This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: NkU+zJ5KdomIqzO+AKHlNx4lELZikHMK79unv1mp4Rk= Subject key identifier: 3A:54:EA:C7:D6:01:4D:28:C9:35:3C:B7:88:17:90:A2:2C:78:8B:D2 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 42CA5864A431B9603F5594C617D4092FE5D647D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 0230 Signing time: Thu 25 Dec 2025 06:41:57 +0000 Manifest this update: Thu 25 Dec 2025 06:36:57 +0000 Manifest next update: Sun 28 Dec 2025 15:46:57 +0000 Files and hashes: 1: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: mVvleiIyqARuKFV2KSoepnKlpvSllpNfblotzz6zwT4=) 2: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 15:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ca:58:64:a4:31:b9:60:3f:55:94:c6:17:d4:09:2f:e5:d6:47:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Dec 25 06:36:57 2025 GMT Not After : Dec 28 15:46:57 2025 GMT Subject: CN=3A54EAC7D6014D28C9353CB7881790A22C788BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ea:54:3b:d1:d4:c8:46:d1:01:8e:7d:21:05: 99:e5:12:60:e1:e5:da:de:1f:35:58:7d:c5:72:58: be:62:c7:f4:bd:61:6b:57:cd:e9:5d:a0:6f:f3:e5: 92:7e:65:f0:e2:dd:53:f1:29:50:49:a1:fb:d4:fb: 2f:d6:a9:9a:a1:5e:08:11:8c:8d:1a:b0:99:3a:6e: b1:68:f1:73:d1:54:98:35:30:3f:7f:04:d1:bd:c3: 68:a8:3f:ae:e7:6f:0f:2e:a1:14:c1:63:16:b4:2a: f2:0f:e0:89:b2:03:f0:7c:e2:52:53:a6:92:62:85: 8a:e1:3c:a5:d6:5a:23:7e:0d:00:a0:f8:f8:4b:13: bf:a9:3e:95:bb:b1:80:8f:db:d5:92:6d:dd:c6:5c: 1a:ea:53:f8:8b:1d:2e:db:a0:53:e0:d2:f1:23:53: 08:00:00:cf:28:89:49:03:bf:d5:23:f9:72:cc:62: 69:40:ca:5b:bf:cc:b9:f3:18:f3:6e:b8:b6:d0:c6: b5:27:0e:73:54:f1:31:a8:80:29:86:78:54:c6:20: eb:82:c4:9f:97:bb:d5:4c:56:2d:bd:7a:52:7a:b7: a8:11:2b:a7:50:7f:0c:22:d9:d4:2f:91:a7:0f:61: ee:9f:c4:d3:44:39:d5:72:3a:84:67:8b:b0:50:13: 9a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:54:EA:C7:D6:01:4D:28:C9:35:3C:B7:88:17:90:A2:2C:78:8B:D2 X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f0:08:0c:d3:d7:1c:73:12:8b:b3:86:29:07:90:35:34:82: 06:68:37:a6:20:23:99:92:25:ea:8e:06:31:0d:59:77:6b:fe: 02:a9:61:98:bd:38:f1:ea:e7:9b:dc:d9:3c:23:42:fc:58:94: 59:9e:f9:bd:56:30:f1:51:f4:d5:5a:3d:5e:9a:a2:2c:59:29: 17:bb:85:69:cb:88:27:4a:76:20:32:c1:77:ad:58:89:f9:48: ef:1e:99:6a:8e:a9:13:ff:f1:93:84:21:a3:7b:e4:48:74:e3: 23:f7:35:1f:dc:a3:69:ad:a7:7e:b1:b9:61:5c:d6:14:77:59: 85:8d:1b:df:17:a0:f4:ca:ca:0a:a4:d3:fa:cf:89:44:fc:3b: 6f:11:b5:b3:aa:4b:31:bc:9c:67:bf:7e:85:c8:f7:29:f0:1f: df:f7:0d:ff:54:2d:98:1a:f5:39:eb:83:81:5d:3e:cf:f2:4f: a7:6a:d6:91:38:91:df:84:82:22:b9:0d:ac:a3:a9:a7:26:b3: f8:3a:dc:58:9a:da:33:3d:53:cd:2a:2a:44:d7:ef:e0:a5:ff: 9f:05:06:cb:30:97:42:d2:65:db:d0:e2:6e:81:4d:24:db:9e: 8f:d2:38:0f:17:98:a8:a5:99:79:4e:bf:45:c1:0e:7c:34:e0: 2f:bc:cd:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQspYZKQxuWA/VZTGF9QJL+XWR9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNTEyMjUwNjM2NTdaFw0yNTEyMjgxNTQ2NTdaMDMxMTAvBgNV BAMTKDNBNTRFQUM3RDYwMTREMjhDOTM1M0NCNzg4MTc5MEEyMkM3ODhCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX6lQ70dTIRtEBjn0hBZnlEmDh 5dreHzVYfcVyWL5ix/S9YWtXzeldoG/z5ZJ+ZfDi3VPxKVBJofvU+y/WqZqhXggR jI0asJk6brFo8XPRVJg1MD9/BNG9w2ioP67nbw8uoRTBYxa0KvIP4ImyA/B84lJT ppJihYrhPKXWWiN+DQCg+PhLE7+pPpW7sYCP29WSbd3GXBrqU/iLHS7boFPg0vEj UwgAAM8oiUkDv9Uj+XLMYmlAylu/zLnzGPNuuLbQxrUnDnNU8TGogCmGeFTGIOuC xJ+Xu9VMVi29elJ6t6gRK6dQfwwi2dQvkacPYe6fxNNEOdVyOoRni7BQE5pBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOlTqx9YBTSjJNTy3iBeQoix4i9IwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzwCAzT1xxzEouzhikHkDU0ggZoN6YgI5mS JeqOBjENWXdr/gKpYZi9OPHq55vc2TwjQvxYlFme+b1WMPFR9NVaPV6aoixZKRe7 hWnLiCdKdiAywXetWIn5SO8emWqOqRP/8ZOEIaN75Eh04yP3NR/co2mtp36xuWFc 1hR3WYWNG98XoPTKygqk0/rPiUT8O28RtbOqSzG8nGe/foXI9ynwH9/3Df9ULZga 9Tnrg4FdPs/yT6dq1pE4kd+EgiK5Dayjqacms/g63Fia2jM9U80qKkTX7+Cl/58F Bsswl0LSZdvQ4m6BTSTbno/SOA8XmKilmXlOv0XBDnw04C+8zdM= -----END CERTIFICATE-----Generated at Fri Dec 26 04:51:10 2025 by rpki-client