This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft File: D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json) Hash identifier: lm+hT71uXvjTjLl1Be9r2Fk2vB6KaxnX2Tl3ACWJ8PQ= Subject key identifier: 61:BE:F2:71:CE:12:E8:36:5E:0F:6B:6E:AF:A9:9F:D1:86:7E:48:FA Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Certificate serial: 0661F6A8D577BC4E150399914EBD5B3EB8848DAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft Manifest number: 01D2 Signing time: Tue 02 Dec 2025 06:32:32 +0000 Manifest this update: Tue 02 Dec 2025 06:27:32 +0000 Manifest next update: Fri 05 Dec 2025 16:18:32 +0000 Files and hashes: 1: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: 3Na62YEbFgig/SQMBuqbyhVUDg6Wmk/cj60Z0RLG8Gc=) 2: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:18:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:61:f6:a8:d5:77:bc:4e:15:03:99:91:4e:bd:5b:3e:b8:84:8d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Validity Not Before: Dec 2 06:27:32 2025 GMT Not After : Dec 5 16:18:32 2025 GMT Subject: CN=61BEF271CE12E8365E0F6B6EAFA99FD1867E48FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:da:65:8b:08:09:a9:f1:43:6d:5b:51:06:9c: c9:42:d6:15:ba:81:55:51:b8:66:37:ce:7e:35:04: 5d:f5:81:51:0a:c1:2c:24:d4:25:81:1c:96:50:4e: 38:98:8a:7a:9e:1d:f5:d8:18:59:ad:4d:58:de:e7: c3:72:61:ce:c4:06:7f:f2:5a:de:26:27:5e:08:19: 9c:1d:ce:44:8a:74:9e:63:17:73:8d:ff:de:d9:21: 15:1d:e8:55:e4:72:63:f0:2f:ec:f0:2e:22:9e:ab: d3:f7:8b:59:fb:ec:aa:b4:ab:64:4b:bf:84:19:b2: a1:10:6b:eb:19:b0:95:15:b6:6f:ab:df:74:5e:e2: 99:ad:c4:5f:95:7c:7d:57:08:14:95:05:fe:47:33: c0:ab:e3:75:70:c3:ad:a7:07:4a:bb:93:5b:c5:80: f1:7a:84:49:57:d6:22:95:b0:36:b8:fa:a7:e7:d1: fc:c1:dc:78:1f:7b:3d:8c:00:04:1c:d3:9b:fa:9d: 47:b6:85:53:db:a2:4e:f9:55:05:c3:b7:0f:b9:08: 6c:7e:d5:b3:60:7c:22:fc:8d:88:fa:1b:18:a8:a2: 67:33:cb:11:f4:33:bf:26:9b:17:5b:3d:69:39:ba: e8:de:67:55:d6:8f:aa:a7:5e:af:8a:69:6e:6c:1e: 7f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BE:F2:71:CE:12:E8:36:5E:0F:6B:6E:AF:A9:9F:D1:86:7E:48:FA X509v3 Authority Key Identifier: keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a7:29:7b:b1:40:13:d3:cc:ae:6f:33:63:a7:91:6a:6a:69: 19:89:8e:af:67:e0:55:e7:29:1d:a0:9e:b7:d5:df:31:b0:5b: 39:d2:97:4d:52:47:25:92:04:ac:b7:50:c9:eb:c9:29:57:e3: 4a:20:27:3b:75:9d:9e:24:bb:26:40:6c:ae:06:79:06:a5:47: 99:b3:0e:af:10:4b:f6:42:b5:cb:c7:42:4b:a5:db:b9:4e:53: f6:29:8d:4f:5e:50:3b:1d:e6:66:19:71:07:4b:77:0b:b4:28: ab:5d:3f:54:14:ed:28:a8:fd:da:48:58:28:bb:65:31:5c:0b: 66:95:15:41:88:37:4c:92:2e:1a:63:7d:72:e9:54:57:c4:64: 67:28:87:0b:66:db:74:ce:37:65:56:d1:b6:dd:68:19:ab:0c: 73:0e:34:92:58:d7:6d:e9:66:0a:78:fa:d1:41:27:4d:f6:a6: 48:fc:53:ba:ab:74:d4:5c:9b:8b:22:78:e5:c9:73:02:ff:b3: 88:d6:7d:ee:00:f6:17:d8:8e:a9:e1:b6:84:b6:5a:5b:05:1e: d8:f0:03:c7:d2:3e:c3:5d:78:75:83:b3:d1:64:ae:93:91:35: 53:8a:30:25:bd:f6:7a:27:d9:f5:a6:9e:04:17:b9:ea:12:72: 98:00:4a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmH2qNV3vE4VA5mRTr1bPriEja0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZE QjkyMkFBMzAeFw0yNTEyMDIwNjI3MzJaFw0yNTEyMDUxNjE4MzJaMDMxMTAvBgNV BAMTKDYxQkVGMjcxQ0UxMkU4MzY1RTBGNkI2RUFGQTk5RkQxODY3RTQ4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2mWLCAmp8UNtW1EGnMlC1hW6 gVVRuGY3zn41BF31gVEKwSwk1CWBHJZQTjiYinqeHfXYGFmtTVje58NyYc7EBn/y Wt4mJ14IGZwdzkSKdJ5jF3ON/97ZIRUd6FXkcmPwL+zwLiKeq9P3i1n77Kq0q2RL v4QZsqEQa+sZsJUVtm+r33Re4pmtxF+VfH1XCBSVBf5HM8Cr43Vww62nB0q7k1vF gPF6hElX1iKVsDa4+qfn0fzB3Hgfez2MAAQc05v6nUe2hVPbok75VQXDtw+5CGx+ 1bNgfCL8jYj6GxioomczyxH0M78mmxdbPWk5uujeZ1XWj6qnXq+KaW5sHn9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYb7ycc4S6DZeD2tur6mf0YZ+SPowHwYDVR0j BBgwFoAU1FTiZHWWnOznipe5FSr8dtuSKqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjE3YzIwNi05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9ENDU0RTI2NDc1 OTY5Q0VDRTc4QTk3QjkxNTJBRkM3NkRCOTIyQUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZEQjky MkFBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZD NzZEQjkyMkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmnKXuxQBPTzK5vM2OnkWpqaRmJjq9n4FXn KR2gnrfV3zGwWznSl01SRyWSBKy3UMnrySlX40ogJzt1nZ4kuyZAbK4GeQalR5mz Dq8QS/ZCtcvHQkul27lOU/YpjU9eUDsd5mYZcQdLdwu0KKtdP1QU7Sio/dpIWCi7 ZTFcC2aVFUGIN0ySLhpjfXLpVFfEZGcohwtm23TON2VW0bbdaBmrDHMONJJY123p Zgp4+tFBJ032pkj8U7qrdNRcm4sieOXJcwL/s4jWfe4A9hfYjqnhtoS2WlsFHtjw A8fSPsNdeHWDs9FkrpORNVOKMCW99non2fWmngQXueoScpgASlc= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:36 2025 by rpki-client