This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: AIfmZtNKa1s8R7vkQZ5hFnwnRY7nrRgPF5Ph02bkfSo= Subject key identifier: 6F:C1:01:58:BB:73:CF:F1:A6:19:8A:CE:72:BC:CD:B4:D6:0E:EF:D5 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 6B3ADFBB087FE6773E26B656D21DE211D6B8833C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 01A5 Signing time: Mon 01 Dec 2025 15:32:03 +0000 Manifest this update: Mon 01 Dec 2025 15:27:03 +0000 Manifest next update: Fri 05 Dec 2025 01:21:03 +0000 Files and hashes: 1: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 2: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: sfj/xLZEElFZFm97ASqdb3Sh5i8unBwVhTxljUPKis0=) 3: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 4: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: XvThXLSw8RI+S/NQF7+TcERXyjSiqMbuFnBZafv3zYk=) 5: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3a:df:bb:08:7f:e6:77:3e:26:b6:56:d2:1d:e2:11:d6:b8:83:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Dec 1 15:27:03 2025 GMT Not After : Dec 5 01:21:03 2025 GMT Subject: CN=6FC10158BB73CFF1A6198ACE72BCCDB4D60EEFD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:85:1c:75:bb:bd:2e:c6:fd:bf:27:f3:bc: 3d:94:2b:26:e9:93:9a:b3:9b:a4:d9:b8:22:93:09: eb:e0:8b:79:2d:f9:75:21:40:9e:3b:4f:5f:84:08: ee:a6:51:89:24:78:33:a7:a1:93:a1:63:6a:b9:b8: 61:b1:61:7b:98:53:89:68:02:44:43:78:23:41:58: 2e:fe:a4:8b:4f:47:39:9f:7d:97:3f:0e:71:df:39: 5c:26:a2:b1:19:fa:9e:22:33:18:da:d8:c6:6d:f8: ad:0a:1a:88:f9:d2:a0:28:ca:7b:09:4f:4c:fd:53: 75:c1:e5:51:93:92:26:af:3e:1e:88:19:ec:31:73: d9:eb:bd:67:dc:2a:a4:0c:7c:f5:2c:1a:7c:c7:e5: e8:cd:c7:93:06:9d:4c:47:5e:55:37:5e:d0:dd:a9: 39:18:09:07:ba:af:73:ba:43:64:95:42:6a:01:3a: 6a:3d:24:b5:38:e1:fb:6a:95:a6:dd:aa:10:0b:8f: f2:d2:e2:c3:d7:82:6d:5b:46:e8:53:83:08:58:b7: 3f:14:3e:99:c8:80:ea:d9:1f:5a:ee:d3:0c:b5:11: 42:f2:8a:d6:76:e2:e8:ad:ef:07:1a:14:c7:8f:4d: 45:dd:23:7d:e5:a9:e2:8a:62:63:c9:38:2e:69:91: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C1:01:58:BB:73:CF:F1:A6:19:8A:CE:72:BC:CD:B4:D6:0E:EF:D5 X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:27:56:28:d8:fa:cf:55:ce:e6:96:57:2a:ec:7c:db:36:48: 3d:8d:b1:60:83:58:f6:36:00:a0:ba:34:30:aa:b0:b5:14:01: 78:b8:58:b8:f2:a4:99:0f:84:c3:31:99:82:b7:61:0c:a4:db: e3:50:18:b4:51:1d:8b:a1:b9:e9:f4:64:44:d1:ab:77:f0:1f: f8:07:a3:fb:0f:77:ef:25:6e:0b:46:16:e0:ef:76:2c:79:88: 63:5b:f2:a1:2e:47:e2:73:ca:8a:b9:5e:31:d2:ed:92:92:27: 37:72:6d:0e:95:0f:4e:62:c1:16:f7:3c:22:ad:d7:10:b3:d2: 99:d4:a4:02:ad:2b:ed:c1:5f:e7:87:1c:57:44:be:94:32:91: e8:23:8b:51:42:ec:5d:2f:6f:1b:d7:46:b9:eb:86:5c:15:ed: 7e:44:0c:d5:d5:68:87:74:3c:04:0a:6d:ef:d0:57:91:2d:9b: 91:d9:71:41:90:6c:c2:99:c4:60:42:80:bc:b2:78:83:f0:4b: 3c:49:a4:45:6c:94:7f:6c:6d:18:d9:e3:2e:b5:46:b6:4f:45: d8:c6:88:c1:d8:ff:ab:0b:59:82:4d:06:b1:6c:d2:ca:8f:93: 7b:2f:c0:ff:31:e3:49:a6:fb:3e:db:6e:39:e7:24:ce:0e:64: 8e:8f:cb:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUazrfuwh/5nc+JrZW0h3iEda4gzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTEyMDExNTI3MDNaFw0yNTEyMDUwMTIxMDNaMDMxMTAvBgNV BAMTKDZGQzEwMTU4QkI3M0NGRjFBNjE5OEFDRTcyQkNDREI0RDYwRUVGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPV4Ucdbu9Lsb9vyfzvD2UKybp k5qzm6TZuCKTCevgi3kt+XUhQJ47T1+ECO6mUYkkeDOnoZOhY2q5uGGxYXuYU4lo AkRDeCNBWC7+pItPRzmffZc/DnHfOVwmorEZ+p4iMxja2MZt+K0KGoj50qAoynsJ T0z9U3XB5VGTkiavPh6IGewxc9nrvWfcKqQMfPUsGnzH5ejNx5MGnUxHXlU3XtDd qTkYCQe6r3O6Q2SVQmoBOmo9JLU44ftqlabdqhALj/LS4sPXgm1bRuhTgwhYtz8U PpnIgOrZH1ru0wy1EULyitZ24uit7wcaFMePTUXdI33lqeKKYmPJOC5pkRbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb8EBWLtzz/GmGYrOcrzNtNYO79UwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEnVijY+s9VzuaWVyrsfNs2SD2NsWCDWPY2 AKC6NDCqsLUUAXi4WLjypJkPhMMxmYK3YQyk2+NQGLRRHYuhuen0ZETRq3fwH/gH o/sPd+8lbgtGFuDvdix5iGNb8qEuR+Jzyoq5XjHS7ZKSJzdybQ6VD05iwRb3PCKt 1xCz0pnUpAKtK+3BX+eHHFdEvpQykegji1FC7F0vbxvXRrnrhlwV7X5EDNXVaId0 PAQKbe/QV5Etm5HZcUGQbMKZxGBCgLyyeIPwSzxJpEVslH9sbRjZ4y61RrZPRdjG iMHY/6sLWYJNBrFs0sqPk3svwP8x40mm+z7bbjnnJM4OZI6Py/g= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:23 2025 by rpki-client