This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: cpqNlWnlyoOIwjI1i58R+/+C3LH1AvovHU1MCFmggWc= Subject key identifier: 79:E7:15:2A:AB:79:0D:23:C2:C5:3C:50:CD:64:A4:E3:43:C2:89:4C Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 23587AD657EF94D097D9D9B5C1C7F78E56EE3596 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 0533 Signing time: Fri 19 Dec 2025 03:20:05 +0000 Manifest this update: Fri 19 Dec 2025 03:15:05 +0000 Manifest next update: Mon 22 Dec 2025 07:36:05 +0000 Files and hashes: 1: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 2: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) 3: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: fe5b65lPiLujeIvoFoBUrpoFGcuQGAoliCcCHJ1PVYs=) 4: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:58:7a:d6:57:ef:94:d0:97:d9:d9:b5:c1:c7:f7:8e:56:ee:35:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Dec 19 03:15:05 2025 GMT Not After : Dec 22 07:36:05 2025 GMT Subject: CN=79E7152AAB790D23C2C53C50CD64A4E343C2894C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:83:36:f1:b8:80:45:8d:9f:2c:71:e7:c4: 88:12:da:d7:c8:72:2d:fe:5e:56:18:a0:02:83:1e: fd:50:78:6c:d2:be:40:43:18:0c:b2:0f:eb:70:27: 9b:a9:a8:d9:00:57:18:e4:0e:7b:1e:b5:76:59:17: ff:cb:a6:d7:d9:5c:77:5d:c1:74:fc:51:15:86:1e: 55:2f:c9:3a:88:49:1a:69:0a:65:8f:41:46:6c:4d: 79:d4:ed:65:89:79:a8:c3:f8:9f:4a:1f:2a:82:a5: ca:d4:2f:fc:e1:69:f8:88:92:3a:8a:56:08:7e:20: 22:17:35:8a:eb:f0:ab:a4:01:d0:3c:7b:56:8e:c8: e6:7c:e4:df:52:b6:d0:af:45:f8:57:b4:87:9e:59: 18:61:62:b1:8b:1a:48:30:85:0b:14:78:9e:8d:98: 37:cd:96:93:ca:83:ee:a0:e3:f6:fc:eb:7a:5d:17: 23:40:2c:00:e6:e9:b8:c7:6c:b9:9f:3b:a8:18:49: 6e:16:8e:22:7e:63:c9:ca:be:6a:01:59:7f:52:f4: 8b:0f:21:52:95:eb:c5:b3:a8:06:32:8e:5c:9b:d2: 19:c5:79:3a:db:34:b7:ca:52:8d:eb:fe:0e:04:48: 46:cb:56:74:cc:1b:ae:53:37:d7:a1:0f:9b:6f:bf: 2d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E7:15:2A:AB:79:0D:23:C2:C5:3C:50:CD:64:A4:E3:43:C2:89:4C X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:3e:59:53:89:af:8a:37:50:51:98:b2:24:de:48:25:4c:a6: 72:0d:bc:ae:9f:7e:3c:e3:2b:54:4b:fb:9b:31:dc:3c:54:35: d8:f9:8f:22:25:f4:d0:e2:d6:9f:05:a1:4d:60:1b:e8:21:52: fe:41:c5:bd:ba:3f:42:2b:5a:4a:41:56:ad:99:01:0a:41:0a: 64:59:69:18:06:a8:94:e1:9f:c1:e6:32:52:fc:d5:a9:27:93: 7f:44:32:3d:b4:3a:f9:5b:44:21:e2:1d:87:79:c8:db:c5:c2: 54:d6:35:30:cf:89:09:f5:f7:aa:d9:00:45:0f:bf:73:4b:f7: cd:0a:f8:3b:75:47:f2:fe:2c:b1:95:67:c8:91:dc:be:95:a5: d3:d3:be:83:4a:72:9b:20:00:d8:01:c6:b2:7d:59:8d:56:87: 8b:56:02:ed:a0:fc:49:2d:90:fb:71:7b:ba:05:98:a8:c1:f9: 72:c5:0c:98:d7:7b:e9:f1:64:3a:11:36:8b:91:2f:47:ba:77: e7:69:14:b2:d0:8c:cb:a9:7b:ce:ff:2e:a5:93:de:be:27:bc: 24:05:66:09:13:90:bb:d7:50:93:f7:21:fb:7f:26:32:02:5d: 4e:d7:fd:ab:b6:2f:b6:1b:2d:91:59:3e:0c:67:b7:30:cb:3b: 41:0a:31:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1h61lfvlNCX2dm1wcf3jlbuNZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNTEyMTkwMzE1MDVaFw0yNTEyMjIwNzM2MDVaMDMxMTAvBgNV BAMTKDc5RTcxNTJBQUI3OTBEMjNDMkM1M0M1MENENjRBNEUzNDNDMjg5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKy4M28biARY2fLHHnxIgS2tfI ci3+XlYYoAKDHv1QeGzSvkBDGAyyD+twJ5upqNkAVxjkDnsetXZZF//LptfZXHdd wXT8URWGHlUvyTqISRppCmWPQUZsTXnU7WWJeajD+J9KHyqCpcrUL/zhafiIkjqK Vgh+ICIXNYrr8KukAdA8e1aOyOZ85N9SttCvRfhXtIeeWRhhYrGLGkgwhQsUeJ6N mDfNlpPKg+6g4/b863pdFyNALADm6bjHbLmfO6gYSW4WjiJ+Y8nKvmoBWX9S9IsP IVKV68WzqAYyjlyb0hnFeTrbNLfKUo3r/g4ESEbLVnTMG65TN9ehD5tvvy1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeecVKqt5DSPCxTxQzWSk40PCiUwwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIE+WVOJr4o3UFGYsiTeSCVMpnINvK6ffjzj K1RL+5sx3DxUNdj5jyIl9NDi1p8FoU1gG+ghUv5Bxb26P0IrWkpBVq2ZAQpBCmRZ aRgGqJThn8HmMlL81aknk39EMj20OvlbRCHiHYd5yNvFwlTWNTDPiQn196rZAEUP v3NL980K+Dt1R/L+LLGVZ8iR3L6VpdPTvoNKcpsgANgBxrJ9WY1Wh4tWAu2g/Ekt kPtxe7oFmKjB+XLFDJjXe+nxZDoRNouRL0e6d+dpFLLQjMupe87/LqWT3r4nvCQF ZgkTkLvXUJP3Ift/JjICXU7X/au2L7YbLZFZPgxntzDLO0EKMRM= -----END CERTIFICATE-----Generated at Sat Dec 20 18:37:34 2025 by rpki-client