This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: JEQF6faosISfECKiQTZWEYVUiXv6c3QCIl+WMP3NDMA= Subject key identifier: 1A:42:11:AB:BD:86:09:6A:DE:07:4B:36:70:A7:6B:E6:28:52:58:AD Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 6106BB7F6620D4C2CDC5577DD0BD9AF1EAAD6280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 04E6 Signing time: Tue 02 Dec 2025 07:10:46 +0000 Manifest this update: Tue 02 Dec 2025 07:05:46 +0000 Manifest next update: Fri 05 Dec 2025 09:53:46 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: KOZMdX2Z63O1vRC4o0azIM3yXjSvV/udjY7G2tEU2Sk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:06:bb:7f:66:20:d4:c2:cd:c5:57:7d:d0:bd:9a:f1:ea:ad:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Dec 2 07:05:46 2025 GMT Not After : Dec 5 09:53:46 2025 GMT Subject: CN=1A4211ABBD86096ADE074B3670A76BE6285258AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:04:f6:b9:7a:cf:e1:84:b7:7f:b0:88:a4:11: a7:5e:d6:3a:6b:07:49:f1:4b:4b:f1:a9:24:b9:2e: ee:62:9f:9b:c3:80:91:e8:65:6d:21:2b:c6:ac:e4: 67:ab:c4:b1:83:a6:ab:00:84:12:e8:ac:97:54:7d: 92:8f:a8:61:9b:09:8a:6f:1b:ad:b8:74:82:7a:d1: 69:69:fb:93:dc:a1:37:25:ab:37:ab:82:96:97:e1: d0:89:0e:80:a5:0a:f7:77:04:f1:9e:83:de:ae:a9: 50:3e:f6:df:5a:1b:8c:23:1a:04:90:db:dc:ef:6d: c9:62:8c:80:5b:82:9d:c6:d3:a9:80:83:56:aa:66: 8e:ea:2c:2f:b1:27:ee:e2:4b:88:d4:1d:7e:ed:6e: e6:0d:5c:12:97:05:f7:76:c8:2f:02:26:9a:06:fd: f7:ea:92:35:b1:4d:07:6a:23:c4:d9:ea:d2:84:dd: 35:78:9c:c1:53:bc:26:01:52:4c:99:50:3d:96:b1: 79:01:57:37:46:fe:09:2c:79:43:46:3d:f0:2c:2a: 4a:3b:19:34:02:c1:56:02:94:f3:3b:fb:96:3b:d9: 51:64:ce:9c:ac:29:5f:9a:c6:44:c2:53:6c:1d:36: 6a:c9:46:86:aa:df:4d:be:d6:33:32:49:6d:4d:9f: 5b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:42:11:AB:BD:86:09:6A:DE:07:4B:36:70:A7:6B:E6:28:52:58:AD X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:16:da:ea:4e:ea:d8:68:87:52:e3:8d:66:a8:97:1f:bf:42: bc:22:9f:4c:3a:2b:3b:3b:44:1c:06:60:af:6d:86:85:fd:5b: d6:8e:b9:29:54:69:35:0e:3c:4d:70:73:2f:f8:20:89:bb:cc: 07:db:54:6f:8d:c6:40:1b:04:2d:ec:ae:01:d9:ae:2c:95:de: 07:fc:56:8b:89:f0:cc:1e:93:5a:03:76:ce:6e:15:9e:b7:a5: b6:cf:05:82:87:a7:ca:32:d8:0b:2a:14:28:56:e6:06:29:bd: 93:d2:e2:01:5b:6f:b5:12:c4:2a:e8:3f:81:53:7b:7d:8c:5d: c1:a8:f5:f2:1e:d5:7f:a5:6b:18:cb:63:f5:0d:ff:76:24:00: d8:7a:e7:7b:f5:0f:b7:34:99:d7:a4:26:eb:c8:07:d5:09:72: c1:5e:73:b3:dc:0b:b8:98:fa:30:34:a2:ab:fb:d2:56:ac:b0: 89:97:6f:9d:5e:70:47:24:40:db:2e:22:a5:3b:ba:06:51:b3: c9:b7:b7:7f:1b:40:45:be:4b:0f:b2:96:75:9a:d4:30:8d:c7: 94:0a:b7:8b:80:a5:81:f0:d4:56:be:f9:24:47:2a:66:45:7b: 57:a4:5a:b0:1a:68:ec:5b:c3:e8:e7:44:08:60:8c:76:30:6c: 7b:63:bd:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQa7f2Yg1MLNxVd90L2a8eqtYoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTEyMDIwNzA1NDZaFw0yNTEyMDUwOTUzNDZaMDMxMTAvBgNV BAMTKDFBNDIxMUFCQkQ4NjA5NkFERTA3NEIzNjcwQTc2QkU2Mjg1MjU4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxBPa5es/hhLd/sIikEade1jpr B0nxS0vxqSS5Lu5in5vDgJHoZW0hK8as5GerxLGDpqsAhBLorJdUfZKPqGGbCYpv G624dIJ60Wlp+5PcoTclqzergpaX4dCJDoClCvd3BPGeg96uqVA+9t9aG4wjGgSQ 29zvbclijIBbgp3G06mAg1aqZo7qLC+xJ+7iS4jUHX7tbuYNXBKXBfd2yC8CJpoG /ffqkjWxTQdqI8TZ6tKE3TV4nMFTvCYBUkyZUD2WsXkBVzdG/gkseUNGPfAsKko7 GTQCwVYClPM7+5Y72VFkzpysKV+axkTCU2wdNmrJRoaq302+1jMySW1Nn1sfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGkIRq72GCWreB0s2cKdr5ihSWK0wHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUW2upO6thoh1LjjWaolx+/Qrwin0w6Kzs7 RBwGYK9thoX9W9aOuSlUaTUOPE1wcy/4IIm7zAfbVG+NxkAbBC3srgHZriyV3gf8 VouJ8Mwek1oDds5uFZ63pbbPBYKHp8oy2AsqFChW5gYpvZPS4gFbb7USxCroP4FT e32MXcGo9fIe1X+laxjLY/UN/3YkANh653v1D7c0mdekJuvIB9UJcsFec7PcC7iY +jA0oqv70lassImXb51ecEckQNsuIqU7ugZRs8m3t38bQEW+Sw+ylnWa1DCNx5QK t4uApYHw1Fa++SRHKmZFe1ekWrAaaOxbw+jnRAhgjHYwbHtjvbE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:25 2025 by rpki-client