This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: MA7t6vj3hpN2FwkF8iVUF2UmRPttB3X70qDo3E/89sY= Subject key identifier: 0D:C9:DB:31:41:50:D7:AB:20:AC:4D:77:C9:B0:B7:BE:AC:2E:01:4C Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 362345BC489A026C7C2B12BC5498F624B1F3C900 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 036C Signing time: Fri 05 Dec 2025 20:31:03 +0000 Manifest this update: Fri 05 Dec 2025 20:26:03 +0000 Manifest next update: Tue 09 Dec 2025 03:23:03 +0000 Files and hashes: 1: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 2: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=) 3: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 4: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: RaviG8uKl3r1JIGHBrvgdNpzr2DhJpCnjGexOjh20VM=) 5: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 6: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 7: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) 8: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA=) 9: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:23:45:bc:48:9a:02:6c:7c:2b:12:bc:54:98:f6:24:b1:f3:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Dec 5 20:26:03 2025 GMT Not After : Dec 9 03:23:03 2025 GMT Subject: CN=0DC9DB314150D7AB20AC4D77C9B0B7BEAC2E014C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:31:32:61:2f:d4:81:28:9d:85:16:e1:cc:48: 79:60:d6:71:ff:a8:f0:67:60:5a:96:29:dc:e5:4d: 93:fd:97:3c:58:d8:09:2f:b4:90:e4:95:86:ad:84: 17:44:e9:f8:a0:c0:ef:b8:4f:8a:79:41:86:8a:5d: 65:85:fc:2e:63:48:fe:07:c2:ab:4c:7a:bb:d0:27: 3e:8d:b1:ff:42:2f:3d:20:71:b6:73:36:90:ad:8c: 54:4d:b5:cf:ed:43:14:a3:1b:73:40:1d:a5:c2:79: 8b:16:c1:1c:46:2b:d9:01:ba:11:a4:75:6f:31:34: d4:64:7e:77:55:eb:f2:cf:54:67:1d:10:10:48:c7: 30:c1:fa:e8:fc:20:ac:37:ef:36:eb:bc:b5:fa:79: 7f:a3:24:2c:c6:fb:b5:64:bd:b6:aa:8e:35:93:be: 6c:2a:00:31:75:13:d9:9f:5f:b4:12:14:27:fc:dc: e6:b2:9e:07:ec:fa:95:dc:db:1c:51:1b:ab:a8:9c: c0:5a:8b:6b:68:85:19:f8:29:18:6b:f6:57:71:e3: a0:64:5b:6b:ea:0f:49:f0:04:4e:aa:89:ba:09:14: b8:6d:b3:d7:40:d9:6a:94:e2:59:0c:89:7e:5a:26: 6c:fc:d8:9e:4f:58:ee:6e:0c:5d:58:85:25:4d:a8: c3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C9:DB:31:41:50:D7:AB:20:AC:4D:77:C9:B0:B7:BE:AC:2E:01:4C X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1c:16:9f:96:9c:0d:d1:1d:fa:21:33:88:a5:3c:4f:ae:6b: ab:e2:dc:c8:b5:d5:0a:c3:07:00:ab:37:51:2c:b9:00:d5:cf: 15:7a:6b:16:59:fb:de:bf:1f:b5:6b:89:8f:39:6e:06:b2:ca: e1:bf:b5:24:f2:d4:9c:70:b7:90:8e:d9:6d:17:75:af:17:50: 8d:5a:09:fe:45:02:40:7e:7c:d5:e8:fb:18:68:9b:4b:26:a0: 48:f8:fd:3e:a7:24:5b:51:93:a3:d0:46:fe:64:3b:55:3f:1c: d2:e3:aa:5b:a3:b6:92:ab:c5:2b:9b:4b:4c:8b:ce:2d:32:27: 02:df:70:62:80:3f:04:89:47:7c:04:37:cc:d3:4a:8d:d3:90: 09:55:ee:9e:09:19:ab:d3:5c:f1:6d:05:f1:e7:bc:6f:89:61: 3d:32:55:ec:f3:d3:bb:b4:aa:f9:10:1d:83:7f:f8:45:e0:51: e7:e0:78:66:65:03:91:c2:56:1b:78:b7:da:9b:d5:cd:d2:84: 4a:4c:ca:5f:c7:5b:37:6b:7f:b7:1f:1e:4a:4d:3d:74:f9:3a: 12:43:ac:38:60:44:f0:eb:76:9b:74:31:cb:51:d9:bb:e4:2d: 67:78:85:dd:82:c3:2d:c1:fd:45:2d:69:96:20:f8:c1:81:a4: 13:a5:bd:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNiNFvEiaAmx8KxK8VJj2JLHzyQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTEyMDUyMDI2MDNaFw0yNTEyMDkwMzIzMDNaMDMxMTAvBgNV BAMTKDBEQzlEQjMxNDE1MEQ3QUIyMEFDNEQ3N0M5QjBCN0JFQUMyRTAxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrMTJhL9SBKJ2FFuHMSHlg1nH/ qPBnYFqWKdzlTZP9lzxY2AkvtJDklYathBdE6figwO+4T4p5QYaKXWWF/C5jSP4H wqtMervQJz6Nsf9CLz0gcbZzNpCtjFRNtc/tQxSjG3NAHaXCeYsWwRxGK9kBuhGk dW8xNNRkfndV6/LPVGcdEBBIxzDB+uj8IKw37zbrvLX6eX+jJCzG+7VkvbaqjjWT vmwqADF1E9mfX7QSFCf83Oayngfs+pXc2xxRG6uonMBai2tohRn4KRhr9ldx46Bk W2vqD0nwBE6qiboJFLhts9dA2WqU4lkMiX5aJmz82J5PWO5uDF1YhSVNqMP1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDcnbMUFQ16sgrE13ybC3vqwuAUwwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGscFp+WnA3RHfohM4ilPE+ua6vi3Mi11QrD BwCrN1EsuQDVzxV6axZZ+96/H7VriY85bgayyuG/tSTy1Jxwt5CO2W0Xda8XUI1a Cf5FAkB+fNXo+xhom0smoEj4/T6nJFtRk6PQRv5kO1U/HNLjqlujtpKrxSubS0yL zi0yJwLfcGKAPwSJR3wEN8zTSo3TkAlV7p4JGavTXPFtBfHnvG+JYT0yVezz07u0 qvkQHYN/+EXgUefgeGZlA5HCVht4t9qb1c3ShEpMyl/HWzdrf7cfHkpNPXT5OhJD rDhgRPDrdpt0MctR2bvkLWd4hd2Cwy3B/UUtaZYg+MGBpBOlvd8= -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:04 2025 by rpki-client