This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: x+V24r7rDmy2exkn6JYKFDbj5wdozFBVHLG0/WcozQc= Subject key identifier: F9:82:DA:CE:1D:DA:98:D0:79:D6:C3:40:19:E0:D2:2B:53:46:0C:57 Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 2A91D35703D095491235E38D13E70BE272177AA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 01D1 Signing time: Wed 03 Dec 2025 11:20:49 +0000 Manifest this update: Wed 03 Dec 2025 11:15:49 +0000 Manifest next update: Sat 06 Dec 2025 16:10:49 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: rTKUFIY4Upd8b9b5cqNkUPA0BUTYqar4lQudmK10OGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:91:d3:57:03:d0:95:49:12:35:e3:8d:13:e7:0b:e2:72:17:7a:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Dec 3 11:15:49 2025 GMT Not After : Dec 6 16:10:49 2025 GMT Subject: CN=F982DACE1DDA98D079D6C34019E0D22B53460C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c0:41:fb:73:25:d3:5b:65:d5:b4:f6:35:de: ec:44:ae:88:d7:35:9a:61:b2:fd:d5:a8:3c:ed:7b: 11:c7:94:24:03:8e:2a:80:ad:ea:7a:70:89:e1:48: 15:97:26:4b:a6:62:72:e0:84:f4:65:4b:2c:d0:53: 6e:a3:14:73:06:a8:a1:3b:8d:86:28:fd:bb:07:ce: ea:09:b0:a5:56:b8:ed:1b:b9:8d:38:1e:80:d6:d5: 45:86:c1:72:7f:60:d0:3e:1e:43:28:61:f8:fe:33: 7d:11:24:41:25:28:fc:5e:e8:c4:fe:d1:3b:48:46: 0e:af:7b:3b:a0:1a:50:9d:b5:0d:30:dc:6d:62:db: ad:40:a0:be:57:e9:b1:6d:52:cd:61:76:e5:d2:e2: ef:b5:1c:4c:c0:74:34:87:80:bb:da:92:b4:bb:45: fc:62:2f:c6:a2:bd:3a:26:50:c1:ab:96:d5:8c:65: e6:f9:4a:3b:a0:d2:2b:9a:38:ba:ee:53:45:7c:7a: 72:d6:87:76:b5:b9:34:82:94:81:a7:1f:6e:77:cb: 97:b3:d9:6f:a8:ba:d9:5a:83:4f:82:25:e0:5d:cf: 51:4a:7d:98:0f:25:44:51:03:62:58:d1:94:6b:79: 44:13:76:12:59:93:02:4e:dd:10:c5:ae:7c:24:f4: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:82:DA:CE:1D:DA:98:D0:79:D6:C3:40:19:E0:D2:2B:53:46:0C:57 X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:5b:22:21:34:34:08:83:96:e5:2d:3a:46:24:ec:94:91:42: 05:f3:eb:1f:72:a4:63:91:34:e4:1f:d3:56:2e:d8:12:e6:c7: b6:1c:00:5b:68:ce:60:ff:17:c1:38:75:59:29:7c:f5:f5:2d: 31:b5:18:63:ae:60:2a:02:40:e5:f1:70:d0:84:f5:f3:4a:0f: 08:53:5c:73:48:9b:d0:62:51:62:1a:ed:e2:75:15:8f:b2:20: b9:85:b7:76:56:dc:de:ac:4c:ad:c2:a8:4a:11:1b:e5:f8:0f: c7:81:2f:79:13:a7:70:23:2d:87:ce:35:5b:9e:e8:5f:3a:84: 7d:f3:98:f4:11:f7:12:82:8c:69:49:22:97:0d:5b:33:e2:7a: 56:ba:53:90:d5:db:20:06:19:1f:d1:4a:b3:6b:91:42:fd:bf: 7f:95:d3:59:3c:ef:b2:4b:b2:76:52:35:45:fa:28:c3:91:ce: b7:84:4d:85:8f:dc:06:8e:2a:04:98:ab:f4:bd:b4:dd:32:18: 9a:18:cd:d4:89:99:73:23:8f:6f:6e:4a:70:4d:42:3c:ea:12: e0:92:e2:2c:b6:70:f5:f0:e8:87:30:b7:7d:09:f7:23:ca:58: 73:50:1e:ba:19:a6:e7:fe:a5:7c:6e:8f:da:91:f3:fd:50:02: 5b:f1:73:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKpHTVwPQlUkSNeONE+cL4nIXeqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNTEyMDMxMTE1NDlaFw0yNTEyMDYxNjEwNDlaMDMxMTAvBgNV BAMTKEY5ODJEQUNFMUREQTk4RDA3OUQ2QzM0MDE5RTBEMjJCNTM0NjBDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbwEH7cyXTW2XVtPY13uxErojX NZphsv3VqDztexHHlCQDjiqArep6cInhSBWXJkumYnLghPRlSyzQU26jFHMGqKE7 jYYo/bsHzuoJsKVWuO0buY04HoDW1UWGwXJ/YNA+HkMoYfj+M30RJEElKPxe6MT+ 0TtIRg6vezugGlCdtQ0w3G1i261AoL5X6bFtUs1hduXS4u+1HEzAdDSHgLvakrS7 RfxiL8aivTomUMGrltWMZeb5Sjug0iuaOLruU0V8enLWh3a1uTSClIGnH253y5ez 2W+outlag0+CJeBdz1FKfZgPJURRA2JY0ZRreUQTdhJZkwJO3RDFrnwk9NpvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+YLazh3amNB51sNAGeDSK1NGDFcwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdbIiE0NAiDluUtOkYk7JSRQgXz6x9ypGOR NOQf01Yu2BLmx7YcAFtozmD/F8E4dVkpfPX1LTG1GGOuYCoCQOXxcNCE9fNKDwhT XHNIm9BiUWIa7eJ1FY+yILmFt3ZW3N6sTK3CqEoRG+X4D8eBL3kTp3AjLYfONVue 6F86hH3zmPQR9xKCjGlJIpcNWzPiela6U5DV2yAGGR/RSrNrkUL9v3+V01k877JL snZSNUX6KMORzreETYWP3AaOKgSYq/S9tN0yGJoYzdSJmXMjj29uSnBNQjzqEuCS 4iy2cPXw6Icwt30J9yPKWHNQHroZpuf+pXxuj9qR8/1QAlvxc8Q= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:19 2025 by rpki-client