This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft File: 01DF4BADDE0B23C16F941DC3468443771C193624.mft (raw, json) Hash identifier: V6vxZn7wA2+q7F86aRrW5vVKWFLDgtcRThHat+XyzVU= Subject key identifier: 36:F5:4E:0F:08:9E:87:6A:5F:94:18:02:D8:7B:3C:32:5F:07:FF:17 Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 Certificate issuer: /CN=01DF4BADDE0B23C16F941DC3468443771C193624 Certificate serial: 60A99749DC67C41BB7D5F112D532E962072CD5FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft Manifest number: 024C Signing time: Wed 03 Dec 2025 12:32:14 +0000 Manifest this update: Wed 03 Dec 2025 12:27:14 +0000 Manifest next update: Sat 06 Dec 2025 14:27:14 +0000 Files and hashes: 1: 01DF4BADDE0B23C16F941DC3468443771C193624.crl (hash: wSM/aPrXx7kVLkKVPYZRnREz2T0PbOP896gJYY4ViHE=) 2: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: bIguhZb/xSN8gbqOiUshtwtXS4ifpOsnMSSlWO3KLq4=) 3: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: umhcspcoF3bORaGf6sEandLiYRoN5qvo+3ZDwDB3BTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:a9:97:49:dc:67:c4:1b:b7:d5:f1:12:d5:32:e9:62:07:2c:d5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624 Validity Not Before: Dec 3 12:27:14 2025 GMT Not After : Dec 6 14:27:14 2025 GMT Subject: CN=36F54E0F089E876A5F941802D87B3C325F07FF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:6d:ef:11:fb:b6:76:7d:a3:e5:4f:1f:16: 3c:e3:6d:6a:38:21:4a:5e:a6:4b:bb:6f:e4:9f:d5: 35:48:5a:17:6f:92:04:8c:a2:eb:b2:4e:e6:90:bb: db:8f:7b:b7:c5:54:d1:1a:da:20:77:ca:38:ec:c8: 67:d5:c0:1d:c8:6f:9c:f5:8c:3d:ee:af:de:e2:55: 30:71:43:5a:74:00:ab:b2:cf:60:0c:f5:77:f8:16: 29:95:72:23:4c:02:ae:90:6f:a1:b3:30:41:22:36: 12:0c:b6:5d:38:9c:0e:8e:6b:85:d6:01:27:af:b0: 53:47:67:b3:f1:38:36:c6:76:f0:76:ea:dc:ab:b9: 13:46:5f:0b:66:a3:1d:7b:f4:c9:fa:a8:64:4a:a6: b7:e6:89:ff:61:c0:3d:a4:5e:3d:2c:d4:34:eb:3b: e3:2a:51:62:5c:28:1c:90:6d:02:2e:2a:ae:36:c1: 2a:4a:82:37:5d:79:60:30:b7:12:d2:7d:e1:86:a6: b6:cc:f8:92:97:49:0a:56:e0:7a:f0:e2:51:ef:9f: bd:63:a9:d9:16:e8:c0:36:d7:9f:c7:2a:8f:f8:c5: ac:1b:f1:0c:c0:d8:cf:25:66:b6:81:85:32:a0:0a: 61:c4:ed:1f:4c:18:b1:a7:a2:02:ec:e0:18:82:cd: 3f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F5:4E:0F:08:9E:87:6A:5F:94:18:02:D8:7B:3C:32:5F:07:FF:17 X509v3 Authority Key Identifier: keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ba:2a:bd:f9:a5:f4:78:06:74:d8:1f:8c:c3:11:5e:b4:2c: ae:04:ef:30:d1:fe:bf:e6:85:36:83:76:cd:84:62:77:cc:68: be:99:98:d1:86:d2:ec:2c:71:8d:28:f0:61:fc:99:f7:5a:af: bd:f1:55:e3:0f:fb:a5:89:c5:0c:72:a4:06:b9:26:61:e5:4a: ed:3d:19:12:05:1a:6f:5a:b1:bb:7d:c3:0d:da:ff:52:8e:e0: 70:cf:2a:f2:c7:5e:a1:53:1a:2c:6d:b9:00:7e:cd:3e:fe:3b: d9:42:a0:85:e0:f2:e8:13:17:8d:69:ba:05:5f:d4:51:84:0d: ea:72:67:fc:b0:20:7e:65:c0:f0:b0:0a:d8:58:9b:b5:7c:27: 9b:76:62:42:d5:eb:49:54:30:8b:db:f2:06:ce:08:6e:fd:1d: 43:36:fe:d0:3f:e4:81:28:d3:55:06:49:8e:84:8d:33:07:94: 2f:33:6e:fb:bc:dc:73:96:7f:39:9f:24:c2:48:e1:1a:a4:38: 36:23:74:17:7f:c4:34:b6:fe:4d:32:95:9d:02:b6:92:31:94: 30:21:ed:25:89:93:49:f6:22:47:b7:25:dd:25:e7:94:79:fc: 78:b4:8c:89:fa:0d:a4:3b:6f:a5:f2:fc:c2:d9:c3:23:99:90: 68:5a:34:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYKmXSdxnxBu31fES1TLpYgcs1fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcx QzE5MzYyNDAeFw0yNTEyMDMxMjI3MTRaFw0yNTEyMDYxNDI3MTRaMDMxMTAvBgNV BAMTKDM2RjU0RTBGMDg5RTg3NkE1Rjk0MTgwMkQ4N0IzQzMyNUYwN0ZGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/hG3vEfu2dn2j5U8fFjzjbWo4 IUpepku7b+Sf1TVIWhdvkgSMouuyTuaQu9uPe7fFVNEa2iB3yjjsyGfVwB3Ib5z1 jD3ur97iVTBxQ1p0AKuyz2AM9Xf4FimVciNMAq6Qb6GzMEEiNhIMtl04nA6Oa4XW ASevsFNHZ7PxODbGdvB26tyruRNGXwtmox179Mn6qGRKprfmif9hwD2kXj0s1DTr O+MqUWJcKByQbQIuKq42wSpKgjddeWAwtxLSfeGGprbM+JKXSQpW4Hrw4lHvn71j qdkW6MA215/HKo/4xawb8QzA2M8lZraBhTKgCmHE7R9MGLGnogLs4BiCzT8ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNvVODwieh2pflBgC2Hs8Ml8H/xcwHwYDVR0j BBgwFoAUAd9Lrd4LI8FvlB3DRoRDdxwZNiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWUzMWVjZi01MmE0LTQ2NzctOTEwMy01ZjM3YTQwOTFkNzUvMC8wMURGNEJBRERF MEIyM0MxNkY5NDFEQzM0Njg0NDM3NzFDMTkzNjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcxQzE5 MzYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQz NzcxQzE5MzYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB26Kr35pfR4BnTYH4zDEV60LK4E7zDR/r/m hTaDds2EYnfMaL6ZmNGG0uwscY0o8GH8mfdar73xVeMP+6WJxQxypAa5JmHlSu09 GRIFGm9asbt9ww3a/1KO4HDPKvLHXqFTGixtuQB+zT7+O9lCoIXg8ugTF41pugVf 1FGEDepyZ/ywIH5lwPCwCthYm7V8J5t2YkLV60lUMIvb8gbOCG79HUM2/tA/5IEo 01UGSY6EjTMHlC8zbvu83HOWfzmfJMJI4RqkODYjdBd/xDS2/k0ylZ0CtpIxlDAh 7SWJk0n2Ike3Jd0l55R5/Hi0jIn6DaQ7b6Xy/MLZwyOZkGhaNFE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:59 2025 by rpki-client