61:35: 2b:a6:ea:75:66:86:62:9c:30:ad:dd:70:dc:4a:39:43:61:e2: d5:b2:67:34:9f:df:0c:e2:9c:6b:ce:54:04:70:f8:55:ca:2e: 81:12:d7:56:10:43:b4:e6:41:f6:58:9d:e7:0a:5e:0f:54:ee: a6:b7:d8:98:30:40:21:c5:11:5b:4a:19:94:e1:b1:77:7e:4b: e0:ac:41:a9:9e:b4:6d:12:a7:c6:de:81:4a:52:8d:bf:96:4a: 74:cc:76:45:de:26:ea:87:9b:89:ff:da:b8:7f:8f:62:c3:a3: d0:66:74:ae:78:b6:d3:c7:a3:72:7e:80:7e:dd:3d:d3:ef:7f: 2c:35:04:06:bf:aa:03:94:7a:fc:d6:e4:30:05:b5:54:54:09: a1:c8:e2:4c:0f:cb:6b:46:28:17:6b:71:95:9f:a7:d2:79:e3: f1:32:d5:1b:03:83:7a:3a:7a:93:77:5a:60:a8:63:a5:a8:4c: 0f:14:23:26:65:c8:4e:a6:a3:6a:f8:68:72:b7:4b:16:7c:7e: 2b:46:f2:cf:44:72:6d:cb:56:fd:7d:e6:cd:ac:ca:f0:57:b3: 93:d5:83:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbUsDMG1kXp4Wk+PXraFLTMgNlkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNTEyMDIwNDU3MjdaFw0yNTEyMDUwODI2MjdaMDMxMTAvBgNV BAMTKDdCMEU1NThGQUUzNzQwREI1QTAwNEYxQzNENEM5RjFGRjMzMjA2MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWvhMKbI8delapOhn+kVIC5DW6 FAqW8w+ZYPu+2qJedQIJK7moPDr5ffFUhTrxGHLMnpaxOZRioEs/oEO/TXGmjPIa rvvoRQuZPr1aHEvHyZ6+I22P/0qLPsoW9bARKGvHHD6EGxyEyMRteaOoZKZyMs6A dIAl/gpDp0qGeTJjRAa8Sl7yXwj123jTyTzTk3XRvuZkwqCCWyH3jAxspdvkKbr3 YgJ9+QRywA4BzQfDmuBr5rY1nE3EmL2ZwG+fRETSXT0qxUOjXYhGO5EdTytUerDy aKVkQ8xSLyefQ+AvWTXz/RD6G9SA4jwlQi0xXhN7HcH2ofDwMkosC6bunjGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUew5Vj643QNtaAE8cPUyfH/MyBgUwHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEk6mDY1PSKK+4/94kRACzDWNwxoUP1avIk+ 8A9qEqhw1gBhNSum6nVmhmKcMK3dcNxKOUNh4tWyZzSf3wzinGvOVARw+FXKLoES 11YQQ7TmQfZYnecKXg9U7qa32JgwQCHFEVtKGZThsXd+S+CsQametG0Sp8begUpS jb+WSnTMdkXeJuqHm4n/2rh/j2LDo9BmdK54ttPHo3J+gH7dPdPvfyw1BAa/qgOU evzW5DAFtVRUCaHI4kwPy2tGKBdrcZWfp9J54/Ey1RsDg3o6epN3WmCoY6WoTA8U IyZlyE6mo2r4aHK3SxZ8fitG8s9Ecm3LVv195s2syvBXs5PVg0A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:45 2025 by rpki-client