This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft File: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft (raw, json) Hash identifier: 8o8F9QmDXh/Cpe91e3UDLW3oXVJDlQDZBLlK3U3eZr4= Subject key identifier: BF:8F:59:8A:35:85:53:A5:8A:E7:4F:C1:F4:E4:71:C6:75:5E:77:C0 Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F Certificate issuer: /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Certificate serial: 57A2DE7F31C24698E1E7CA423CEE79DD69CC6E8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft Manifest number: 0542 Signing time: Mon 15 Dec 2025 17:21:24 +0000 Manifest this update: Mon 15 Dec 2025 17:16:24 +0000 Manifest next update: Thu 18 Dec 2025 23:21:24 +0000 Files and hashes: 1: 3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (hash: OjdsG/TdDn+RUWERJayMK04SkHQ7zRmm5hb518X40Eo=) 2: 3130332e3231392e3234382e302f32322d3234203d3e20313335343434.roa (hash: lX6yK5ZXngZW7ELU3wR8WQZxB1PZNhMXdAdxnRkfpzY=) 3: 3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (hash: Gss2BFwCvkYMrYmTDPR8XZwGfdbzMzVTFBRvuPZp/uA=) 4: 3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (hash: lz/aRA5xwGbvGMSgXL70n8EEkKYV5RNTgznI5gnec7Q=) 5: D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl (hash: 546g7l9idUxWGaFvp/tRtbb7D47+LXxd5Yr8UaFro60=) 6: 3130332e3233352e37342e302f32342d3234203d3e20313431313230.roa (hash: e9uiS3KNGlZ+EQjSXY4m6NwJ9lRr8aifmafZU96mQ7k=) 7: 323030313a6466323a356130303a3a2f34382d3438203d3e20313335343434.roa (hash: TiFQ5+3RDDZw3hEMovau4FHuHmfphOknHBNZEgIPquo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 23:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a2:de:7f:31:c2:46:98:e1:e7:ca:42:3c:ee:79:dd:69:cc:6e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F Validity Not Before: Dec 15 17:16:24 2025 GMT Not After : Dec 18 23:21:24 2025 GMT Subject: CN=BF8F598A358553A58AE74FC1F4E471C6755E77C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:f6:84:93:f0:91:8e:1d:29:fb:6c:c9:88: 4b:2b:f1:d6:c3:a7:47:18:64:90:b0:8a:03:28:ae: 86:93:04:97:54:2a:97:c1:60:85:8f:33:15:18:0f: 19:be:19:a6:15:60:33:8f:5d:fe:74:43:96:dc:1f: 9f:cd:07:b3:5a:ec:ac:5c:03:dd:7f:4c:3e:a4:c2: 6d:f3:13:9f:9a:c4:6a:3f:de:67:0a:ef:5c:c7:8a: d0:14:19:5d:92:89:b4:bf:10:30:0b:2f:81:42:ae: 6f:f8:8a:02:3d:2e:1e:18:9d:61:38:e6:d8:e4:60: bd:c5:15:9b:dd:79:f0:e8:e0:b0:76:1f:17:ba:46: 4b:88:7e:79:1f:5d:f1:71:75:a4:bb:5b:70:78:80: 08:f6:fa:46:f6:11:11:c5:9a:cd:59:a5:6c:d0:36: 92:a7:25:b0:dd:a4:8d:78:c3:a2:ac:a7:3c:96:19: 67:28:93:a8:2d:2a:9b:7a:69:e9:72:53:c6:e6:a7: 3c:27:ac:93:5f:91:ce:35:0e:57:db:e6:dc:65:59: 32:45:ed:39:d9:e3:c5:ae:ea:6b:76:00:14:ee:6c: 52:1c:97:7f:3b:2e:61:c9:aa:64:fa:1e:b3:1d:0d: 36:3b:c7:55:41:92:ed:a6:38:7c:f0:fe:52:b8:8b: 05:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8F:59:8A:35:85:53:A5:8A:E7:4F:C1:F4:E4:71:C6:75:5E:77:C0 X509v3 Authority Key Identifier: keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:02:cf:bb:7d:16:74:3c:52:b1:93:ee:14:45:e5:b8:ed:17: 04:82:11:86:79:cf:25:20:c7:43:b9:63:b2:50:20:4b:6a:90: 2f:12:ae:24:92:09:a0:0b:a9:8c:c3:60:1e:56:26:7d:18:ad: b6:62:40:77:74:f7:4e:3f:b7:1d:76:55:2d:4f:11:64:23:bf: b3:43:3c:17:36:bf:5c:b8:e9:1b:9c:25:5c:f3:5c:cf:79:60: db:8f:9d:99:41:d7:43:c5:9d:0d:46:fc:10:4a:ec:a4:b1:80: 03:d4:2b:0b:0c:de:03:eb:6a:68:dc:87:f1:f5:99:9a:e9:e4: 2c:eb:39:c0:73:d5:0c:18:08:02:3a:f4:9c:a8:c3:a6:c2:04: 80:2c:68:12:11:fe:07:e6:12:cf:d1:4b:38:fd:a7:f0:c5:c3: 84:8e:d8:fc:c7:e4:ef:05:50:7b:e4:0e:d1:b5:5f:62:2d:6d: b1:90:2c:64:7c:d7:dc:0a:9a:66:d2:fd:d2:03:f6:9b:6e:5c: 53:2e:ae:ee:2b:3e:c6:a6:13:e9:ff:f2:23:1c:ba:85:c5:f3: 40:fa:85:f4:03:db:30:19:f8:93:7b:bb:5b:b1:92:bf:0d:a1: 57:fc:f7:09:f9:7e:e1:32:ce:33:45:02:60:7d:91:6b:3a:db: dd:be:db:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6LefzHCRpjh58pCPO553WnMbowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4 NkNGNTgyRjAeFw0yNTEyMTUxNzE2MjRaFw0yNTEyMTgyMzIxMjRaMDMxMTAvBgNV BAMTKEJGOEY1OThBMzU4NTUzQTU4QUU3NEZDMUY0RTQ3MUM2NzU1RTc3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpvaEk/CRjh0p+2zJiEsr8dbD p0cYZJCwigMoroaTBJdUKpfBYIWPMxUYDxm+GaYVYDOPXf50Q5bcH5/NB7Na7Kxc A91/TD6kwm3zE5+axGo/3mcK71zHitAUGV2SibS/EDALL4FCrm/4igI9Lh4YnWE4 5tjkYL3FFZvdefDo4LB2Hxe6RkuIfnkfXfFxdaS7W3B4gAj2+kb2ERHFms1ZpWzQ NpKnJbDdpI14w6KspzyWGWcok6gtKpt6aelyU8bmpzwnrJNfkc41Dlfb5txlWTJF 7TnZ48Wu6mt2ABTubFIcl387LmHJqmT6HrMdDTY7x1VBku2mOHzw/lK4iwXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv49ZijWFU6WK50/B9ORxxnVed8AwHwYDVR0j BBgwFoAU2c1AR0vdDAcHdmztuvC2oYbPWC8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MWE3N2FkZC1hNDlhLTRjOGYtYTczNS1lZjk2YzMzYWIyOWYvMC9EOUNENDA0NzRC REQwQzA3MDc3NjZDRURCQUYwQjZBMTg2Q0Y1ODJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2QTE4NkNG NTgyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjFhNzdhZGQtYTQ5YS00YzhmLWE3 MzUtZWY5NmMzM2FiMjlmLzAvRDlDRDQwNDc0QkREMEMwNzA3NzY2Q0VEQkFGMEI2 QTE4NkNGNTgyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEICz7t9FnQ8UrGT7hRF5bjtFwSCEYZ5zyUg x0O5Y7JQIEtqkC8SriSSCaALqYzDYB5WJn0YrbZiQHd0904/tx12VS1PEWQjv7ND PBc2v1y46RucJVzzXM95YNuPnZlB10PFnQ1G/BBK7KSxgAPUKwsM3gPramjch/H1 mZrp5CzrOcBz1QwYCAI69Jyow6bCBIAsaBIR/gfmEs/RSzj9p/DFw4SO2PzH5O8F UHvkDtG1X2ItbbGQLGR819wKmmbS/dID9ptuXFMuru4rPsamE+n/8iMcuoXF80D6 hfQD2zAZ+JN7u1uxkr8NoVf89wn5fuEyzjNFAmB9kWs6292+22E= -----END CERTIFICATE-----Generated at Tue Dec 16 13:50:26 2025 by rpki-client