This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: n5D5alxfg5G+9mDv+otaU8u0AyNg5HNAZ5ecuiUZFHE= Subject key identifier: D8:75:23:1A:89:37:59:36:71:EF:6D:CD:3A:F7:8D:64:A4:42:25:EA Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 27EC82D7D85151C47C0410D5B7CE53597840F372 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: 9D Signing time: Tue 02 Dec 2025 08:42:32 +0000 Manifest this update: Tue 02 Dec 2025 08:37:32 +0000 Manifest next update: Fri 05 Dec 2025 18:21:32 +0000 Files and hashes: 1: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: t33hGK2tWrXOFyyr6frOa0APXlIHVzP4IgSNamcMq50=) 2: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: gVmZVkAsFszQybmNg/IhNxAD/quy68JeCIDfZX+tioI=) 3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: EbL+LGKDt0V5U6jXXy9+v+fX+4Su7Ml6HM1hNFrtkbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ec:82:d7:d8:51:51:c4:7c:04:10:d5:b7:ce:53:59:78:40:f3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Dec 2 08:37:32 2025 GMT Not After : Dec 5 18:21:32 2025 GMT Subject: CN=D875231A8937593671EF6DCD3AF78D64A44225EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:78:64:55:8e:bc:d7:c1:11:52:2f:f1:39: 9a:19:62:62:a0:b3:a9:eb:19:d5:10:20:93:d9:86: 0f:47:3a:80:9c:d9:8a:99:85:81:51:86:df:9d:e9: 92:aa:9c:4f:ec:1b:90:77:9b:ea:6c:36:e4:78:56: 09:4e:a2:27:dd:59:29:f1:25:42:a4:ac:4d:bf:9f: 26:12:d6:2a:61:28:59:18:10:97:bb:ac:9f:05:80: 7e:14:c5:01:6b:6a:d0:c3:8b:06:15:a7:a8:c1:56: f4:42:bc:3f:ee:9c:98:fe:6d:75:d4:24:6b:fd:d2: e0:95:c5:e7:96:96:cc:f0:25:e6:54:08:e6:7e:34: b9:4a:84:42:2c:12:a0:73:f6:ed:31:c8:c6:e6:9f: c7:b6:9d:cb:d8:4a:90:46:0d:4f:56:8c:d9:b2:bb: c1:42:9b:db:4f:ae:af:bc:f0:30:9b:58:ab:b7:98: af:71:eb:c8:24:91:95:1b:32:f8:6c:bc:73:8b:30: 69:2b:3a:f8:2e:7a:59:3b:dc:dd:4e:11:1d:7f:e5: 2d:14:ed:ff:ef:70:eb:d5:9a:47:5c:31:8e:bc:91: f8:b5:72:9d:8e:51:2b:87:d9:be:c4:3f:01:31:ea: 9a:00:8f:66:4f:6c:b5:5d:98:82:af:92:98:01:4e: 15:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:75:23:1A:89:37:59:36:71:EF:6D:CD:3A:F7:8D:64:A4:42:25:EA X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:bb:44:e1:b2:b1:d3:55:52:63:36:08:6c:2e:8e:86:6c:1e: 74:d6:06:9a:45:0e:ca:20:fd:6a:02:0f:52:51:b9:90:b4:86: 9f:63:7f:f5:81:0f:42:c3:76:98:9b:d9:2e:9d:a4:fc:a3:9b: ed:c5:9b:42:80:39:18:ff:b1:9d:10:2a:ee:e8:7e:e2:7c:b4: a0:5c:39:5e:58:e1:f9:53:18:91:82:14:99:10:3a:bc:21:82: 85:95:18:59:98:d1:4a:cb:50:46:97:48:ce:1e:06:5f:4c:95: 91:24:a3:d2:08:9b:3f:af:ce:7d:14:27:7f:fd:e4:f0:f8:63: d1:26:3d:0d:de:3a:fb:49:60:29:3f:d7:90:ac:cf:60:5a:9d: 75:d0:08:e7:24:d6:f3:2f:d6:2f:d7:6e:a6:23:02:fa:f7:2f: 7a:e3:d3:3a:4e:c8:02:7b:f0:f0:4f:93:f8:1b:fe:de:37:26: cc:1f:64:99:43:44:c0:06:d5:e2:bd:e2:a8:cf:df:5c:0c:c5: cd:ad:8d:18:c4:9c:6e:2e:3d:02:d6:7a:1f:2d:83:0a:e2:35: 65:45:95:76:51:44:72:e3:a5:81:cd:ef:20:a1:cb:81:c4:3b: 1c:84:7e:13:57:26:5f:1b:2d:34:bd:8e:58:55:f6:d1:17:85: c4:13:52:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+yC19hRUcR8BBDVt85TWXhA83IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNTEyMDIwODM3MzJaFw0yNTEyMDUxODIxMzJaMDMxMTAvBgNV BAMTKEQ4NzUyMzFBODkzNzU5MzY3MUVGNkRDRDNBRjc4RDY0QTQ0MjI1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYWXhkVY6818ERUi/xOZoZYmKg s6nrGdUQIJPZhg9HOoCc2YqZhYFRht+d6ZKqnE/sG5B3m+psNuR4VglOoifdWSnx JUKkrE2/nyYS1iphKFkYEJe7rJ8FgH4UxQFratDDiwYVp6jBVvRCvD/unJj+bXXU JGv90uCVxeeWlszwJeZUCOZ+NLlKhEIsEqBz9u0xyMbmn8e2ncvYSpBGDU9WjNmy u8FCm9tPrq+88DCbWKu3mK9x68gkkZUbMvhsvHOLMGkrOvguelk73N1OER1/5S0U 7f/vcOvVmkdcMY68kfi1cp2OUSuH2b7EPwEx6poAj2ZPbLVdmIKvkpgBThUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2HUjGok3WTZx723NOveNZKRCJeowHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS7ROGysdNVUmM2CGwujoZsHnTWBppFDsog /WoCD1JRuZC0hp9jf/WBD0LDdpib2S6dpPyjm+3Fm0KAORj/sZ0QKu7ofuJ8tKBc OV5Y4flTGJGCFJkQOrwhgoWVGFmY0UrLUEaXSM4eBl9MlZEko9IImz+vzn0UJ3/9 5PD4Y9EmPQ3eOvtJYCk/15Csz2BanXXQCOck1vMv1i/XbqYjAvr3L3rj0zpOyAJ7 8PBPk/gb/t43JswfZJlDRMAG1eK94qjP31wMxc2tjRjEnG4uPQLWeh8tgwriNWVF lXZRRHLjpYHN7yChy4HEOxyEfhNXJl8bLTS9jlhV9tEXhcQTUmo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:38 2025 by rpki-client