This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: QQ4Czq3krTHhq95pv0CuOGjzynFBh2VhqoeXyhjST14= Subject key identifier: 8C:E5:6D:8C:53:B0:DE:44:9D:B0:C1:10:93:B3:BF:C8:26:67:DF:0B Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 5CC9D9F2E2533C4CA740C57BC2A9153B23271B52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 01FC Signing time: Wed 17 Dec 2025 09:11:45 +0000 Manifest this update: Wed 17 Dec 2025 09:06:45 +0000 Manifest next update: Sat 20 Dec 2025 16:59:45 +0000 Files and hashes: 1: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: j7YlhR36DLRMIO7U5Ey4pP7HOtJn96uGn45BiTHze9U=) 2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: swZnIrS/N8jbG3MiapPB8F24idMt8GRsGrJ6YtoYjjc=) 3: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c9:d9:f2:e2:53:3c:4c:a7:40:c5:7b:c2:a9:15:3b:23:27:1b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Dec 17 09:06:45 2025 GMT Not After : Dec 20 16:59:45 2025 GMT Subject: CN=8CE56D8C53B0DE449DB0C11093B3BFC82667DF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8d:42:70:24:dd:19:39:ef:bd:9e:d2:b8:cf: b2:2d:c1:e9:b7:19:85:8f:69:b6:bd:65:7e:5d:3c: 8c:00:7d:2d:1e:99:aa:65:b6:2b:5d:e1:18:7d:d5: fb:4e:f1:ce:0e:79:56:d7:10:34:4c:1c:83:80:27: 3e:58:7e:87:d7:a2:3c:2e:bf:44:43:82:aa:f5:b1: 21:4f:95:53:12:cf:38:91:15:66:ad:bb:1e:c7:1c: 43:ac:6e:17:28:12:37:54:61:8c:4d:6a:f1:9c:a6: be:f2:e4:4d:2d:f3:f6:f5:e0:f1:f1:3b:d6:80:09: 54:b4:66:71:91:16:34:e2:8f:f9:6a:57:08:ef:82: 9d:12:e3:2d:97:41:51:31:e9:3b:e4:d3:8e:53:6a: 16:69:0a:e6:3a:12:47:96:5e:4f:4a:4f:14:3d:19: 59:f8:1d:83:4c:f4:09:a5:d5:e4:8d:39:56:4c:94: 90:54:95:42:1a:39:89:01:60:34:5b:8b:f3:be:85: 80:0e:64:c4:8e:9b:fb:82:12:4e:a9:51:cd:b4:ed: 1e:ee:95:20:8f:82:32:b5:ac:fb:f8:15:6d:c1:9a: d3:08:70:dc:84:00:57:ba:e0:76:1a:e4:48:eb:10: b8:86:8d:ce:ef:85:e4:d1:97:ce:14:0e:4e:76:a3: 78:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E5:6D:8C:53:B0:DE:44:9D:B0:C1:10:93:B3:BF:C8:26:67:DF:0B X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:5f:98:f5:4b:55:a3:c2:2a:19:75:61:02:82:5b:ae:0e:91: 76:ce:a2:a2:99:b0:8a:25:5e:e9:16:5d:33:cc:00:91:d4:1e: de:fc:4d:78:5e:a0:ca:1f:60:52:3a:2c:73:f0:cb:58:48:d7: a0:29:73:a7:fb:70:6c:50:4b:d4:86:41:27:a9:24:c6:5d:44: 53:f7:0e:50:55:74:e8:5a:3a:3e:79:e0:d9:e9:6f:26:e2:df: 3e:29:2c:d0:0f:38:d7:17:2c:26:dd:9c:19:b9:4d:c9:31:63: 1a:94:7c:54:94:36:3e:9d:1d:67:9b:b0:a1:e4:7c:c7:d3:0a: b3:6f:87:9a:e8:d9:22:e0:b1:e2:fc:b6:6d:1b:6b:c1:33:79: cd:45:45:26:bd:ec:a7:03:de:cf:28:dd:d5:34:bf:f8:f3:f9: b4:f8:4e:9e:d1:95:89:da:01:bf:84:71:2d:27:6b:1a:95:a3: 2f:d0:c0:f3:ab:bc:4c:d7:b7:7c:c5:ea:27:16:de:de:ec:e9: a9:a7:73:fb:a5:f1:b7:5d:36:6d:9e:4b:dc:99:9d:65:63:9a: 18:38:f9:1a:d6:b6:79:43:26:c8:c3:ad:3a:0f:2e:79:ac:5d: 94:f9:7d:34:f3:dc:cd:52:86:b6:66:10:4f:a4:93:ac:28:4a: ae:c3:e4:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMnZ8uJTPEynQMV7wqkVOyMnG1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTEyMTcwOTA2NDVaFw0yNTEyMjAxNjU5NDVaMDMxMTAvBgNV BAMTKDhDRTU2RDhDNTNCMERFNDQ5REIwQzExMDkzQjNCRkM4MjY2N0RGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjUJwJN0ZOe+9ntK4z7Itwem3 GYWPaba9ZX5dPIwAfS0emapltitd4Rh91ftO8c4OeVbXEDRMHIOAJz5YfofXojwu v0RDgqr1sSFPlVMSzziRFWatux7HHEOsbhcoEjdUYYxNavGcpr7y5E0t8/b14PHx O9aACVS0ZnGRFjTij/lqVwjvgp0S4y2XQVEx6Tvk045TahZpCuY6EkeWXk9KTxQ9 GVn4HYNM9Aml1eSNOVZMlJBUlUIaOYkBYDRbi/O+hYAOZMSOm/uCEk6pUc207R7u lSCPgjK1rPv4FW3BmtMIcNyEAFe64HYa5EjrELiGjc7vheTRl84UDk52o3j/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjOVtjFOw3kSdsMEQk7O/yCZn3wswHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFfmPVLVaPCKhl1YQKCW64OkXbOoqKZsIol XukWXTPMAJHUHt78TXheoMofYFI6LHPwy1hI16Apc6f7cGxQS9SGQSepJMZdRFP3 DlBVdOhaOj554Nnpbybi3z4pLNAPONcXLCbdnBm5TckxYxqUfFSUNj6dHWebsKHk fMfTCrNvh5ro2SLgseL8tm0ba8Ezec1FRSa97KcD3s8o3dU0v/jz+bT4Tp7RlYna Ab+EcS0naxqVoy/QwPOrvEzXt3zF6icW3t7s6amnc/ul8bddNm2eS9yZnWVjmhg4 +RrWtnlDJsjDrToPLnmsXZT5fTTz3M1ShrZmEE+kk6woSq7D5CU= -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:14 2025 by rpki-client