This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft File: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft (raw, json) Hash identifier: lejucw4NQn5fdGQ8/P3sXXaIvBEFdLJJ6BttCNZvsM4= Subject key identifier: 00:10:49:33:24:43:66:04:66:34:2F:2B:BB:99:C0:62:50:0E:0A:05 Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 Certificate issuer: /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Certificate serial: 2005F02BE9D73406039E20379A4C29CDF9AE3824 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft Manifest number: 050A Signing time: Fri 19 Dec 2025 23:12:00 +0000 Manifest this update: Fri 19 Dec 2025 23:07:00 +0000 Manifest next update: Tue 23 Dec 2025 00:20:00 +0000 Files and hashes: 1: 3130332e3134372e3135372e302f32342d3234203d3e20313432333630.roa (hash: M2s7m3W15+xAk09EIJ5FeWNhzpPtRKiWLuBNFqsp3KM=) 2: 3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (hash: PA1MZra2kgeTlH2OybXWdKE8fFAmRO6cgL0fnUFICrM=) 3: 0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl (hash: SHQw5d7BT68vF8mSYeV+XwamwKQG02pXN2M/XaKHLCw=) 4: 3130332e3134372e3135362e302f32332d3233203d3e20313432333630.roa (hash: fmJerLM1N0ksnlpj4ELJPPRM1ugJcJpRpXiGiX3LpPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:05:f0:2b:e9:d7:34:06:03:9e:20:37:9a:4c:29:cd:f9:ae:38:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9 Validity Not Before: Dec 19 23:07:00 2025 GMT Not After : Dec 23 00:20:00 2025 GMT Subject: CN=001049332443660466342F2BBB99C062500E0A05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c5:5d:5c:bc:c0:33:9b:83:b2:f3:91:29:39: 9c:9e:a8:88:46:b4:61:9a:7d:c5:af:3b:31:00:ec: 2f:33:21:ae:63:ec:59:35:f5:5a:5a:2d:81:35:c0: 1e:6d:95:9a:dc:0d:dd:fc:ea:08:51:68:16:86:33: b2:e3:0b:94:71:85:5f:31:3e:35:36:01:1f:e5:d5: 3c:9a:30:45:d4:eb:f9:1c:e7:93:5c:c2:83:2b:a1: 2c:21:84:a4:70:bc:22:b1:5c:a7:30:5c:98:ab:76: 90:08:f1:e3:91:51:5a:6e:5d:3e:32:c2:94:37:8b: 7f:02:ff:a2:82:ab:e8:31:9f:60:2a:c9:59:35:82: cc:e9:c9:b8:49:7a:04:da:09:61:9e:29:15:6a:8f: a8:6a:27:b7:8e:d4:9b:9c:ff:56:45:4e:92:d9:9f: 40:34:90:17:ec:89:fb:01:50:49:61:15:33:b8:24: 53:12:c2:ce:3c:35:17:42:70:d0:74:da:3f:2c:fe: a8:2d:1c:de:5a:8d:d3:ff:91:0a:86:d2:35:c0:c5: f4:bb:55:de:91:c1:08:c7:49:37:05:6c:38:b3:14: 9c:f2:0c:39:de:77:3b:9b:8a:2a:e5:1e:42:68:41: 06:cd:e0:f1:09:07:c6:06:59:a5:0d:ee:9d:7a:9b: 28:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:10:49:33:24:43:66:04:66:34:2F:2B:BB:99:C0:62:50:0E:0A:05 X509v3 Authority Key Identifier: keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b1:f2:ac:18:f2:64:4f:64:69:a3:3c:f5:e4:2a:76:81:26: 32:dd:20:2f:b7:60:98:09:c5:a8:7b:57:d1:72:b3:7e:6f:6b: 5e:06:c3:c7:5c:53:dd:d2:33:13:b3:6d:49:0c:46:46:1e:76: 48:eb:dd:bc:b0:40:48:32:0d:e1:1c:90:63:96:19:a9:66:d3: 7f:d2:8d:47:f9:0a:fb:89:dd:ee:ef:ad:81:2e:27:e0:1e:9e: 61:ad:ad:48:95:fb:ae:cf:7d:ad:b9:b8:af:26:ad:3e:5e:54: 1c:9f:46:cd:ef:b2:82:e3:b1:42:ed:e9:18:fa:03:da:15:11: 47:c6:e8:49:3d:46:56:b8:20:ac:9f:7d:ac:c7:af:15:6b:b4: b7:6b:2f:8d:98:b2:23:2b:9c:3a:31:fa:23:84:49:37:09:cd: 39:68:2b:d2:60:25:29:66:ff:2b:46:f3:9c:70:e8:d7:be:97: de:b3:2d:24:36:a1:7c:f1:a9:71:72:37:bb:95:a1:3e:dc:0e: 2b:c6:da:d1:34:54:ad:54:7d:a6:ad:38:c1:32:bd:d4:a6:58: d0:27:d0:c1:58:9c:b4:e7:c9:e2:d0:8e:49:63:4c:f2:b5:65: db:57:8a:c8:00:50:4b:33:0a:f6:93:19:6c:28:09:93:2c:f9: e8:09:2f:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAXwK+nXNAYDniA3mkwpzfmuOCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQy OUZDMTNBOTAeFw0yNTEyMTkyMzA3MDBaFw0yNTEyMjMwMDIwMDBaMDMxMTAvBgNV BAMTKDAwMTA0OTMzMjQ0MzY2MDQ2NjM0MkYyQkJCOTlDMDYyNTAwRTBBMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRxV1cvMAzm4Oy85EpOZyeqIhG tGGafcWvOzEA7C8zIa5j7Fk19VpaLYE1wB5tlZrcDd386ghRaBaGM7LjC5RxhV8x PjU2AR/l1TyaMEXU6/kc55NcwoMroSwhhKRwvCKxXKcwXJirdpAI8eORUVpuXT4y wpQ3i38C/6KCq+gxn2AqyVk1gszpybhJegTaCWGeKRVqj6hqJ7eO1Juc/1ZFTpLZ n0A0kBfsifsBUElhFTO4JFMSws48NRdCcNB02j8s/qgtHN5ajdP/kQqG0jXAxfS7 Vd6RwQjHSTcFbDizFJzyDDnedzubiirlHkJoQQbN4PEJB8YGWaUN7p16mygjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABBJMyRDZgRmNC8ru5nAYlAOCgUwHwYDVR0j BBgwFoAUDTkmrftHMU8efVuSdpEx1Cn8E6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmRhYTk1Zi0yZjU5LTQzOWEtODM0Zi1hNzIxYzM3MmE3NGMvMC8wRDM5MjZBREZC NDczMTRGMUU3RDVCOTI3NjkxMzFENDI5RkMxM0E5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQyOUZD MTNBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJkYWE5NWYtMmY1OS00MzlhLTgz NGYtYTcyMWMzNzJhNzRjLzAvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMx RDQyOUZDMTNBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJax8qwY8mRPZGmjPPXkKnaBJjLdIC+3YJgJ xah7V9Fys35va14Gw8dcU93SMxOzbUkMRkYedkjr3bywQEgyDeEckGOWGalm03/S jUf5CvuJ3e7vrYEuJ+AenmGtrUiV+67Pfa25uK8mrT5eVByfRs3vsoLjsULt6Rj6 A9oVEUfG6Ek9Rla4IKyffazHrxVrtLdrL42YsiMrnDox+iOESTcJzTloK9JgJSlm /ytG85xw6Ne+l96zLSQ2oXzxqXFyN7uVoT7cDivG2tE0VK1UfaatOMEyvdSmWNAn 0MFYnLTnyeLQjkljTPK1ZdtXisgAUEszCvaTGWwoCZMs+egJL8s= -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:57 2025 by rpki-client