This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: 3Uh8T7WZ7mUSlY7zGOuslynGl5pMMz7USz5Eml+CtlA= Subject key identifier: D9:88:E2:8B:1C:AB:0A:C3:9E:1F:33:34:62:03:7E:4F:20:2E:4B:AC Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 4728C7AA2948696622FE9BD7FF07E253A9BC9B4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 01AF Signing time: Wed 24 Dec 2025 02:22:42 +0000 Manifest this update: Wed 24 Dec 2025 02:17:42 +0000 Manifest next update: Sat 27 Dec 2025 04:53:42 +0000 Files and hashes: 1: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: sfj/xLZEElFZFm97ASqdb3Sh5i8unBwVhTxljUPKis0=) 2: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 3: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 4: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: 81LT70gu4OER+Zjrujjiu96uQ1E2msQmWW/Gbb12QDU=) 5: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 04:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:28:c7:aa:29:48:69:66:22:fe:9b:d7:ff:07:e2:53:a9:bc:9b:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Dec 24 02:17:42 2025 GMT Not After : Dec 27 04:53:42 2025 GMT Subject: CN=D988E28B1CAB0AC39E1F333462037E4F202E4BAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:31:b8:9a:d1:d9:ca:69:de:b6:c8:0c:0a:09: d6:4b:a9:ba:49:4f:3a:91:32:f0:f6:95:c7:d4:57: 9b:84:1d:b8:f8:17:92:81:e6:a6:06:ee:4f:0c:e5: 8b:49:2d:6e:f2:90:5a:b8:a9:ba:6e:84:27:e2:1e: e1:59:57:a6:aa:48:92:2a:9c:1a:bc:0d:50:8a:68: 12:47:df:91:c4:f6:23:c7:27:3d:2c:de:c2:60:83: bd:fc:65:4f:fd:95:a6:bf:59:b9:bc:7f:d5:27:69: d9:fc:7f:7c:e8:52:2c:c4:66:39:2e:08:ab:06:43: a8:3d:c2:b8:5d:fa:db:19:b1:88:30:8d:9c:8d:a0: 6d:52:c4:66:ff:24:a5:2d:e8:24:0c:30:55:4c:0c: 4f:4e:dd:69:fa:2a:03:15:17:39:99:e2:2f:9f:a1: 2e:ea:19:f0:52:7b:a3:8c:1e:77:e0:bb:e8:b7:dd: 55:ca:d6:96:bc:09:2c:5d:79:3b:89:85:f8:eb:59: ac:c1:29:40:80:c5:63:27:14:00:fe:8f:f2:20:8e: db:13:2e:8f:71:ba:06:83:59:ed:d5:34:87:9e:3a: ae:a4:f3:94:44:27:87:17:32:cb:0a:f9:75:69:29: 3a:d1:46:ca:ba:95:8d:01:c4:f5:88:76:c9:64:f0: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:88:E2:8B:1C:AB:0A:C3:9E:1F:33:34:62:03:7E:4F:20:2E:4B:AC X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:8b:fb:27:22:ce:f0:04:d2:71:80:9f:c2:e1:3a:8d:2e:fe: b8:07:6c:15:5d:4c:7e:54:df:e1:cc:7b:84:99:40:0f:e2:cd: 5b:15:4f:1e:63:50:d6:ee:8d:0a:cd:3a:1a:cf:ef:ea:79:91: 2d:d4:ff:16:a3:37:82:ea:30:f3:94:d7:74:bb:68:24:3e:35: 37:85:14:db:7a:61:17:38:9e:ba:2a:32:90:66:f1:5b:3a:b4: 64:8f:c5:79:0b:0d:e8:4c:5f:b4:20:4e:81:2a:ca:16:63:63: cc:44:f4:c4:1c:7a:15:a4:a2:3f:4a:2f:07:a8:8e:f3:16:c4: ec:35:fb:a0:e5:36:ba:10:34:30:1a:63:42:6b:40:6f:8d:87: 20:5b:34:ec:33:f1:60:42:ca:dc:61:44:3b:02:c3:e5:9e:e1: bd:95:45:cf:46:e8:0a:ea:bf:63:42:1c:19:bd:1b:10:14:fc: 8f:1b:32:38:f0:c2:85:4b:8e:79:19:d0:b0:b7:c1:dc:d4:70: ee:11:6d:1a:c0:99:a9:82:e7:6e:86:bf:ff:65:0d:fc:5c:14: f5:3e:dc:37:84:44:2e:32:fb:8a:76:60:0f:94:c6:21:b9:f6: bb:9d:40:b3:6e:de:37:84:c7:07:40:fb:c6:84:81:a2:aa:8d: b2:20:d4:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyjHqilIaWYi/pvX/wfiU6m8m08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTEyMjQwMjE3NDJaFw0yNTEyMjcwNDUzNDJaMDMxMTAvBgNV BAMTKEQ5ODhFMjhCMUNBQjBBQzM5RTFGMzMzNDYyMDM3RTRGMjAyRTRCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMbia0dnKad62yAwKCdZLqbpJ TzqRMvD2lcfUV5uEHbj4F5KB5qYG7k8M5YtJLW7ykFq4qbpuhCfiHuFZV6aqSJIq nBq8DVCKaBJH35HE9iPHJz0s3sJgg738ZU/9laa/Wbm8f9Unadn8f3zoUizEZjku CKsGQ6g9wrhd+tsZsYgwjZyNoG1SxGb/JKUt6CQMMFVMDE9O3Wn6KgMVFzmZ4i+f oS7qGfBSe6OMHnfgu+i33VXK1pa8CSxdeTuJhfjrWazBKUCAxWMnFAD+j/IgjtsT Lo9xugaDWe3VNIeeOq6k85REJ4cXMssK+XVpKTrRRsq6lY0BxPWIdslk8AYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2YjiixyrCsOeHzM0YgN+TyAuS6wwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKL+ycizvAE0nGAn8LhOo0u/rgHbBVdTH5U 3+HMe4SZQA/izVsVTx5jUNbujQrNOhrP7+p5kS3U/xajN4LqMPOU13S7aCQ+NTeF FNt6YRc4nroqMpBm8Vs6tGSPxXkLDehMX7QgToEqyhZjY8xE9MQcehWkoj9KLweo jvMWxOw1+6DlNroQNDAaY0JrQG+NhyBbNOwz8WBCytxhRDsCw+We4b2VRc9G6Arq v2NCHBm9GxAU/I8bMjjwwoVLjnkZ0LC3wdzUcO4RbRrAmamC526Gv/9lDfxcFPU+ 3DeERC4y+4p2YA+UxiG59rudQLNu3jeExwdA+8aEgaKqjbIg1AM= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:03 2025 by rpki-client