This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: YUTVK6kvSWxuhiwDjuxqmUPNb7ODaCQVjqGpYEfQicM= Subject key identifier: EF:7C:17:4D:DC:6F:85:51:1E:72:FC:51:34:7E:30:9B:91:E4:01:AF Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 3CAD839082F1CBBBFD23CD5AF08560241C4A64FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 0224 Signing time: Wed 03 Dec 2025 11:32:19 +0000 Manifest this update: Wed 03 Dec 2025 11:27:19 +0000 Manifest next update: Sat 06 Dec 2025 14:09:19 +0000 Files and hashes: 1: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: 4AThWp0zjhOS99UpQWKzRc/HB7poXATWENWkYXEOs0o=) 2: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 3: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) 4: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ad:83:90:82:f1:cb:bb:fd:23:cd:5a:f0:85:60:24:1c:4a:64:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Dec 3 11:27:19 2025 GMT Not After : Dec 6 14:09:19 2025 GMT Subject: CN=EF7C174DDC6F85511E72FC51347E309B91E401AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:4c:bb:fa:7c:97:3f:88:48:4f:6c:7d:93: a2:24:ad:aa:41:49:12:d6:a8:21:e3:62:10:79:d3: 44:6c:79:e3:67:04:55:4d:98:74:16:53:a9:87:7b: 5d:da:4b:62:26:dd:1d:19:e7:e9:7e:45:dc:ea:36: 80:50:f9:b7:55:ac:d3:2c:94:c8:f9:64:65:ba:a9: b6:08:44:49:c8:0c:2d:30:9f:4c:23:2d:e4:19:e1: 3b:8f:03:4f:9d:6e:23:69:15:b3:a5:a7:02:77:f7: fc:1f:03:06:c7:f7:73:1d:e4:f2:e9:ca:da:b6:64: fc:ed:a7:d5:c6:84:9e:c7:8c:7e:8e:e0:cf:6e:4b: e9:43:60:b4:bf:8f:f5:a7:09:6a:cf:fb:b8:18:c4: ce:70:e1:94:c2:91:b4:6d:d5:7d:30:64:a6:b1:e7: 6e:cd:13:b8:82:be:3f:44:bb:5d:71:9c:c9:a6:d5: 91:5e:23:94:9c:07:9d:c2:b8:9b:d2:77:dd:8d:bc: 04:a0:2c:0f:31:f3:ae:99:a9:52:83:88:a9:ea:81: f1:5e:04:a2:d4:3b:24:c3:4c:a5:45:84:46:78:b7: 96:b3:46:40:7e:7c:19:fa:e6:37:a8:30:54:8d:3a: e8:89:8c:df:28:d1:27:1a:5f:88:34:0d:3c:7a:4e: a3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7C:17:4D:DC:6F:85:51:1E:72:FC:51:34:7E:30:9B:91:E4:01:AF X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:95:4b:0b:a6:44:33:9a:15:b7:65:0d:e3:11:b7:fd:6c:26: 11:d6:db:43:53:93:5b:f2:3c:b3:df:e4:bb:12:65:f4:0f:96: 81:7f:ad:73:5e:fe:58:ee:f6:b3:1b:d1:10:a4:e7:00:ba:d6: 25:77:4b:5e:96:b1:f2:6b:cd:5a:1b:2f:e2:c0:41:ed:19:ef: bb:1e:48:32:e3:a2:f5:ef:38:b4:0a:4f:fb:56:de:e7:a2:73: 4c:67:b4:f7:80:81:0e:aa:5b:e7:6b:f8:b2:35:4e:49:0d:39: a1:48:37:bb:c4:b1:34:a6:d8:a6:68:aa:5f:11:61:31:c3:6e: 33:c7:22:9a:2a:c1:1f:89:28:c4:41:80:42:1e:a8:0f:63:7c: 34:aa:ce:f1:2c:48:ef:f5:5e:79:88:60:c5:ef:9e:6c:e9:48: 72:86:cd:41:fa:fc:23:83:2f:1b:2a:bf:4c:42:1c:47:6e:c2: f9:e7:3c:9f:e9:ce:61:ba:0c:73:a6:0c:9a:28:2b:7f:cc:af: ef:1a:02:ca:eb:e7:b2:7f:ec:e0:e7:56:77:2c:57:b5:53:6f: 32:9b:53:74:7d:36:8e:ba:98:f8:34:f1:f3:78:3b:2c:4d:32: 34:58:da:e3:ee:5e:da:e7:34:f4:41:92:ab:52:5b:9a:8d:4f: 78:7b:be:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPK2DkILxy7v9I81a8IVgJBxKZP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTEyMDMxMTI3MTlaFw0yNTEyMDYxNDA5MTlaMDMxMTAvBgNV BAMTKEVGN0MxNzREREM2Rjg1NTExRTcyRkM1MTM0N0UzMDlCOTFFNDAxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6Ey7+nyXP4hIT2x9k6IkrapB SRLWqCHjYhB500RseeNnBFVNmHQWU6mHe13aS2Im3R0Z5+l+RdzqNoBQ+bdVrNMs lMj5ZGW6qbYIREnIDC0wn0wjLeQZ4TuPA0+dbiNpFbOlpwJ39/wfAwbH93Md5PLp ytq2ZPztp9XGhJ7HjH6O4M9uS+lDYLS/j/WnCWrP+7gYxM5w4ZTCkbRt1X0wZKax 527NE7iCvj9Eu11xnMmm1ZFeI5ScB53CuJvSd92NvASgLA8x866ZqVKDiKnqgfFe BKLUOyTDTKVFhEZ4t5azRkB+fBn65jeoMFSNOuiJjN8o0ScaX4g0DTx6TqOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU73wXTdxvhVEecvxRNH4wm5HkAa8wHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqVSwumRDOaFbdlDeMRt/1sJhHW20NTk1vy PLPf5LsSZfQPloF/rXNe/lju9rMb0RCk5wC61iV3S16WsfJrzVobL+LAQe0Z77se SDLjovXvOLQKT/tW3ueic0xntPeAgQ6qW+dr+LI1TkkNOaFIN7vEsTSm2KZoql8R YTHDbjPHIpoqwR+JKMRBgEIeqA9jfDSqzvEsSO/1XnmIYMXvnmzpSHKGzUH6/COD Lxsqv0xCHEduwvnnPJ/pzmG6DHOmDJooK3/Mr+8aAsrr57J/7ODnVncsV7VTbzKb U3R9No66mPg08fN4OyxNMjRY2uPuXtrnNPRBkqtSW5qNT3h7vq4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:24 2025 by rpki-client