This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: Wrt/GXl2X1/PwdnX0CJRsnF+UR5rJMuFoOLBfbCdJOg= Subject key identifier: 0E:D2:10:93:55:AA:93:52:97:B4:F4:9F:D0:2F:5B:BE:16:99:98:71 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 710F5BF84918154A51F3FAFF8004296BEF5CE676 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: 0103 Signing time: Wed 17 Dec 2025 17:51:59 +0000 Manifest this update: Wed 17 Dec 2025 17:46:59 +0000 Manifest next update: Sun 21 Dec 2025 03:45:59 +0000 Files and hashes: 1: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) 2: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 3: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) 4: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: qj47nKLMJ/PmGW4c9xfBaQI2VUh22M2WFg7DBhcB76Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0f:5b:f8:49:18:15:4a:51:f3:fa:ff:80:04:29:6b:ef:5c:e6:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Dec 17 17:46:59 2025 GMT Not After : Dec 21 03:45:59 2025 GMT Subject: CN=0ED2109355AA935297B4F49FD02F5BBE16999871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:c0:c3:be:58:66:0a:e5:08:c1:53:fd:62: 38:75:77:0c:d0:ec:9c:75:d6:08:77:c0:65:96:96: 27:1b:0a:b5:3f:cd:ff:9a:3f:b7:da:56:90:bc:81: 36:55:ad:d6:ca:a4:47:e7:0d:5c:3d:82:88:1d:51: f8:04:0e:fe:70:be:8d:3b:12:9c:ab:98:11:ad:4c: 60:a3:35:f3:1e:1e:c4:1e:0b:8f:f7:af:b1:38:e5: 40:81:0a:b3:36:3b:ad:b5:26:c3:11:89:bf:32:65: 2d:9d:a3:73:e9:c5:42:d2:96:5f:cf:64:fd:15:d8: 88:f9:0e:99:3e:f9:fe:97:97:4f:51:12:a7:37:c2: f8:15:7d:6f:17:26:e9:54:7b:e2:1a:f9:17:04:30: eb:f6:91:65:95:00:54:17:63:12:91:ca:a3:ab:4e: e8:91:ae:f3:c4:9b:23:b0:71:fc:a4:b8:c8:af:e8: 1c:8d:bc:27:33:af:7b:c8:53:9f:f1:38:22:44:73: 4b:81:32:85:af:53:f1:00:f8:25:82:8e:7c:16:75: c1:aa:97:1e:86:e3:50:3d:42:ae:37:7d:84:1f:b0: 1d:e8:3b:50:f8:ec:13:3f:af:d1:d4:b7:e3:74:96: 1a:c1:d1:1f:c0:8d:9e:a2:48:cb:8b:4f:0c:02:3f: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D2:10:93:55:AA:93:52:97:B4:F4:9F:D0:2F:5B:BE:16:99:98:71 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:12:7c:79:b5:0f:e4:36:a5:89:97:e0:f6:28:69:7f:2d:10: a8:47:e7:7b:1d:7b:31:64:6d:e2:d9:e1:58:e3:b5:12:15:f1: da:34:de:4a:45:5d:b3:c1:b3:28:f7:fd:04:cb:08:07:f7:34: 87:ab:ca:0c:b8:82:c0:10:14:84:8b:c2:fd:f3:d7:4e:5d:9e: f2:55:62:3e:2b:b6:1f:66:d4:c9:40:67:73:d1:43:53:bd:f7: cc:ae:ce:a0:26:70:cb:57:8a:78:0e:d6:f1:5b:6e:1f:06:91: 25:bf:8b:04:ef:8f:a6:0e:85:90:db:7c:b7:e9:b3:fb:d5:e0: ed:84:75:1a:5f:43:c3:06:85:97:08:64:ea:5f:05:8a:23:18: 99:68:10:b2:20:f3:d3:66:97:5e:50:1f:6d:37:1e:ca:7d:99: 5c:ab:42:f9:24:4c:a9:43:e4:78:f1:5b:74:53:fb:2a:b8:c0: 0c:01:39:a1:7a:41:51:e7:89:ee:58:e3:53:84:d8:14:3b:1e: e1:4e:b9:12:66:7f:cc:64:3a:59:6a:ed:f9:2a:b5:39:32:2f: c4:55:b8:03:36:a0:ad:ab:88:a7:80:82:62:d3:c4:d5:2e:0c: ae:1d:e6:58:b6:03:4d:a9:01:ea:7f:78:ef:0e:37:b0:3c:98: 77:90:28:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQ9b+EkYFUpR8/r/gAQpa+9c5nYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTEyMTcxNzQ2NTlaFw0yNTEyMjEwMzQ1NTlaMDMxMTAvBgNV BAMTKDBFRDIxMDkzNTVBQTkzNTI5N0I0RjQ5RkQwMkY1QkJFMTY5OTk4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh2MDDvlhmCuUIwVP9Yjh1dwzQ 7Jx11gh3wGWWlicbCrU/zf+aP7faVpC8gTZVrdbKpEfnDVw9gogdUfgEDv5wvo07 EpyrmBGtTGCjNfMeHsQeC4/3r7E45UCBCrM2O621JsMRib8yZS2do3PpxULSll/P ZP0V2Ij5Dpk++f6Xl09REqc3wvgVfW8XJulUe+Ia+RcEMOv2kWWVAFQXYxKRyqOr TuiRrvPEmyOwcfykuMiv6ByNvCczr3vIU5/xOCJEc0uBMoWvU/EA+CWCjnwWdcGq lx6G41A9Qq43fYQfsB3oO1D47BM/r9HUt+N0lhrB0R/AjZ6iSMuLTwwCP6X/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDtIQk1Wqk1KXtPSf0C9bvhaZmHEwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgSfHm1D+Q2pYmX4PYoaX8tEKhH53sdezFk beLZ4VjjtRIV8do03kpFXbPBsyj3/QTLCAf3NIerygy4gsAQFISLwv3z105dnvJV Yj4rth9m1MlAZ3PRQ1O998yuzqAmcMtXingO1vFbbh8GkSW/iwTvj6YOhZDbfLfp s/vV4O2EdRpfQ8MGhZcIZOpfBYojGJloELIg89Nml15QH203Hsp9mVyrQvkkTKlD 5HjxW3RT+yq4wAwBOaF6QVHnie5Y41OE2BQ7HuFOuRJmf8xkOllq7fkqtTkyL8RV uAM2oK2riKeAgmLTxNUuDK4d5li2A02pAep/eO8ON7A8mHeQKO8= -----END CERTIFICATE-----Generated at Fri Dec 19 08:51:53 2025 by rpki-client