This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: 4hderosOVx0LuFGpNHLclQohY1s7suugdowX+iHaEpQ= Subject key identifier: 0D:69:E7:26:4B:2A:1D:B7:17:DD:4E:67:10:28:79:84:FF:91:0A:E5 Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 1BEB7063717F9BAF6B059CAB4EE5A5FBEB0A9AC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 0548 Signing time: Mon 01 Dec 2025 10:10:43 +0000 Manifest this update: Mon 01 Dec 2025 10:05:43 +0000 Manifest next update: Thu 04 Dec 2025 16:54:43 +0000 Files and hashes: 1: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: cRRAppEwNWUZNxFFrqVntnb4uz3yNuZo0Z65i1BCFzs=) 2: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: 5/is5Fnj7ieYv5j24Lu0prXphp33UafjYM6gJ1sVVzQ=) 3: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: l7AZH3jA2GmLB8CMnYtZbrYa/W+mf87m8c2rR1yPMgs=) 4: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:eb:70:63:71:7f:9b:af:6b:05:9c:ab:4e:e5:a5:fb:eb:0a:9a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Dec 1 10:05:43 2025 GMT Not After : Dec 4 16:54:43 2025 GMT Subject: CN=0D69E7264B2A1DB717DD4E6710287984FF910AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:b0:f8:fd:b0:60:5c:5c:3a:c5:8a:63:49: 58:f1:de:e3:41:81:e2:fe:b9:a3:12:d6:6e:bf:8b: 67:77:7a:c1:43:d7:fd:3a:7b:13:41:c7:eb:a7:e8: 38:1f:61:83:f3:89:10:e4:52:f3:ed:cd:8f:f6:58: 2f:e0:a7:08:58:dc:45:d1:50:68:41:9f:4f:33:1f: dc:10:b6:d2:3b:48:a0:5a:7c:cd:2c:8a:e6:23:37: 41:9f:04:af:3a:c9:d6:28:68:dc:08:f9:19:22:a3: 21:f9:5e:3b:c8:21:68:56:61:a7:05:e7:e9:d4:07: 0f:84:bf:59:93:94:16:f6:ea:34:22:c3:3d:00:8f: 99:d3:97:45:c8:e5:47:21:a3:93:32:d4:d2:83:2f: 3e:83:b7:60:12:13:35:6c:b7:e5:50:59:aa:1c:35: eb:68:fe:8d:2a:57:78:41:8e:fc:82:ff:90:db:99: 91:f3:de:ed:ee:ab:cc:43:b8:ef:1c:48:a3:ed:22: df:d7:7c:d9:9d:54:2d:49:ef:e5:c3:94:6c:a2:ec: 1c:4f:d2:3a:dd:27:2f:dd:a8:7c:74:98:4f:c6:af: 4f:44:0e:f8:1d:c8:a7:d9:c4:7f:d8:d6:8b:ca:17: 9e:78:30:7c:72:e3:83:84:b5:d3:3d:11:21:76:ee: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:69:E7:26:4B:2A:1D:B7:17:DD:4E:67:10:28:79:84:FF:91:0A:E5 X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:6c:b4:11:00:20:85:0c:88:55:62:0f:29:a9:d5:7b:dd:3c: 78:55:bc:ec:4d:75:99:61:7b:79:87:9d:b4:8c:d0:f9:60:6e: 5c:b6:83:6d:60:d9:3a:7d:37:12:1f:64:34:2c:9f:60:02:56: 6b:b5:4d:72:0f:21:50:83:32:e6:60:fe:38:11:19:e8:ab:52: 65:92:59:13:be:41:70:a5:76:bf:2b:e6:ca:2e:8f:ce:fd:09: 84:1b:01:de:29:27:ab:27:92:28:14:8b:97:47:74:e4:e3:5e: 91:04:12:fc:b5:f1:3c:37:f2:26:3e:c8:2c:16:12:c6:39:2e: 32:1c:ba:50:d8:d2:7b:63:53:0a:b9:1f:0b:1a:2a:27:2a:39: 5d:93:9c:36:48:4e:46:52:8e:d7:86:0f:15:a1:d2:99:a1:74: b3:c6:31:3a:ab:d8:64:67:2e:13:75:a6:1b:3f:3d:c9:c1:cd: 77:6f:1f:fd:a9:58:33:7a:29:e8:9e:f7:05:e1:99:ed:ae:b3: ab:de:c7:e7:6a:d7:80:28:11:db:52:c5:9c:16:34:21:f6:b0: 3d:e6:f7:d0:fa:22:45:10:04:db:37:c5:e9:cb:c0:53:38:25: ce:cf:7b:b5:20:28:ac:d2:da:5d:92:12:7f:0a:7d:8b:73:89: 8f:63:cd:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+twY3F/m69rBZyrTuWl++sKmsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTEyMDExMDA1NDNaFw0yNTEyMDQxNjU0NDNaMDMxMTAvBgNV BAMTKDBENjlFNzI2NEIyQTFEQjcxN0RENEU2NzEwMjg3OTg0RkY5MTBBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxeLD4/bBgXFw6xYpjSVjx3uNB geL+uaMS1m6/i2d3esFD1/06exNBx+un6DgfYYPziRDkUvPtzY/2WC/gpwhY3EXR UGhBn08zH9wQttI7SKBafM0siuYjN0GfBK86ydYoaNwI+RkioyH5XjvIIWhWYacF 5+nUBw+Ev1mTlBb26jQiwz0Aj5nTl0XI5Ucho5My1NKDLz6Dt2ASEzVst+VQWaoc Neto/o0qV3hBjvyC/5DbmZHz3u3uq8xDuO8cSKPtIt/XfNmdVC1J7+XDlGyi7BxP 0jrdJy/dqHx0mE/Gr09EDvgdyKfZxH/Y1ovKF554MHxy44OEtdM9ESF27g6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWnnJksqHbcX3U5nECh5hP+RCuUwHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVstBEAIIUMiFViDymp1XvdPHhVvOxNdZlh e3mHnbSM0Plgbly2g21g2Tp9NxIfZDQsn2ACVmu1TXIPIVCDMuZg/jgRGeirUmWS WRO+QXCldr8r5souj879CYQbAd4pJ6snkigUi5dHdOTjXpEEEvy18Tw38iY+yCwW EsY5LjIculDY0ntjUwq5HwsaKicqOV2TnDZITkZSjteGDxWh0pmhdLPGMTqr2GRn LhN1phs/PcnBzXdvH/2pWDN6Keie9wXhme2us6vex+dq14AoEdtSxZwWNCH2sD3m 99D6IkUQBNs3xenLwFM4Jc7Pe7UgKKzS2l2SEn8KfYtziY9jzR0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:32 2025 by rpki-client