This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: wgTBfCliUAfULJRhH3LGos6oXlQdYeoPewCqQg0Nhec= Subject key identifier: 76:31:3E:95:33:B8:F8:52:94:81:4D:A5:E8:F2:22:F4:00:E0:0D:04 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 65E21E29E8E249E9E7C0455EE1D6E47E614377A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 021F Signing time: Mon 01 Dec 2025 07:21:14 +0000 Manifest this update: Mon 01 Dec 2025 07:16:14 +0000 Manifest next update: Thu 04 Dec 2025 18:06:14 +0000 Files and hashes: 1: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: H+FNrGTWOm2rEbzW4c22NCPKDmaY/bFliACB6RDfaOU=) 2: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: OXRZ526Vg7TmkLT93n/Qe4MisAG7vaUJuVBZqKmzdzU=) 3: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: O5z3Xo1Nnky/IOTkop/M1bRjtVB1wwyahnpcox9iWWM=) 4: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: WbsQ68Cu40oqUa2yh2wFEKvkhfxO2KVKndxoFM4DO5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 18:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e2:1e:29:e8:e2:49:e9:e7:c0:45:5e:e1:d6:e4:7e:61:43:77:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Dec 1 07:16:14 2025 GMT Not After : Dec 4 18:06:14 2025 GMT Subject: CN=76313E9533B8F85294814DA5E8F222F400E00D04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:08:43:50:35:6b:52:62:95:ac:ff:d8:d5: d6:e9:f2:b8:05:9f:dd:86:f5:44:8b:c6:a6:d5:b1: 64:39:f9:7e:33:58:4d:c9:76:d6:2b:19:ba:70:0a: 6e:81:6e:28:2f:45:6f:ae:7c:1a:ca:67:30:ad:62: 8a:f1:50:45:30:f9:d6:9a:6e:64:1a:e0:8a:e7:02: a6:96:3e:ab:14:27:2a:30:a8:f3:d9:21:ea:56:8f: f2:26:d7:fa:d3:c2:78:20:d2:1a:02:0a:c4:e0:16: da:d3:33:91:40:2b:1f:88:80:ed:49:30:02:cf:d8: e9:99:3b:c7:fd:32:bd:d8:ae:31:de:85:32:1d:b5: a2:a4:93:b8:e6:62:96:25:c9:96:20:da:be:ba:9c: d2:4c:79:71:41:1b:f0:92:3c:ff:af:6f:5b:02:f4: 6d:cd:f5:10:36:48:7c:79:7b:cd:92:c6:fe:15:27: f7:73:70:e2:ee:30:3d:ab:fe:5f:62:b7:f8:7e:4f: 5c:47:1c:e0:5f:5d:90:e4:3a:2e:a1:5f:d0:b0:11: a7:31:e1:ae:44:9c:6b:d2:f3:58:ed:4d:83:8f:d2: 1b:d7:eb:5f:a9:47:ec:f7:45:d8:8c:db:35:e8:d9: 02:dd:a5:22:1e:63:5e:6f:27:37:b5:87:ae:7d:82: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:31:3E:95:33:B8:F8:52:94:81:4D:A5:E8:F2:22:F4:00:E0:0D:04 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:52:4a:49:47:43:21:1d:78:b8:45:45:98:e2:b7:a3:12:8d: 08:1c:73:45:0f:16:99:6b:4c:9e:95:51:89:f5:44:26:a6:39: ae:b9:20:f7:67:f2:a7:78:fd:15:9f:54:82:33:23:b0:97:4a: b9:c9:14:01:75:46:2a:7c:39:b6:79:e1:88:ed:7f:6b:ec:9e: ed:85:6c:d7:c6:64:53:68:24:f9:8c:98:15:8d:2d:fc:cc:fe: 1c:47:b3:54:ed:c3:57:a4:fe:01:2c:de:29:d9:70:ce:bc:01: 18:a8:7b:82:ab:e0:7c:42:de:56:2e:ab:ce:97:92:1b:38:c8: a9:4b:cf:82:a5:31:91:af:5d:f9:44:c0:44:39:8d:78:5f:47: 38:27:a8:bb:d1:6e:21:09:4c:f0:0d:be:e0:df:59:fc:92:df: 02:ec:25:3d:b6:2f:c2:fa:c3:20:ee:0f:1d:11:63:4d:ef:aa: fc:9c:56:a6:f4:d5:30:72:ad:8f:82:71:7d:3e:f2:4e:fc:2a: 6c:82:ed:6e:78:c2:7f:3f:05:57:83:c9:91:88:88:25:25:4d: 16:81:2d:4f:f4:0f:27:ec:9f:46:fc:f5:8c:17:bf:d7:3e:16: da:a3:5a:fb:9b:98:de:cc:35:22:4f:8d:12:aa:4a:9e:b0:84: 87:53:34:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeIeKejiSennwEVe4dbkfmFDd6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTEyMDEwNzE2MTRaFw0yNTEyMDQxODA2MTRaMDMxMTAvBgNV BAMTKDc2MzEzRTk1MzNCOEY4NTI5NDgxNERBNUU4RjIyMkY0MDBFMDBEMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLMwhDUDVrUmKVrP/Y1dbp8rgF n92G9USLxqbVsWQ5+X4zWE3JdtYrGbpwCm6BbigvRW+ufBrKZzCtYorxUEUw+daa bmQa4IrnAqaWPqsUJyowqPPZIepWj/Im1/rTwngg0hoCCsTgFtrTM5FAKx+IgO1J MALP2OmZO8f9Mr3YrjHehTIdtaKkk7jmYpYlyZYg2r66nNJMeXFBG/CSPP+vb1sC 9G3N9RA2SHx5e82Sxv4VJ/dzcOLuMD2r/l9it/h+T1xHHOBfXZDkOi6hX9CwEacx 4a5EnGvS81jtTYOP0hvX61+pR+z3RdiM2zXo2QLdpSIeY15vJze1h659ggN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdjE+lTO4+FKUgU2l6PIi9ADgDQQwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNSSklHQyEdeLhFRZjit6MSjQgcc0UPFplr TJ6VUYn1RCamOa65IPdn8qd4/RWfVIIzI7CXSrnJFAF1Rip8ObZ54Yjtf2vsnu2F bNfGZFNoJPmMmBWNLfzM/hxHs1Ttw1ek/gEs3inZcM68ARioe4Kr4HxC3lYuq86X khs4yKlLz4KlMZGvXflEwEQ5jXhfRzgnqLvRbiEJTPANvuDfWfyS3wLsJT22L8L6 wyDuDx0RY03vqvycVqb01TByrY+CcX0+8k78KmyC7W54wn8/BVeDyZGIiCUlTRaB LU/0Dyfsn0b89YwXv9c+FtqjWvubmN7MNSJPjRKqSp6whIdTNF8= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:38 2025 by rpki-client