This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft File: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft (raw, json) Hash identifier: lB48dsQ/bpXTCmuWAAw4jEsiSofXBKcSk+1s0e70mXU= Subject key identifier: 00:CD:33:73:99:86:AF:03:99:DE:D8:89:51:2A:90:97:3A:26:1C:5C Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 Certificate issuer: /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Certificate serial: 4840A887FDA01AA949738351FD6736B61FFFAFEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft Manifest number: 03AD Signing time: Mon 08 Dec 2025 19:52:29 +0000 Manifest this update: Mon 08 Dec 2025 19:47:29 +0000 Manifest next update: Thu 11 Dec 2025 21:47:29 +0000 Files and hashes: 1: 0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl (hash: xXsjrNQCETdVTdjtV20b6mErl9F/0JwpWLPSJf9JHMs=) 2: 3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (hash: 5kmhgTgeSHUwhas6AKT+9HvbtryMe4lzQT0rPZxLy0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:40:a8:87:fd:a0:1a:a9:49:73:83:51:fd:67:36:b6:1f:ff:af:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2 Validity Not Before: Dec 8 19:47:29 2025 GMT Not After : Dec 11 21:47:29 2025 GMT Subject: CN=00CD33739986AF0399DED889512A90973A261C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:c8:96:8f:bc:1f:10:45:ed:8c:58:55:aa: 9e:42:a2:19:58:e2:28:21:0d:83:1c:5a:45:d9:97: 02:f4:97:2e:16:31:9b:92:cc:51:3c:10:05:3c:7e: c7:ef:30:b5:75:34:d3:7b:e5:b5:e6:cb:c4:ae:ae: 4e:d1:b1:b8:0a:5c:95:b3:11:3d:b1:e0:37:ad:eb: 52:15:27:1b:e3:e5:df:f9:ce:61:90:99:05:f3:1d: ce:48:65:66:b2:d0:59:7f:9d:36:9d:b4:31:69:b7: db:c2:a9:8a:3b:de:9d:6c:9c:9d:fb:63:3b:82:8f: f0:28:33:9d:55:05:78:d6:93:8c:dc:5e:94:ae:78: 1a:ca:34:c1:62:23:ad:ae:14:c0:c7:0a:b3:3f:a5: 0c:93:78:c0:68:65:93:aa:6d:16:1d:6c:f4:7b:59: 6e:17:6b:d3:64:5d:55:93:30:c2:ed:52:f3:5c:05: 78:49:b2:75:1c:bb:3b:b0:29:bf:c7:84:41:1b:84: 43:66:29:62:86:ff:86:b6:5c:31:84:a8:9e:12:5c: 5f:5f:8c:91:49:a9:6b:45:44:a1:90:63:3d:d8:88: 84:cd:1c:35:ab:73:ea:10:46:91:59:ea:ad:e3:42: 56:34:35:5a:32:87:e0:d0:b7:ab:25:d1:d6:9c:60: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CD:33:73:99:86:AF:03:99:DE:D8:89:51:2A:90:97:3A:26:1C:5C X509v3 Authority Key Identifier: keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:5d:14:f1:e7:d7:eb:2d:ff:37:63:f9:04:4e:31:34:37:f7: f5:cf:e0:7c:4a:69:4d:5c:be:7f:9d:4c:11:64:da:91:41:2e: d8:51:9f:6b:55:0e:35:67:12:03:42:e3:1a:5b:0b:20:9b:e2: 9a:69:e0:25:95:30:09:e0:c2:b1:67:0a:2f:16:c8:71:dd:43: a6:ad:15:ab:e4:8a:00:8e:8a:fe:91:08:6c:3a:d5:04:87:5e: 03:80:e8:d7:d3:e9:b1:e1:20:7b:e3:28:40:a0:e1:81:fc:4f: ae:71:7b:d0:00:b1:41:c2:5b:92:4b:c7:77:50:ea:c6:a3:d5: 6a:67:a1:34:47:84:89:4b:98:a1:54:ce:d4:63:7d:c3:7f:16: 58:e6:f7:8a:5a:81:65:1e:67:3d:41:6a:84:13:44:22:c8:c8: e0:cd:d2:01:60:f2:f3:3f:4b:a4:87:a5:0b:2d:10:05:dc:46: 31:27:55:82:e5:54:fe:f4:85:c6:be:45:0c:fa:66:8f:d2:6d: 9f:32:a3:5a:ec:0c:a9:57:b8:a8:97:17:df:f8:85:e3:26:fe: 7b:85:49:ab:07:f9:65:9d:8e:a4:d4:63:b9:f3:5a:a6:00:fb: 2e:17:7c:ce:f6:07:81:3d:5d:87:2e:65:4d:4a:72:d7:86:31: a7:2d:58:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSECoh/2gGqlJc4NR/Wc2th//r+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVE Mzc3RkNDMjAeFw0yNTEyMDgxOTQ3MjlaFw0yNTEyMTEyMTQ3MjlaMDMxMTAvBgNV BAMTKDAwQ0QzMzczOTk4NkFGMDM5OURFRDg4OTUxMkE5MDk3M0EyNjFDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSciWj7wfEEXtjFhVqp5CohlY 4ighDYMcWkXZlwL0ly4WMZuSzFE8EAU8fsfvMLV1NNN75bXmy8Surk7RsbgKXJWz ET2x4Det61IVJxvj5d/5zmGQmQXzHc5IZWay0Fl/nTadtDFpt9vCqYo73p1snJ37 YzuCj/AoM51VBXjWk4zcXpSueBrKNMFiI62uFMDHCrM/pQyTeMBoZZOqbRYdbPR7 WW4Xa9NkXVWTMMLtUvNcBXhJsnUcuzuwKb/HhEEbhENmKWKG/4a2XDGEqJ4SXF9f jJFJqWtFRKGQYz3YiITNHDWrc+oQRpFZ6q3jQlY0NVoyh+DQt6sl0dacYFFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAM0zc5mGrwOZ3tiJUSqQlzomHFwwHwYDVR0j BBgwFoAUDxZZvcMRdYRjrTzqI6frXtN3/MIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MWIzZmU0NS1iNTg4LTRiYjctYWU5MC05MWY1N2Y1OTNjYjUvMC8wRjE2NTlCREMz MTE3NTg0NjNBRDNDRUEyM0E3RUI1RUQzNzdGQ0MyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VCNUVEMzc3 RkNDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDFiM2ZlNDUtYjU4OC00YmI3LWFl OTAtOTFmNTdmNTkzY2I1LzAvMEYxNjU5QkRDMzExNzU4NDYzQUQzQ0VBMjNBN0VC NUVEMzc3RkNDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFdFPHn1+st/zdj+QROMTQ39/XP4HxKaU1c vn+dTBFk2pFBLthRn2tVDjVnEgNC4xpbCyCb4ppp4CWVMAngwrFnCi8WyHHdQ6at FavkigCOiv6RCGw61QSHXgOA6NfT6bHhIHvjKECg4YH8T65xe9AAsUHCW5JLx3dQ 6saj1WpnoTRHhIlLmKFUztRjfcN/Fljm94pagWUeZz1BaoQTRCLIyODN0gFg8vM/ S6SHpQstEAXcRjEnVYLlVP70hca+RQz6Zo/SbZ8yo1rsDKlXuKiXF9/4heMm/nuF SasH+WWdjqTUY7nzWqYA+y4XfM72B4E9XYcuZU1KcteGMactWNM= -----END CERTIFICATE-----Generated at Wed Dec 10 05:17:33 2025 by rpki-client