This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: jezb/D3gfTtV4glOxnI3LGrHRz4pQYXj27c1AceZerM= Subject key identifier: D3:32:36:E8:D9:D2:1B:96:1D:CC:F6:67:85:01:F1:6F:C0:F1:52:28 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 37B128ED630A3E24BC1A27772AAC82ADC70DBC69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 0528 Signing time: Mon 01 Dec 2025 06:11:22 +0000 Manifest this update: Mon 01 Dec 2025 06:06:22 +0000 Manifest next update: Thu 04 Dec 2025 15:56:22 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: jOhecgfyZMkDT9j5MPtiK5b3N0XMHStRzCkIpWICntQ=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b1:28:ed:63:0a:3e:24:bc:1a:27:77:2a:ac:82:ad:c7:0d:bc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Dec 1 06:06:22 2025 GMT Not After : Dec 4 15:56:22 2025 GMT Subject: CN=D33236E8D9D21B961DCCF6678501F16FC0F15228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cf:a8:dd:eb:9c:48:5b:02:71:21:e4:95:43: b4:9e:5b:3d:6e:ad:76:6f:b5:9b:f9:a0:d4:fa:22: bd:3d:88:e1:e8:73:55:32:ac:86:1b:3b:3b:ce:9e: b9:6c:ac:a1:bc:7a:ef:96:c2:db:2f:81:a6:9a:32: fc:56:cf:ee:4e:92:b6:9e:dc:ae:32:0f:5e:63:6a: 60:c9:95:36:7f:4d:15:63:6e:ba:c0:0a:65:9b:94: 90:22:25:78:de:61:ad:3f:51:e3:18:08:74:39:ce: 01:33:d4:e7:46:b9:9c:cd:f8:7f:14:05:4e:6d:6a: a6:d0:07:e6:00:06:90:20:ad:09:20:f2:26:0b:ed: b5:f1:73:3b:99:15:96:bf:0d:d3:7b:3b:71:37:f5: 1f:e5:7a:69:d5:25:46:66:c2:bb:68:40:ce:b0:df: 7a:c3:86:dc:79:90:f9:bf:eb:cd:19:5d:13:1e:33: 12:d1:86:24:f5:6a:09:a6:9b:75:6c:ae:70:36:2a: df:d6:eb:20:34:96:58:a1:0a:75:41:72:d7:e6:5f: 5e:51:5d:8c:a6:cb:de:de:90:0d:c2:23:cd:20:50: 96:f7:9b:74:ce:ff:b0:9a:4c:6d:de:5f:b0:4c:3d: 0a:65:50:1b:41:b4:b2:31:dc:3a:61:15:bc:ac:fd: a6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:32:36:E8:D9:D2:1B:96:1D:CC:F6:67:85:01:F1:6F:C0:F1:52:28 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:54:6c:54:b4:70:fc:6b:6b:47:a7:f5:73:41:57:cc:7e:53: 08:29:b2:65:cb:85:ba:ed:b7:07:45:18:bd:72:10:77:03:24: 98:20:53:d2:62:3f:a0:e1:91:81:8c:37:6e:77:69:b6:3e:d0: 47:f6:a6:20:88:ac:0b:19:2d:d7:4c:c2:1d:3a:cf:a7:a4:c2: e1:16:43:52:0e:9d:82:f9:20:0e:34:5a:d7:b6:78:e0:4b:52: fe:ac:d4:f0:1f:6c:e3:5a:9c:e0:16:76:d7:2c:3d:ae:cc:bf: 0c:41:b7:42:a0:6c:7a:87:d4:7b:6f:a9:d5:bf:45:c8:e2:1f: db:cf:73:56:12:55:9c:7d:23:c2:c6:d3:37:df:80:be:22:6e: 62:65:65:c1:30:2e:a3:41:82:e6:48:66:5c:f3:f6:41:29:ea: e5:b8:a1:34:78:08:01:e3:a9:00:ec:22:77:00:e2:8a:69:06: 35:fd:90:28:a6:e4:c4:a8:06:29:c9:e6:f9:94:95:cb:77:b4: 6f:9d:b1:cf:e2:68:b3:a4:ce:36:b6:d7:d0:04:e3:17:cc:e7: 95:71:68:2c:cc:bf:6d:a3:5c:56:f4:7d:c2:d4:bb:9a:b1:fb: 37:7b:54:75:bd:81:d0:8c:43:e1:7b:22:78:87:49:5e:48:3a: 56:58:bc:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN7Eo7WMKPiS8Gid3KqyCrccNvGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTEyMDEwNjA2MjJaFw0yNTEyMDQxNTU2MjJaMDMxMTAvBgNV BAMTKEQzMzIzNkU4RDlEMjFCOTYxRENDRjY2Nzg1MDFGMTZGQzBGMTUyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNz6jd65xIWwJxIeSVQ7SeWz1u rXZvtZv5oNT6Ir09iOHoc1UyrIYbOzvOnrlsrKG8eu+WwtsvgaaaMvxWz+5Okrae 3K4yD15jamDJlTZ/TRVjbrrACmWblJAiJXjeYa0/UeMYCHQ5zgEz1OdGuZzN+H8U BU5taqbQB+YABpAgrQkg8iYL7bXxczuZFZa/DdN7O3E39R/lemnVJUZmwrtoQM6w 33rDhtx5kPm/680ZXRMeMxLRhiT1agmmm3VsrnA2Kt/W6yA0llihCnVBctfmX15R XYymy97ekA3CI80gUJb3m3TO/7CaTG3eX7BMPQplUBtBtLIx3DphFbys/aZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0zI26NnSG5YdzPZnhQHxb8DxUigwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlUbFS0cPxra0en9XNBV8x+UwgpsmXLhbrt twdFGL1yEHcDJJggU9JiP6DhkYGMN253abY+0Ef2piCIrAsZLddMwh06z6ekwuEW Q1IOnYL5IA40Wte2eOBLUv6s1PAfbONanOAWdtcsPa7MvwxBt0KgbHqH1HtvqdW/ RcjiH9vPc1YSVZx9I8LG0zffgL4ibmJlZcEwLqNBguZIZlzz9kEp6uW4oTR4CAHj qQDsIncA4oppBjX9kCim5MSoBinJ5vmUlct3tG+dsc/iaLOkzja219AE4xfM55Vx aCzMv22jXFb0fcLUu5qx+zd7VHW9gdCMQ+F7IniHSV5IOlZYvPA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:49:41 2025 by rpki-client