This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json) Hash identifier: 93diLra3ruqe89vRIqu2OHy4UqWqs5wSG+xHjvKU9Pc= Subject key identifier: 8F:C6:65:06:3A:05:61:95:66:38:28:02:29:12:15:15:C0:03:0E:F8 Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Certificate serial: 716A0CF3181CEFDA5DF3400E406D29932DE20A01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft Manifest number: 01D3 Signing time: Wed 03 Dec 2025 06:30:00 +0000 Manifest this update: Wed 03 Dec 2025 06:25:00 +0000 Manifest next update: Sat 06 Dec 2025 14:15:00 +0000 Files and hashes: 1: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: Snp5JNMvU8/ooyWYvByec6pF+TRgdsI98kWoKwAsrdw=) 2: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: N0/JO0oaR76f4qC9rQwj7j3uUoZjxf567pjSkSVvNG0=) 3: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: 7LSMPL8vBB3tryB4W9V+LqRs1lcp8JLOw5O4E5oOPZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6a:0c:f3:18:1c:ef:da:5d:f3:40:0e:40:6d:29:93:2d:e2:0a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Validity Not Before: Dec 3 06:25:00 2025 GMT Not After : Dec 6 14:15:00 2025 GMT Subject: CN=8FC665063A0561956638280229121515C0030EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:83:6c:fd:bf:e2:e2:0b:6a:89:89:81:7f: f4:68:33:7e:f4:26:1a:af:bf:7e:2a:48:a4:a1:1d: d8:ee:03:7b:ba:25:05:51:34:8a:d0:a3:fd:04:4e: 11:4d:a2:30:87:da:27:da:e1:f8:77:e4:a7:14:ec: db:cc:64:79:43:86:53:77:6f:68:cc:db:11:19:f5: 90:59:c1:cb:d8:8b:c3:c5:1d:4f:c0:67:b0:ef:a6: 32:c9:bb:c9:66:f0:97:56:b5:db:b6:f0:92:56:e8: e5:93:2e:cc:83:c3:10:19:e6:de:12:c6:5e:77:f7: 1d:ec:d7:2f:1d:15:49:0a:0a:e9:30:2a:05:4b:33: 4a:46:30:61:2c:20:68:95:59:2a:69:18:ce:4c:e3: 08:5e:8b:a9:c6:ed:78:9d:21:6d:3a:2e:3d:14:a6: 4b:52:cc:fd:45:12:a2:56:54:b4:4c:c6:56:46:eb: a0:e9:74:49:46:b6:6d:7e:e5:28:1b:6a:62:d7:95: 68:68:2a:8a:2c:f7:df:c7:63:d5:c8:c6:7f:8b:58: 92:f2:cd:78:12:dc:69:4e:bd:d1:aa:11:a0:a7:f1: 5c:37:04:98:c0:18:a5:b6:bf:b2:de:21:41:76:b7: b0:5f:08:9a:95:d4:3d:56:64:5a:01:12:90:54:34: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C6:65:06:3A:05:61:95:66:38:28:02:29:12:15:15:C0:03:0E:F8 X509v3 Authority Key Identifier: keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6d:1f:98:2e:28:0a:e9:e6:d7:e6:2a:3a:e5:5c:65:91:d5: 1a:8d:e6:b9:bf:c7:a7:21:84:d9:52:93:ae:d4:0e:0e:2b:da: 5f:06:a3:f3:2c:49:17:b3:7e:39:08:d1:ab:93:61:d7:37:ff: 37:7a:60:bc:1d:04:47:0a:c9:d4:c4:20:8e:04:a7:e3:6f:2b: 47:66:9a:22:ee:f3:80:43:35:11:78:ec:e4:f1:d9:a5:31:20: 7c:2e:dd:01:47:ac:fd:6d:dc:02:8d:58:0b:fd:c3:37:8a:9e: af:6f:3f:ce:8c:14:14:c2:37:c8:3f:0c:c7:11:0e:51:ca:43: 5c:8b:c0:22:de:bc:0c:e0:ce:da:e5:01:49:bb:71:7b:10:b4: a2:ea:86:b7:c8:b3:94:a4:6a:72:6a:f3:97:19:43:f3:85:8d: 89:50:52:a2:c0:54:a1:72:0a:9a:67:7c:00:dd:4b:fd:65:b4: f9:bb:9f:02:e4:8c:fa:84:17:2d:ec:c1:d3:94:33:d4:c6:d9: fa:f6:1b:47:a0:ef:b0:16:38:f4:eb:ab:61:ea:76:42:0d:2c: f3:11:c2:80:2c:97:b5:88:b9:58:4a:ae:7e:78:36:ed:62:50: b2:6a:9a:21:cc:cd:55:d8:f8:83:28:cf:bc:f3:39:c4:fa:9c: 7b:09:b8:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWoM8xgc79pd80AOQG0pky3iCgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJC Q0NGOTFFQTAeFw0yNTEyMDMwNjI1MDBaFw0yNTEyMDYxNDE1MDBaMDMxMTAvBgNV BAMTKDhGQzY2NTA2M0EwNTYxOTU2NjM4MjgwMjI5MTIxNTE1QzAwMzBFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ToNs/b/i4gtqiYmBf/RoM370 Jhqvv34qSKShHdjuA3u6JQVRNIrQo/0EThFNojCH2ifa4fh35KcU7NvMZHlDhlN3 b2jM2xEZ9ZBZwcvYi8PFHU/AZ7DvpjLJu8lm8JdWtdu28JJW6OWTLsyDwxAZ5t4S xl539x3s1y8dFUkKCukwKgVLM0pGMGEsIGiVWSppGM5M4whei6nG7XidIW06Lj0U pktSzP1FEqJWVLRMxlZG66DpdElGtm1+5SgbamLXlWhoKoos99/HY9XIxn+LWJLy zXgS3GlOvdGqEaCn8Vw3BJjAGKW2v7LeIUF2t7BfCJqV1D1WZFoBEpBUNNQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8ZlBjoFYZVmOCgCKRIVFcADDvgwHwYDVR0j BBgwFoAU0XW9xaZBTOurRy35FZy9MrzPkeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjJkNGQ3NC02Mjk1LTQ0OTYtODIzYS0xZThhM2Q1YmJiNmMvMC9EMTc1QkRDNUE2 NDE0Q0VCQUI0NzJERjkxNTlDQkQzMkJDQ0Y5MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJCQ0NG OTFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JE MzJCQ0NGOTFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAptH5guKArp5tfmKjrlXGWR1RqN5rm/x6ch hNlSk67UDg4r2l8Go/MsSRezfjkI0auTYdc3/zd6YLwdBEcKydTEII4Ep+NvK0dm miLu84BDNRF47OTx2aUxIHwu3QFHrP1t3AKNWAv9wzeKnq9vP86MFBTCN8g/DMcR DlHKQ1yLwCLevAzgztrlAUm7cXsQtKLqhrfIs5SkanJq85cZQ/OFjYlQUqLAVKFy CppnfADdS/1ltPm7nwLkjPqEFy3swdOUM9TG2fr2G0eg77AWOPTrq2HqdkINLPMR woAsl7WIuVhKrn54Nu1iULJqmiHMzVXY+IMoz7zzOcT6nHsJuKk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:55 2025 by rpki-client