This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft (raw, json) Hash identifier: srPEC5oiDzvJp6cZNGcRyxvX7WmxIZAhqJX73ff40kM= Subject key identifier: 68:3D:EC:D7:4C:D0:FA:12:92:35:B1:A5:46:86:BF:BA:94:C6:4A:6F Authority key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Certificate issuer: /CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Certificate serial: 79DF14142FB5D8D4F4CD128CF9C85F1E766C94CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft Manifest number: 01E9 Signing time: Wed 17 Dec 2025 20:02:28 +0000 Manifest this update: Wed 17 Dec 2025 19:57:28 +0000 Manifest next update: Sun 21 Dec 2025 05:36:28 +0000 Files and hashes: 1: D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl (hash: IQk3uBIPWOZOiIyrQ6N0B5Oagn85BQp1CTimwEzDf88=) 2: 3130332e33392e37332e302f32342d3234203d3e20313530343838.roa (hash: qhQA0cj7kuBqIGVwCLG9U/r/eXfYDiDRD7UKEazkyf0=) 3: 3130332e33392e37322e302f32342d3234203d3e20313530343838.roa (hash: PWfgrIEAW5Ka7/l46DQwRT/6uSCPsoFbZO34zUTjWEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:df:14:14:2f:b5:d8:d4:f4:cd:12:8c:f9:c8:5f:1e:76:6c:94:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Validity Not Before: Dec 17 19:57:28 2025 GMT Not After : Dec 21 05:36:28 2025 GMT Subject: CN=683DECD74CD0FA129235B1A54686BFBA94C64A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:c7:02:7c:27:7e:ca:5d:dd:3a:8b:3b:f6: 8e:fe:0a:11:00:19:4c:84:bc:c5:45:a4:db:2d:cb: 2c:a5:1f:4a:26:2e:93:6e:0e:1c:de:6e:82:1e:40: 58:d9:76:ee:2b:0f:40:dc:ff:0c:c8:7b:87:b7:b3: 39:1d:bc:e4:d0:69:01:91:fc:3a:c9:21:8a:e3:a2: 00:11:98:51:74:5c:73:7f:cb:45:13:a5:e2:78:c0: bf:c8:4c:9d:ed:5a:67:b1:6c:ed:f3:0a:54:29:3c: 4e:c4:2c:b1:b5:08:d9:c7:7f:e0:be:6e:ca:61:e5: f9:69:db:ae:48:1d:43:97:8c:2b:8f:35:dc:78:33: 93:9e:dd:13:e5:bf:f9:78:2e:54:ab:1a:ee:9e:0e: 66:93:c4:21:3f:6c:99:64:bd:ce:73:d9:1c:11:3a: c4:11:76:66:43:0a:c6:38:5c:d8:74:c4:74:99:0f: 3b:7d:b2:7d:42:e6:d4:35:c2:4e:61:84:e2:17:1d: 18:67:29:ac:93:0e:19:5b:11:ce:e2:e6:dc:83:8e: 85:4c:51:4c:1a:ed:2f:a9:14:1b:73:61:02:71:30: af:9d:58:1b:97:3d:b5:94:5b:28:76:4c:4c:f3:e0: 44:47:f8:1d:37:73:92:1f:ed:e9:8f:c4:23:4b:e8: c4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:3D:EC:D7:4C:D0:FA:12:92:35:B1:A5:46:86:BF:BA:94:C6:4A:6F X509v3 Authority Key Identifier: keyid:D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:67:57:99:b4:f3:74:b7:46:c8:77:8a:71:18:1a:81:f0:37: 3a:58:01:98:69:41:94:91:5b:79:ed:05:68:99:58:96:cd:73: 43:a5:4f:e6:c8:5f:1e:34:3b:9b:62:6f:3e:ac:cd:32:fa:38: 83:7c:67:f7:9e:86:39:b7:fb:c1:5f:41:26:00:8b:0c:23:2b: 11:17:5f:00:e7:10:56:3a:c3:64:e9:a9:a0:f1:d5:1b:a7:75: 0d:4f:9e:44:d3:c0:12:f6:ab:01:78:bf:14:31:67:64:81:ae: 6a:5f:88:91:9a:0c:a5:4b:a1:78:cd:8f:38:e7:52:b9:51:20: b2:fa:c4:63:cf:5b:b9:9d:c8:fa:a8:f6:27:1b:41:27:ee:e6: b3:c8:3c:94:59:92:ee:9f:f3:a1:84:eb:6b:20:d9:de:85:16: 9f:56:43:b5:a1:f9:5a:73:a7:5f:53:3f:84:03:ed:e0:94:17: 85:bd:ca:8c:90:d8:8a:74:b2:81:2a:c6:82:8d:7e:2f:bf:26: 30:79:59:36:e0:72:76:9b:5f:01:13:63:b6:b6:80:20:6e:b9: 31:0b:32:4b:62:db:3d:76:a4:80:76:26:26:27:4e:7e:4d:30: 4f:82:2e:df:1f:dc:46:89:c2:25:9d:ba:5c:29:f1:a7:d5:49: aa:64:6f:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUed8UFC+12NT0zRKM+chfHnZslM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0 OTNCNUQyOTAeFw0yNTEyMTcxOTU3MjhaFw0yNTEyMjEwNTM2MjhaMDMxMTAvBgNV BAMTKDY4M0RFQ0Q3NENEMEZBMTI5MjM1QjFBNTQ2ODZCRkJBOTRDNjRBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdKscCfCd+yl3dOos79o7+ChEA GUyEvMVFpNstyyylH0omLpNuDhzeboIeQFjZdu4rD0Dc/wzIe4e3szkdvOTQaQGR /DrJIYrjogARmFF0XHN/y0UTpeJ4wL/ITJ3tWmexbO3zClQpPE7ELLG1CNnHf+C+ bsph5flp265IHUOXjCuPNdx4M5Oe3RPlv/l4LlSrGu6eDmaTxCE/bJlkvc5z2RwR OsQRdmZDCsY4XNh0xHSZDzt9sn1C5tQ1wk5hhOIXHRhnKayTDhlbEc7i5tyDjoVM UUwa7S+pFBtzYQJxMK+dWBuXPbWUWyh2TEzz4ERH+B03c5If7emPxCNL6MT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaD3s10zQ+hKSNbGlRoa/upTGSm8wHwYDVR0j BBgwFoAU1uVK9sQ3hoiZuZ9DEs09u0k7XSkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMC9ENkU1NEFGNkM0 Mzc4Njg4OTlCOTlGNDMxMkNEM0RCQjQ5M0I1RDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNEQkI0OTNC NUQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBjNzNhZjUtYTJjMC00MjRkLTg2 MmUtMTEyYzU4YjcyNzBlLzAvRDZFNTRBRjZDNDM3ODY4ODk5Qjk5RjQzMTJDRDNE QkI0OTNCNUQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5nV5m083S3Rsh3inEYGoHwNzpYAZhpQZSR W3ntBWiZWJbNc0OlT+bIXx40O5tibz6szTL6OIN8Z/eehjm3+8FfQSYAiwwjKxEX XwDnEFY6w2TpqaDx1RundQ1PnkTTwBL2qwF4vxQxZ2SBrmpfiJGaDKVLoXjNjzjn UrlRILL6xGPPW7mdyPqo9icbQSfu5rPIPJRZku6f86GE62sg2d6FFp9WQ7Wh+Vpz p19TP4QD7eCUF4W9yoyQ2Ip0soEqxoKNfi+/JjB5WTbgcnabXwETY7a2gCBuuTEL Mkti2z12pIB2JiYnTn5NME+CLt8f3EaJwiWdulwp8afVSapkb7w= -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:38 2025 by rpki-client