This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft File: D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft (raw, json) Hash identifier: WPpYrad+VazV+OFBVwY2R8Qa3J7zaBfKzDeK4tq4XoU= Subject key identifier: C7:F1:76:A6:ED:85:C1:25:15:FD:E2:FF:49:A7:69:D9:96:FE:92:C8 Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 Certificate issuer: /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Certificate serial: 55FB148B8AC5D8DCE32A765633852B3C8985E110 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft Manifest number: 0125 Signing time: Mon 15 Dec 2025 21:52:26 +0000 Manifest this update: Mon 15 Dec 2025 21:47:26 +0000 Manifest next update: Fri 19 Dec 2025 02:27:26 +0000 Files and hashes: 1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: V0ZXW9Pm5K1NAR+oY65IgSVvs9ijAutRVHZNMRk6vzc=) 2: D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl (hash: L/S6NHtWtKehGos4CwYUpcTTTxt+i7X7WR6Ie8fC11Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 02:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:fb:14:8b:8a:c5:d8:dc:e3:2a:76:56:33:85:2b:3c:89:85:e1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162 Validity Not Before: Dec 15 21:47:26 2025 GMT Not After : Dec 19 02:27:26 2025 GMT Subject: CN=C7F176A6ED85C12515FDE2FF49A769D996FE92C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:21:c8:8f:87:b9:aa:c7:44:79:03:b9:2a:bc: 1f:ad:3b:a7:11:f8:77:2b:a2:62:e2:f8:e0:d0:48: 28:98:ff:93:46:9c:a1:11:a9:7a:3c:c5:f5:01:d9: 42:67:30:c7:7f:bf:f5:e8:8b:b8:e3:7a:43:94:10: f2:e5:02:b6:82:60:22:7f:6f:0c:1c:e0:f3:8d:0d: a3:e6:25:0a:79:a0:bc:8f:3c:c3:40:2b:d3:1b:f4: a2:ef:f2:ba:89:90:3f:77:01:a9:e4:2e:de:3f:b3: 35:12:00:bc:1f:89:29:34:cb:30:84:c5:9c:23:40: 98:53:2b:24:fa:46:b1:27:0f:4a:1d:63:7e:bb:53: 67:3a:9c:8f:31:85:0d:b7:80:b0:a6:b8:40:42:c6: 86:93:3e:37:96:e1:64:2f:84:11:17:93:96:11:35: 38:41:11:ae:40:ba:73:b7:d7:8f:51:92:06:f6:4c: 7f:fd:ad:fe:95:6a:d6:60:be:04:45:ed:3f:c4:8b: ee:e3:3d:9e:14:5d:5a:1e:81:4e:33:f0:35:ef:99: 2f:eb:5d:f8:50:a8:6d:eb:96:6c:c3:d6:8f:78:bc: 4f:33:0d:0f:7d:08:7f:0f:98:86:2a:8a:fc:e7:8d: e0:3b:11:5f:b6:5b:3d:68:94:b5:1f:cb:2c:80:15: 6a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F1:76:A6:ED:85:C1:25:15:FD:E2:FF:49:A7:69:D9:96:FE:92:C8 X509v3 Authority Key Identifier: keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:e0:49:35:d7:3e:fc:82:13:35:d8:46:04:3d:03:3d:82:aa: e5:68:d2:f2:38:0b:ab:b7:13:c4:2d:04:f5:3c:2d:7d:59:16: 89:e2:3b:2a:06:75:f0:1b:e5:1b:ca:4e:c8:c0:f9:95:d2:aa: 71:fc:0b:59:2f:dd:0f:7c:e6:6f:89:5e:07:d1:54:28:36:f2: 6b:4b:d1:7c:44:b2:00:ea:8c:5d:85:f7:00:34:d6:6d:9e:3e: 0a:89:e4:2e:de:46:89:9a:2b:e7:33:5c:62:a3:87:d1:8f:6a: 16:cf:af:f9:9d:99:56:f8:54:9b:bb:4f:af:f9:6f:88:b6:5f: 60:7c:a0:5d:1a:4b:d1:37:91:05:e5:20:12:30:3a:e2:bf:94: 67:17:82:da:c1:62:15:d4:1a:09:96:0a:4d:36:67:53:1c:8a: 9f:20:c4:9f:05:7e:33:e3:3c:ba:43:29:bf:06:0d:1d:6a:bf: d9:2d:93:b7:af:10:91:f4:fe:02:12:73:98:2c:1f:bc:31:d7: ae:ee:6b:eb:87:7d:36:bd:57:9f:08:8f:4e:32:b8:12:e4:aa: 58:4c:f7:10:c3:db:7c:05:49:f3:6e:52:c5:ab:cd:52:43:c2: 16:a4:53:ed:d3:64:0b:15:ee:a2:05:57:c8:99:eb:13:3d:64: 71:aa:8b:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVfsUi4rF2NzjKnZWM4UrPImF4RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3 RDhCNjE2MjAeFw0yNTEyMTUyMTQ3MjZaFw0yNTEyMTkwMjI3MjZaMDMxMTAvBgNV BAMTKEM3RjE3NkE2RUQ4NUMxMjUxNUZERTJGRjQ5QTc2OUQ5OTZGRTkyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRIciPh7mqx0R5A7kqvB+tO6cR +HcromLi+ODQSCiY/5NGnKERqXo8xfUB2UJnMMd/v/Xoi7jjekOUEPLlAraCYCJ/ bwwc4PONDaPmJQp5oLyPPMNAK9Mb9KLv8rqJkD93AankLt4/szUSALwfiSk0yzCE xZwjQJhTKyT6RrEnD0odY367U2c6nI8xhQ23gLCmuEBCxoaTPjeW4WQvhBEXk5YR NThBEa5AunO3149Rkgb2TH/9rf6VatZgvgRF7T/Ei+7jPZ4UXVoegU4z8DXvmS/r XfhQqG3rlmzD1o94vE8zDQ99CH8PmIYqivznjeA7EV+2Wz1olLUfyyyAFWqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx/F2pu2FwSUV/eL/Sadp2Zb+ksgwHwYDVR0j BBgwFoAU05F9FfhzMsUL/BFlqILv6n2LYWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2RmZDhlYi04YTQwLTRlOGItYTllMC05Mjc4Y2QwNGZhNDMvMC9EMzkxN0QxNUY4 NzMzMkM1MEJGQzExNjVBODgyRUZFQTdEOEI2MTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVGRUE3RDhC NjE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNkZmQ4ZWItOGE0MC00ZThiLWE5 ZTAtOTI3OGNkMDRmYTQzLzAvRDM5MTdEMTVGODczMzJDNTBCRkMxMTY1QTg4MkVG RUE3RDhCNjE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTgSTXXPvyCEzXYRgQ9Az2CquVo0vI4C6u3 E8QtBPU8LX1ZFoniOyoGdfAb5RvKTsjA+ZXSqnH8C1kv3Q985m+JXgfRVCg28mtL 0XxEsgDqjF2F9wA01m2ePgqJ5C7eRomaK+czXGKjh9GPahbPr/mdmVb4VJu7T6/5 b4i2X2B8oF0aS9E3kQXlIBIwOuK/lGcXgtrBYhXUGgmWCk02Z1Mcip8gxJ8FfjPj PLpDKb8GDR1qv9ktk7evEJH0/gISc5gsH7wx167ua+uHfTa9V58Ij04yuBLkqlhM 9xDD23wFSfNuUsWrzVJDwhakU+3TZAsV7qIFV8iZ6xM9ZHGqix4= -----END CERTIFICATE-----Generated at Wed Dec 17 13:11:47 2025 by rpki-client