This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json) Hash identifier: a2b7HF4rRsFdKafJqieFT5Q/1tP2yqaHtGUt2M7pGng= Subject key identifier: B2:F3:AD:66:CF:F4:16:DD:AD:D8:7A:08:75:8D:37:8A:F3:1A:52:D4 Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Certificate serial: 58E96BCF82AEFC853E31D1E6642747849D1CB16C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft Manifest number: 0154 Signing time: Wed 03 Dec 2025 00:41:29 +0000 Manifest this update: Wed 03 Dec 2025 00:36:29 +0000 Manifest next update: Sat 06 Dec 2025 09:42:29 +0000 Files and hashes: 1: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: +U7nlZJXV+G9fr2h/yYlz4qlRh7rsJ6YKfep4Z3LDTo=) 2: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=) 3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e9:6b:cf:82:ae:fc:85:3e:31:d1:e6:64:27:47:84:9d:1c:b1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Validity Not Before: Dec 3 00:36:29 2025 GMT Not After : Dec 6 09:42:29 2025 GMT Subject: CN=B2F3AD66CFF416DDADD87A08758D378AF31A52D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:29:ef:eb:61:79:2b:c4:86:a7:1f:56:0c:97: 0b:9e:90:b4:ca:aa:d9:5a:a6:af:71:86:70:b8:aa: 4f:5e:cc:4d:91:ee:b0:0c:d6:38:61:1a:3b:e6:1b: d1:c2:79:dd:42:dd:8f:ee:75:39:46:5f:d7:9d:dc: dd:67:02:5a:bc:11:45:90:2b:05:6e:80:55:ff:20: 8c:ff:f2:6e:b0:2b:cc:bf:bc:99:1f:4c:46:81:a5: 4e:31:97:5c:79:12:76:eb:bb:6c:63:c6:c0:51:e3: ab:54:95:4f:eb:c3:b4:21:75:21:c4:1c:3d:46:41: 6d:ab:e6:73:d8:81:ca:15:38:22:ef:a8:bb:d6:ef: 24:11:c9:ed:24:bc:c4:8b:55:66:5b:71:62:12:8e: 6c:65:0d:2c:b3:b0:c7:e3:7f:65:b7:96:6d:17:ee: 48:b8:f9:fa:66:48:a4:6f:86:8a:f9:0c:fc:ae:02: 81:c4:a0:c7:64:d6:59:8e:fe:ae:ab:4d:c4:36:32: 2a:58:bc:4f:a0:2b:4f:89:6b:90:aa:1c:f3:3d:23: 0a:6e:90:b9:8d:ab:e4:a4:2e:22:f0:36:67:24:73: 7f:93:39:d1:df:b0:b1:39:3b:f1:80:4c:67:37:3b: bb:a2:ee:7e:bc:40:fe:34:ed:ea:5a:cb:5d:8c:ba: 42:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F3:AD:66:CF:F4:16:DD:AD:D8:7A:08:75:8D:37:8A:F3:1A:52:D4 X509v3 Authority Key Identifier: keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a7:80:75:32:67:37:b6:0a:5f:bb:1c:9a:92:89:4d:e9:c9: ce:ab:a8:68:03:4a:f9:6d:fe:ba:19:28:ac:52:d0:26:1f:f8: 15:14:2f:88:61:f9:fe:9c:27:24:7b:29:3a:8d:c6:7c:f9:23: 6f:fb:cc:b0:42:c4:43:d3:b5:81:13:6a:e4:2b:f3:55:33:5f: 84:e2:a9:24:d5:43:cb:8e:6d:9c:90:85:01:44:25:61:1c:8e: bd:46:ee:39:0c:84:bf:7b:62:ef:5d:48:48:b8:28:b9:ea:11: 18:b1:51:0a:9c:87:81:46:91:1f:4d:d3:10:a8:c9:41:e6:59: af:32:43:e5:23:4e:3b:34:f7:1a:df:a5:e9:b8:23:b3:54:3c: b7:d6:d6:a6:60:bc:f7:06:06:d1:f9:68:72:57:c6:00:e8:61: 43:8b:4f:20:5d:85:87:dc:89:0b:32:84:6e:20:72:31:70:51: b1:9b:fc:ce:88:85:2f:fc:a2:37:95:bd:62:7c:f7:b5:fd:be: 5d:33:c5:9f:3e:4d:b0:19:cf:41:e2:5f:11:97:97:da:21:6a: 73:43:f6:d1:97:4a:6c:07:f7:07:0d:2e:ef:8c:69:da:c7:4e: 35:48:4c:8b:bd:b6:5a:19:69:28:4f:80:77:4a:c9:91:08:ac: 0a:ed:ae:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOlrz4Ku/IU+MdHmZCdHhJ0csWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx MDg0NUE5QzAeFw0yNTEyMDMwMDM2MjlaFw0yNTEyMDYwOTQyMjlaMDMxMTAvBgNV BAMTKEIyRjNBRDY2Q0ZGNDE2RERBREQ4N0EwODc1OEQzNzhBRjMxQTUyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoKe/rYXkrxIanH1YMlwuekLTK qtlapq9xhnC4qk9ezE2R7rAM1jhhGjvmG9HCed1C3Y/udTlGX9ed3N1nAlq8EUWQ KwVugFX/IIz/8m6wK8y/vJkfTEaBpU4xl1x5Enbru2xjxsBR46tUlU/rw7QhdSHE HD1GQW2r5nPYgcoVOCLvqLvW7yQRye0kvMSLVWZbcWISjmxlDSyzsMfjf2W3lm0X 7ki4+fpmSKRvhor5DPyuAoHEoMdk1lmO/q6rTcQ2MipYvE+gK0+Ja5CqHPM9Iwpu kLmNq+SkLiLwNmckc3+TOdHfsLE5O/GATGc3O7ui7n68QP407epay12MukKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsvOtZs/0Ft2t2HoIdY03ivMaUtQwHwYDVR0j BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0 NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGngHUyZze2Cl+7HJqSiU3pyc6rqGgDSvlt /roZKKxS0CYf+BUUL4hh+f6cJyR7KTqNxnz5I2/7zLBCxEPTtYETauQr81UzX4Ti qSTVQ8uObZyQhQFEJWEcjr1G7jkMhL97Yu9dSEi4KLnqERixUQqch4FGkR9N0xCo yUHmWa8yQ+UjTjs09xrfpem4I7NUPLfW1qZgvPcGBtH5aHJXxgDoYUOLTyBdhYfc iQsyhG4gcjFwUbGb/M6IhS/8ojeVvWJ897X9vl0zxZ8+TbAZz0HiXxGXl9ohanND 9tGXSmwH9wcNLu+MadrHTjVITIu9tloZaShPgHdKyZEIrArtrsI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:36 2025 by rpki-client