This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: IoBKZV1uYsawEnpz6zl9PzgAeeIOBNMqHF8kqytktTg= Subject key identifier: DA:AC:CC:16:23:58:43:1C:B2:AF:59:15:45:9E:70:2E:30:DD:8A:04 Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 7C4DFD69D45239FA12F2752249B8335226BCE534 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 019A Signing time: Sun 14 Dec 2025 17:52:08 +0000 Manifest this update: Sun 14 Dec 2025 17:47:08 +0000 Manifest next update: Thu 18 Dec 2025 02:07:08 +0000 Files and hashes: 1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) 2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: u2S44j5EHrDKyFujuOaYVoT85/Xiqftt1ap8V42X6eU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 02:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:4d:fd:69:d4:52:39:fa:12:f2:75:22:49:b8:33:52:26:bc:e5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Dec 14 17:47:08 2025 GMT Not After : Dec 18 02:07:08 2025 GMT Subject: CN=DAACCC162358431CB2AF5915459E702E30DD8A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:77:75:4d:7b:2d:12:bf:68:e1:b1:08:16:99: b8:29:63:75:68:40:11:bd:d3:c8:0c:f9:c0:69:e2: 4f:5a:3d:a4:9c:a1:49:53:34:96:38:cc:49:09:54: 01:88:a0:68:ad:46:3d:86:15:ab:9b:f2:f5:38:a3: 3c:43:f7:c5:f2:c0:9b:63:53:74:f4:5e:2a:56:0c: 09:97:e6:0f:92:57:49:14:b7:1c:7c:99:5d:9f:3f: 7b:c7:76:34:af:ec:85:32:0e:39:56:93:a3:71:d6: e1:3d:fd:b7:3b:81:05:8c:a6:f6:3f:73:f4:d9:e0: 6b:ab:06:07:f9:04:3b:07:de:2d:b0:85:ad:a1:d5: 6d:cf:cd:f2:8c:02:8a:12:fb:44:89:23:58:f7:78: 40:37:9e:e1:0a:80:1f:05:35:5e:d1:6c:05:ef:03: ec:75:ff:b1:f2:e1:29:72:60:b8:23:62:f6:87:ae: 21:df:38:85:25:46:13:d9:94:33:19:84:08:1d:67: 64:b3:2d:2b:79:77:bc:9d:ab:c2:ed:b3:e0:70:cb: cd:b6:58:20:ed:7b:be:cc:1c:1d:db:56:8f:08:9f: b5:97:88:ab:ff:75:9a:7f:ec:93:22:16:5c:c7:92: 2c:0a:0f:6b:48:ac:a5:fd:bf:ef:86:19:7c:38:b9: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AC:CC:16:23:58:43:1C:B2:AF:59:15:45:9E:70:2E:30:DD:8A:04 X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:fd:b8:1b:f3:ae:57:0f:63:32:c3:74:15:90:63:b3:bd:61: 46:65:67:93:5d:fc:bf:1f:2f:84:f2:17:aa:b0:ce:30:67:0a: 69:53:14:4c:74:0d:8d:f7:7e:4d:de:f2:26:90:88:de:9d:c7: 61:02:f3:78:eb:52:6b:e5:ff:19:61:41:3e:3d:c2:95:b3:b7: 75:ad:89:14:61:cf:d5:6f:55:71:fb:9f:59:38:e0:be:bf:5a: 60:78:b4:08:9b:77:2e:cd:15:58:d3:33:14:d2:18:5d:cc:1c: d8:be:43:6b:34:c4:ad:c3:bb:35:98:ec:9f:f2:bb:d8:1e:b4: 98:60:f5:4f:c5:57:36:82:2e:7b:4e:a3:06:b9:79:93:58:df: 27:4a:ef:12:d2:c9:d6:98:95:7f:4b:fb:82:a6:21:5a:bc:f0: 0d:82:fe:7f:04:6b:29:30:cc:3f:38:02:86:18:93:00:a2:6c: 17:5d:62:fc:41:a7:71:57:58:3b:5a:3c:3b:0e:11:c4:eb:8b: c2:d3:47:81:aa:32:1f:eb:ec:e7:e6:ff:dd:a1:ea:f6:e7:03: 59:91:36:fa:21:15:b4:ba:10:38:25:4c:8b:e4:0c:6f:43:f0: 16:41:eb:46:76:1b:80:09:88:20:a2:e9:d3:d4:57:9a:d2:5b: 54:01:a0:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfE39adRSOfoS8nUiSbgzUia85TQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTEyMTQxNzQ3MDhaFw0yNTEyMTgwMjA3MDhaMDMxMTAvBgNV BAMTKERBQUNDQzE2MjM1ODQzMUNCMkFGNTkxNTQ1OUU3MDJFMzBERDhBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbd3VNey0Sv2jhsQgWmbgpY3Vo QBG908gM+cBp4k9aPaScoUlTNJY4zEkJVAGIoGitRj2GFaub8vU4ozxD98XywJtj U3T0XipWDAmX5g+SV0kUtxx8mV2fP3vHdjSv7IUyDjlWk6Nx1uE9/bc7gQWMpvY/ c/TZ4GurBgf5BDsH3i2wha2h1W3PzfKMAooS+0SJI1j3eEA3nuEKgB8FNV7RbAXv A+x1/7Hy4SlyYLgjYvaHriHfOIUlRhPZlDMZhAgdZ2SzLSt5d7ydq8Lts+Bwy822 WCDte77MHB3bVo8In7WXiKv/dZp/7JMiFlzHkiwKD2tIrKX9v++GGXw4uYX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2qzMFiNYQxyyr1kVRZ5wLjDdigQwHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn9uBvzrlcPYzLDdBWQY7O9YUZlZ5Nd/L8f L4TyF6qwzjBnCmlTFEx0DY33fk3e8iaQiN6dx2EC83jrUmvl/xlhQT49wpWzt3Wt iRRhz9VvVXH7n1k44L6/WmB4tAibdy7NFVjTMxTSGF3MHNi+Q2s0xK3DuzWY7J/y u9getJhg9U/FVzaCLntOowa5eZNY3ydK7xLSydaYlX9L+4KmIVq88A2C/n8Eaykw zD84AoYYkwCibBddYvxBp3FXWDtaPDsOEcTri8LTR4GqMh/r7Ofm/92h6vbnA1mR NvohFbS6EDglTIvkDG9D8BZB60Z2G4AJiCCi6dPUV5rSW1QBoNU= -----END CERTIFICATE-----Generated at Tue Dec 16 07:27:06 2025 by rpki-client