This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: TOqc4uf9O+jgQGh9YNrpOa4o8xG/LBXHwVudPZvtdAk= Subject key identifier: C7:26:46:D6:21:32:5D:7E:6F:F2:C8:6B:3D:FA:55:9E:C1:0C:D0:3E Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 0B1F6FB9FA8E5CD975B9B0817F6B4BBE54C3B1FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: AF Signing time: Sat 06 Dec 2025 21:10:02 +0000 Manifest this update: Sat 06 Dec 2025 21:05:02 +0000 Manifest next update: Wed 10 Dec 2025 00:06:02 +0000 Files and hashes: 1: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: hp0FWXodRjkZ1xCt3tnFlPQ3FclJlDZduoZ/rI+jC6E=) 2: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: g0oX8IpJQ/nGUZKe11YDIYO3bDnBmas+hVzNZrNPmiE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1f:6f:b9:fa:8e:5c:d9:75:b9:b0:81:7f:6b:4b:be:54:c3:b1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Dec 6 21:05:02 2025 GMT Not After : Dec 10 00:06:02 2025 GMT Subject: CN=C72646D621325D7E6FF2C86B3DFA559EC10CD03E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:b4:d6:48:9f:33:f8:ed:60:a7:0f:1c:ba: 3e:7b:d0:3c:e5:e6:ff:6e:79:0a:6d:e2:c4:17:b9: 5d:e2:0e:b2:a5:54:9f:2c:23:27:e8:a3:fb:bb:45: fc:fc:a9:91:ef:d7:e3:a1:30:55:84:f1:e7:bb:dc: fe:37:03:46:c7:4a:96:a3:39:3f:f0:08:28:ff:45: 2c:c3:00:08:03:9f:5b:da:be:55:db:7d:06:36:e0: 1a:10:1b:58:3f:de:ad:24:f5:60:76:0d:2c:33:dc: ba:ee:5d:f7:a5:07:a0:30:b0:a6:2d:dd:b4:7d:09: 62:8d:67:49:41:87:80:13:11:f3:44:f0:cd:7b:ca: e5:41:2e:33:fd:50:ca:b4:ba:37:d2:91:8d:2a:07: 08:7c:86:41:c3:c9:71:bc:9b:99:15:60:da:db:4c: 77:98:a1:fa:a7:23:91:c4:44:15:12:37:8a:aa:76: 3e:73:87:cc:2d:5d:cc:c6:8c:99:ca:c7:49:60:92: 27:b6:16:69:f9:4e:16:fb:ad:c2:9e:ad:5f:f5:84: 86:a3:6b:3b:db:fc:ad:e4:38:73:dc:bd:76:22:ad: 35:23:32:d5:05:97:b5:0c:42:b7:ea:e0:a7:f8:c4: 1d:24:b6:86:c5:aa:07:6c:5d:c8:bd:64:88:3b:44: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:26:46:D6:21:32:5D:7E:6F:F2:C8:6B:3D:FA:55:9E:C1:0C:D0:3E X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:29:12:d4:b8:12:34:b2:2b:a2:ee:60:3a:36:0c:c1:17:d8: 96:75:fb:20:c2:b1:ff:81:78:e9:0e:f7:7f:a3:48:8e:c3:fe: 7d:be:8e:9f:6d:99:b3:28:57:a7:1c:0f:82:0b:9b:3f:32:01: 9b:8e:f6:c7:d7:be:28:89:66:42:a6:af:53:71:91:19:e0:1a: be:bc:30:e3:a8:75:c7:98:cf:a1:d2:ae:d3:7e:e6:6c:b2:79: 1a:d5:75:47:22:e7:53:fd:70:7b:c8:2f:19:c9:73:85:6a:31: a9:79:aa:0b:88:ea:af:80:c8:01:1d:9e:c8:70:01:26:14:fc: fe:46:6f:84:1c:30:28:88:ea:6d:da:ea:f9:54:2c:94:ca:ce: f1:d3:cf:1a:33:21:1e:e1:30:8e:be:3d:af:7e:2c:15:12:1d: e2:f7:7f:eb:d8:23:39:34:8b:63:9a:08:2f:ee:b5:d3:f5:ba: 70:6f:c7:4a:d3:94:50:5f:46:96:b9:15:cd:e4:51:c5:40:3d: d9:d3:97:fa:4d:31:45:56:be:ab:a0:85:1b:53:14:14:ef:79: 86:c7:21:e1:b6:b5:fa:55:4c:20:5a:0b:42:54:e3:19:1c:52: 3a:bb:dc:ec:14:94:d3:a1:7e:6e:23:6d:13:19:74:c0:9c:3d: df:c5:2f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCx9vufqOXNl1ubCBf2tLvlTDsf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNTEyMDYyMTA1MDJaFw0yNTEyMTAwMDA2MDJaMDMxMTAvBgNV BAMTKEM3MjY0NkQ2MjEzMjVEN0U2RkYyQzg2QjNERkE1NTlFQzEwQ0QwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/7TWSJ8z+O1gpw8cuj570Dzl 5v9ueQpt4sQXuV3iDrKlVJ8sIyfoo/u7Rfz8qZHv1+OhMFWE8ee73P43A0bHSpaj OT/wCCj/RSzDAAgDn1vavlXbfQY24BoQG1g/3q0k9WB2DSwz3LruXfelB6AwsKYt 3bR9CWKNZ0lBh4ATEfNE8M17yuVBLjP9UMq0ujfSkY0qBwh8hkHDyXG8m5kVYNrb THeYofqnI5HERBUSN4qqdj5zh8wtXczGjJnKx0lgkie2Fmn5Thb7rcKerV/1hIaj azvb/K3kOHPcvXYirTUjMtUFl7UMQrfq4Kf4xB0ktobFqgdsXci9ZIg7RF1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxyZG1iEyXX5v8shrPfpVnsEM0D4wHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkpEtS4EjSyK6LuYDo2DMEX2JZ1+yDCsf+B eOkO93+jSI7D/n2+jp9tmbMoV6ccD4ILmz8yAZuO9sfXviiJZkKmr1NxkRngGr68 MOOodceYz6HSrtN+5myyeRrVdUci51P9cHvILxnJc4VqMal5qguI6q+AyAEdnshw ASYU/P5Gb4QcMCiI6m3a6vlULJTKzvHTzxozIR7hMI6+Pa9+LBUSHeL3f+vYIzk0 i2OaCC/utdP1unBvx0rTlFBfRpa5Fc3kUcVAPdnTl/pNMUVWvqughRtTFBTveYbH IeG2tfpVTCBaC0JU4xkcUjq73OwUlNOhfm4jbRMZdMCcPd/FL/4= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:12 2025 by rpki-client