This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: m5x4m+LE+QKL5cY+w/ArACRSt1xemzHgoB1DH9i406Q= Subject key identifier: 7F:E1:C0:20:70:DD:B1:3F:31:20:F8:FD:56:EC:1B:1B:49:92:6A:1F Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 3581050FBE9065454CE035C005BAE7B10C27E853 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: AF Signing time: Wed 03 Dec 2025 10:01:10 +0000 Manifest this update: Wed 03 Dec 2025 09:56:10 +0000 Manifest next update: Sat 06 Dec 2025 14:19:10 +0000 Files and hashes: 1: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: uAfxD/7dmobqmPJsUD4w0XlvD3S6fViB5mwT8r6XnxQ=) 2: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:81:05:0f:be:90:65:45:4c:e0:35:c0:05:ba:e7:b1:0c:27:e8:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Dec 3 09:56:10 2025 GMT Not After : Dec 6 14:19:10 2025 GMT Subject: CN=7FE1C02070DDB13F3120F8FD56EC1B1B49926A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:51:92:11:9d:08:95:31:0e:3b:dd:57:23:47: 94:34:86:27:91:d3:90:55:b1:55:52:c1:6b:eb:8e: 74:2d:bf:4c:4d:a2:77:29:d4:72:78:f6:6c:e0:98: d0:03:29:be:4b:f0:1c:35:37:5f:f1:cb:94:eb:c3: 65:65:75:d2:2f:da:3f:0f:0f:1c:56:46:74:8f:af: 4a:01:de:10:75:7d:fc:95:0c:77:ae:03:0e:f8:ac: e2:2b:41:d6:00:0e:8b:36:9f:6a:f2:a5:cf:81:e7: 5e:22:74:f1:93:d0:be:5d:81:fc:3f:13:f4:12:b0: 71:a0:43:78:9f:00:d3:8b:7c:0c:11:bf:3e:72:51: 4b:d6:cc:38:06:d6:06:e6:98:06:5c:ce:33:2a:ee: 38:08:be:4d:4b:9f:11:e4:19:83:bc:25:3d:83:2a: fa:f0:23:bc:04:4e:50:fd:a6:a6:5a:b2:3a:34:4f: 78:47:fd:e5:fd:ad:32:b1:54:97:19:97:35:62:3e: 14:76:7c:55:e8:45:fe:06:81:df:fa:b2:5d:42:07: 3a:ef:ed:35:5e:11:e1:25:02:bd:94:38:18:14:37: ab:54:15:0d:1c:63:49:8e:10:41:ea:46:eb:e5:59: 86:46:89:1a:69:a1:3d:25:f7:57:4d:5e:4f:fe:0b: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E1:C0:20:70:DD:B1:3F:31:20:F8:FD:56:EC:1B:1B:49:92:6A:1F X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fb:d3:70:49:ab:aa:41:17:38:54:14:8a:da:8b:ca:6e:b7: ec:e6:4a:ee:4b:67:20:cd:dc:36:53:2c:26:1c:07:6e:1f:34: cb:40:ce:ed:be:22:89:d5:a4:ff:63:e6:11:67:4e:ca:16:1c: 30:45:89:47:a1:37:e7:45:bf:f5:e6:92:02:a4:b6:92:63:18: 98:90:c3:63:65:a6:52:37:a6:e9:91:c0:f6:bc:e0:69:b4:dd: fe:9e:0a:a9:f7:81:33:57:3a:1e:11:26:ab:f5:ed:04:4c:67: b6:fa:e2:ea:1e:c4:e7:71:63:a2:0c:57:40:63:49:74:47:e1: fd:10:eb:05:ab:50:2c:c4:eb:44:10:9f:51:07:71:ed:0e:9f: 57:25:8b:93:43:05:70:f8:48:5d:5f:56:d7:63:bb:5a:1c:d5: cc:2a:49:f3:ce:c8:9a:e4:78:c8:40:30:cc:64:e8:c4:cf:e0: a0:56:26:95:6b:fb:0a:96:1d:cc:06:aa:67:01:31:81:ef:c8: ab:e6:2a:6a:c5:8e:8d:2d:b3:0b:5b:de:54:95:65:b6:78:27: e8:52:e8:f7:6c:2a:8f:8c:8a:67:7d:de:3b:93:4f:38:7f:9e: f7:83:81:6f:a6:5e:06:86:35:11:d4:de:d0:d0:b8:6e:c3:02: c0:88:ea:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYEFD76QZUVM4DXABbrnsQwn6FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTEyMDMwOTU2MTBaFw0yNTEyMDYxNDE5MTBaMDMxMTAvBgNV BAMTKDdGRTFDMDIwNzBEREIxM0YzMTIwRjhGRDU2RUMxQjFCNDk5MjZBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZUZIRnQiVMQ473VcjR5Q0hieR 05BVsVVSwWvrjnQtv0xNoncp1HJ49mzgmNADKb5L8Bw1N1/xy5Trw2VlddIv2j8P DxxWRnSPr0oB3hB1ffyVDHeuAw74rOIrQdYADos2n2rypc+B514idPGT0L5dgfw/ E/QSsHGgQ3ifANOLfAwRvz5yUUvWzDgG1gbmmAZczjMq7jgIvk1LnxHkGYO8JT2D KvrwI7wETlD9pqZasjo0T3hH/eX9rTKxVJcZlzViPhR2fFXoRf4Ggd/6sl1CBzrv 7TVeEeElAr2UOBgUN6tUFQ0cY0mOEEHqRuvlWYZGiRppoT0l91dNXk/+C8k/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf+HAIHDdsT8xIPj9VuwbG0mSah8wHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEH703BJq6pBFzhUFIrai8put+zmSu5LZyDN 3DZTLCYcB24fNMtAzu2+IonVpP9j5hFnTsoWHDBFiUehN+dFv/XmkgKktpJjGJiQ w2NlplI3pumRwPa84Gm03f6eCqn3gTNXOh4RJqv17QRMZ7b64uoexOdxY6IMV0Bj SXRH4f0Q6wWrUCzE60QQn1EHce0On1cli5NDBXD4SF1fVtdju1oc1cwqSfPOyJrk eMhAMMxk6MTP4KBWJpVr+wqWHcwGqmcBMYHvyKvmKmrFjo0tswtb3lSVZbZ4J+hS 6PdsKo+Mimd93juTTzh/nveDgW+mXgaGNRHU3tDQuG7DAsCI6lo= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:02 2025 by rpki-client