This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json) Hash identifier: I2VeVADCmW88qG/Uy7hHt1Z5CVnf7fpHRxG7faPiP5M= Subject key identifier: 75:F8:7E:E5:AF:26:17:E6:DC:99:A2:C9:73:10:1D:0C:87:96:FE:C0 Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Certificate serial: 234FC39F43290CD20ED805569C163FEA4145FA39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft Manifest number: 01FA Signing time: Wed 17 Dec 2025 03:51:08 +0000 Manifest this update: Wed 17 Dec 2025 03:46:08 +0000 Manifest next update: Sat 20 Dec 2025 07:10:08 +0000 Files and hashes: 1: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: OjD7igAi8uIoux+rVxGtZEh2dpv8xELOea0gwWs5+6I=) 2: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: sm8jeStS9mRgsrGl5CeRQ6sBSscm5f2rHE/KQpXoWj8=) 3: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: tlWcE30ltwAtj1t5DYR+Ef+Vu3b0Dix7yxwsJaWLFNY=) 4: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: EQbr12ySqIrNTM9njp7Wb0XN8yJtB1BDEx2u9gpZun8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 07:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4f:c3:9f:43:29:0c:d2:0e:d8:05:56:9c:16:3f:ea:41:45:fa:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Validity Not Before: Dec 17 03:46:08 2025 GMT Not After : Dec 20 07:10:08 2025 GMT Subject: CN=75F87EE5AF2617E6DC99A2C973101D0C8796FEC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:44:aa:5c:29:ad:93:8a:da:72:25:99:31: f0:85:88:4e:56:f0:38:70:a6:14:39:7a:dc:34:3d: d7:19:86:4a:9d:f1:f2:df:c0:31:a3:65:df:7c:78: cc:8e:c8:3f:23:47:ae:7b:dd:81:b9:bb:67:88:95: cb:65:15:2e:fc:3f:d5:7d:86:56:97:77:6f:26:d5: 30:56:4f:1e:9a:5c:db:d2:8d:51:e8:f8:54:98:a0: 9b:b6:2e:98:2d:87:c6:de:c1:de:05:9a:86:d0:c9: 0b:e3:75:ee:ac:47:42:68:d7:a8:4b:70:6b:f8:1d: 0b:2c:95:e7:7d:16:19:2a:b1:11:29:5e:8d:54:94: 8d:e3:14:be:c5:d9:4c:4b:bf:8f:db:8a:36:1b:8f: 7c:b4:f0:5c:b6:05:33:48:d7:df:94:cb:8b:91:b2: 6c:44:7f:cb:40:9e:24:70:48:af:22:44:cf:da:93: 0e:df:e2:74:94:49:27:b8:3c:f7:bc:52:d4:1f:52: c6:21:58:4b:6b:85:89:43:f1:30:f2:26:a2:49:10: 06:4a:24:2d:68:28:eb:2e:8f:2a:a0:93:cd:69:26: 20:b4:97:fe:75:66:69:94:14:1a:4a:e1:a9:56:2a: 8b:dc:34:2e:7e:84:90:df:f5:02:28:cd:2e:32:50: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F8:7E:E5:AF:26:17:E6:DC:99:A2:C9:73:10:1D:0C:87:96:FE:C0 X509v3 Authority Key Identifier: keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c7:4a:51:53:7d:39:82:cb:89:a6:e5:21:d7:17:59:5c:14: 13:f0:e2:aa:65:78:0f:7f:e1:6f:da:cf:2a:0f:41:75:98:86: 03:a4:65:5a:32:cc:49:76:c8:9c:2d:c8:fa:5d:fb:3b:98:dc: ab:6e:ba:96:9e:df:de:67:08:73:d8:fe:67:73:9d:cb:a1:5f: f8:98:5f:51:5a:cb:26:2b:36:f3:32:53:56:e7:8e:87:95:60: 3d:d1:2f:40:7c:4b:5d:83:9d:fc:96:5c:2a:a9:99:49:2d:c8: 4d:37:45:47:48:96:c4:ae:5b:b7:d2:ab:83:b8:2a:49:cc:46: d4:8e:8d:7f:8d:eb:f6:64:fd:90:d9:10:4c:86:ac:02:c9:30: fc:9a:9c:00:76:1a:da:59:85:49:3f:c6:7b:34:9e:65:a9:c1: 12:c0:53:9b:66:7a:3a:ff:c3:56:14:87:3e:e0:68:c0:62:7d: 02:40:27:1d:c8:55:52:b9:d5:03:be:a1:0f:d6:c1:21:c0:33: ee:a2:40:0c:d3:ea:3c:d5:d5:e3:d1:ca:b1:95:64:48:c3:06: 89:24:aa:b7:b3:91:2a:38:53:f2:e0:b3:18:50:59:33:68:bf: b9:1e:ab:61:71:47:3a:83:87:51:fd:cc:cd:b6:78:0c:fd:bc: 32:06:f2:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0/Dn0MpDNIO2AVWnBY/6kFF+jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdG Qjc4MDQxMzAeFw0yNTEyMTcwMzQ2MDhaFw0yNTEyMjAwNzEwMDhaMDMxMTAvBgNV BAMTKDc1Rjg3RUU1QUYyNjE3RTZEQzk5QTJDOTczMTAxRDBDODc5NkZFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvESqXCmtk4raciWZMfCFiE5W 8DhwphQ5etw0PdcZhkqd8fLfwDGjZd98eMyOyD8jR6573YG5u2eIlctlFS78P9V9 hlaXd28m1TBWTx6aXNvSjVHo+FSYoJu2Lpgth8bewd4FmobQyQvjde6sR0Jo16hL cGv4HQssled9FhkqsREpXo1UlI3jFL7F2UxLv4/bijYbj3y08Fy2BTNI19+Uy4uR smxEf8tAniRwSK8iRM/akw7f4nSUSSe4PPe8UtQfUsYhWEtrhYlD8TDyJqJJEAZK JC1oKOsujyqgk81pJiC0l/51ZmmUFBpK4alWKovcNC5+hJDf9QIozS4yUI6DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdfh+5a8mF+bcmaLJcxAdDIeW/sAwHwYDVR0j BBgwFoAUYExEGs31VPOA1/7Y9osux/t4BBMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC82MDRDNDQxQUNE RjU1NEYzODBEN0ZFRDhGNjhCMkVDN0ZCNzgwNDEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdGQjc4 MDQxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJF QzdGQjc4MDQxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3HSlFTfTmCy4mm5SHXF1lcFBPw4qpleA9/ 4W/azyoPQXWYhgOkZVoyzEl2yJwtyPpd+zuY3Ktuupae395nCHPY/mdzncuhX/iY X1FayyYrNvMyU1bnjoeVYD3RL0B8S12DnfyWXCqpmUktyE03RUdIlsSuW7fSq4O4 KknMRtSOjX+N6/Zk/ZDZEEyGrALJMPyanAB2GtpZhUk/xns0nmWpwRLAU5tmejr/ w1YUhz7gaMBifQJAJx3IVVK51QO+oQ/WwSHAM+6iQAzT6jzV1ePRyrGVZEjDBokk qrezkSo4U/LgsxhQWTNov7keq2FxRzqDh1H9zM22eAz9vDIG8gs= -----END CERTIFICATE-----Generated at Thu Dec 18 15:23:38 2025 by rpki-client