This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: E/AZSWu5zR5qaI2WJybmgk+hev3/6v5Mj2eXgMf+9uE= Subject key identifier: 2B:6C:50:15:10:B1:C2:33:8A:35:18:07:D0:71:1F:5A:06:2F:DA:FC Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 2FA69E88A5B459F3F2E4CEDADF95806A04285A18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 0211 Signing time: Mon 01 Dec 2025 06:11:21 +0000 Manifest this update: Mon 01 Dec 2025 06:06:21 +0000 Manifest next update: Thu 04 Dec 2025 14:08:21 +0000 Files and hashes: 1: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: v6qwjMGct7/FyksVmpUGkeyB67JC7l1sMaVdATDwUPc=) 2: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a6:9e:88:a5:b4:59:f3:f2:e4:ce:da:df:95:80:6a:04:28:5a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Dec 1 06:06:21 2025 GMT Not After : Dec 4 14:08:21 2025 GMT Subject: CN=2B6C501510B1C2338A351807D0711F5A062FDAFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:47:83:bd:38:c8:f5:e5:cb:29:c6:f3:af: f8:09:2a:9d:ad:33:10:b6:b7:d4:17:a9:89:51:78: ac:a5:70:77:0d:ee:d3:74:cb:ab:d7:53:35:b9:41: 4c:70:ef:0d:82:90:95:59:37:3e:42:13:b7:0d:3d: 25:0c:53:11:65:a9:d6:bc:5f:51:ed:74:91:a9:ad: a4:50:7c:44:60:7e:c2:a3:62:5c:2a:d3:12:07:ae: 93:b4:c8:47:60:2e:57:ab:7c:31:11:c2:e4:c1:51: c9:d5:93:e1:51:4e:3f:53:3d:1e:88:80:0d:1a:c6: fd:3d:f6:5d:bd:ba:0c:6e:34:10:0d:f6:6a:e6:04: c2:08:44:39:33:ac:68:57:46:0e:2c:66:d2:65:6d: 64:95:5d:b0:d4:ef:38:d1:a4:bc:d2:de:0f:70:10: 73:e5:cb:7b:7e:0f:7f:88:a6:4d:cd:ac:65:92:97: 2c:27:55:c5:d1:34:a0:b2:2d:28:34:e0:75:d9:b2: 8e:b5:41:62:02:97:53:54:68:56:aa:a9:0c:4e:3b: c0:b1:16:2d:91:5c:25:8d:07:34:0b:bc:58:4f:ab: f2:6f:d1:46:14:b6:85:f0:95:dd:47:df:fe:b5:40: 81:53:71:c1:23:aa:74:4d:7c:36:48:55:9f:af:9e: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6C:50:15:10:B1:C2:33:8A:35:18:07:D0:71:1F:5A:06:2F:DA:FC X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:4d:e8:73:e0:ef:cf:82:bb:a8:79:e8:af:10:ab:0f:71:a8: 52:16:1a:5b:e3:0d:34:f5:18:70:1b:48:f5:f6:f5:c4:24:f6: 9d:e7:d6:85:f5:5a:7f:20:16:f0:37:2d:74:98:53:c8:f2:bd: f5:c5:b4:76:15:64:ef:9d:47:26:45:7f:7c:b7:46:f9:8c:4e: a4:23:ab:3f:dd:4d:e8:c3:2f:28:98:50:88:86:60:fb:e1:72: 61:1e:89:1c:83:9c:ce:64:f8:6a:cf:72:b1:2e:47:29:16:46: 82:74:2d:9a:5f:f0:7d:dd:8c:ed:d5:1a:9b:76:ed:09:1e:2c: c2:57:27:20:95:6c:90:11:ab:ce:ad:da:19:5a:9f:b7:38:14: 7f:63:71:77:31:d2:0c:cc:68:fc:5b:19:a9:06:db:4b:9d:65: fe:bf:bb:4f:c2:13:99:cd:13:e8:3b:13:4f:1d:39:c2:c4:e3: 72:9b:61:90:68:a5:5f:d4:22:15:b1:7f:cf:2b:2e:b6:89:0e: 95:63:da:84:b3:2e:2a:bf:a5:70:20:8b:a8:b8:15:17:68:73: 52:39:0e:d3:e3:d3:3c:10:14:d2:c1:37:98:63:18:65:ab:ac: fe:8e:65:f4:a3:36:13:a4:30:1f:85:db:e5:2e:f6:3f:b8:6d: f4:81:68:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6aeiKW0WfPy5M7a35WAagQoWhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNTEyMDEwNjA2MjFaFw0yNTEyMDQxNDA4MjFaMDMxMTAvBgNV BAMTKDJCNkM1MDE1MTBCMUMyMzM4QTM1MTgwN0QwNzExRjVBMDYyRkRBRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81UeDvTjI9eXLKcbzr/gJKp2t MxC2t9QXqYlReKylcHcN7tN0y6vXUzW5QUxw7w2CkJVZNz5CE7cNPSUMUxFlqda8 X1HtdJGpraRQfERgfsKjYlwq0xIHrpO0yEdgLlerfDERwuTBUcnVk+FRTj9TPR6I gA0axv099l29ugxuNBAN9mrmBMIIRDkzrGhXRg4sZtJlbWSVXbDU7zjRpLzS3g9w EHPly3t+D3+Ipk3NrGWSlywnVcXRNKCyLSg04HXZso61QWICl1NUaFaqqQxOO8Cx Fi2RXCWNBzQLvFhPq/Jv0UYUtoXwld1H3/61QIFTccEjqnRNfDZIVZ+vnrFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2xQFRCxwjOKNRgH0HEfWgYv2vwwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5N6HPg78+Cu6h56K8Qqw9xqFIWGlvjDTT1 GHAbSPX29cQk9p3n1oX1Wn8gFvA3LXSYU8jyvfXFtHYVZO+dRyZFf3y3RvmMTqQj qz/dTejDLyiYUIiGYPvhcmEeiRyDnM5k+GrPcrEuRykWRoJ0LZpf8H3djO3VGpt2 7QkeLMJXJyCVbJARq86t2hlan7c4FH9jcXcx0gzMaPxbGakG20udZf6/u0/CE5nN E+g7E08dOcLE43KbYZBopV/UIhWxf88rLraJDpVj2oSzLiq/pXAgi6i4FRdoc1I5 DtPj0zwQFNLBN5hjGGWrrP6OZfSjNhOkMB+F2+Uu9j+4bfSBaDk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:51 2025 by rpki-client