This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft File: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft (raw, json) Hash identifier: YZiU1w+lDsUvG8ZI8MrtryqYoGbnZP/DSXWXle8z8dI= Subject key identifier: 6E:62:66:21:18:57:C5:A7:73:DC:0A:C9:48:19:3D:D3:66:C6:AC:13 Authority key identifier: D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 Certificate issuer: /CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Certificate serial: 02445F9089D7C5B2C6A697829C96B07E6CBBF5C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft Manifest number: 0274 Signing time: Wed 17 Dec 2025 07:52:14 +0000 Manifest this update: Wed 17 Dec 2025 07:47:14 +0000 Manifest next update: Sat 20 Dec 2025 12:38:14 +0000 Files and hashes: 1: D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl (hash: qER+0JwqOth+j7J0ImZ/rINoicgR/TaMTU0skKqbqgA=) 2: 3130332e3138312e3235322e302f32332d3234203d3e20313439333838.roa (hash: +6hr9I24K4H44FcYhHYBXgx5KKaUgX1+M7GrBEyUPNA=) 3: 323030313a6466303a376163303a3a2f34382d3438203d3e20313439333838.roa (hash: i+MoEz8eS3RKxf5DE+oBdBXLAZikYN1wJCHUVs+azh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:44:5f:90:89:d7:c5:b2:c6:a6:97:82:9c:96:b0:7e:6c:bb:f5:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14 Validity Not Before: Dec 17 07:47:14 2025 GMT Not After : Dec 20 12:38:14 2025 GMT Subject: CN=6E6266211857C5A773DC0AC948193DD366C6AC13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8d:4e:c5:f4:88:fb:a7:dd:0c:c5:a7:94:a2: e6:4e:02:59:ad:d0:b0:88:97:19:68:55:8e:4a:b3: d4:f5:85:f7:ce:9d:79:8b:5e:44:7e:cb:87:30:49: 27:82:06:76:c4:50:f8:a7:88:2d:34:0d:12:fb:af: 57:0e:bc:0f:99:a2:6b:45:1a:d9:90:35:0a:a6:b7: 4e:b6:2e:ea:ef:08:29:77:4b:80:70:0b:71:81:fb: f7:ed:90:20:db:27:8a:2c:05:23:80:0c:88:16:68: d1:a0:57:9f:50:3a:70:4d:ad:9a:b1:37:bf:15:08: 1a:b0:87:88:c1:ff:98:e0:f6:54:21:60:7f:71:33: 7c:46:ef:72:5d:3f:c6:22:1b:30:07:6c:9c:94:b6: 0a:3b:ca:42:58:1d:e8:a9:03:0f:89:02:f6:03:31: e5:92:f1:ad:74:cf:6f:54:f0:ec:cf:e1:04:14:f6: b0:03:eb:40:bc:2c:cf:20:ea:b8:b8:c2:14:d4:84: fc:0f:b2:37:92:b7:8b:89:99:06:30:1e:39:bf:b6: 77:df:c9:4f:cf:c6:14:88:9e:13:d2:00:0e:61:04: bc:8b:ed:f1:cc:3a:54:5d:f5:27:0f:5c:9c:83:5d: 43:dc:e8:26:61:c9:c6:74:5a:61:44:dd:32:d5:98: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:62:66:21:18:57:C5:A7:73:DC:0A:C9:48:19:3D:D3:66:C6:AC:13 X509v3 Authority Key Identifier: keyid:D2:9E:D5:B5:FC:4D:BF:FE:44:7D:DD:02:2C:0D:01:EB:00:BA:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/285243e5-c660-4112-bdc3-594412dedc4d/0/D29ED5B5FC4DBFFE447DDD022C0D01EB00BA8F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:91:ed:bc:4b:5b:d4:9b:e9:93:c2:7d:eb:89:a3:c1:64:3d: 5f:2c:ad:1c:7f:af:ff:04:73:39:69:af:f1:8b:ef:58:89:4a: c4:a2:14:b6:14:0b:d9:fc:6b:ce:e1:c4:ef:8c:93:f4:2f:af: 2b:d6:5f:e6:de:0b:3f:60:04:c2:bb:66:94:5f:d0:54:76:96: 9f:b6:f1:15:47:78:e9:e6:63:d4:3d:55:79:f4:b4:9c:d4:87: 91:3d:b7:60:82:bd:15:1d:bb:69:18:b5:dd:76:48:9e:77:7c: 28:75:34:f3:ab:d4:8b:f4:31:c9:cd:40:9e:5b:88:ae:c6:df: b3:94:44:52:7b:37:ba:6e:98:69:aa:61:63:24:c1:92:e6:09: 37:bf:0b:2a:48:c3:be:9c:e3:16:07:dd:de:05:90:ce:14:4f: b2:96:fb:4d:ab:d6:9c:5c:76:ab:7d:86:72:d8:a4:98:99:c9: 74:39:39:8e:d9:50:80:03:62:af:05:43:9a:ac:4e:8c:ed:9a: bf:f8:80:06:5c:f1:8f:e8:92:d7:b8:cf:46:3e:9b:9b:de:12: 28:c1:dc:84:55:0f:a9:b0:d6:f1:a5:fe:d6:50:6e:c2:f8:80: 64:ff:0a:be:d3:25:0c:a4:5b:83:1d:b5:9f:4d:87:d4:10:f3: ca:05:b0:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAkRfkInXxbLGppeCnJawfmy79ccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIw MEJBOEYxNDAeFw0yNTEyMTcwNzQ3MTRaFw0yNTEyMjAxMjM4MTRaMDMxMTAvBgNV BAMTKDZFNjI2NjIxMTg1N0M1QTc3M0RDMEFDOTQ4MTkzREQzNjZDNkFDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjU7F9Ij7p90MxaeUouZOAlmt 0LCIlxloVY5Ks9T1hffOnXmLXkR+y4cwSSeCBnbEUPiniC00DRL7r1cOvA+ZomtF GtmQNQqmt062LurvCCl3S4BwC3GB+/ftkCDbJ4osBSOADIgWaNGgV59QOnBNrZqx N78VCBqwh4jB/5jg9lQhYH9xM3xG73JdP8YiGzAHbJyUtgo7ykJYHeipAw+JAvYD MeWS8a10z29U8OzP4QQU9rAD60C8LM8g6ri4whTUhPwPsjeSt4uJmQYwHjm/tnff yU/PxhSInhPSAA5hBLyL7fHMOlRd9ScPXJyDXUPc6CZhycZ0WmFE3TLVmPs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbmJmIRhXxadz3ArJSBk902bGrBMwHwYDVR0j BBgwFoAU0p7VtfxNv/5Efd0CLA0B6wC6jxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODUyNDNlNS1jNjYwLTQxMTItYmRjMy01OTQ0MTJkZWRjNGQvMC9EMjlFRDVCNUZD NERCRkZFNDQ3REREMDIyQzBEMDFFQjAwQkE4RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAxRUIwMEJB OEYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg1MjQzZTUtYzY2MC00MTEyLWJk YzMtNTk0NDEyZGVkYzRkLzAvRDI5RUQ1QjVGQzREQkZGRTQ0N0RERDAyMkMwRDAx RUIwMEJBOEYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKR7bxLW9Sb6ZPCfeuJo8FkPV8srRx/r/8E czlpr/GL71iJSsSiFLYUC9n8a87hxO+Mk/QvryvWX+beCz9gBMK7ZpRf0FR2lp+2 8RVHeOnmY9Q9VXn0tJzUh5E9t2CCvRUdu2kYtd12SJ53fCh1NPOr1Iv0McnNQJ5b iK7G37OURFJ7N7pumGmqYWMkwZLmCTe/CypIw76c4xYH3d4FkM4UT7KW+02r1pxc dqt9hnLYpJiZyXQ5OY7ZUIADYq8FQ5qsToztmr/4gAZc8Y/okte4z0Y+m5veEijB 3IRVD6mw1vGl/tZQbsL4gGT/Cr7TJQykW4MdtZ9Nh9QQ88oFsM8= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:42 2025 by rpki-client