This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: PjnuQMO6P0FW6CaBl9keUW0H9RMTB2SSer+AXrd3Gsk= Subject key identifier: 02:0E:62:53:01:7A:DB:A5:11:B3:EA:92:27:AC:38:D4:19:4F:89:51 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 509A56C11F5C5FC3FC4677458C6A2CA358B17A42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 0537 Signing time: Tue 23 Dec 2025 13:13:41 +0000 Manifest this update: Tue 23 Dec 2025 13:08:41 +0000 Manifest next update: Sat 27 Dec 2025 00:18:41 +0000 Files and hashes: 1: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: eUkzbZkQp+EzGuwdbJiDbZamtUGSfu0gprrOH6v/vzY=) 2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 00:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9a:56:c1:1f:5c:5f:c3:fc:46:77:45:8c:6a:2c:a3:58:b1:7a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Dec 23 13:08:41 2025 GMT Not After : Dec 27 00:18:41 2025 GMT Subject: CN=020E6253017ADBA511B3EA9227AC38D4194F8951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:c8:89:a7:ac:0e:7e:2e:02:6a:8c:1e:e8: ec:14:c1:f3:6f:f9:9b:06:ce:04:76:e5:d4:78:80: 6f:3a:3e:d1:87:22:d3:f2:41:6a:07:e5:74:2a:00: 47:e3:ab:a0:58:0b:1f:4f:fb:91:d8:02:ea:be:87: 4c:12:bb:41:06:28:89:d2:c5:0b:92:4c:48:26:6f: 06:b2:5f:c4:25:8e:0d:2c:26:eb:07:34:a3:c5:73: 6c:7d:df:a6:17:56:6c:21:61:8e:d5:e4:19:50:01: 28:ca:93:42:7a:23:63:89:96:7f:3c:37:35:71:ba: 6b:9e:d6:ae:a8:9a:bf:23:77:f6:1f:e2:3e:9d:01: 1e:df:ef:57:5b:99:83:0f:42:b0:d2:4f:f5:1b:22: 04:8f:d6:36:05:58:33:1a:f3:b4:98:b4:e7:40:12: 0e:7c:d4:fa:e5:36:93:41:9a:54:03:88:9a:f7:e4: 8b:54:22:63:c7:4e:a8:2c:1a:2f:9e:e6:c1:eb:56: a3:1d:8b:b1:29:61:dd:cd:2f:bb:73:d6:3b:65:c1: 84:bb:4e:1c:ba:cb:10:cb:f1:ab:e2:b3:bb:70:fb: ed:07:2e:1a:57:ab:e3:a6:f8:e1:ed:76:13:48:a3: 37:4e:80:9c:f5:bb:3a:b3:02:66:d6:f7:c5:fe:81: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0E:62:53:01:7A:DB:A5:11:B3:EA:92:27:AC:38:D4:19:4F:89:51 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:fa:e1:5b:cd:a4:a5:bd:45:ab:6c:55:b7:2a:0b:01:bf:a1: 68:e8:46:36:cf:09:fe:b3:95:0a:4a:8a:4f:9b:e8:c9:59:6e: 98:e1:1b:7c:b2:90:d3:04:7b:f9:8b:c9:70:3e:1f:83:94:52: d4:e4:64:30:38:29:f4:56:52:4d:78:6c:12:ab:44:62:78:4a: 21:e9:39:4f:a6:02:7f:06:f2:80:7c:da:cb:bc:78:da:6c:29: fe:07:0e:27:64:67:8f:b0:7d:62:b3:15:3e:e5:cf:5b:fe:9a: 9b:b0:67:3e:e2:67:5e:b4:12:16:e5:5d:da:d9:28:00:85:b9: 74:e1:e9:f2:25:21:24:32:fe:f4:6f:1e:f7:24:04:49:65:14: d3:80:2b:2d:51:73:da:68:92:b8:cd:21:aa:79:0a:66:18:87: c2:37:97:db:2d:ad:22:63:a3:49:2f:3a:31:a2:ab:74:65:6a: 06:42:01:51:0c:e2:ff:8f:52:73:f1:1f:54:de:bf:4f:55:f5: 12:1a:52:7d:1a:cb:fb:dd:6c:ab:86:e8:83:71:0e:09:7d:01: 73:d4:18:6f:1a:c5:64:31:8c:36:3b:98:67:fd:00:51:2d:15: f7:42:e8:30:77:ba:91:3a:a1:4a:66:d8:ae:0a:86:43:70:97: 51:47:22:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJpWwR9cX8P8RndFjGoso1ixekIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTEyMjMxMzA4NDFaFw0yNTEyMjcwMDE4NDFaMDMxMTAvBgNV BAMTKDAyMEU2MjUzMDE3QURCQTUxMUIzRUE5MjI3QUMzOEQ0MTk0Rjg5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5siJp6wOfi4Caowe6OwUwfNv +ZsGzgR25dR4gG86PtGHItPyQWoH5XQqAEfjq6BYCx9P+5HYAuq+h0wSu0EGKInS xQuSTEgmbwayX8Qljg0sJusHNKPFc2x936YXVmwhYY7V5BlQASjKk0J6I2OJln88 NzVxumue1q6omr8jd/Yf4j6dAR7f71dbmYMPQrDST/UbIgSP1jYFWDMa87SYtOdA Eg581PrlNpNBmlQDiJr35ItUImPHTqgsGi+e5sHrVqMdi7EpYd3NL7tz1jtlwYS7 Thy6yxDL8avis7tw++0HLhpXq+Om+OHtdhNIozdOgJz1uzqzAmbW98X+gdRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAg5iUwF626URs+qSJ6w41BlPiVEwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABL64VvNpKW9RatsVbcqCwG/oWjoRjbPCf6z lQpKik+b6MlZbpjhG3yykNMEe/mLyXA+H4OUUtTkZDA4KfRWUk14bBKrRGJ4SiHp OU+mAn8G8oB82su8eNpsKf4HDidkZ4+wfWKzFT7lz1v+mpuwZz7iZ160EhblXdrZ KACFuXTh6fIlISQy/vRvHvckBEllFNOAKy1Rc9pokrjNIap5CmYYh8I3l9strSJj o0kvOjGiq3RlagZCAVEM4v+PUnPxH1Tev09V9RIaUn0ay/vdbKuG6INxDgl9AXPU GG8axWQxjDY7mGf9AFEtFfdC6DB3upE6oUpm2K4KhkNwl1FHIic= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:02 2025 by rpki-client