This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: 4GhFSL7GPWeH7ScG0i1GYij/RgazBP5d6M6SPcHLsUg= Subject key identifier: 60:3C:AA:7F:8F:A8:62:97:5E:97:59:A4:64:33:31:28:26:D1:BB:FA Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 673B949C91E36CE645307DE6A4C5B03382E7EB30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: FD Signing time: Mon 01 Dec 2025 12:21:18 +0000 Manifest this update: Mon 01 Dec 2025 12:16:18 +0000 Manifest next update: Thu 04 Dec 2025 18:29:18 +0000 Files and hashes: 1: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: Y8n1ea7A5pI/7DRQfnlsTAQqnaBycDMeWMkmzh35nhw=) 2: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) 3: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) 4: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3b:94:9c:91:e3:6c:e6:45:30:7d:e6:a4:c5:b0:33:82:e7:eb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Dec 1 12:16:18 2025 GMT Not After : Dec 4 18:29:18 2025 GMT Subject: CN=603CAA7F8FA862975E9759A46433312826D1BBFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:27:bf:21:3b:87:8c:2d:53:fe:12:4e:32: 8b:c2:e9:70:8f:26:d0:b3:df:2d:a3:64:5c:79:dc: e7:74:a7:1f:f0:8c:7d:10:36:9a:eb:0a:39:ad:41: c6:10:08:51:3b:ca:fd:fc:c4:17:4c:52:ce:4c:b9: 06:ba:2f:f8:7a:d5:cf:50:e3:e1:c1:13:60:62:52: 63:22:57:74:d8:38:46:7c:be:ec:9b:9f:3c:ec:52: 76:ad:e9:54:ec:bf:d4:8a:6b:af:9b:62:47:e4:01: f2:24:3a:fd:3e:8b:cb:d2:23:94:1b:c3:73:cd:a6: 4f:76:24:a1:88:ee:98:31:ae:95:c3:6a:5f:ee:04: 82:dd:73:87:aa:88:60:7e:55:c6:36:ba:f4:7c:3d: 9b:86:be:c0:db:73:a4:f2:01:70:e4:06:54:c6:d1: ba:92:5b:a0:ef:88:a1:13:7e:09:40:5b:00:32:52: 5c:0a:97:35:4b:2f:26:f2:d9:4a:75:4b:d1:ee:2c: 1d:7c:86:62:de:17:f4:2d:7f:2e:2b:e4:59:56:33: 5f:c2:e5:cc:c6:f7:5a:b0:1e:e4:ef:a7:85:23:33: 91:85:88:49:6a:e2:00:cc:ad:a3:4d:9b:81:d2:05: 60:a9:21:d9:a5:a4:e6:9b:22:10:17:44:f5:2c:50: 81:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3C:AA:7F:8F:A8:62:97:5E:97:59:A4:64:33:31:28:26:D1:BB:FA X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6d:e6:73:d1:28:f6:b5:19:a0:fb:aa:01:99:4f:da:87:f4: 9e:e8:ac:95:db:62:81:83:4f:92:e6:91:3b:d4:2c:b9:19:7c: 5f:56:62:3f:59:50:46:e7:78:b3:1a:8b:b5:44:38:b3:a5:d6: 9a:89:83:f2:10:1d:bc:2b:cf:a3:36:54:75:f3:a1:0c:49:2e: 3e:81:3f:1e:32:81:60:dc:63:3c:ef:4c:e0:54:a1:ed:7a:63: 7f:06:4b:6c:9d:39:40:0a:1b:fb:2c:8d:0d:de:3d:4f:ca:a0: 46:c4:1b:60:b7:77:8d:a4:14:e2:73:09:59:68:f6:2f:23:25: d5:59:53:d4:4e:24:dc:6c:e1:ca:c5:64:ce:1d:f4:c1:43:3f: 4e:d2:90:a6:c4:22:ff:b3:fe:0b:f9:ab:5b:5e:5c:a4:a0:b0: 3e:07:69:6e:5b:f4:75:2e:6e:87:d6:25:4a:a0:9a:bf:98:52: 29:1d:48:44:83:5d:95:d8:e4:fa:be:2f:9f:a1:b3:5a:77:f0: b8:ac:f5:ff:de:e8:9d:0e:02:a2:f9:e8:3a:4b:51:8e:cb:70: ab:28:2a:a7:ce:3c:7d:38:23:e1:ad:74:82:3e:a9:3d:22:b9: 4e:7d:58:3c:89:5b:09:92:56:5a:84:f9:e7:03:db:2d:29:d5: 5f:20:e3:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZzuUnJHjbOZFMH3mpMWwM4Ln6zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNTEyMDExMjE2MThaFw0yNTEyMDQxODI5MThaMDMxMTAvBgNV BAMTKDYwM0NBQTdGOEZBODYyOTc1RTk3NTlBNDY0MzMzMTI4MjZEMUJCRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5ye/ITuHjC1T/hJOMovC6XCP JtCz3y2jZFx53Od0px/wjH0QNprrCjmtQcYQCFE7yv38xBdMUs5MuQa6L/h61c9Q 4+HBE2BiUmMiV3TYOEZ8vuybnzzsUnat6VTsv9SKa6+bYkfkAfIkOv0+i8vSI5Qb w3PNpk92JKGI7pgxrpXDal/uBILdc4eqiGB+VcY2uvR8PZuGvsDbc6TyAXDkBlTG 0bqSW6DviKETfglAWwAyUlwKlzVLLyby2Up1S9HuLB18hmLeF/Qtfy4r5FlWM1/C 5czG91qwHuTvp4UjM5GFiElq4gDMraNNm4HSBWCpIdmlpOabIhAXRPUsUIETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYDyqf4+oYpdel1mkZDMxKCbRu/owHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNt5nPRKPa1GaD7qgGZT9qH9J7orJXbYoGD T5LmkTvULLkZfF9WYj9ZUEbneLMai7VEOLOl1pqJg/IQHbwrz6M2VHXzoQxJLj6B Px4ygWDcYzzvTOBUoe16Y38GS2ydOUAKG/ssjQ3ePU/KoEbEG2C3d42kFOJzCVlo 9i8jJdVZU9ROJNxs4crFZM4d9MFDP07SkKbEIv+z/gv5q1teXKSgsD4HaW5b9HUu bofWJUqgmr+YUikdSESDXZXY5Pq+L5+hs1p38Lis9f/e6J0OAqL56DpLUY7LcKso KqfOPH04I+GtdII+qT0iuU59WDyJWwmSVlqE+ecD2y0p1V8g4zs= -----END CERTIFICATE-----Generated at Wed Dec 3 17:37:01 2025 by rpki-client