This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: RM52RGT00xYsHCbj+fZYM4okUVQJ80p6fg2bAXmluP0= Subject key identifier: 70:0E:02:C1:B2:31:47:CC:BA:C7:8B:23:52:30:80:A4:5C:91:3D:F0 Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 360E4D7CE7AB89A10D312F256BEE49092CBCCBE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 04F5 Signing time: Tue 02 Dec 2025 17:31:18 +0000 Manifest this update: Tue 02 Dec 2025 17:26:18 +0000 Manifest next update: Sat 06 Dec 2025 04:18:18 +0000 Files and hashes: 1: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=) 2: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=) 3: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=) 4: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: 5wMLaqRtjajFJFUEOS8ZYD+ettIRvOAUgd0xYJpjhSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0e:4d:7c:e7:ab:89:a1:0d:31:2f:25:6b:ee:49:09:2c:bc:cb:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Dec 2 17:26:18 2025 GMT Not After : Dec 6 04:18:18 2025 GMT Subject: CN=700E02C1B23147CCBAC78B23523080A45C913DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:91:8a:9f:8d:ca:18:77:3b:3c:88:5a:8b:cf: 72:55:d0:f6:d3:82:85:8e:8f:67:00:55:9c:16:47: e3:e9:9c:83:66:4c:53:3c:6b:d6:e5:f4:eb:8a:6c: 26:9d:bf:c1:c7:bc:a4:44:9a:bf:74:04:fc:8f:4c: 78:e5:5d:4f:f5:08:ca:bf:dc:83:7c:91:68:9a:93: 53:54:d4:42:4b:de:2c:30:a4:1f:66:0c:07:24:4d: 87:83:7b:11:29:2f:8b:23:9e:36:19:61:8b:d0:43: 5f:1d:b5:23:f5:ab:14:dd:5b:10:8d:c4:f2:11:5b: 1b:8f:8a:96:bd:cb:6d:ea:9c:9a:57:19:b3:18:ec: 56:d9:24:27:27:63:72:08:ea:ed:1d:81:fb:42:d4: 90:20:60:04:7c:d8:6c:5d:01:1c:8c:f5:89:e3:6d: 25:06:b5:fe:22:df:83:75:1d:6e:f5:50:ba:90:cb: c7:43:f2:08:ac:2f:13:c3:86:0b:f2:13:00:2d:44: 85:e5:57:e2:bf:45:fe:e6:2f:ee:45:d9:66:0f:fa: c0:0e:ad:b0:da:1c:d8:96:5f:4a:ff:79:c0:0a:2f: 6a:35:72:9d:6f:d3:8a:5b:b4:c4:97:b8:40:d5:83: b4:46:f9:84:8a:62:e1:c0:ab:00:83:80:c1:6a:58: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0E:02:C1:B2:31:47:CC:BA:C7:8B:23:52:30:80:A4:5C:91:3D:F0 X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:04:e6:6f:1d:00:3f:ba:af:71:b7:11:e6:3d:6a:69:79:ba: 84:a7:09:99:5b:79:b3:dc:92:b0:7e:76:7e:58:da:2e:a7:7d: b7:95:01:6d:bc:3f:33:ca:4c:88:ba:76:a0:bc:9f:08:b2:73: 20:55:1b:d3:8d:a8:9a:b5:e4:d3:45:35:e5:8f:c5:6e:97:cc: de:f9:2c:f8:13:a1:28:f8:34:65:47:01:4a:f3:9a:c6:d3:2f: d9:7b:f7:80:ba:1a:a3:c7:13:60:3d:17:c0:da:20:78:7e:de: 3c:1c:3a:30:22:3c:40:bc:2f:bb:3f:7a:d0:7b:43:79:d8:3e: ee:0e:46:17:ff:44:d6:40:f9:e4:54:6c:b5:2f:c1:dd:51:29: 05:ca:04:9a:3a:e4:fa:5c:7b:5b:6c:b4:bd:80:ce:99:cf:f4: f9:fb:26:61:0a:95:0c:01:e9:22:e9:c0:99:7f:22:59:81:40: 72:bc:e5:d7:8a:6c:4e:a9:79:71:18:f5:08:f4:66:7c:a6:ff: c0:a2:fc:4f:a1:39:48:55:c0:3d:95:01:eb:7e:a2:86:76:e2: ec:ef:a1:90:f1:1b:9c:db:10:ce:f9:70:0f:3e:7a:5e:2f:1c: bd:de:96:78:8b:d7:b5:03:84:2a:5b:3d:52:1e:79:06:13:ab: a2:3f:31:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNg5NfOeriaENMS8la+5JCSy8y+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTEyMDIxNzI2MThaFw0yNTEyMDYwNDE4MThaMDMxMTAvBgNV BAMTKDcwMEUwMkMxQjIzMTQ3Q0NCQUM3OEIyMzUyMzA4MEE0NUM5MTNERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSkYqfjcoYdzs8iFqLz3JV0PbT goWOj2cAVZwWR+PpnINmTFM8a9bl9OuKbCadv8HHvKREmr90BPyPTHjlXU/1CMq/ 3IN8kWiak1NU1EJL3iwwpB9mDAckTYeDexEpL4sjnjYZYYvQQ18dtSP1qxTdWxCN xPIRWxuPipa9y23qnJpXGbMY7FbZJCcnY3II6u0dgftC1JAgYAR82GxdARyM9Ynj bSUGtf4i34N1HW71ULqQy8dD8gisLxPDhgvyEwAtRIXlV+K/Rf7mL+5F2WYP+sAO rbDaHNiWX0r/ecAKL2o1cp1v04pbtMSXuEDVg7RG+YSKYuHAqwCDgMFqWJRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcA4CwbIxR8y6x4sjUjCApFyRPfAwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQE5m8dAD+6r3G3EeY9aml5uoSnCZlbebPc krB+dn5Y2i6nfbeVAW28PzPKTIi6dqC8nwiycyBVG9ONqJq15NNFNeWPxW6XzN75 LPgToSj4NGVHAUrzmsbTL9l794C6GqPHE2A9F8DaIHh+3jwcOjAiPEC8L7s/etB7 Q3nYPu4ORhf/RNZA+eRUbLUvwd1RKQXKBJo65Ppce1tstL2AzpnP9Pn7JmEKlQwB 6SLpwJl/IlmBQHK85deKbE6peXEY9Qj0Znym/8Ci/E+hOUhVwD2VAet+ooZ24uzv oZDxG5zbEM75cA8+el4vHL3elniL17UDhCpbPVIeeQYTq6I/Mak= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:01 2025 by rpki-client