This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: LbPJAm1Ln8yVzV1SlT4HFuSIdBrTweAQZAVOzCHC4NQ= Subject key identifier: 3F:0E:22:CB:6F:6B:3B:AC:14:E5:19:5F:32:44:AF:D1:19:6D:3B:86 Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 38541CAD08E594EC764321C96A5FCF61AF74AF88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 0528 Signing time: Tue 02 Dec 2025 08:25:31 +0000 Manifest this update: Tue 02 Dec 2025 08:20:31 +0000 Manifest next update: Fri 05 Dec 2025 11:47:31 +0000 Files and hashes: 1: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: aZv9LPIx+ifWPACPF1urIxKaxmD8gZM+L2n4V9Y5brY=) 2: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: 2COjLCJ4YEuRoqvYvSrj9dQC5huF+G+dAbpMe2HpJLo=) 3: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: HI0hJJXTQDhzD7pTczCRmyIdw4yYJFsaIwjzSTbxsrY=) 4: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iReeweCReiVdyDxdcHaFTjeSzHc3cSR3SFaF6DPJP8s=) 5: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: W2IYXy+JkbGpp85/sS2UKLUazxQpNz2N8iZifbHeJpI=) 6: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: w7Chi4gZxBYt1ZeGb/YO7tH8OTI2H/0aS5PoiZEPc/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:54:1c:ad:08:e5:94:ec:76:43:21:c9:6a:5f:cf:61:af:74:af:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Dec 2 08:20:31 2025 GMT Not After : Dec 5 11:47:31 2025 GMT Subject: CN=3F0E22CB6F6B3BAC14E5195F3244AFD1196D3B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:32:81:36:8e:38:26:95:ee:1b:43:79:03: c5:29:e4:30:2d:c6:05:76:ea:21:5e:68:9b:c3:ca: 31:30:f5:ba:d1:83:26:00:ca:ff:58:9e:33:4c:33: ca:b3:4f:73:2c:fb:31:bc:c7:23:df:8e:98:44:78: 79:d5:a3:6f:56:bf:1a:25:a7:45:f6:1e:8f:5c:d3: 56:60:1a:50:86:87:67:14:50:8a:25:bf:b3:d9:62: f5:40:ce:55:75:58:2b:66:7a:39:23:fb:9e:52:ec: 3f:f3:df:55:26:25:57:30:be:16:a5:8a:e1:f5:9f: bb:e1:f3:2b:cc:eb:9b:d7:dc:77:bf:92:72:c7:e2: f4:3e:18:f8:b9:18:88:20:0e:b9:5b:ef:01:f0:29: 08:b2:05:80:45:a5:ba:02:ec:68:03:d3:db:87:55: 75:ad:bb:27:a6:0d:b6:fa:f8:20:b4:4c:95:4e:6f: 23:56:e4:66:67:c8:dd:4f:52:45:c0:e0:09:b2:c2: 17:9c:fa:37:a6:6f:86:2a:fb:b7:13:60:18:f9:3c: f9:b3:99:a0:42:25:66:f1:30:6a:4a:b4:78:87:85: fa:45:60:5c:6d:fc:a3:33:4b:a6:19:4c:13:84:85: a1:18:6e:87:b3:f5:80:a5:7c:9f:07:7f:3f:e4:ad: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0E:22:CB:6F:6B:3B:AC:14:E5:19:5F:32:44:AF:D1:19:6D:3B:86 X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4d:be:cd:4a:31:82:f2:28:08:fa:40:f0:37:88:a7:13:70: 83:b0:48:d9:b0:2f:af:3c:4c:d2:1d:be:c4:87:5e:e7:dc:fe: d6:8c:c5:b3:67:ae:7e:fd:d0:ee:74:a4:f5:1d:b2:38:4a:6f: 53:cc:48:1d:8a:bd:f8:e9:2c:02:37:6a:2a:9f:67:70:26:4c: 44:a0:46:92:db:ca:67:27:aa:dc:b2:ae:19:29:d5:5d:d7:d7: 8d:7d:5c:3c:03:4d:7c:43:fd:41:fd:01:cc:28:79:ed:7b:0b: a7:5f:8e:ec:bc:0d:f8:18:94:26:69:1b:ca:1b:47:a5:da:d7: 2f:ab:ea:39:5a:e0:d3:df:db:d9:99:a2:49:9a:39:db:35:eb: b0:b5:e0:62:e3:48:9a:01:4f:f5:99:c3:c4:b9:f4:37:08:7e: 0d:49:28:88:36:1c:d3:cd:f1:8b:c2:da:22:d5:33:aa:ee:52: 2e:fd:11:dd:48:a4:60:f6:05:bb:6a:18:30:0b:74:9e:de:30: 31:33:2e:df:d3:f6:b8:75:98:e3:ac:79:b6:96:24:dc:68:f7: 46:a4:20:b5:ae:f4:6c:39:09:13:55:23:9e:cf:4b:11:90:24: 69:06:1c:3b:20:24:97:c2:ca:92:87:4e:82:28:da:57:5c:60: 24:ba:1c:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFQcrQjllOx2QyHJal/PYa90r4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNTEyMDIwODIwMzFaFw0yNTEyMDUxMTQ3MzFaMDMxMTAvBgNV BAMTKDNGMEUyMkNCNkY2QjNCQUMxNEU1MTk1RjMyNDRBRkQxMTk2RDNCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrDKBNo44JpXuG0N5A8Up5DAt xgV26iFeaJvDyjEw9brRgyYAyv9YnjNMM8qzT3Ms+zG8xyPfjphEeHnVo29Wvxol p0X2Ho9c01ZgGlCGh2cUUIolv7PZYvVAzlV1WCtmejkj+55S7D/z31UmJVcwvhal iuH1n7vh8yvM65vX3He/knLH4vQ+GPi5GIggDrlb7wHwKQiyBYBFpboC7GgD09uH VXWtuyemDbb6+CC0TJVObyNW5GZnyN1PUkXA4Amywhec+jemb4Yq+7cTYBj5PPmz maBCJWbxMGpKtHiHhfpFYFxt/KMzS6YZTBOEhaEYboez9YClfJ8Hfz/krVp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPw4iy29rO6wU5RlfMkSv0RltO4YwHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpNvs1KMYLyKAj6QPA3iKcTcIOwSNmwL688 TNIdvsSHXufc/taMxbNnrn790O50pPUdsjhKb1PMSB2KvfjpLAI3aiqfZ3AmTESg RpLbymcnqtyyrhkp1V3X1419XDwDTXxD/UH9Acwoee17C6dfjuy8DfgYlCZpG8ob R6Xa1y+r6jla4NPf29mZokmaOds167C14GLjSJoBT/WZw8S59DcIfg1JKIg2HNPN 8YvC2iLVM6ruUi79Ed1IpGD2BbtqGDALdJ7eMDEzLt/T9rh1mOOsebaWJNxo90ak ILWu9Gw5CRNVI57PSxGQJGkGHDsgJJfCypKHToIo2ldcYCS6HFc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:56 2025 by rpki-client