This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft File: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft (raw, json) Hash identifier: opOhAJWjoSmBfXM4kre4ek0HsiFc5jOB6rbD5HIhd9c= Subject key identifier: 3D:01:AF:AA:35:E8:2A:AE:11:66:76:45:F8:01:D4:F0:B4:76:42:C8 Authority key identifier: D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 Certificate issuer: /CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Certificate serial: 7B754E84B29E8F396DC09AA28860958AFD11D92D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft Manifest number: A3 Signing time: Mon 01 Dec 2025 11:10:55 +0000 Manifest this update: Mon 01 Dec 2025 11:05:55 +0000 Manifest next update: Thu 04 Dec 2025 16:10:55 +0000 Files and hashes: 1: 3230322e3133332e302e302f32312d3231203d3e203234323030.roa (hash: Ngb3LnXQ11YHQrKg5E3aodFpuV+UGL7buohqyUmiTrA=) 2: 3230322e3133332e322e302f32342d3234203d3e203234323030.roa (hash: wnaZXzJu/9XYkLWvstgZSpRMBHg1zffk2A9AEFHpANM=) 3: 3230322e3133332e352e302f32342d3234203d3e203234323030.roa (hash: 3ZpfdTtxXj52cP2nsv6kg1TUa5J+9S8J6u9CtjkNgCU=) 4: 3230322e3133332e372e302f32342d3234203d3e203234323030.roa (hash: /GwhlBmTeqRQ0qTqfr/7dYrst12Hg3GNSY71ebWYL0A=) 5: 3230322e3133332e342e302f32342d3234203d3e203234323030.roa (hash: zMpVgEWzPdDK17NtW9oxpCMK4fkWK+NftKAxjrfh35o=) 6: 3230322e3133332e312e302f32342d3234203d3e203234323030.roa (hash: q0yJUvBcjd2NEtr8e4z3fwmDmV4NBgtGO2qntKq/f+g=) 7: D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl (hash: EoLA8t7NsPDhUqtI+lJvPgZnDy/8uIF0AVkWQPeTJLA=) 8: 3230322e3133332e362e302f32342d3234203d3e203234323030.roa (hash: NPtGQfnjNiCvn81mxs4KeV6zEFVnWZPCAxC6gItEmqo=) 9: 3230322e3133332e332e302f32342d3234203d3e203234323030.roa (hash: NDeOIbsC2Gb17cgUpeSYzxHEHiZeh+ueNQnGf7HfQng=) 10: 3230322e3133332e302e302f32342d3234203d3e203234323030.roa (hash: LWSN+OOVgP5g9xcwwR15CS7HhslaezIfEbjBNEwvwaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:75:4e:84:b2:9e:8f:39:6d:c0:9a:a2:88:60:95:8a:fd:11:d9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40 Validity Not Before: Dec 1 11:05:55 2025 GMT Not After : Dec 4 16:10:55 2025 GMT Subject: CN=3D01AFAA35E82AAE11667645F801D4F0B47642C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:bd:f2:2e:8b:d2:da:34:8f:3d:95:83:0b: 75:b2:f3:a2:9a:13:76:31:b5:2b:a4:8c:6a:f5:8c: 26:ba:cc:1d:64:15:50:25:37:c3:52:59:52:cd:de: 52:f4:29:d1:41:14:27:17:1c:e5:a6:9e:cc:60:b9: 7e:d2:b8:2d:89:03:f1:cd:5f:ec:fd:65:8a:df:c7: b4:e6:e4:4d:bc:9b:5d:54:11:8e:ca:a5:81:b1:b6: 61:35:f9:f7:0b:28:8d:ff:44:cf:a0:93:75:0d:44: 57:67:85:67:93:7b:b9:78:56:7e:e4:e8:66:a7:fb: d9:ca:f7:54:aa:57:46:d4:dd:03:99:cb:db:40:45: bc:6a:62:ad:a3:c7:dd:f0:c6:64:6d:6d:8d:a9:f2: ff:e4:9d:3e:00:f5:bc:25:fc:57:5e:2d:ec:40:e1: b9:08:51:72:6c:15:a7:42:7e:95:d2:1a:cb:83:0d: f3:65:66:eb:94:65:50:12:e0:b4:03:36:3c:75:ed: 93:ce:6d:39:d7:a8:6f:dc:fa:93:6f:4a:f4:1d:a9: df:d1:48:60:0f:44:63:43:1c:13:a0:12:91:af:67: e8:1e:ff:89:cf:a1:f9:7e:ed:5d:72:85:dc:ce:c3: 1e:e7:8c:3e:39:85:9f:51:17:da:6d:6f:b9:79:8d: 0f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:01:AF:AA:35:E8:2A:AE:11:66:76:45:F8:01:D4:F0:B4:76:42:C8 X509v3 Authority Key Identifier: keyid:D0:C6:D7:5C:3C:34:7D:5B:27:C7:89:11:F6:2C:5F:AB:8B:A7:BE:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63669ea4-e82f-46c3-8dd3-2e988159b202/0/D0C6D75C3C347D5B27C78911F62C5FAB8BA7BE40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f1:0d:eb:bd:f1:fb:cb:28:c4:16:4c:5f:98:02:bb:c0:15: a5:68:e4:7d:29:f9:38:10:d4:fc:bb:15:3b:33:d6:02:c3:fb: f3:08:3f:b9:53:a4:04:e0:85:95:ef:38:50:a4:03:6f:fc:b8: d6:a4:fa:24:e0:62:fb:4a:7c:bd:88:e8:6c:2d:9e:3f:a7:5e: b4:93:ab:b2:c3:1a:f2:d6:1d:ab:f5:14:63:b9:93:2f:21:79: 4c:d1:56:5b:bd:1e:37:a2:7e:4b:03:ac:5f:5f:ee:4e:cd:53: 0e:9f:4f:13:45:ac:5c:0f:2b:79:cc:f5:3a:6c:be:13:79:a2: 19:80:02:d3:2d:c1:33:b7:bb:9c:70:93:f8:de:6f:97:16:6e: 09:62:eb:e3:6c:ea:3d:14:60:72:f0:b9:51:ec:45:54:2f:5b: 09:e8:57:ab:ca:dc:ca:9d:cc:02:3a:f9:55:92:58:f3:b2:aa: 00:d2:74:29:fb:ca:68:a0:06:86:cc:87:72:67:a3:de:bd:97: b7:5c:b7:bb:14:67:e1:ee:4d:20:52:cb:27:4d:d6:8f:ce:c8: 2b:54:7a:74:c9:8f:4f:3f:bd:16:28:d8:d9:36:d0:35:c5:25: 68:61:e5:c3:a5:bc:36:c3:3e:ce:e9:14:b8:74:f7:41:cb:39: ed:1e:2f:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3VOhLKejzltwJqiiGCViv0R2S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4 QkE3QkU0MDAeFw0yNTEyMDExMTA1NTVaFw0yNTEyMDQxNjEwNTVaMDMxMTAvBgNV BAMTKDNEMDFBRkFBMzVFODJBQUUxMTY2NzY0NUY4MDFENEYwQjQ3NjQyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblL3yLovS2jSPPZWDC3Wy86Ka E3YxtSukjGr1jCa6zB1kFVAlN8NSWVLN3lL0KdFBFCcXHOWmnsxguX7SuC2JA/HN X+z9ZYrfx7Tm5E28m11UEY7KpYGxtmE1+fcLKI3/RM+gk3UNRFdnhWeTe7l4Vn7k 6Gan+9nK91SqV0bU3QOZy9tARbxqYq2jx93wxmRtbY2p8v/knT4A9bwl/FdeLexA 4bkIUXJsFadCfpXSGsuDDfNlZuuUZVAS4LQDNjx17ZPObTnXqG/c+pNvSvQdqd/R SGAPRGNDHBOgEpGvZ+ge/4nPofl+7V1yhdzOwx7njD45hZ9RF9ptb7l5jQ8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQGvqjXoKq4RZnZF+AHU8LR2QsgwHwYDVR0j BBgwFoAU0MbXXDw0fVsnx4kR9ixfq4unvkAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzY2OWVhNC1lODJmLTQ2YzMtOGRkMy0yZTk4ODE1OWIyMDIvMC9EMEM2RDc1QzND MzQ3RDVCMjdDNzg5MTFGNjJDNUZBQjhCQTdCRTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVGQUI4QkE3 QkU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2NjllYTQtZTgyZi00NmMzLThk ZDMtMmU5ODgxNTliMjAyLzAvRDBDNkQ3NUMzQzM0N0Q1QjI3Qzc4OTExRjYyQzVG QUI4QkE3QkU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/xDeu98fvLKMQWTF+YArvAFaVo5H0p+TgQ 1Py7FTsz1gLD+/MIP7lTpATghZXvOFCkA2/8uNak+iTgYvtKfL2I6Gwtnj+nXrST q7LDGvLWHav1FGO5ky8heUzRVlu9HjeifksDrF9f7k7NUw6fTxNFrFwPK3nM9Tps vhN5ohmAAtMtwTO3u5xwk/jeb5cWbgli6+Ns6j0UYHLwuVHsRVQvWwnoV6vK3Mqd zAI6+VWSWPOyqgDSdCn7ymigBobMh3Jno969l7dct7sUZ+HuTSBSyydN1o/OyCtU enTJj08/vRYo2Nk20DXFJWhh5cOlvDbDPs7pFLh090HLOe0eLzs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:51 2025 by rpki-client