This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft File: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft (raw, json) Hash identifier: poNFhXbFbbhN/PYmiAtdX0S1sF4lvvED8l+TLO6SvPo= Subject key identifier: 54:DF:AA:51:34:83:3F:69:67:37:DC:9A:46:7F:14:45:4E:97:43:54 Authority key identifier: 0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 Certificate issuer: /CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Certificate serial: 764A3F3210999B32BC9E2BC3D5E5EC09BEA5344A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft Manifest number: DF Signing time: Fri 19 Dec 2025 11:11:07 +0000 Manifest this update: Fri 19 Dec 2025 11:06:07 +0000 Manifest next update: Mon 22 Dec 2025 17:25:07 +0000 Files and hashes: 1: 33362e35302e39362e302f32342d3234203d3e20313532333536.roa (hash: 0YTgb847tvQJ6aYcLp7rUu/koq2efZafX5EfBrU5MeY=) 2: 0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl (hash: hh846wkNjXD4WqxzhflTGyhSnv4/yEIB3dvwSKA9zWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 17:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:4a:3f:32:10:99:9b:32:bc:9e:2b:c3:d5:e5:ec:09:be:a5:34:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E1FEFA17B361540F73B249537DF0B5C4F93B4B9 Validity Not Before: Dec 19 11:06:07 2025 GMT Not After : Dec 22 17:25:07 2025 GMT Subject: CN=54DFAA5134833F696737DC9A467F14454E974354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:c6:bb:b9:c8:07:26:8a:d3:bc:b1:fc:82: 43:25:50:71:a0:ef:30:ff:1f:6f:5f:05:bb:fa:61: ff:a7:7b:e7:c7:1f:02:a3:d0:89:c5:c1:2b:c6:fd: ff:6d:3f:1b:59:63:47:2c:ac:54:f2:66:79:30:d5: 72:da:37:c2:e2:29:2f:07:76:54:e6:e4:4f:77:c5: f1:20:e4:fe:c0:26:83:a4:13:1e:e5:5a:ff:b8:dd: 31:dd:48:d6:9e:7e:82:ba:48:cb:45:5f:fe:7e:35: 29:67:f2:a8:42:44:22:cd:d1:b4:7e:22:de:24:ce: 27:aa:80:b0:25:ba:f4:80:ab:d1:55:59:c0:d7:2a: 3a:7f:a6:a9:8f:2c:80:e0:4e:71:fd:31:cc:46:cb: eb:63:2e:6e:70:45:71:68:ab:bc:dc:5d:75:e0:d4: 78:b5:f5:cd:bd:3e:bb:2c:e4:86:ed:7b:a6:1a:48: 88:1b:46:89:71:16:34:e0:0a:e8:4b:2f:ce:d3:d2: 20:37:de:65:0c:4d:4b:48:26:53:63:0c:e7:e8:9c: af:8b:dc:d4:5e:27:f7:38:54:38:9c:9c:05:24:42: 93:1b:ff:5f:e7:5e:cd:72:a8:96:f5:64:8c:b5:9c: 2c:46:5c:ea:d8:22:9c:60:ff:aa:c5:d4:f0:88:62: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DF:AA:51:34:83:3F:69:67:37:DC:9A:46:7F:14:45:4E:97:43:54 X509v3 Authority Key Identifier: keyid:0E:1F:EF:A1:7B:36:15:40:F7:3B:24:95:37:DF:0B:5C:4F:93:B4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d90d86b-0b0d-456f-841a-bfdb9d807fb7/0/0E1FEFA17B361540F73B249537DF0B5C4F93B4B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c1:46:c9:80:6c:45:a9:03:d5:9f:95:6d:af:fd:1f:7d:88: 34:5b:b0:05:58:4d:1c:e5:75:5e:d3:3c:12:d4:04:ff:f9:38: ad:27:15:1d:a2:e5:13:b6:c6:f4:db:bd:3c:85:42:07:a5:66: 4c:b2:97:8c:0a:46:30:25:1a:27:a2:24:79:3f:df:6f:64:04: f2:88:8a:ed:8c:3c:7e:fe:c8:90:f0:43:2a:0d:3e:4f:fe:ee: 02:33:82:f2:90:e9:2a:37:66:fc:c9:9e:9c:8c:fe:42:47:80: 85:ac:ad:7e:e3:ee:33:c5:ae:e5:9b:b7:8c:32:52:d5:16:7c: d5:e0:b8:b7:53:f5:e0:b7:5c:ba:65:d5:52:3a:a3:2f:f3:66: b7:4d:ba:c2:79:bb:9f:39:f9:a3:d4:c2:0e:82:12:12:79:d4: ec:ca:0c:93:77:97:e1:19:e2:c2:49:22:96:4e:58:1e:cf:04: 95:6b:52:b4:60:02:08:0a:cf:6e:e2:60:fb:f0:4d:70:4c:8a: 16:70:c1:11:6b:e9:ec:2a:ad:93:40:48:7c:38:cf:4b:20:4d: ad:50:34:1c:59:44:b7:11:0e:a2:63:22:95:da:23:5f:da:83: 32:30:1a:48:62:07:0a:29:6e:d4:a3:a3:cb:42:e2:d8:d7:f9: ac:f3:3d:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdko/MhCZmzK8nivD1eXsCb6lNEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0 RjkzQjRCOTAeFw0yNTEyMTkxMTA2MDdaFw0yNTEyMjIxNzI1MDdaMDMxMTAvBgNV BAMTKDU0REZBQTUxMzQ4MzNGNjk2NzM3REM5QTQ2N0YxNDQ1NEU5NzQzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooMa7ucgHJorTvLH8gkMlUHGg 7zD/H29fBbv6Yf+ne+fHHwKj0InFwSvG/f9tPxtZY0csrFTyZnkw1XLaN8LiKS8H dlTm5E93xfEg5P7AJoOkEx7lWv+43THdSNaefoK6SMtFX/5+NSln8qhCRCLN0bR+ It4kzieqgLAluvSAq9FVWcDXKjp/pqmPLIDgTnH9McxGy+tjLm5wRXFoq7zcXXXg 1Hi19c29Prss5Ibte6YaSIgbRolxFjTgCuhLL87T0iA33mUMTUtIJlNjDOfonK+L 3NReJ/c4VDicnAUkQpMb/1/nXs1yqJb1ZIy1nCxGXOrYIpxg/6rF1PCIYv5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVN+qUTSDP2lnN9yaRn8URU6XQ1QwHwYDVR0j BBgwFoAUDh/voXs2FUD3OySVN98LXE+TtLkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDkwZDg2Yi0wYjBkLTQ1NmYtODQxYS1iZmRiOWQ4MDdmYjcvMC8wRTFGRUZBMTdC MzYxNTQwRjczQjI0OTUzN0RGMEI1QzRGOTNCNEI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBCNUM0Rjkz QjRCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ5MGQ4NmItMGIwZC00NTZmLTg0 MWEtYmZkYjlkODA3ZmI3LzAvMEUxRkVGQTE3QjM2MTU0MEY3M0IyNDk1MzdERjBC NUM0RjkzQjRCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLBRsmAbEWpA9WflW2v/R99iDRbsAVYTRzl dV7TPBLUBP/5OK0nFR2i5RO2xvTbvTyFQgelZkyyl4wKRjAlGieiJHk/329kBPKI iu2MPH7+yJDwQyoNPk/+7gIzgvKQ6So3ZvzJnpyM/kJHgIWsrX7j7jPFruWbt4wy UtUWfNXguLdT9eC3XLpl1VI6oy/zZrdNusJ5u585+aPUwg6CEhJ51OzKDJN3l+EZ 4sJJIpZOWB7PBJVrUrRgAggKz27iYPvwTXBMihZwwRFr6ewqrZNASHw4z0sgTa1Q NBxZRLcRDqJjIpXaI1/agzIwGkhiBwopbtSjo8tC4tjX+azzPYA= -----END CERTIFICATE-----Generated at Mon Dec 22 00:21:09 2025 by rpki-client