This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: M9czYZP/P84eNRWQDFurN5b8yNU2awv93rrmltp5JUQ= Subject key identifier: 37:04:C6:FD:88:12:6E:29:FC:8E:71:23:A8:81:36:43:A4:4E:D4:FC Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 26B0CB56842A4ACC91B138DA5B1FFF6FB732CA46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 014C Signing time: Wed 03 Dec 2025 05:02:04 +0000 Manifest this update: Wed 03 Dec 2025 04:57:04 +0000 Manifest next update: Sat 06 Dec 2025 05:45:04 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: VvHLmuXRMUHqTPfrpSgqTa3OVr8h9pb8S/5kTj+y7+8=) 2: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: 5X7826WFNeELKaAsmxJTzRNx2PcpuhWxciQuyA+Ql5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b0:cb:56:84:2a:4a:cc:91:b1:38:da:5b:1f:ff:6f:b7:32:ca:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Dec 3 04:57:04 2025 GMT Not After : Dec 6 05:45:04 2025 GMT Subject: CN=3704C6FD88126E29FC8E7123A8813643A44ED4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:fb:89:fc:67:54:fc:a8:a6:5a:0a:bb:82: 94:c2:32:6f:95:a8:21:57:e3:5c:a4:88:32:13:6a: ee:9d:4f:a5:0c:b3:bf:ac:82:5f:bc:de:b9:46:26: 36:f4:ba:4f:70:91:0d:b2:00:fa:61:22:af:f0:9e: cb:da:fa:f9:90:81:d9:b0:f7:68:ed:ee:2d:ce:a0: 6b:ab:3d:cc:3e:05:98:e1:f3:8a:a3:2a:ee:37:aa: 45:26:51:6d:b5:f2:76:5a:95:f8:77:6a:35:19:18: 46:c4:ba:0a:19:64:16:e2:72:ba:95:5a:d4:e8:c5: cc:72:21:44:8e:24:b7:75:9c:1c:85:df:49:0c:1a: 9e:84:8b:ed:bd:77:14:c6:f9:47:e9:79:2a:20:c1: c9:0e:e0:bf:ab:5c:50:97:d2:19:55:9b:e4:aa:6a: eb:7e:d6:17:dd:9d:9b:45:53:29:7a:9f:33:6b:78: 49:14:16:9a:4b:80:d1:b9:70:e0:4c:b9:47:3e:15: 5b:2f:8c:44:ad:c8:83:7d:f9:aa:4c:4f:65:6d:e4: 9b:ce:8c:e4:71:cf:6a:78:3a:57:78:32:af:47:63: 46:61:64:69:dc:58:92:ac:67:df:4c:84:46:41:65: 2c:8e:ea:56:74:3b:a0:f9:50:50:85:f3:b6:87:39: 12:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:04:C6:FD:88:12:6E:29:FC:8E:71:23:A8:81:36:43:A4:4E:D4:FC X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bb:38:61:16:69:b7:44:10:fb:74:c7:f7:4b:e8:d2:30:fc: a0:03:c4:11:84:51:b7:ad:f0:4d:d9:c0:61:00:2f:a3:c3:63: c4:12:4f:d4:8a:1e:7b:6c:4c:8c:60:bb:ef:0f:e5:20:cd:a8: 5c:5d:3a:d2:b5:2a:72:48:ec:42:f6:68:89:e8:e6:90:a2:95: 85:ab:9c:8b:13:0b:3c:81:85:97:03:f6:8e:22:f7:6d:ad:53: 21:a0:29:b7:84:ed:d5:5d:82:ac:25:92:a6:d4:d5:7a:51:2e: 48:f9:55:5c:79:3d:2d:87:d5:3b:3f:a0:51:0d:9a:70:cb:06: 11:c9:bd:d7:ce:d6:0b:9a:27:52:64:1f:04:9e:12:fb:bd:5f: c4:1c:e2:f3:d8:b2:13:c2:f0:58:3f:0a:a1:a0:48:b3:8d:70: c7:53:69:79:d8:26:23:df:7f:53:6b:2d:e3:cd:03:01:05:a5: a9:1d:a4:10:18:71:da:2f:7a:ca:4b:74:8a:cf:bd:cc:5b:60: a4:b2:67:b9:33:71:36:51:67:51:59:8f:7e:0e:64:fc:9d:e5: ed:f5:d5:90:2e:9e:09:e1:1f:f7:44:ee:ec:33:64:b7:93:15: 95:4b:5e:29:f8:3d:c2:f8:f1:c1:ad:1a:49:67:eb:49:35:54: 45:a3:b7:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrDLVoQqSsyRsTjaWx//b7cyykYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTEyMDMwNDU3MDRaFw0yNTEyMDYwNTQ1MDRaMDMxMTAvBgNV BAMTKDM3MDRDNkZEODgxMjZFMjlGQzhFNzEyM0E4ODEzNjQzQTQ0RUQ0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwF/uJ/GdU/KimWgq7gpTCMm+V qCFX41ykiDITau6dT6UMs7+sgl+83rlGJjb0uk9wkQ2yAPphIq/wnsva+vmQgdmw 92jt7i3OoGurPcw+BZjh84qjKu43qkUmUW218nZalfh3ajUZGEbEugoZZBbicrqV WtToxcxyIUSOJLd1nByF30kMGp6Ei+29dxTG+UfpeSogwckO4L+rXFCX0hlVm+Sq aut+1hfdnZtFUyl6nzNreEkUFppLgNG5cOBMuUc+FVsvjEStyIN9+apMT2Vt5JvO jORxz2p4Old4Mq9HY0ZhZGncWJKsZ99MhEZBZSyO6lZ0O6D5UFCF87aHORJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNwTG/YgSbin8jnEjqIE2Q6RO1PwwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC67OGEWabdEEPt0x/dL6NIw/KADxBGEUbet 8E3ZwGEAL6PDY8QST9SKHntsTIxgu+8P5SDNqFxdOtK1KnJI7EL2aIno5pCilYWr nIsTCzyBhZcD9o4i922tUyGgKbeE7dVdgqwlkqbU1XpRLkj5VVx5PS2H1Ts/oFEN mnDLBhHJvdfO1guaJ1JkHwSeEvu9X8Qc4vPYshPC8Fg/CqGgSLONcMdTaXnYJiPf f1NrLePNAwEFpakdpBAYcdovespLdIrPvcxbYKSyZ7kzcTZRZ1FZj34OZPyd5e31 1ZAungnhH/dE7uwzZLeTFZVLXin4PcL48cGtGkln60k1VEWjtys= -----END CERTIFICATE-----Generated at Wed Dec 3 16:20:39 2025 by rpki-client