This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: c/cnjoMlBoXj2t3w/9T/COPrSicHUKL4nkv3BhX+caU= Subject key identifier: 79:81:FC:89:68:EB:1D:A8:7E:52:8F:57:BA:9A:77:23:78:43:72:49 Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 0E1E0FC3FC809B82AC1D4CA05E86886F76A9E35A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 019C Signing time: Fri 19 Dec 2025 10:24:00 +0000 Manifest this update: Fri 19 Dec 2025 10:19:00 +0000 Manifest next update: Mon 22 Dec 2025 18:42:00 +0000 Files and hashes: 1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) 2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: 12c8MUaEbfrq60HgWdqaqtQCTqfYFak4tFo0MidD/RI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 18:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1e:0f:c3:fc:80:9b:82:ac:1d:4c:a0:5e:86:88:6f:76:a9:e3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Dec 19 10:19:00 2025 GMT Not After : Dec 22 18:42:00 2025 GMT Subject: CN=7981FC8968EB1DA87E528F57BA9A772378437249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:17:07:51:c9:fd:ad:3d:0e:fb:4e:69:27: 86:77:8b:94:6f:86:54:f9:83:ca:47:cf:90:40:7a: bf:f6:e0:1a:85:93:82:c5:3e:1b:8a:7e:4d:8e:d7: e4:22:44:30:24:03:69:b9:4c:5b:0a:4d:d4:5d:f9: 05:b0:1a:be:6b:ac:ad:16:08:4a:a0:06:d3:91:82: 39:1f:d9:74:61:55:f5:11:77:6f:20:a4:a6:b8:2d: 03:92:e9:38:c7:e4:d4:52:5e:d4:fa:98:0a:19:73: 59:c3:1f:16:df:fe:5b:fc:bb:81:fe:28:6c:95:0b: 94:a8:e1:81:25:65:e8:10:45:47:6f:72:31:f1:92: 0d:d0:80:bf:5b:ce:e3:0e:d8:6b:a1:c8:b5:dc:6e: fa:dc:12:0b:92:ac:ab:14:fd:1b:c7:88:cf:15:4e: db:54:63:14:11:20:35:32:1e:d4:01:37:e1:8a:1d: 8b:d7:d2:1f:c3:31:b2:f7:d0:c3:72:6c:c9:bd:94: 5b:87:3e:de:1c:93:6e:c3:e3:ec:2f:ac:40:47:18: 2b:90:28:99:cc:2e:0b:e6:a6:12:81:02:3b:0e:bd: 9f:bb:a9:a7:e1:50:4c:68:7c:1e:56:94:07:c6:cb: 8f:6d:19:51:55:32:47:d8:d7:bd:3c:d6:db:f0:e8: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:81:FC:89:68:EB:1D:A8:7E:52:8F:57:BA:9A:77:23:78:43:72:49 X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2f:b9:c4:fb:87:e5:25:6a:af:f1:d2:90:25:36:e0:2f:af: 39:40:8b:38:9d:24:6b:95:2d:68:49:23:f1:1b:ec:0e:3c:77: fa:2d:3c:f5:bd:f6:e3:93:13:82:de:e7:b6:04:66:9b:6f:ed: b1:62:67:4d:7b:26:eb:55:d8:1e:64:5c:4c:f6:18:81:65:20: 7f:ec:41:54:31:ec:16:6b:fd:14:f1:53:07:4b:ab:b3:6c:bf: 6b:de:e4:1e:77:96:6b:28:de:f9:bf:04:d7:84:23:97:0a:ab: 18:57:d9:57:06:5a:d5:ec:fe:93:d0:f0:6c:49:42:9a:b4:31: 09:ea:9e:b9:f9:23:26:09:8f:c2:6a:5c:a2:97:bc:19:80:a5: 97:95:e7:92:ff:f1:97:f3:aa:1b:eb:3e:11:ec:cb:c1:1e:90: ae:c3:9a:1a:72:c9:41:aa:cd:44:30:a3:0d:b7:72:b9:f4:cb: 56:14:6d:47:8f:b1:58:80:56:a0:9e:52:b1:64:70:f3:dc:71: a3:04:35:30:37:39:e6:07:0f:6d:12:4d:c8:dd:bb:12:7b:22: d0:3e:6b:cb:ce:33:b0:32:51:64:a8:9a:81:c8:d7:f7:78:39: 2c:c8:9b:c4:0e:0b:72:61:21:63:9f:07:60:2b:ae:78:f7:57: cf:98:6c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDh4Pw/yAm4KsHUygXoaIb3ap41owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTEyMTkxMDE5MDBaFw0yNTEyMjIxODQyMDBaMDMxMTAvBgNV BAMTKDc5ODFGQzg5NjhFQjFEQTg3RTUyOEY1N0JBOUE3NzIzNzg0MzcyNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HhcHUcn9rT0O+05pJ4Z3i5Rv hlT5g8pHz5BAer/24BqFk4LFPhuKfk2O1+QiRDAkA2m5TFsKTdRd+QWwGr5rrK0W CEqgBtORgjkf2XRhVfURd28gpKa4LQOS6TjH5NRSXtT6mAoZc1nDHxbf/lv8u4H+ KGyVC5So4YElZegQRUdvcjHxkg3QgL9bzuMO2GuhyLXcbvrcEguSrKsU/RvHiM8V TttUYxQRIDUyHtQBN+GKHYvX0h/DMbL30MNybMm9lFuHPt4ck27D4+wvrEBHGCuQ KJnMLgvmphKBAjsOvZ+7qafhUExofB5WlAfGy49tGVFVMkfY17081tvw6PaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeYH8iWjrHah+Uo9Xupp3I3hDckkwHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4vucT7h+Ulaq/x0pAlNuAvrzlAizidJGuV LWhJI/Eb7A48d/otPPW99uOTE4Le57YEZptv7bFiZ017JutV2B5kXEz2GIFlIH/s QVQx7BZr/RTxUwdLq7Nsv2ve5B53lmso3vm/BNeEI5cKqxhX2VcGWtXs/pPQ8GxJ Qpq0MQnqnrn5IyYJj8JqXKKXvBmApZeV55L/8ZfzqhvrPhHsy8EekK7DmhpyyUGq zUQwow23crn0y1YUbUePsViAVqCeUrFkcPPccaMENTA3OeYHD20STcjduxJ7ItA+ a8vOM7AyUWSomoHI1/d4OSzIm8QOC3JhIWOfB2Arrnj3V8+YbL4= -----END CERTIFICATE-----Generated at Sun Dec 21 08:59:46 2025 by rpki-client