This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft (raw, json) Hash identifier: x7MJ0J5pThngDHH3zTEOI/OnLbPk92rx5/66Y2nOuNA= Subject key identifier: 64:8E:19:2B:7D:33:B7:DF:77:65:3D:F5:4C:42:14:E4:91:34:CC:8A Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Certificate issuer: /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Certificate serial: 4385390A17A323B6E4A5AF10A9B6C3A356EE46C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft Manifest number: 0211 Signing time: Wed 17 Dec 2025 05:41:50 +0000 Manifest this update: Wed 17 Dec 2025 05:36:50 +0000 Manifest next update: Sat 20 Dec 2025 13:42:50 +0000 Files and hashes: 1: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl (hash: wMIjJpo3Md1aMDZvV0NlOTAh3cVVy8E5FFD35XpFTtI=) 2: 3130332e3231312e342e302f32332d3234203d3e2034383030.roa (hash: 59yz865tKQpU8UqeDFR2Q6MBnW99RvQGBX6jv6dW3C0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:85:39:0a:17:a3:23:b6:e4:a5:af:10:a9:b6:c3:a3:56:ee:46:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Validity Not Before: Dec 17 05:36:50 2025 GMT Not After : Dec 20 13:42:50 2025 GMT Subject: CN=648E192B7D33B7DF77653DF54C4214E49134CC8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:2f:cb:ce:d0:59:b7:f6:be:d1:4c:4c:5c: ef:c9:a2:a1:1a:4c:9e:78:ad:e0:75:47:63:cd:61: 20:40:da:8c:55:19:b5:3d:c7:05:16:a6:07:01:20: 31:32:e0:42:9e:ba:2b:99:d1:51:16:aa:aa:34:b7: ae:95:07:11:db:e0:fa:9e:65:9f:70:56:14:dc:e2: c6:58:e2:a1:85:5a:16:e4:a9:7a:ed:2e:1c:5e:32: e6:93:b2:31:5a:22:61:ed:d0:78:e7:5c:67:f4:28: 32:55:1f:91:d6:0f:8f:55:7a:4c:91:f6:a2:e2:9e: 77:4b:b8:37:7f:e7:5f:c8:cd:8d:1e:f4:1f:57:86: 94:e5:59:31:10:f3:93:da:c0:21:c4:d4:82:d0:a0: 8b:07:2d:c9:33:f4:95:95:c6:fd:72:09:c8:ad:09: ff:db:90:dc:2b:fc:f8:f9:b4:97:05:90:97:15:48: 69:d5:07:19:87:7f:a7:80:fa:84:3b:8d:8a:75:57: 4d:4c:11:5e:9f:ae:c4:66:51:c2:00:bc:57:ce:1b: 80:41:27:93:19:8a:e2:d6:8a:1e:97:ea:6b:83:28: cd:5f:b8:78:ca:91:63:d8:f7:e0:29:fa:c7:e3:11: 4a:26:7d:5b:a9:6a:40:19:fa:e0:9f:fd:2d:11:27: c5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8E:19:2B:7D:33:B7:DF:77:65:3D:F5:4C:42:14:E4:91:34:CC:8A X509v3 Authority Key Identifier: keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:dc:ca:e0:7b:32:c3:b3:ed:50:4b:44:56:44:fb:9e:8f:93: 25:73:79:cc:9f:84:04:95:9b:73:a7:cd:7f:b2:0c:0b:cc:db: a8:1c:e7:30:f4:2d:9f:8d:f0:78:6d:d5:b7:f5:08:0b:12:4c: af:03:9b:06:c3:c1:30:66:b2:fd:34:62:a5:b8:19:ae:6e:c7: 20:c4:43:f4:71:53:bc:5e:eb:6c:8d:20:d1:45:f7:66:fe:8c: 49:4c:de:63:57:21:be:dd:f9:f2:87:fe:fc:89:5e:01:e3:70: 1d:1b:aa:9e:35:d8:61:4a:37:27:ce:67:75:d7:bc:fc:78:dc: fc:63:f9:fd:3e:1e:56:b7:df:80:fe:2a:dc:a1:3a:01:ca:84: 35:92:c3:5d:87:af:9a:83:38:a0:89:4b:9e:a4:d9:17:9a:4f: 79:79:6f:cd:f3:92:57:42:60:2b:93:a1:b4:27:7a:ac:77:93: 63:c4:64:d6:94:d5:f6:b9:92:84:17:59:d0:14:0b:3d:58:a0: 44:22:37:dc:3f:8d:ba:2c:40:89:3c:56:42:c5:25:aa:72:0e: 09:4a:dc:49:d4:02:e0:0b:11:03:10:a7:25:54:ca:86:d8:e7: fb:9e:89:f6:23:cd:52:cb:67:8c:36:d7:70:50:01:81:a6:ce: 75:eb:ee:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4U5ChejI7bkpa8QqbbDo1buRsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRC MDIzNUZBNzAeFw0yNTEyMTcwNTM2NTBaFw0yNTEyMjAxMzQyNTBaMDMxMTAvBgNV BAMTKDY0OEUxOTJCN0QzM0I3REY3NzY1M0RGNTRDNDIxNEU0OTEzNENDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyri/LztBZt/a+0UxMXO/JoqEa TJ54reB1R2PNYSBA2oxVGbU9xwUWpgcBIDEy4EKeuiuZ0VEWqqo0t66VBxHb4Pqe ZZ9wVhTc4sZY4qGFWhbkqXrtLhxeMuaTsjFaImHt0HjnXGf0KDJVH5HWD49VekyR 9qLinndLuDd/51/IzY0e9B9XhpTlWTEQ85PawCHE1ILQoIsHLckz9JWVxv1yCcit Cf/bkNwr/Pj5tJcFkJcVSGnVBxmHf6eA+oQ7jYp1V01MEV6frsRmUcIAvFfOG4BB J5MZiuLWih6X6muDKM1fuHjKkWPY9+Ap+sfjEUomfVupakAZ+uCf/S0RJ8WJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZI4ZK30zt993ZT31TEIU5JE0zIowHwYDVR0j BBgwFoAU0EPCorOV5qe8ijLxrmwZNLAjX6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMC9EMDQzQzJBMkIz OTVFNkE3QkM4QTMyRjFBRTZDMTkzNEIwMjM1RkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5MzRCMDIz NUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNhZDM3NTctOTNhMC00YjMzLTkx MjgtMjRhYTYxMzA0ZWZmLzAvRDA0M0MyQTJCMzk1RTZBN0JDOEEzMkYxQUU2QzE5 MzRCMDIzNUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfcyuB7MsOz7VBLRFZE+56PkyVzecyfhASV m3OnzX+yDAvM26gc5zD0LZ+N8Hht1bf1CAsSTK8DmwbDwTBmsv00YqW4Ga5uxyDE Q/RxU7xe62yNINFF92b+jElM3mNXIb7d+fKH/vyJXgHjcB0bqp412GFKNyfOZ3XX vPx43Pxj+f0+Hla334D+KtyhOgHKhDWSw12Hr5qDOKCJS56k2ReaT3l5b83zkldC YCuTobQneqx3k2PEZNaU1fa5koQXWdAUCz1YoEQiN9w/jbosQIk8VkLFJapyDglK 3EnUAuALEQMQpyVUyobY5/ueifYjzVLLZ4w213BQAYGmznXr7vY= -----END CERTIFICATE-----Generated at Fri Dec 19 09:48:10 2025 by rpki-client