This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: rkK8X+2aTNyBVCT9hq86LEem5t9fWiRuznsNpw/DVyk= Subject key identifier: AB:D2:97:BA:53:AF:89:EB:4E:FF:88:83:42:4E:0B:8B:D6:31:64:65 Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 46C218997B9848D1ABDBB5C05287963EAFDCE1E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 01A9 Signing time: Wed 03 Dec 2025 02:21:01 +0000 Manifest this update: Wed 03 Dec 2025 02:16:01 +0000 Manifest next update: Sat 06 Dec 2025 11:37:01 +0000 Files and hashes: 1: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) 2: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) 3: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: KLUezUdaGBGu+qkrLtwD7nk76KKeM8u9RLSUdlwijng=) 4: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) 5: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c2:18:99:7b:98:48:d1:ab:db:b5:c0:52:87:96:3e:af:dc:e1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Dec 3 02:16:01 2025 GMT Not After : Dec 6 11:37:01 2025 GMT Subject: CN=ABD297BA53AF89EB4EFF8883424E0B8BD6316465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:60:1f:77:3a:ae:9b:02:85:b4:d5:aa:9a: fc:0d:20:e3:e3:1b:c9:cc:77:af:d3:3a:16:3a:0c: e3:10:4b:d0:3b:1c:02:68:d0:9f:3e:9e:34:37:e6: ca:f5:c5:38:1e:ba:de:84:2e:c9:97:22:a5:f8:20: 71:fa:3f:a2:14:05:f5:40:c1:67:aa:cd:b9:97:7e: 0f:f3:5e:0d:74:e2:51:2b:33:55:de:84:10:d1:43: 8f:84:53:d9:55:04:a6:9b:ea:a0:2d:3c:6d:f6:cc: 0d:82:85:1b:a3:8d:82:ba:fe:b4:40:e6:6d:6e:be: 2a:ea:3f:bf:ef:41:94:55:2f:2b:6b:45:c2:c2:18: 24:b4:36:6b:16:4c:20:2f:84:e9:7c:21:2e:e0:50: c8:53:79:99:95:4a:2d:4d:16:ef:21:81:be:9d:81: 07:2d:00:64:27:57:b5:5d:ae:7b:8e:46:6f:93:06: e1:1a:e0:28:70:fb:f0:90:f9:da:05:b2:4f:de:a2: a1:5d:7f:2d:c6:c1:c0:7c:8d:11:1b:08:48:9c:8f: 89:f1:f1:88:82:a1:ea:23:fa:ca:a7:58:21:a6:42: e2:6e:1d:1b:c9:66:18:89:b5:93:b3:1e:ca:12:fe: 02:90:09:ba:ac:17:a4:53:ea:50:16:4f:68:4f:67: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D2:97:BA:53:AF:89:EB:4E:FF:88:83:42:4E:0B:8B:D6:31:64:65 X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2e:70:90:14:08:4e:3f:e7:6b:18:2c:f5:3c:f6:96:01:a2: da:99:c8:76:98:1b:37:15:18:35:60:46:bb:7c:26:b5:8a:5e: 83:e7:68:f8:91:b9:69:fc:f9:7c:44:68:0a:ff:16:92:5f:da: 23:59:eb:5b:ff:1b:c9:11:55:7d:3d:ba:a3:b2:42:cd:21:b0: df:b0:75:0e:59:50:0d:68:6f:bd:e8:14:76:9b:4e:5d:82:d0: f9:9c:41:b1:0e:f3:88:f4:f1:37:c6:0e:36:54:a4:fb:25:af: d6:4a:59:cf:2e:7f:72:cb:2c:96:5c:01:15:e6:e7:26:b9:fc: 63:8f:fe:0d:d9:12:08:c5:ce:9c:5c:47:cf:5f:7f:08:cd:10: a4:ce:61:ef:c9:23:49:51:0e:b1:a2:05:e8:32:2a:cf:02:f8: a8:16:08:1d:47:91:94:d8:3b:20:e5:e0:98:78:b2:ac:84:1f: 2c:7a:de:72:91:99:41:b1:3b:77:85:e0:bb:ef:8d:cf:c3:cb: c2:5a:d2:32:03:f8:34:91:91:b3:53:88:a9:09:6c:ef:cc:e2: 30:b3:0e:5a:12:36:84:36:8b:1e:12:22:25:25:79:54:32:81: 5b:ee:b5:ce:1f:9b:c9:4c:96:b1:d8:a0:51:b2:a5:b9:dd:e1: 5f:e4:9f:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsIYmXuYSNGr27XAUoeWPq/c4ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTEyMDMwMjE2MDFaFw0yNTEyMDYxMTM3MDFaMDMxMTAvBgNV BAMTKEFCRDI5N0JBNTNBRjg5RUI0RUZGODg4MzQyNEUwQjhCRDYzMTY0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbS2AfdzqumwKFtNWqmvwNIOPj G8nMd6/TOhY6DOMQS9A7HAJo0J8+njQ35sr1xTgeut6ELsmXIqX4IHH6P6IUBfVA wWeqzbmXfg/zXg104lErM1XehBDRQ4+EU9lVBKab6qAtPG32zA2ChRujjYK6/rRA 5m1uvirqP7/vQZRVLytrRcLCGCS0NmsWTCAvhOl8IS7gUMhTeZmVSi1NFu8hgb6d gQctAGQnV7VdrnuORm+TBuEa4Chw+/CQ+doFsk/eoqFdfy3GwcB8jREbCEicj4nx 8YiCoeoj+sqnWCGmQuJuHRvJZhiJtZOzHsoS/gKQCbqsF6RT6lAWT2hPZ/SHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq9KXulOvietO/4iDQk4Li9YxZGUwHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4ucJAUCE4/52sYLPU89pYBotqZyHaYGzcV GDVgRrt8JrWKXoPnaPiRuWn8+XxEaAr/FpJf2iNZ61v/G8kRVX09uqOyQs0hsN+w dQ5ZUA1ob73oFHabTl2C0PmcQbEO84j08TfGDjZUpPslr9ZKWc8uf3LLLJZcARXm 5ya5/GOP/g3ZEgjFzpxcR89ffwjNEKTOYe/JI0lRDrGiBegyKs8C+KgWCB1HkZTY OyDl4Jh4sqyEHyx63nKRmUGxO3eF4Lvvjc/Dy8Ja0jID+DSRkbNTiKkJbO/M4jCz DloSNoQ2ix4SIiUleVQygVvutc4fm8lMlrHYoFGypbnd4V/kn/c= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:28 2025 by rpki-client