This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json) Hash identifier: KD1i+kCShZ87b9Xx6nZ6M78HeNXfxlMWx72HpPGmTcQ= Subject key identifier: C4:81:67:45:87:6A:FF:64:3F:47:18:37:B2:8A:0A:45:10:45:CA:ED Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 134050ED9DDF313FC338875FA7EC478096B406BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft Manifest number: 0228 Signing time: Tue 02 Dec 2025 10:21:16 +0000 Manifest this update: Tue 02 Dec 2025 10:16:16 +0000 Manifest next update: Fri 05 Dec 2025 12:01:16 +0000 Files and hashes: 1: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: rSj9OVlqtiPPskUUwR+sB8KTVHxG2CyA4iMG/fwGrQ8=) 2: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: VCYhvGiXZB9n/oDG9GtAxT8cnbK/zgxkVrx6Oy1OVTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:40:50:ed:9d:df:31:3f:c3:38:87:5f:a7:ec:47:80:96:b4:06:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Dec 2 10:16:16 2025 GMT Not After : Dec 5 12:01:16 2025 GMT Subject: CN=C4816745876AFF643F471837B28A0A451045CAED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:18:70:7a:26:41:da:7a:4a:04:a7:8a:94: 3a:40:f3:ec:3e:3b:18:c3:ff:e2:75:ef:38:2e:cf: 16:2d:84:ea:bd:e7:ef:bc:17:e9:3d:0f:6a:63:31: 25:78:48:8c:9b:41:13:0d:ab:9b:8e:ad:93:d6:e7: 78:9a:65:3b:d9:eb:9d:02:19:70:d2:2b:9e:5c:41: 96:f6:12:aa:37:7d:6d:0c:8f:01:c4:48:6c:41:37: 39:2d:6e:54:c5:4e:8e:b0:15:03:14:90:1b:09:22: 3f:c4:0f:b6:c8:3b:d2:6f:12:09:0c:36:be:fb:ee: c9:93:f6:e6:4c:8a:31:52:25:4a:b6:f3:2c:45:9d: 78:a4:34:14:2d:ac:cd:ad:ab:30:d1:cf:f4:a4:f6: b7:98:e0:e2:55:5b:ce:bb:7d:74:2d:fb:70:d5:c1: a4:b1:ff:11:90:f8:3b:4f:10:91:b1:07:6a:87:e6: d1:b2:7f:18:86:f6:6b:b7:74:02:37:8b:cd:94:22: d9:f7:33:fe:f5:85:55:70:ca:9b:a7:c5:30:12:69: b8:d8:58:36:a7:c9:e9:04:d1:ea:63:44:0f:40:06: 2a:42:1b:ed:d7:84:fe:57:87:17:f3:3b:c3:e2:d0: 15:8a:0c:5e:51:a9:1a:2b:03:f6:f9:82:62:47:3f: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:81:67:45:87:6A:FF:64:3F:47:18:37:B2:8A:0A:45:10:45:CA:ED X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:8e:fa:0c:04:b9:dd:6f:39:7d:3d:e1:94:65:5a:8a:be:d3: 61:63:6d:19:30:41:62:b8:61:80:ad:cc:e0:4d:c5:55:67:b5: ed:fa:bb:cf:67:d7:b3:0a:a6:77:39:27:de:95:b4:fd:fc:21: e4:b1:5b:51:88:c3:8c:3d:ea:f3:82:23:35:4f:06:be:ac:56: c0:37:a0:aa:fa:a8:3c:ac:34:c6:ba:ee:8c:69:f5:c8:29:3b: 7e:fe:e8:5d:2d:df:94:3e:0e:14:d9:2b:54:34:59:b5:ae:65: 6e:c7:61:ec:56:bc:6d:9b:be:ee:cb:25:f8:04:0e:47:a0:9c: ca:d6:01:55:4a:33:d6:8e:99:bc:ae:d1:89:e6:11:04:18:6a: 4e:23:cf:49:24:af:f8:31:ae:0a:a7:49:c3:0f:f9:4a:84:48: ac:e3:39:d1:fa:0e:57:bb:12:18:40:1f:6a:34:6c:70:0a:0c: 3f:d6:6c:af:fd:39:eb:8c:37:75:33:45:31:8b:fc:65:75:18: fc:6f:4a:fc:81:24:cc:7c:59:13:70:8f:9e:3f:c1:ff:fa:02: 3c:fa:3e:33:75:0e:dc:76:95:1c:29:19:3b:46:f4:81:01:54: 47:16:74:db:ca:f0:89:a4:77:aa:90:c4:f2:a6:43:1d:4e:7f: c2:59:2c:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0BQ7Z3fMT/DOIdfp+xHgJa0Br8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNTEyMDIxMDE2MTZaFw0yNTEyMDUxMjAxMTZaMDMxMTAvBgNV BAMTKEM0ODE2NzQ1ODc2QUZGNjQzRjQ3MTgzN0IyOEEwQTQ1MTA0NUNBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeRhhweiZB2npKBKeKlDpA8+w+ OxjD/+J17zguzxYthOq95++8F+k9D2pjMSV4SIybQRMNq5uOrZPW53iaZTvZ650C GXDSK55cQZb2Eqo3fW0MjwHESGxBNzktblTFTo6wFQMUkBsJIj/ED7bIO9JvEgkM Nr777smT9uZMijFSJUq28yxFnXikNBQtrM2tqzDRz/Sk9reY4OJVW867fXQt+3DV waSx/xGQ+DtPEJGxB2qH5tGyfxiG9mu3dAI3i82UItn3M/71hVVwypunxTASabjY WDanyekE0epjRA9ABipCG+3XhP5XhxfzO8Pi0BWKDF5RqRorA/b5gmJHP257AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxIFnRYdq/2Q/Rxg3sooKRRBFyu0wHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5 NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADuO+gwEud1vOX094ZRlWoq+02FjbRkwQWK4 YYCtzOBNxVVnte36u89n17MKpnc5J96VtP38IeSxW1GIw4w96vOCIzVPBr6sVsA3 oKr6qDysNMa67oxp9cgpO37+6F0t35Q+DhTZK1Q0WbWuZW7HYexWvG2bvu7LJfgE DkegnMrWAVVKM9aOmbyu0YnmEQQYak4jz0kkr/gxrgqnScMP+UqESKzjOdH6Dle7 EhhAH2o0bHAKDD/WbK/9OeuMN3UzRTGL/GV1GPxvSvyBJMx8WRNwj54/wf/6Ajz6 PjN1Dtx2lRwpGTtG9IEBVEcWdNvK8Imkd6qQxPKmQx1Of8JZLEs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:25 2025 by rpki-client