This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: O2srp7NI/eE8N7PgWOFtOD2Egv/DUL7tEW0BJPNkVxs= Subject key identifier: 7E:BE:3F:AD:44:DF:79:CD:71:AB:19:14:E4:1C:BA:63:4A:FE:48:FD Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 4600CC04C356B6E944D1D87CE695F138B0C8286A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 01AE Signing time: Sun 14 Dec 2025 09:41:02 +0000 Manifest this update: Sun 14 Dec 2025 09:36:02 +0000 Manifest next update: Wed 17 Dec 2025 19:44:02 +0000 Files and hashes: 1: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) 2: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) 3: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: SWAQkRkoeor6AvT2MRVkJE7zdZKAv1OYPpTrctWh+XQ=) 4: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) 5: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 08:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:00:cc:04:c3:56:b6:e9:44:d1:d8:7c:e6:95:f1:38:b0:c8:28:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Dec 14 09:36:02 2025 GMT Not After : Dec 17 19:44:02 2025 GMT Subject: CN=7EBE3FAD44DF79CD71AB1914E41CBA634AFE48FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e9:c4:f4:1d:0a:e7:05:b5:02:02:8d:07:c8: 69:37:90:97:ea:09:1a:bd:5e:36:f3:ed:7f:4d:8d: 06:a4:95:77:4f:c9:92:e0:c6:4d:99:ed:5d:99:17: 04:4c:85:32:7c:5d:c2:2d:b3:3a:d7:67:91:d1:0f: 49:38:6f:f8:71:5a:b4:e6:de:df:48:d8:93:69:b4: 74:8a:7a:94:74:b9:f0:91:76:73:8e:e5:db:f1:6d: 74:7a:25:8f:57:e1:09:e6:29:b1:99:97:56:cb:e9: 26:34:09:14:d8:c8:7c:74:d6:48:b0:32:9b:ab:38: 9a:de:79:8a:15:04:cf:68:5f:3f:2f:5d:c1:bd:51: ba:e9:51:59:dd:4f:cc:52:3e:b8:e6:f5:9b:83:11: db:87:33:50:ad:42:da:b8:d5:3a:da:3d:68:d7:34: 24:da:ef:1b:90:cd:fb:4b:53:e0:8e:14:e0:f4:65: c0:62:32:ed:78:12:05:19:45:05:d7:cc:e8:8f:77: 47:a7:89:de:87:af:63:5d:03:2c:5b:fd:55:04:5e: b3:02:ba:82:d7:8d:56:9b:2f:67:e6:ab:bf:54:36: 2c:78:a4:67:b1:4c:b9:93:0b:66:d9:fe:14:65:94: 5d:7b:bd:3f:a5:5a:0b:00:0d:92:9d:47:ab:8d:9c: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BE:3F:AD:44:DF:79:CD:71:AB:19:14:E4:1C:BA:63:4A:FE:48:FD X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:51:13:98:06:51:aa:fa:e1:96:69:88:fe:51:9a:13:ab:49: ac:c1:8e:08:9f:15:bf:f7:aa:b0:9c:62:0d:9e:71:cd:55:ee: 96:42:8b:2a:c4:eb:a2:9f:2b:bb:f7:95:28:d0:c0:f3:fc:7e: 40:4c:7d:20:aa:58:b8:e7:eb:9f:70:7b:30:01:b1:00:57:85: 0c:20:6d:0d:58:02:3e:bc:41:48:ae:ba:59:8a:b3:af:ca:f0: bc:44:55:cb:e5:6c:b3:4c:a5:d4:b1:58:45:37:5d:05:d2:18: 3d:12:c7:05:c5:0f:fc:14:48:e9:bc:cc:d1:64:ad:75:9e:18: d0:89:ba:6f:06:3d:36:92:50:50:7b:64:13:2d:58:b0:a3:14: 39:83:cd:74:e4:0d:54:4c:65:ba:89:46:49:4e:4f:e1:04:66: 9c:70:0f:bd:7c:2f:d9:d3:45:15:4a:3a:63:e8:19:7a:e3:99: b2:a7:ed:a3:09:97:28:f4:04:dc:3f:90:21:38:2b:e8:56:6b: 1f:1a:b8:42:2a:af:b8:d4:5c:c9:a5:8f:6e:f7:11:5a:65:64: 60:e7:81:b9:bf:97:42:8a:6c:dd:c1:d3:6c:cc:f3:42:9f:f6: 24:5d:43:c5:b1:85:c6:f3:30:e1:c2:dd:97:26:0f:4d:ce:f7: 5f:51:53:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgDMBMNWtulE0dh85pXxOLDIKGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTEyMTQwOTM2MDJaFw0yNTEyMTcxOTQ0MDJaMDMxMTAvBgNV BAMTKDdFQkUzRkFENDRERjc5Q0Q3MUFCMTkxNEU0MUNCQTYzNEFGRTQ4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg6cT0HQrnBbUCAo0HyGk3kJfq CRq9Xjbz7X9NjQaklXdPyZLgxk2Z7V2ZFwRMhTJ8XcItszrXZ5HRD0k4b/hxWrTm 3t9I2JNptHSKepR0ufCRdnOO5dvxbXR6JY9X4QnmKbGZl1bL6SY0CRTYyHx01kiw MpurOJreeYoVBM9oXz8vXcG9UbrpUVndT8xSPrjm9ZuDEduHM1CtQtq41TraPWjX NCTa7xuQzftLU+COFOD0ZcBiMu14EgUZRQXXzOiPd0enid6Hr2NdAyxb/VUEXrMC uoLXjVabL2fmq79UNix4pGexTLmTC2bZ/hRllF17vT+lWgsADZKdR6uNnHrHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfr4/rUTfec1xqxkU5By6Y0r+SP0wHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5RE5gGUar64ZZpiP5RmhOrSazBjgifFb/3 qrCcYg2ecc1V7pZCiyrE66KfK7v3lSjQwPP8fkBMfSCqWLjn659wezABsQBXhQwg bQ1YAj68QUiuulmKs6/K8LxEVcvlbLNMpdSxWEU3XQXSGD0SxwXFD/wUSOm8zNFk rXWeGNCJum8GPTaSUFB7ZBMtWLCjFDmDzXTkDVRMZbqJRklOT+EEZpxwD718L9nT RRVKOmPoGXrjmbKn7aMJlyj0BNw/kCE4K+hWax8auEIqr7jUXMmlj273EVplZGDn gbm/l0KKbN3B02zM80Kf9iRdQ8WxhcbzMOHC3ZcmD03O919RU9E= -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:49 2025 by rpki-client