This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: 4zbB+AGa5g7ywVCjDpf7tnW8+rDZXlkDsouRILuwutI= Subject key identifier: B2:FB:56:11:C5:B4:92:F8:6F:B2:F6:45:57:E0:93:87:1E:3E:43:CF Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 3511C7C86E17B94C1551492D4C9649523359C3B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: 0125 Signing time: Wed 03 Dec 2025 08:41:48 +0000 Manifest this update: Wed 03 Dec 2025 08:36:48 +0000 Manifest next update: Sat 06 Dec 2025 13:40:48 +0000 Files and hashes: 1: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) 2: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: bVr4aEnkonwG2izxWNcUiw4f+UEEMvx1FSNT2wXTEnI=) 3: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:11:c7:c8:6e:17:b9:4c:15:51:49:2d:4c:96:49:52:33:59:c3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Dec 3 08:36:48 2025 GMT Not After : Dec 6 13:40:48 2025 GMT Subject: CN=B2FB5611C5B492F86FB2F64557E093871E3E43CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a0:a1:04:f5:5d:fa:a9:08:98:b4:57:f8:17: eb:70:c4:b4:fc:5d:62:2f:bd:aa:c1:54:bd:75:f8: c6:76:78:d2:64:f9:08:32:ab:75:d6:a3:e9:0b:26: 4b:d7:1c:6a:ef:49:1a:79:04:f5:40:6c:18:19:43: d2:29:3b:10:78:85:2a:62:9b:07:45:ce:c2:c0:59: b2:a2:31:37:e2:1e:3b:85:e9:bc:61:90:4e:65:0b: 94:60:4b:8f:32:15:18:bf:d7:02:84:5a:cc:fd:83: 19:8e:34:aa:89:4a:6f:fd:ea:04:ad:06:ea:cc:89: 78:a4:ef:a4:d6:98:01:ec:a9:3d:a2:a7:34:36:57: 16:fa:04:2f:8e:81:07:ad:4a:63:d2:2d:ac:be:d7: cf:43:c9:3c:33:9e:8a:51:41:2c:c1:de:c6:12:1e: ee:64:c4:42:a1:01:af:d9:a2:e4:1d:a2:09:dd:34: 08:43:fb:2f:86:3e:a9:28:15:89:c8:fa:db:d0:f5: 1b:17:be:8b:08:2b:4b:df:31:69:d5:9b:5a:ca:bd: 6d:9a:23:17:4f:5d:28:79:e8:8a:73:22:f8:ee:bd: 14:57:89:b7:35:ae:b1:c3:02:91:5b:8e:f6:e0:cb: ed:39:ad:3f:c6:83:95:c1:bc:e6:aa:20:02:8b:f7: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FB:56:11:C5:B4:92:F8:6F:B2:F6:45:57:E0:93:87:1E:3E:43:CF X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d5:d7:ab:d8:1c:4c:c3:c8:8f:65:29:78:35:34:af:71:d7: 4b:7e:43:0f:2d:79:df:a7:2d:23:b3:c6:90:0c:7c:bf:0f:87: d6:80:6e:22:23:0b:77:b6:84:2c:90:f4:60:92:1c:3b:17:06: 98:8b:4b:4a:da:5c:9a:71:27:c3:0e:c7:26:b6:8f:f3:6d:8a: fa:f0:ff:3d:42:47:f2:45:58:4c:a1:2f:31:42:25:62:22:81: a6:d9:d6:09:a5:0a:1e:2f:b1:b7:33:92:dd:35:86:af:0a:e4: 13:9e:39:a3:22:1d:b1:1f:c0:95:63:fa:1c:fc:7c:2d:7a:26: dd:e5:14:01:a5:7e:e3:a4:de:61:b5:04:a7:f8:b4:67:d1:13: 6a:8d:28:4e:08:d9:3b:14:ec:c7:8a:6e:80:73:8b:48:10:1b: 94:24:d0:b9:a0:ec:5e:91:f7:c3:b7:30:1d:fc:4b:5f:b3:ce: 40:83:0e:65:cc:7f:d2:ab:6d:b4:5f:a4:ab:6e:56:6f:e1:40: fd:ad:b1:be:57:4a:6b:62:a5:f8:a1:c8:29:82:b4:94:54:da: 5d:a3:c7:84:a5:e0:09:92:a7:84:4d:86:40:d1:c7:32:cf:1a: f5:ee:76:f9:6a:59:ed:e1:7a:f0:5f:c9:01:ce:cd:d5:f2:bc: 36:3a:dd:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRHHyG4XuUwVUUktTJZJUjNZw7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTEyMDMwODM2NDhaFw0yNTEyMDYxMzQwNDhaMDMxMTAvBgNV BAMTKEIyRkI1NjExQzVCNDkyRjg2RkIyRjY0NTU3RTA5Mzg3MUUzRTQzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVoKEE9V36qQiYtFf4F+twxLT8 XWIvvarBVL11+MZ2eNJk+Qgyq3XWo+kLJkvXHGrvSRp5BPVAbBgZQ9IpOxB4hSpi mwdFzsLAWbKiMTfiHjuF6bxhkE5lC5RgS48yFRi/1wKEWsz9gxmONKqJSm/96gSt BurMiXik76TWmAHsqT2ipzQ2Vxb6BC+OgQetSmPSLay+189DyTwznopRQSzB3sYS Hu5kxEKhAa/ZouQdogndNAhD+y+GPqkoFYnI+tvQ9RsXvosIK0vfMWnVm1rKvW2a IxdPXSh56IpzIvjuvRRXibc1rrHDApFbjvbgy+05rT/Gg5XBvOaqIAKL922fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsvtWEcW0kvhvsvZFV+CThx4+Q88wHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/V16vYHEzDyI9lKXg1NK9x10t+Qw8ted+n LSOzxpAMfL8Ph9aAbiIjC3e2hCyQ9GCSHDsXBpiLS0raXJpxJ8MOxya2j/Ntivrw /z1CR/JFWEyhLzFCJWIigabZ1gmlCh4vsbczkt01hq8K5BOeOaMiHbEfwJVj+hz8 fC16Jt3lFAGlfuOk3mG1BKf4tGfRE2qNKE4I2TsU7MeKboBzi0gQG5Qk0Lmg7F6R 98O3MB38S1+zzkCDDmXMf9KrbbRfpKtuVm/hQP2tsb5XSmtipfihyCmCtJRU2l2j x4Sl4AmSp4RNhkDRxzLPGvXudvlqWe3hevBfyQHOzdXyvDY63QU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:55 2025 by rpki-client