This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft File: 2D0745D26E59440CB71FAFE996834493DA753248.mft (raw, json) Hash identifier: oZ4d2PgdDr1cNiXH0uV1/0Ily/Wep+bidrTdiTfyP3E= Subject key identifier: BD:7F:AA:E8:13:74:7D:4E:BA:D1:59:52:55:C2:97:EF:E7:5E:93:7A Authority key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Certificate issuer: /CN=2D0745D26E59440CB71FAFE996834493DA753248 Certificate serial: 55694145E9FEB0431938EEE824845D432FB8BDE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft Manifest number: 0203 Signing time: Fri 12 Dec 2025 14:40:53 +0000 Manifest this update: Fri 12 Dec 2025 14:35:53 +0000 Manifest next update: Mon 15 Dec 2025 19:44:53 +0000 Files and hashes: 1: 3130332e37332e3135382e302f32342d3234203d3e203234343239.roa (hash: ujITe6uXtdvP5WOayQADk+Rg7asyYqwio86khyT1Nho=) 2: 2D0745D26E59440CB71FAFE996834493DA753248.crl (hash: q8s3MoAMfSkWz5LbnpBXMhwv33L8b0qc0DeUJWDZaKw=) 3: 3130332e37332e3135392e302f32342d3234203d3e20313338383836.roa (hash: nxYZnXzCnu/G6Di5JhS1WLXdlQHk8fuEdbh3UpU3Jf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 19:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:69:41:45:e9:fe:b0:43:19:38:ee:e8:24:84:5d:43:2f:b8:bd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0745D26E59440CB71FAFE996834493DA753248 Validity Not Before: Dec 12 14:35:53 2025 GMT Not After : Dec 15 19:44:53 2025 GMT Subject: CN=BD7FAAE813747D4EBAD1595255C297EFE75E937A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e5:5b:0f:e9:1e:b5:9e:96:14:56:41:b1:be: 81:dd:a4:f8:5d:b3:0d:88:fd:ac:8d:6f:27:7f:96: 68:fc:4d:28:3f:c7:08:55:b6:ce:39:30:6e:a1:60: cf:ca:b8:ab:f0:00:af:f9:34:e5:3b:c3:73:2f:6a: b4:07:45:18:db:72:b9:83:b7:7b:c6:c3:d3:2b:7c: 1c:77:b8:91:1a:ae:c3:76:9b:2b:b8:dc:30:2c:09: 22:b6:cc:82:f0:d4:26:04:11:ce:16:e0:37:11:df: 54:3c:18:c1:a4:db:85:b6:90:43:2f:af:f5:8c:c7: 42:e9:0d:35:3b:36:37:d6:8e:f0:ba:c1:50:68:e3: e6:7e:cc:8c:3d:75:c1:ff:f0:73:9f:40:84:80:1a: fb:08:0c:4b:a6:51:36:e0:30:a9:4f:f5:ad:b6:32: 3c:3a:7b:72:a3:c5:c4:de:eb:70:2e:be:5c:e8:50: 37:dd:51:2b:41:03:48:41:56:1b:1c:ea:8b:cf:ae: b5:20:b0:0d:af:4e:fc:8f:bd:de:a9:c3:13:a6:04: a2:b9:4b:a3:db:b1:a8:60:a9:f1:1e:1f:09:ff:ea: 36:d6:ca:4a:5d:32:45:5f:e7:cd:0d:f4:68:c2:8e: df:71:a4:3b:1e:46:20:31:86:b0:e6:27:01:cf:93: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7F:AA:E8:13:74:7D:4E:BA:D1:59:52:55:C2:97:EF:E7:5E:93:7A X509v3 Authority Key Identifier: keyid:2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:4c:79:3b:a1:6e:e5:30:cb:05:e6:3a:bd:9b:05:71:4f:fe: 70:e9:c4:70:6a:ad:77:a5:1b:87:af:a2:69:d5:ac:d9:de:87: 0f:c5:b4:b7:5d:da:e8:12:85:3e:b9:45:48:c6:d7:74:83:ad: 67:32:27:96:3a:5a:2d:21:dd:1b:80:a6:b6:cf:43:02:74:8c: d0:1d:b7:84:75:be:9d:d8:b9:35:79:b6:d2:72:88:69:9f:8f: 89:3c:20:1c:3c:10:bb:34:ca:30:c0:55:2d:49:37:83:a0:ee: 83:3e:d6:7c:5d:77:eb:2d:17:76:aa:9a:d2:15:3a:68:6c:8f: 02:b4:c9:0a:49:bc:9b:21:a4:ff:af:ec:8a:01:4f:ee:32:be: ce:1e:b4:61:10:aa:26:0f:38:07:2a:37:03:19:dc:1e:61:5d: 28:91:8e:71:10:00:2f:a3:e5:ad:77:08:b0:80:43:32:06:f6: b5:04:6c:05:17:48:12:93:03:de:9f:81:c8:ed:70:62:1d:c4: 2f:3c:78:42:42:8a:a4:00:99:72:45:ef:fb:d5:3f:84:e7:5c: cb:2c:79:dc:3b:86:56:f2:75:fd:4a:46:d7:89:aa:54:c8:e2: 4a:55:e7:bb:44:cc:2e:98:10:9c:6a:5a:0a:96:3b:f5:c5:55: 7e:9b:a5:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWlBRen+sEMZOO7oJIRdQy+4veMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNE QTc1MzI0ODAeFw0yNTEyMTIxNDM1NTNaFw0yNTEyMTUxOTQ0NTNaMDMxMTAvBgNV BAMTKEJEN0ZBQUU4MTM3NDdENEVCQUQxNTk1MjU1QzI5N0VGRTc1RTkzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw5VsP6R61npYUVkGxvoHdpPhd sw2I/ayNbyd/lmj8TSg/xwhVts45MG6hYM/KuKvwAK/5NOU7w3MvarQHRRjbcrmD t3vGw9MrfBx3uJEarsN2myu43DAsCSK2zILw1CYEEc4W4DcR31Q8GMGk24W2kEMv r/WMx0LpDTU7NjfWjvC6wVBo4+Z+zIw9dcH/8HOfQISAGvsIDEumUTbgMKlP9a22 Mjw6e3KjxcTe63AuvlzoUDfdUStBA0hBVhsc6ovPrrUgsA2vTvyPvd6pwxOmBKK5 S6PbsahgqfEeHwn/6jbWykpdMkVf580N9GjCjt9xpDseRiAxhrDmJwHPk81BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvX+q6BN0fU660VlSVcKX7+dek3owHwYDVR0j BBgwFoAULQdF0m5ZRAy3H6/ploNEk9p1MkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMC8yRDA3NDVEMjZF NTk0NDBDQjcxRkFGRTk5NjgzNDQ5M0RBNzUzMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0OTNEQTc1 MzI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E0MDZjZGItMTc5MS00NzhkLTlk MjgtOWUzN2E2ZjgwOWNjLzAvMkQwNzQ1RDI2RTU5NDQwQ0I3MUZBRkU5OTY4MzQ0 OTNEQTc1MzI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1MeTuhbuUwywXmOr2bBXFP/nDpxHBqrXel G4evomnVrNnehw/FtLdd2ugShT65RUjG13SDrWcyJ5Y6Wi0h3RuAprbPQwJ0jNAd t4R1vp3YuTV5ttJyiGmfj4k8IBw8ELs0yjDAVS1JN4Og7oM+1nxdd+stF3aqmtIV OmhsjwK0yQpJvJshpP+v7IoBT+4yvs4etGEQqiYPOAcqNwMZ3B5hXSiRjnEQAC+j 5a13CLCAQzIG9rUEbAUXSBKTA96fgcjtcGIdxC88eEJCiqQAmXJF7/vVP4TnXMss edw7hlbydf1KRteJqlTI4kpV57tEzC6YEJxqWgqWO/XFVX6bpbc= -----END CERTIFICATE-----Generated at Sun Dec 14 18:56:18 2025 by rpki-client