This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: Cg11xmR4gG7pVzfmkEmKgMIC66Wbmz/vY9+dvx89ieg= Subject key identifier: 2B:67:62:C7:0B:4E:9A:7F:D6:E5:C3:42:87:22:EB:8E:34:8E:EE:DA Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 0AF7B26CF12598E61A548E5BD033093D047AC54C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 02C5 Signing time: Tue 02 Dec 2025 07:12:23 +0000 Manifest this update: Tue 02 Dec 2025 07:07:23 +0000 Manifest next update: Fri 05 Dec 2025 18:16:23 +0000 Files and hashes: 1: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: 1jPInc5U6URjX3meWhlxPbDxjpQGJ1QN5SejhkzTz/c=) 2: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: veFUUZaHhHDpj6KmBcnJnR41ugvnsdBmWkSb2+LTSCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f7:b2:6c:f1:25:98:e6:1a:54:8e:5b:d0:33:09:3d:04:7a:c5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Dec 2 07:07:23 2025 GMT Not After : Dec 5 18:16:23 2025 GMT Subject: CN=2B6762C70B4E9A7FD6E5C3428722EB8E348EEEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:a8:ca:d6:24:bc:97:2b:b7:fb:df:28:8b: ef:11:6f:8d:6c:f0:c1:9b:44:bc:40:d6:01:b9:f8: 3c:e8:a6:ae:8f:cd:b2:e9:ae:eb:39:37:26:cd:90: 88:71:d9:59:cc:8f:80:a0:24:74:98:9f:67:88:a5: 9d:01:04:a8:69:8a:5d:c0:2f:cd:05:3c:7f:c6:fc: 12:c6:90:f0:24:df:0c:33:88:e0:fe:e7:54:88:6c: f3:a0:c5:e4:ab:34:a7:69:59:70:83:0b:a1:f6:11: ac:ed:ed:c4:b8:f8:59:5f:58:2c:fc:bb:c1:c6:f0: 50:74:8d:11:c9:bd:25:8b:d5:a1:bb:68:69:48:99: 0c:d3:c1:7c:52:ef:85:cd:73:03:35:88:4f:37:97: 37:6e:94:b6:f6:0d:72:fe:fb:86:81:14:da:84:ca: 1e:07:b6:5a:96:e7:37:7a:7a:55:8c:e1:b1:95:a6: dc:43:33:73:27:d2:c7:83:71:b3:6a:9d:53:7e:67: d7:ed:52:5a:c5:ac:9e:91:aa:a6:ac:6c:76:19:20: 7d:58:80:f7:84:9a:55:98:39:5c:d7:0c:9c:2d:c8: 20:e7:5f:5d:e3:aa:37:6f:33:ec:14:04:39:76:2c: f8:2a:25:92:19:47:9a:25:c6:2c:7f:cd:a0:19:ba: 0f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:67:62:C7:0B:4E:9A:7F:D6:E5:C3:42:87:22:EB:8E:34:8E:EE:DA X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7c:00:45:20:50:bf:39:8c:c9:26:77:2d:c4:a3:60:35:db: 06:5d:60:c9:5c:ce:7a:b4:af:1f:df:a0:ca:37:eb:ed:3f:29: a8:c1:a6:47:45:c3:83:a3:bd:82:9c:c4:3d:46:b8:74:8e:60: 31:6f:57:4e:ee:26:95:e2:b3:61:be:4f:75:44:e1:70:bf:8c: 27:9b:b3:54:ce:ad:0d:b3:6d:46:e1:f4:36:17:51:5e:e0:2e: 1e:4b:c7:63:c9:60:1c:32:4c:83:f7:b1:ba:69:6a:8b:64:0f: f3:2c:a8:e1:b6:d7:89:82:01:6e:90:07:4d:e3:ab:2a:1c:7b: 60:2c:11:7e:7e:7f:46:f2:e6:b0:ed:7d:52:fe:87:f4:6a:b7: d6:da:bc:69:7e:d3:fd:5a:ae:6a:69:cc:e8:73:9b:77:c7:8f: e7:72:65:63:06:49:86:0b:65:a6:f9:60:94:80:e7:d0:83:41: 98:fd:cd:af:90:f0:dc:7b:bb:be:96:82:19:64:a7:66:72:d9: 8a:0d:58:b5:e4:57:1b:0a:bc:3b:50:78:19:e4:28:ee:91:ee: b7:d2:22:eb:97:b7:40:89:9c:c7:61:89:08:a4:90:b0:37:65: 05:4f:bd:81:6e:c5:d7:77:8b:ff:43:86:4f:1f:b3:77:49:0a: 28:5e:ff:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCveybPElmOYaVI5b0DMJPQR6xUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTEyMDIwNzA3MjNaFw0yNTEyMDUxODE2MjNaMDMxMTAvBgNV BAMTKDJCNjc2MkM3MEI0RTlBN0ZENkU1QzM0Mjg3MjJFQjhFMzQ4RUVFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChw6jK1iS8lyu3+98oi+8Rb41s 8MGbRLxA1gG5+Dzopq6PzbLprus5NybNkIhx2VnMj4CgJHSYn2eIpZ0BBKhpil3A L80FPH/G/BLGkPAk3wwziOD+51SIbPOgxeSrNKdpWXCDC6H2Eazt7cS4+FlfWCz8 u8HG8FB0jRHJvSWL1aG7aGlImQzTwXxS74XNcwM1iE83lzdulLb2DXL++4aBFNqE yh4HtlqW5zd6elWM4bGVptxDM3Mn0seDcbNqnVN+Z9ftUlrFrJ6RqqasbHYZIH1Y gPeEmlWYOVzXDJwtyCDnX13jqjdvM+wUBDl2LPgqJZIZR5olxix/zaAZug9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2dixwtOmn/W5cNChyLrjjSO7towHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGt8AEUgUL85jMkmdy3Eo2A12wZdYMlcznq0 rx/foMo36+0/KajBpkdFw4OjvYKcxD1GuHSOYDFvV07uJpXis2G+T3VE4XC/jCeb s1TOrQ2zbUbh9DYXUV7gLh5Lx2PJYBwyTIP3sbppaotkD/MsqOG214mCAW6QB03j qyoce2AsEX5+f0by5rDtfVL+h/Rqt9bavGl+0/1armppzOhzm3fHj+dyZWMGSYYL Zab5YJSA59CDQZj9za+Q8Nx7u76Wghlkp2Zy2YoNWLXkVxsKvDtQeBnkKO6R7rfS IuuXt0CJnMdhiQikkLA3ZQVPvYFuxdd3i/9Dhk8fs3dJCihe/6E= -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:34 2025 by rpki-client