This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: c0Q8yAB+vwUUbMzMGUCVhtjfYzQSVqca57+QL8QKZqw= Subject key identifier: AF:2E:8B:9F:00:30:72:34:FD:A2:C4:E5:6F:C9:19:BB:14:31:CE:11 Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 73EE70F4C1CB9C4C27EE51DCE3E68BC171B560C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: 015D Signing time: Tue 02 Dec 2025 04:31:09 +0000 Manifest this update: Tue 02 Dec 2025 04:26:09 +0000 Manifest next update: Fri 05 Dec 2025 13:10:09 +0000 Files and hashes: 1: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: gY0MYBLnrNGMInBtjBk2fVW/5Y8HTuVN7KMpfZNbvwM=) 2: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=) 3: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: dJaS59sTNR5P0zfWxcM9Q8SeRwLPq4ilnHYQElEDNMo=) 4: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: SKJZzMluKq00JBmF5/d650z98Z0AIDWxzsgU3N64Gpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ee:70:f4:c1:cb:9c:4c:27:ee:51:dc:e3:e6:8b:c1:71:b5:60:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Dec 2 04:26:09 2025 GMT Not After : Dec 5 13:10:09 2025 GMT Subject: CN=AF2E8B9F00307234FDA2C4E56FC919BB1431CE11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:78:5b:d9:a0:6f:62:59:5b:84:f4:e9:7e: e6:03:27:11:e0:e1:8a:8a:52:03:0c:2a:17:a6:fe: 25:a5:29:04:d4:0d:21:44:82:01:fa:c1:5e:cd:f5: 3e:f1:90:55:86:f8:c0:54:f7:db:ea:85:c2:f2:52: 5e:09:b0:df:9f:34:1e:59:a2:44:2d:22:79:01:c4: 0e:4c:dd:70:b1:36:ac:0b:ae:92:f6:77:22:f9:8a: 1e:21:4f:55:00:ff:f7:3f:de:65:b3:35:30:01:33: c1:16:9b:a0:9c:5c:59:f4:77:9e:27:b2:74:41:52: 00:a1:53:0b:65:d7:d7:ce:5a:1f:a6:c3:0e:bb:28: 30:34:27:dd:28:e1:b7:2d:47:3a:9f:05:02:a0:77: 80:c8:c1:3e:25:c5:ca:e3:f2:4d:cc:66:7a:90:92: f0:47:d9:85:ec:39:24:94:96:fe:b8:62:13:cb:a4: 2d:ea:33:74:73:85:5f:5c:bc:eb:77:54:fa:c3:68: e6:9b:65:a3:db:41:43:eb:96:ee:a5:eb:b0:77:49: 03:f4:29:ec:d1:87:31:a6:67:a0:ba:f9:de:9b:4c: af:f4:e7:a3:52:a3:c4:c6:e8:c0:f1:d4:02:f6:69: 4e:85:11:2b:77:32:1a:58:b3:b6:dd:9b:60:45:29: 1b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2E:8B:9F:00:30:72:34:FD:A2:C4:E5:6F:C9:19:BB:14:31:CE:11 X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b9:bc:1c:96:8c:75:2e:bb:7f:fe:5e:07:a5:e8:f1:b5:51: f0:13:1f:75:77:86:15:30:20:1c:72:82:e0:ff:2e:79:82:76: ac:0e:38:b5:86:f9:12:e6:e4:c3:77:4d:71:52:40:4a:c6:ce: d4:6f:04:07:ee:2d:83:14:f7:1c:db:b9:31:44:76:9e:84:1e: 32:8b:37:46:da:6f:2e:dc:44:a9:a6:4a:48:53:23:f9:55:11: 03:a5:cf:75:78:36:a2:8b:89:2f:40:da:7a:b7:04:5d:fb:49: 36:96:a8:91:0b:a8:a4:28:a0:9e:43:05:49:e7:16:2a:44:b0: 89:b0:28:d4:9d:7c:49:7e:f4:7d:22:47:b6:ad:a2:02:01:50: a2:9b:a9:bc:7a:fb:07:04:61:1e:85:11:8d:1f:68:bb:5e:1c: 25:36:22:70:d3:97:6f:ae:c5:f8:3f:2e:2a:30:c5:71:0f:c0: 85:fd:b8:50:27:84:b2:fd:f0:be:fd:22:33:0a:9d:de:1e:1a: d2:a3:38:17:71:34:92:13:13:50:7f:cd:66:5d:b3:75:c5:28: 32:c0:87:fe:27:41:79:7d:3d:79:af:48:af:8d:e1:68:42:0a: 33:5d:af:40:c2:dc:a5:41:15:e7:8e:62:4d:0b:57:86:8a:91: d4:e4:6a:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+5w9MHLnEwn7lHc4+aLwXG1YMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNTEyMDIwNDI2MDlaFw0yNTEyMDUxMzEwMDlaMDMxMTAvBgNV BAMTKEFGMkU4QjlGMDAzMDcyMzRGREEyQzRFNTZGQzkxOUJCMTQzMUNFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJnhb2aBvYllbhPTpfuYDJxHg 4YqKUgMMKhem/iWlKQTUDSFEggH6wV7N9T7xkFWG+MBU99vqhcLyUl4JsN+fNB5Z okQtInkBxA5M3XCxNqwLrpL2dyL5ih4hT1UA//c/3mWzNTABM8EWm6CcXFn0d54n snRBUgChUwtl19fOWh+mww67KDA0J90o4bctRzqfBQKgd4DIwT4lxcrj8k3MZnqQ kvBH2YXsOSSUlv64YhPLpC3qM3RzhV9cvOt3VPrDaOabZaPbQUPrlu6l67B3SQP0 KezRhzGmZ6C6+d6bTK/056NSo8TG6MDx1AL2aU6FESt3MhpYs7bdm2BFKRvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUry6LnwAwcjT9osTlb8kZuxQxzhEwHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG65vByWjHUuu3/+Xgel6PG1UfATH3V3hhUw IBxyguD/LnmCdqwOOLWG+RLm5MN3TXFSQErGztRvBAfuLYMU9xzbuTFEdp6EHjKL N0baby7cRKmmSkhTI/lVEQOlz3V4NqKLiS9A2nq3BF37STaWqJELqKQooJ5DBUnn FipEsImwKNSdfEl+9H0iR7atogIBUKKbqbx6+wcEYR6FEY0faLteHCU2InDTl2+u xfg/LiowxXEPwIX9uFAnhLL98L79IjMKnd4eGtKjOBdxNJITE1B/zWZds3XFKDLA h/4nQXl9PXmvSK+N4WhCCjNdr0DC3KVBFeeOYk0LV4aKkdTkahI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:25 2025 by rpki-client