This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: XMk46d6hmvUT5o/Id1jzMPFtHhaUkJMTAs6StpMNxdk= Subject key identifier: 1C:2B:62:12:14:32:BE:FE:C3:60:1D:2B:8C:88:39:DF:68:E4:1A:C7 Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: 22A3C5AE479466F3603B1030EC755EEBF06F98A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 01C6 Signing time: Mon 01 Dec 2025 07:52:06 +0000 Manifest this update: Mon 01 Dec 2025 07:47:06 +0000 Manifest next update: Thu 04 Dec 2025 16:02:06 +0000 Files and hashes: 1: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: dUe0hmQU6KQCOd09fPZZgvPtywFB0FPE8mQC8G+nQIM=) 2: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: XcmiTK4lbXwTUsCM0a8uD99kDHrKe3SuEWNxjOChLtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a3:c5:ae:47:94:66:f3:60:3b:10:30:ec:75:5e:eb:f0:6f:98:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: Dec 1 07:47:06 2025 GMT Not After : Dec 4 16:02:06 2025 GMT Subject: CN=1C2B62121432BEFEC3601D2B8C8839DF68E41AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:9f:09:4a:b8:84:18:1c:35:15:89:78:8b: f2:c3:c9:f6:cf:1e:be:67:d1:a1:21:fe:0b:42:22: 5a:67:22:fd:33:a0:4f:f9:47:c7:4d:6c:df:4a:ae: fd:04:2d:d7:e3:e1:be:d0:8c:ab:23:86:3b:1b:ad: 7b:0b:0b:5e:b3:17:5d:f5:06:f9:28:fc:99:54:98: a7:ee:86:83:50:9e:33:32:5b:09:a9:e4:26:01:f1: d3:ff:88:e4:01:d3:23:c2:44:1f:34:93:48:b9:21: d4:af:bb:11:53:e5:c0:b0:c9:89:2d:2e:18:b0:89: ec:0f:47:61:c2:31:2f:dc:2f:6b:c0:be:ed:31:53: 62:b8:fb:01:e7:18:e5:9f:be:4b:a3:06:44:a4:91: 55:18:36:9c:37:15:4e:ae:e3:c2:88:d6:9c:8d:fc: a7:a6:23:60:25:13:d9:5c:75:e3:0d:08:09:8b:20: 02:5a:a4:5e:9e:6d:81:e6:f4:0a:85:9c:5d:f0:50: f1:47:5d:b8:81:b2:c0:59:13:03:8e:10:63:8b:05: 2b:77:e8:da:cb:10:c5:65:93:03:94:f1:44:de:cb: d1:5b:9d:db:a6:70:98:ac:5f:50:29:d4:6a:5d:d5: f3:dc:7e:7a:6e:92:fc:71:18:42:31:70:6f:d4:6e: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2B:62:12:14:32:BE:FE:C3:60:1D:2B:8C:88:39:DF:68:E4:1A:C7 X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:3b:8f:b7:ff:2b:f8:6f:e2:a0:c3:90:1e:b3:cb:f5:d1:2f: 26:6a:43:84:79:ff:af:b2:c5:18:7d:c9:dc:59:ac:76:6a:66: 3f:74:82:ee:0d:98:49:c8:60:57:0b:53:84:6b:9f:4a:44:7e: b8:5b:87:d7:97:bd:b7:87:90:25:80:29:96:31:21:b9:ce:de: 5c:c8:f2:30:70:99:e1:f4:43:2d:7c:f5:18:99:5f:cf:0a:ec: c3:d0:44:bf:f2:0c:54:1b:18:40:61:c8:d4:ad:8d:4b:d0:c4: 6d:b5:59:e3:0f:74:3a:af:a9:ae:27:c1:98:59:11:18:c7:c1: e5:ed:57:55:4d:b2:bf:35:79:58:fa:a9:a1:a0:dd:67:5a:a7: ff:5b:e7:6e:8e:2e:b8:14:13:a0:be:2d:32:4b:dc:7f:7d:a8: 27:a7:39:ab:b5:05:12:c3:3e:66:88:df:d5:4c:c2:c0:29:7f: 9e:96:8f:a0:f3:ec:c9:57:4e:5b:38:e0:64:84:96:e3:39:02: cc:b3:b8:0e:61:bf:dd:7d:f4:df:55:aa:a8:8a:2a:53:a1:06: 6d:7c:d6:97:30:76:6a:81:47:87:d8:fb:18:dd:61:86:2d:d2: 5a:64:37:e4:53:ed:93:6b:bf:f3:f8:41:79:7b:6a:68:63:83: 0a:57:75:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIqPFrkeUZvNgOxAw7HVe6/BvmKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNTEyMDEwNzQ3MDZaFw0yNTEyMDQxNjAyMDZaMDMxMTAvBgNV BAMTKDFDMkI2MjEyMTQzMkJFRkVDMzYwMUQyQjhDODgzOURGNjhFNDFBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4z58JSriEGBw1FYl4i/LDyfbP Hr5n0aEh/gtCIlpnIv0zoE/5R8dNbN9Krv0ELdfj4b7QjKsjhjsbrXsLC16zF131 Bvko/JlUmKfuhoNQnjMyWwmp5CYB8dP/iOQB0yPCRB80k0i5IdSvuxFT5cCwyYkt LhiwiewPR2HCMS/cL2vAvu0xU2K4+wHnGOWfvkujBkSkkVUYNpw3FU6u48KI1pyN /KemI2AlE9lcdeMNCAmLIAJapF6ebYHm9AqFnF3wUPFHXbiBssBZEwOOEGOLBSt3 6NrLEMVlkwOU8UTey9FbndumcJisX1Ap1Gpd1fPcfnpukvxxGEIxcG/UbrwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHCtiEhQyvv7DYB0rjIg532jkGscwHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQ7j7f/K/hv4qDDkB6zy/XRLyZqQ4R5/6+y xRh9ydxZrHZqZj90gu4NmEnIYFcLU4Rrn0pEfrhbh9eXvbeHkCWAKZYxIbnO3lzI 8jBwmeH0Qy189RiZX88K7MPQRL/yDFQbGEBhyNStjUvQxG21WeMPdDqvqa4nwZhZ ERjHweXtV1VNsr81eVj6qaGg3Wdap/9b526OLrgUE6C+LTJL3H99qCenOau1BRLD PmaI39VMwsApf56Wj6Dz7MlXTls44GSEluM5AsyzuA5hv9199N9VqqiKKlOhBm18 1pcwdmqBR4fY+xjdYYYt0lpkN+RT7ZNrv/P4QXl7amhjgwpXdY4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:56 2025 by rpki-client