This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft File: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft (raw, json) Hash identifier: ah29IgYQM1LhAlQlXS+WNkX6OddIE+QQWMvuPtq26rw= Subject key identifier: 36:3C:33:EE:BF:76:15:7F:B6:67:DA:D0:E2:ED:DC:93:26:BA:D8:01 Authority key identifier: 2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 Certificate issuer: /CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Certificate serial: 72368A94D301C04DCE247D6F82FFA938F22ED8EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft Manifest number: 025E Signing time: Tue 02 Dec 2025 00:40:05 +0000 Manifest this update: Tue 02 Dec 2025 00:35:05 +0000 Manifest next update: Fri 05 Dec 2025 12:04:05 +0000 Files and hashes: 1: 2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl (hash: DtaswYRjBhckQIXhhpN350jOHGh8Gw/9gdPeFou++C4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:36:8a:94:d3:01:c0:4d:ce:24:7d:6f:82:ff:a9:38:f2:2e:d8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DDC53FABF2FD13CD2C91AE2B83E466041718030 Validity Not Before: Dec 2 00:35:05 2025 GMT Not After : Dec 5 12:04:05 2025 GMT Subject: CN=363C33EEBF76157FB667DAD0E2EDDC9326BAD801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:dd:70:05:68:95:38:9b:e8:7a:d4:01:96: 5b:a3:24:90:71:5f:05:8b:cb:8e:d0:0c:8f:72:4a: e6:1c:2b:a3:42:5e:86:96:67:76:79:7a:dd:ec:6a: 98:03:d1:88:3f:72:75:3d:e3:e7:15:72:67:e0:26: fc:a2:3c:b2:f9:dc:2e:c2:46:20:82:98:7c:8e:a4: 24:b8:a9:de:18:65:30:5e:4f:26:51:97:35:a5:13: 42:b6:7a:fb:06:a0:dd:f7:9b:3b:b1:0e:ff:6c:2a: d3:98:97:ab:7e:37:5a:ab:61:a1:6e:ae:eb:8e:a6: 47:e0:fc:27:b2:b7:69:9d:7b:b1:93:21:b6:1e:45: cd:18:24:20:a6:37:46:e8:02:d0:97:e0:b8:5b:0f: 5f:37:3c:4b:b9:c8:1c:d7:8d:8d:ce:f8:71:b0:54: 78:13:60:1f:87:c5:7e:61:79:8e:2b:c1:5c:73:c5: 91:a9:19:a7:9f:15:ed:00:36:bf:df:b1:82:a0:47: d8:17:4c:e4:ba:69:ab:85:14:01:21:d1:f1:9d:a7: 52:08:bb:b6:10:ab:60:ec:41:20:50:0d:80:f7:28: 23:45:22:a3:bd:ea:46:f8:75:cd:b4:28:63:79:72: c6:f2:9a:ba:40:18:bf:3b:fc:f0:18:9e:cc:87:0e: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3C:33:EE:BF:76:15:7F:B6:67:DA:D0:E2:ED:DC:93:26:BA:D8:01 X509v3 Authority Key Identifier: keyid:2D:DC:53:FA:BF:2F:D1:3C:D2:C9:1A:E2:B8:3E:46:60:41:71:80:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DDC53FABF2FD13CD2C91AE2B83E466041718030.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4d41003-12b0-4e6a-b085-56bc2d19daa8/0/2DDC53FABF2FD13CD2C91AE2B83E466041718030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:74:24:b9:b3:fb:9d:2d:9e:8d:80:81:ef:d2:af:6d:97:d9: 4a:c7:bc:21:46:0c:55:0e:f8:99:38:e8:14:12:0d:59:db:55: fc:73:b8:d3:ca:1a:31:df:27:ec:51:5f:a5:4f:bb:60:95:50: e1:40:1b:bc:55:d7:68:25:e5:ae:7f:f8:d9:19:11:0e:46:38: c6:c8:b9:8d:fd:43:35:bb:4a:fe:61:49:0b:7c:b8:0b:80:5d: 13:f2:67:73:ff:86:1f:01:7f:81:0d:78:f8:16:79:20:71:06: 10:b4:8c:30:c3:67:cf:a4:d0:9d:5f:ff:98:c3:c8:de:db:b6: 09:67:4f:99:3e:d7:2e:9e:2c:58:00:88:52:11:94:dd:82:42: 95:2b:e5:89:4c:f7:a8:4b:5d:dc:07:ac:0c:7a:e2:28:d9:26: c8:5e:e8:b1:0f:c8:72:40:a2:d8:f9:25:6c:06:99:29:73:23: 84:f3:88:5c:20:1c:65:42:ea:83:97:6e:29:f5:9d:dc:01:1b: 05:7a:a3:e5:9b:57:72:b0:c9:5f:d1:22:78:f1:71:e9:25:fb: 5a:4a:e4:e0:ad:59:6f:43:5d:19:c1:33:0c:b9:d1:2d:e7:b7: 8a:51:c6:aa:5b:e1:11:6c:82:af:3c:00:45:7c:99:d4:05:21: 68:84:4f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcjaKlNMBwE3OJH1vgv+pOPIu2OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0 MTcxODAzMDAeFw0yNTEyMDIwMDM1MDVaFw0yNTEyMDUxMjA0MDVaMDMxMTAvBgNV BAMTKDM2M0MzM0VFQkY3NjE1N0ZCNjY3REFEMEUyRUREQzkzMjZCQUQ4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw9d1wBWiVOJvoetQBllujJJBx XwWLy47QDI9ySuYcK6NCXoaWZ3Z5et3sapgD0Yg/cnU94+cVcmfgJvyiPLL53C7C RiCCmHyOpCS4qd4YZTBeTyZRlzWlE0K2evsGoN33mzuxDv9sKtOYl6t+N1qrYaFu ruuOpkfg/Ceyt2mde7GTIbYeRc0YJCCmN0boAtCX4LhbD183PEu5yBzXjY3O+HGw VHgTYB+HxX5heY4rwVxzxZGpGaefFe0ANr/fsYKgR9gXTOS6aauFFAEh0fGdp1II u7YQq2DsQSBQDYD3KCNFIqO96kb4dc20KGN5csbymrpAGL87/PAYnsyHDnHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjwz7r92FX+2Z9rQ4u3ckya62AEwHwYDVR0j BBgwFoAULdxT+r8v0TzSyRriuD5GYEFxgDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGQ0MTAwMy0xMmIwLTRlNmEtYjA4NS01NmJjMmQxOWRhYTgvMC8yRERDNTNGQUJG MkZEMTNDRDJDOTFBRTJCODNFNDY2MDQxNzE4MDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2NjA0MTcx ODAzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRkNDEwMDMtMTJiMC00ZTZhLWIw ODUtNTZiYzJkMTlkYWE4LzAvMkREQzUzRkFCRjJGRDEzQ0QyQzkxQUUyQjgzRTQ2 NjA0MTcxODAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH90JLmz+50tno2Age/Sr22X2UrHvCFGDFUO +Jk46BQSDVnbVfxzuNPKGjHfJ+xRX6VPu2CVUOFAG7xV12gl5a5/+NkZEQ5GOMbI uY39QzW7Sv5hSQt8uAuAXRPyZ3P/hh8Bf4ENePgWeSBxBhC0jDDDZ8+k0J1f/5jD yN7btglnT5k+1y6eLFgAiFIRlN2CQpUr5YlM96hLXdwHrAx64ijZJshe6LEPyHJA otj5JWwGmSlzI4TziFwgHGVC6oOXbin1ndwBGwV6o+WbV3KwyV/RInjxcekl+1pK 5OCtWW9DXRnBMwy50S3nt4pRxqpb4RFsgq88AEV8mdQFIWiET7k= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:39 2025 by rpki-client