This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: 00F4DRtmBEtabmrFHVpXTm+3ApI1BUC9WI9WcCjOOUg= Subject key identifier: 20:FF:D4:D5:C5:30:D6:9D:5F:E8:FF:57:0B:FB:1C:EE:C8:B1:F4:AC Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 7AFF48F9FBB0A5F571BEE6ECE73483816610E1DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: B3 Signing time: Fri 26 Dec 2025 14:31:45 +0000 Manifest this update: Fri 26 Dec 2025 14:26:45 +0000 Manifest next update: Mon 29 Dec 2025 17:37:45 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: juZ9TshoZ9Gm/sFZsv+yErul2ckbcu6mbtCjixdZNOk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ff:48:f9:fb:b0:a5:f5:71:be:e6:ec:e7:34:83:81:66:10:e1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Dec 26 14:26:45 2025 GMT Not After : Dec 29 17:37:45 2025 GMT Subject: CN=20FFD4D5C530D69D5FE8FF570BFB1CEEC8B1F4AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:b0:17:24:f7:bc:b7:ee:e0:6b:bd:ff:6d: cb:4d:de:10:9a:0e:37:3a:d8:d4:76:95:3d:0d:6c: 29:98:5e:2e:aa:a1:f4:de:ff:e5:a3:2b:df:62:e5: b3:e4:85:54:90:5e:85:f0:d3:16:8c:15:00:12:a9: f8:38:ea:ec:9e:f6:27:32:42:38:db:57:d0:96:cc: 24:74:34:c6:3b:0e:87:2e:ca:66:97:5d:b7:c7:51: d5:98:7f:26:cc:cd:29:56:45:6d:41:26:5f:f0:7c: 8a:de:ed:98:aa:94:2d:ca:ec:f5:2f:c3:22:d2:f5: 11:28:0e:b7:ce:60:ac:e6:71:df:2b:bf:07:2b:1e: a4:57:c9:1a:8d:78:92:f2:e6:a4:01:98:03:92:4c: 59:90:3e:25:f2:30:38:e6:1e:38:1a:af:fc:79:68: 5f:f6:91:87:94:2e:46:8a:48:62:37:8c:08:4e:30: 48:85:f0:5f:37:aa:bd:08:38:ee:80:20:d0:85:7a: 4c:66:5c:01:e2:42:e5:d3:2f:71:56:be:03:7f:bd: db:8b:40:3f:56:92:94:04:3b:f2:56:59:89:58:a9: ab:4c:a6:1f:7e:0d:a6:04:7e:89:8a:c8:b7:a8:b3: d7:14:e1:22:20:17:cb:c8:4a:80:c5:f5:cd:99:08: 9c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FF:D4:D5:C5:30:D6:9D:5F:E8:FF:57:0B:FB:1C:EE:C8:B1:F4:AC X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f0:fd:61:fb:7a:6d:26:e0:ef:43:4a:5d:fc:58:a2:98:57: f7:14:61:5e:1d:d5:29:4e:98:8b:54:a5:d3:56:87:6a:13:06: b1:42:9c:ed:7e:42:9f:c7:76:31:15:73:bd:3d:7d:72:6e:3f: 21:c1:2f:78:8d:85:c6:cc:92:27:17:06:5c:96:f2:d6:d3:95: 9c:a6:be:fa:ec:d1:1f:08:e0:39:f3:1a:f4:a3:99:46:98:1b: eb:f1:1e:e6:35:fc:f1:9a:c7:a9:34:5a:f3:41:08:9c:b0:85: a0:89:d1:a5:3d:38:0e:39:f9:16:14:ed:ae:3a:20:11:95:62: 7f:4d:77:a4:22:c9:d0:80:3f:a7:e8:06:03:db:9e:f2:75:68: 69:38:54:fd:5f:af:6d:7c:eb:3e:1f:9f:51:97:46:88:f3:ca: 2a:fd:7b:3f:60:55:0d:5e:86:df:a8:64:6f:d5:f5:a6:dd:93: 5f:7d:39:30:b5:86:78:b2:f7:22:dd:fd:1a:2a:f6:13:7c:91: 2f:3c:e8:02:1e:69:55:67:d8:8f:f8:a7:3e:96:e8:5f:5c:6f: 91:24:e9:d4:9a:bf:c8:5d:6b:d0:b7:ae:70:d2:2c:0a:10:90: b9:b0:e3:a7:f4:1a:14:09:78:14:ca:00:66:9f:1d:19:6b:c6: 03:d2:31:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUev9I+fuwpfVxvubs5zSDgWYQ4dwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTEyMjYxNDI2NDVaFw0yNTEyMjkxNzM3NDVaMDMxMTAvBgNV BAMTKDIwRkZENEQ1QzUzMEQ2OUQ1RkU4RkY1NzBCRkIxQ0VFQzhCMUY0QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qbAXJPe8t+7ga73/bctN3hCa Djc62NR2lT0NbCmYXi6qofTe/+WjK99i5bPkhVSQXoXw0xaMFQASqfg46uye9icy QjjbV9CWzCR0NMY7DocuymaXXbfHUdWYfybMzSlWRW1BJl/wfIre7ZiqlC3K7PUv wyLS9REoDrfOYKzmcd8rvwcrHqRXyRqNeJLy5qQBmAOSTFmQPiXyMDjmHjgar/x5 aF/2kYeULkaKSGI3jAhOMEiF8F83qr0IOO6AINCFekxmXAHiQuXTL3FWvgN/vduL QD9WkpQEO/JWWYlYqatMph9+DaYEfomKyLeos9cU4SIgF8vISoDF9c2ZCJzNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIP/U1cUw1p1f6P9XC/sc7six9KwwHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3w/WH7em0m4O9DSl38WKKYV/cUYV4d1SlO mItUpdNWh2oTBrFCnO1+Qp/HdjEVc709fXJuPyHBL3iNhcbMkicXBlyW8tbTlZym vvrs0R8I4DnzGvSjmUaYG+vxHuY1/PGax6k0WvNBCJywhaCJ0aU9OA45+RYU7a46 IBGVYn9Nd6QiydCAP6foBgPbnvJ1aGk4VP1fr2186z4fn1GXRojzyir9ez9gVQ1e ht+oZG/V9abdk199OTC1hniy9yLd/Roq9hN8kS886AIeaVVn2I/4pz6W6F9cb5Ek 6dSav8hda9C3rnDSLAoQkLmw46f0GhQJeBTKAGafHRlrxgPSMZo= -----END CERTIFICATE-----Generated at Fri Dec 26 23:10:55 2025 by rpki-client