This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: qhzNjMIUZ2ek8k3Ntb+jo45bxjE8FHyOV3WJbRhp0dE= Subject key identifier: 30:35:70:C7:AA:E7:5D:17:B2:9C:E6:74:3F:F2:2E:C8:0E:A5:31:2C Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 14529D61D8C3EC7C4C323B9672172291E5068AF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 0534 Signing time: Tue 23 Dec 2025 21:40:03 +0000 Manifest this update: Tue 23 Dec 2025 21:35:03 +0000 Manifest next update: Sat 27 Dec 2025 05:05:03 +0000 Files and hashes: 1: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: jgVHAMEfFSWTJKWpo6N+YJvCDZiCyLKFStLhx2lIGG4=) 2: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) 3: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 05:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:52:9d:61:d8:c3:ec:7c:4c:32:3b:96:72:17:22:91:e5:06:8a:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Dec 23 21:35:03 2025 GMT Not After : Dec 27 05:05:03 2025 GMT Subject: CN=303570C7AAE75D17B29CE6743FF22EC80EA5312C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:d6:96:eb:d6:35:ae:2f:74:14:0e:76:6b: 9f:ea:87:1e:c2:22:f5:e5:cb:7b:c1:f4:a9:38:66: ac:bb:bd:d8:86:30:24:3a:1f:00:46:0e:ed:13:cd: b2:5b:d9:ff:1f:ee:68:7d:e1:8e:dc:fa:79:1c:89: 93:93:59:8e:24:f9:9f:07:ff:bc:fd:0e:7f:7b:33: 4f:a1:4c:f2:24:d7:bf:d4:7c:ed:44:59:14:ce:7f: 6c:82:11:9c:d2:f4:56:da:05:70:fa:15:fb:45:40: 26:ff:1f:ae:4c:a8:1c:1e:ee:0b:da:a7:80:c2:64: 8a:98:bc:c8:fa:3d:07:f9:66:b7:51:66:bf:60:c3: a6:fc:b3:99:46:5c:53:ff:a9:71:74:01:bd:c5:72: 28:4b:8b:b3:c1:8d:ad:13:82:3b:d3:f6:7c:bb:af: 79:62:88:c7:9b:4b:9a:a3:37:c5:45:1d:4d:77:47: 6d:84:df:34:6d:fc:3c:02:55:39:8d:59:d3:ee:94: 01:5e:f5:51:b3:a8:94:8e:62:93:5f:dd:51:af:3d: fa:31:da:6f:86:f1:f8:9a:f5:a3:a9:b2:15:01:36: 8b:f5:cd:7e:2a:77:4e:32:78:21:bf:7b:67:bd:45: 48:db:50:4b:a1:b5:ae:d5:37:6f:42:86:ed:ac:22: a6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:35:70:C7:AA:E7:5D:17:B2:9C:E6:74:3F:F2:2E:C8:0E:A5:31:2C X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f6:cc:17:a7:85:5a:1f:ad:19:c7:a4:6d:a9:c2:4b:ea:f3: 7e:88:16:d7:18:0e:8d:69:a6:cc:c7:09:35:51:ce:b1:d4:02: 8e:33:0f:18:99:12:fb:a0:14:58:fd:aa:18:54:3c:7e:bb:09: d1:c7:9f:45:41:52:f5:73:2d:66:cc:06:7e:c9:57:eb:11:f4: 8c:00:7b:a1:87:e9:b7:dc:cd:75:80:da:41:23:49:43:94:2f: bb:59:d1:6b:07:29:4a:30:ab:c3:8d:30:20:f1:7c:2d:c1:2a: 7a:39:d6:5d:96:4d:44:09:90:b2:75:3a:7c:d3:81:be:5d:6e: da:e4:08:e8:42:bc:6e:12:6d:c5:be:1e:59:4d:44:ba:42:ac: 2c:2b:85:02:09:72:16:15:5a:70:1d:af:09:30:ba:75:5f:3e: b7:cb:49:d9:ae:da:f5:ad:07:3b:57:b1:65:03:42:ab:b6:ad: f2:8b:cb:2f:3e:37:71:8c:94:61:c6:ce:89:56:04:f6:08:8a: bc:c2:1f:32:c6:65:16:08:e7:a9:94:74:34:8b:bb:6f:d5:52: 11:98:73:86:fb:f7:37:79:83:9d:74:64:c7:4b:5c:db:8d:2c: 5a:8f:f7:72:6b:14:84:76:6b:00:de:d5:0f:0e:82:3d:8e:c9: 65:d3:1b:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFKdYdjD7HxMMjuWchcikeUGivcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTEyMjMyMTM1MDNaFw0yNTEyMjcwNTA1MDNaMDMxMTAvBgNV BAMTKDMwMzU3MEM3QUFFNzVEMTdCMjlDRTY3NDNGRjIyRUM4MEVBNTMxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXddaW69Y1ri90FA52a5/qhx7C IvXly3vB9Kk4Zqy7vdiGMCQ6HwBGDu0TzbJb2f8f7mh94Y7c+nkciZOTWY4k+Z8H /7z9Dn97M0+hTPIk17/UfO1EWRTOf2yCEZzS9FbaBXD6FftFQCb/H65MqBwe7gva p4DCZIqYvMj6PQf5ZrdRZr9gw6b8s5lGXFP/qXF0Ab3FcihLi7PBja0TgjvT9ny7 r3liiMebS5qjN8VFHU13R22E3zRt/DwCVTmNWdPulAFe9VGzqJSOYpNf3VGvPfox 2m+G8fia9aOpshUBNov1zX4qd04yeCG/e2e9RUjbUEuhta7VN29Chu2sIqbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMDVwx6rnXReynOZ0P/IuyA6lMSwwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEz2zBenhVofrRnHpG2pwkvq836IFtcYDo1p pszHCTVRzrHUAo4zDxiZEvugFFj9qhhUPH67CdHHn0VBUvVzLWbMBn7JV+sR9IwA e6GH6bfczXWA2kEjSUOUL7tZ0WsHKUowq8ONMCDxfC3BKno51l2WTUQJkLJ1OnzT gb5dbtrkCOhCvG4SbcW+HllNRLpCrCwrhQIJchYVWnAdrwkwunVfPrfLSdmu2vWt BztXsWUDQqu2rfKLyy8+N3GMlGHGzolWBPYIirzCHzLGZRYI56mUdDSLu2/VUhGY c4b79zd5g510ZMdLXNuNLFqP93JrFIR2awDe1Q8Ogj2OyWXTGyM= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:25 2025 by rpki-client