This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: KnpsLNKcqHRFPNaZm1w1D7QrHp52URqO6vNcNdbOcCI= Subject key identifier: A3:06:68:E1:78:DD:70:34:10:90:6F:01:7F:CF:58:78:C2:8B:51:15 Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 517A9B85031AD77460683188800F694D7A70CDC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: B2 Signing time: Wed 24 Dec 2025 08:31:49 +0000 Manifest this update: Wed 24 Dec 2025 08:26:49 +0000 Manifest next update: Sat 27 Dec 2025 14:24:49 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: anXzJOA7nF5A16CF37qnY4RRKxQ8lXt69eUCSdsd+9Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:7a:9b:85:03:1a:d7:74:60:68:31:88:80:0f:69:4d:7a:70:cd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Dec 24 08:26:49 2025 GMT Not After : Dec 27 14:24:49 2025 GMT Subject: CN=A30668E178DD703410906F017FCF5878C28B5115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:cd:f4:10:06:fb:dd:c1:e2:c6:cb:ec:b2: eb:23:bd:b5:1f:9d:86:c2:b3:23:f4:23:c0:84:76: da:60:87:37:e4:ab:f2:de:b3:95:9f:f5:11:5f:06: 8e:e0:57:c1:6e:28:42:ae:df:61:a5:13:22:c8:37: 72:5b:c5:35:e2:f2:e1:ea:45:0f:9f:55:4d:db:bf: c2:e1:88:b1:a4:b9:1b:c6:8b:20:c0:31:19:2e:ed: ed:71:a3:98:ba:c2:09:66:ba:31:92:d9:35:bd:ed: 23:7c:a7:f3:69:a4:92:3c:51:59:bc:2f:97:9c:0c: 30:4e:d5:99:73:2c:0e:0f:30:86:b8:93:73:cc:79: ab:c9:54:19:0d:8f:57:6d:0f:04:45:0c:0d:91:76: f6:b1:44:4b:b5:7d:df:8e:c8:ff:95:79:24:92:f4: e9:f5:ee:ff:f0:f4:4d:e3:7c:cd:cf:6b:39:40:2b: 38:52:82:77:22:4e:3f:23:97:6d:7d:c9:0e:a4:27: 4a:5a:dc:a8:d0:2b:25:16:0f:ce:2d:e6:4e:f2:93: 4a:eb:06:5b:fe:97:48:8d:49:47:3d:95:01:09:2b: 9b:37:f3:e4:5b:ec:e3:22:66:10:66:a9:d2:3c:aa: a6:4f:f8:82:89:33:a9:92:97:eb:69:46:08:56:00: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:06:68:E1:78:DD:70:34:10:90:6F:01:7F:CF:58:78:C2:8B:51:15 X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5f:ba:1c:21:69:d1:6c:24:54:eb:4d:6f:95:1a:9b:a2:5a: 35:b7:c0:3f:58:14:80:88:42:79:65:5c:6c:2c:41:8c:6e:3b: 0d:52:fe:df:61:60:47:2f:65:b3:c8:74:92:bf:65:07:1d:2e: bf:03:58:33:41:ee:38:82:09:5d:9a:c3:43:b4:ed:dd:e9:bf: 7e:38:2c:a9:5f:6a:7f:ee:3f:79:7a:4e:ed:3c:96:9f:97:a3: 69:30:98:2a:44:24:5b:fd:af:9b:84:f6:14:3c:e9:9f:97:c6: 0d:f5:61:a7:99:bc:73:e7:f3:43:bf:72:ef:4d:11:1c:1b:a9: 70:18:80:26:3c:e3:df:53:a6:a3:2a:c9:14:19:6a:a9:f1:85: 0f:18:86:a4:d7:92:ca:c8:d9:e2:49:82:a5:8f:17:e5:d1:9b: a9:2a:17:27:57:2a:6a:60:d1:6d:9f:cf:62:db:81:bd:1a:8e: 68:0b:29:97:a6:50:63:24:8b:b8:52:bb:8d:37:8d:01:2c:00: 6f:40:a1:11:4d:a5:b3:b9:a4:4e:83:4d:b3:fa:33:0c:bc:5c: fa:2c:d7:36:d2:66:a3:3d:a7:92:58:75:24:8b:dd:37:6d:1e: c8:ef:c4:97:46:f6:22:bb:03:2d:01:31:9e:5b:eb:ef:b5:e8: ea:75:8d:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXqbhQMa13RgaDGIgA9pTXpwzcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTEyMjQwODI2NDlaFw0yNTEyMjcxNDI0NDlaMDMxMTAvBgNV BAMTKEEzMDY2OEUxNzhERDcwMzQxMDkwNkYwMTdGQ0Y1ODc4QzI4QjUxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnT830EAb73cHixsvssusjvbUf nYbCsyP0I8CEdtpghzfkq/Les5Wf9RFfBo7gV8FuKEKu32GlEyLIN3JbxTXi8uHq RQ+fVU3bv8LhiLGkuRvGiyDAMRku7e1xo5i6wglmujGS2TW97SN8p/NppJI8UVm8 L5ecDDBO1ZlzLA4PMIa4k3PMeavJVBkNj1dtDwRFDA2RdvaxREu1fd+OyP+VeSSS 9On17v/w9E3jfM3PazlAKzhSgnciTj8jl219yQ6kJ0pa3KjQKyUWD84t5k7yk0rr Blv+l0iNSUc9lQEJK5s38+Rb7OMiZhBmqdI8qqZP+IKJM6mSl+tpRghWAKYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUowZo4XjdcDQQkG8Bf89YeMKLURUwHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdfuhwhadFsJFTrTW+VGpuiWjW3wD9YFICI QnllXGwsQYxuOw1S/t9hYEcvZbPIdJK/ZQcdLr8DWDNB7jiCCV2aw0O07d3pv344 LKlfan/uP3l6Tu08lp+Xo2kwmCpEJFv9r5uE9hQ86Z+Xxg31YaeZvHPn80O/cu9N ERwbqXAYgCY8499TpqMqyRQZaqnxhQ8YhqTXksrI2eJJgqWPF+XRm6kqFydXKmpg 0W2fz2Lbgb0ajmgLKZemUGMki7hSu403jQEsAG9AoRFNpbO5pE6DTbP6Mwy8XPos 1zbSZqM9p5JYdSSL3TdtHsjvxJdG9iK7Ay0BMZ5b6++16Op1jWI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:21 2025 by rpki-client