This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft File: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft (raw, json) Hash identifier: csROA2j3vuQnQqkLJUR5Ml/0YDvAFZtKxUMrvlCcbJY= Subject key identifier: D7:DE:A1:5B:E9:A8:07:95:E8:C9:22:24:6B:8B:36:90:6F:01:1B:C7 Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 Certificate issuer: /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Certificate serial: 7C7FED32EF82F1F5A5A89F55CD72A5E7F3049592 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft Manifest number: 0533 Signing time: Sun 14 Dec 2025 21:51:12 +0000 Manifest this update: Sun 14 Dec 2025 21:46:12 +0000 Manifest next update: Wed 17 Dec 2025 22:57:12 +0000 Files and hashes: 1: 323030313a6466323a626530303a3a2f34382d3438203d3e20313335343537.roa (hash: Y9NxdO2uUmExgp5HT4f9RxRPtt01n/EQdy4OmAOBACk=) 2: 3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (hash: ljnKYF4WQqtb0yfOcUdymtJM6+GnXJyNyFLsK7GZ494=) 3: 4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl (hash: DLeK86xY5S+0TKHaZWiNfc7rlO2vdeV2y8DwwSP3eGs=) 4: 34352e3132302e3234342e302f32322d3234203d3e20313335343537.roa (hash: PuA0O7on+Tv+yi4m5sFC8JVnpsZv77062xaCNSQ10PY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 08:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7f:ed:32:ef:82:f1:f5:a5:a8:9f:55:cd:72:a5:e7:f3:04:95:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2 Validity Not Before: Dec 14 21:46:12 2025 GMT Not After : Dec 17 22:57:12 2025 GMT Subject: CN=D7DEA15BE9A80795E8C922246B8B36906F011BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:e1:b9:89:c7:6b:f0:2b:43:09:04:fc:10: 67:19:52:b3:45:76:d3:6d:f2:74:c2:8b:8e:ff:91: 6b:04:1b:e4:16:5b:fc:d1:a9:a8:96:7c:9b:9f:05: 42:4c:95:eb:48:af:d8:05:2b:c0:62:16:75:05:d8: 5c:b4:03:88:22:f7:3c:1c:b0:7d:f7:5e:1d:41:02: 09:86:a7:9b:ed:93:08:c1:3d:c3:8c:ab:20:b3:c0: 03:43:d0:f8:3c:17:ac:4c:3f:32:3d:96:c0:98:84: 0b:11:e0:f1:c6:b0:75:48:a6:b3:c2:d4:38:48:0a: ae:fd:d3:ed:97:6d:e7:fb:68:70:be:27:6f:d0:bf: 28:a7:88:b0:80:4c:20:34:f1:2f:87:f4:bc:cb:8f: ca:ab:fa:c5:19:45:b0:8e:0d:bf:83:28:4c:24:36: 04:b6:a1:f1:07:03:13:87:b9:2f:9e:6c:20:30:fe: fe:e6:b4:a8:1e:eb:17:1e:b3:54:57:62:1a:10:32: 2e:38:02:f7:3d:0e:36:13:4d:5b:42:ca:49:5a:d1: c8:c3:85:f7:b2:c7:6b:f7:3b:c5:86:9e:3b:b8:eb: 80:14:14:37:1b:23:94:fd:81:18:6e:45:46:0a:43: 5e:3d:af:1e:9f:e5:71:9f:cd:0d:cc:ea:61:54:aa: 6a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DE:A1:5B:E9:A8:07:95:E8:C9:22:24:6B:8B:36:90:6F:01:1B:C7 X509v3 Authority Key Identifier: keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:af:09:1a:21:b5:da:14:4b:3f:da:39:6f:f9:f2:24:55:bc: 11:72:63:79:c6:18:21:27:34:6e:fe:b4:65:75:16:ab:e9:8a: ee:8d:43:d6:97:3f:42:21:4f:e1:3f:fe:f5:37:3a:87:b8:0f: b6:36:e8:18:af:a5:b3:24:fe:80:6e:cf:21:80:ca:7b:77:71: 46:dd:73:07:37:0c:d4:0e:a8:59:37:81:34:a6:a7:4c:0b:20: 7c:8f:b2:b1:3b:a8:03:8c:09:76:a8:b9:40:cf:78:9d:3c:71: 94:a0:13:54:fa:49:8e:ed:6c:af:78:c7:65:44:c8:f6:e9:af: a7:96:5f:fe:ef:84:02:b0:60:1b:8d:26:bf:10:a3:6c:b7:95: 46:5a:2f:1c:62:75:1c:69:9d:a5:0d:a7:48:79:e9:fb:ff:23: b4:34:76:89:fa:54:5a:7f:91:4d:68:04:cc:a1:9d:d9:d5:f8: 51:8b:4a:c8:18:1a:97:fb:5b:f1:e1:bf:7b:2c:9a:ff:8b:8c: f8:39:89:79:bf:81:a4:6f:ef:ae:83:4c:3f:0d:7b:e7:6f:c7: c7:7f:41:7b:cc:60:4c:c4:ea:c4:24:39:38:21:76:58:2a:0a: 92:b7:ee:17:31:d1:a3:e7:ab:99:0d:73:a7:49:c7:9b:19:9b: cb:4b:f1:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfH/tMu+C8fWlqJ9VzXKl5/MElZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE MERDMTdGMjAeFw0yNTEyMTQyMTQ2MTJaFw0yNTEyMTcyMjU3MTJaMDMxMTAvBgNV BAMTKEQ3REVBMTVCRTlBODA3OTVFOEM5MjIyNDZCOEIzNjkwNkYwMTFCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/OG5icdr8CtDCQT8EGcZUrNF dtNt8nTCi47/kWsEG+QWW/zRqaiWfJufBUJMletIr9gFK8BiFnUF2Fy0A4gi9zwc sH33Xh1BAgmGp5vtkwjBPcOMqyCzwAND0Pg8F6xMPzI9lsCYhAsR4PHGsHVIprPC 1DhICq790+2Xbef7aHC+J2/QvyiniLCATCA08S+H9LzLj8qr+sUZRbCODb+DKEwk NgS2ofEHAxOHuS+ebCAw/v7mtKge6xces1RXYhoQMi44Avc9DjYTTVtCykla0cjD hfeyx2v3O8WGnju464AUFDcbI5T9gRhuRUYKQ149rx6f5XGfzQ3M6mFUqmrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU196hW+moB5XoySIka4s2kG8BG8cwHwYDVR0j BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD MTdGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI3ODBmODUtZWYyZi00Y2Y4LWE0 YjgtNTIyNWM0NWI5NmExLzAvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBF MUREMERDMTdGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWvCRohtdoUSz/aOW/58iRVvBFyY3nGGCEn NG7+tGV1Fqvpiu6NQ9aXP0IhT+E//vU3Ooe4D7Y26BivpbMk/oBuzyGAynt3cUbd cwc3DNQOqFk3gTSmp0wLIHyPsrE7qAOMCXaouUDPeJ08cZSgE1T6SY7tbK94x2VE yPbpr6eWX/7vhAKwYBuNJr8Qo2y3lUZaLxxidRxpnaUNp0h56fv/I7Q0don6VFp/ kU1oBMyhndnV+FGLSsgYGpf7W/Hhv3ssmv+LjPg5iXm/gaRv766DTD8Ne+dvx8d/ QXvMYEzE6sQkOTghdlgqCpK37hcx0aPnq5kNc6dJx5sZm8tL8dQ= -----END CERTIFICATE-----Generated at Mon Dec 15 01:35:22 2025 by rpki-client