This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: B9pHV7ieX3EoLeKWYHRzqr+tDPM0Yq+QNBGRVuDwaZY= Subject key identifier: 77:89:CF:2E:33:AC:AF:9C:4B:CD:7D:73:6F:D2:3E:46:05:93:3A:2A Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 7D3725A6192418C98B27F78D77B35CF0A5D1941F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 021A Signing time: Tue 23 Dec 2025 22:41:20 +0000 Manifest this update: Tue 23 Dec 2025 22:36:20 +0000 Manifest next update: Sat 27 Dec 2025 05:29:20 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=) 2: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) 3: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: fYxhkZePF1TYERb6O9/kqqte+egEaiqJ6zOWYspKkjU=) 4: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 05:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:37:25:a6:19:24:18:c9:8b:27:f7:8d:77:b3:5c:f0:a5:d1:94:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Dec 23 22:36:20 2025 GMT Not After : Dec 27 05:29:20 2025 GMT Subject: CN=7789CF2E33ACAF9C4BCD7D736FD23E4605933A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:96:c2:13:30:92:54:40:8b:9f:f4:5d:43: a8:e2:88:49:05:2c:f6:7e:0f:e1:48:23:a7:5f:03: 97:d9:63:9e:11:1f:8a:9d:2c:a5:b1:7a:b3:fb:89: 84:f1:33:97:9a:dc:e8:60:a5:93:3c:59:ce:00:de: 27:84:33:f6:5a:c3:c2:13:f7:a3:37:65:4e:15:29: ae:8f:ec:ee:f5:0a:50:4b:a7:12:75:16:33:25:db: a8:06:fb:d0:cb:31:94:5e:d5:bd:d2:76:1f:b2:4d: 95:05:50:a1:b3:e8:2d:b0:38:7e:61:dd:f8:4d:e3: 09:a4:e6:de:fb:13:1b:12:61:87:59:74:3d:bc:24: a1:98:bb:22:4d:74:38:98:dd:68:5a:fe:35:0b:09: 92:bf:7b:9a:fb:4b:b7:af:f7:39:3a:42:33:b8:ef: 54:4f:5d:b2:e5:14:d0:7e:77:88:39:a2:f6:be:08: 90:e0:2c:c0:f9:4f:78:43:48:d2:15:75:81:fc:de: f0:3a:ea:12:4a:26:fd:77:ab:ea:6f:75:04:23:c4: f4:76:ed:20:4e:83:53:f6:8d:7e:4b:4b:2d:0e:77: 23:06:f4:4c:e4:a8:14:17:40:3a:17:4a:ae:46:ea: 2b:72:05:43:c4:06:61:13:49:3a:85:0e:39:44:f9: f0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:89:CF:2E:33:AC:AF:9C:4B:CD:7D:73:6F:D2:3E:46:05:93:3A:2A X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e9:2e:7f:37:ef:f7:37:f7:5a:2e:ff:b3:b4:70:8e:ab:ec: 57:fc:81:87:fe:44:1f:5d:89:51:96:f8:b4:39:ac:11:93:66: c5:ee:61:e9:a8:a8:7f:48:9f:29:a7:81:4f:ce:f3:f9:3a:ac: 69:06:35:05:c3:9a:79:47:3b:45:1d:e7:5d:cf:02:26:1a:2d: 91:a5:a6:6f:47:65:f0:31:2e:d0:52:69:95:ab:fd:7d:74:ee: 95:69:4a:22:ba:c9:84:c4:2c:3d:5c:71:47:4f:e9:f7:35:62: 1b:88:1d:91:21:34:48:a7:5d:10:fe:55:11:33:5f:de:6a:ee: 5b:1c:9c:ea:eb:ea:ee:c2:f6:1a:ec:0e:b9:2c:09:7a:93:e3: ff:c2:a4:54:b1:4b:d8:af:40:dd:db:1b:01:0e:a6:7b:22:88: 24:2b:3b:38:f5:57:5b:fd:7f:fa:f3:8d:00:20:26:3d:6d:d8: 9d:dc:db:91:20:2d:26:34:97:9e:8c:69:ca:f0:5d:ec:93:a6: 72:71:d9:64:eb:56:61:d5:01:e4:e7:d1:46:e9:5b:56:28:6b: 70:4a:40:d7:cc:6c:83:62:ef:5f:77:0b:0c:5f:05:20:66:a0: be:d7:b4:7c:a0:90:58:90:e5:59:a9:e1:a5:17:a6:5b:c8:85: d5:27:65:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfTclphkkGMmLJ/eNd7Nc8KXRlB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTEyMjMyMjM2MjBaFw0yNTEyMjcwNTI5MjBaMDMxMTAvBgNV BAMTKDc3ODlDRjJFMzNBQ0FGOUM0QkNEN0Q3MzZGRDIzRTQ2MDU5MzNBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvpbCEzCSVECLn/RdQ6jiiEkF LPZ+D+FII6dfA5fZY54RH4qdLKWxerP7iYTxM5ea3OhgpZM8Wc4A3ieEM/Zaw8IT 96M3ZU4VKa6P7O71ClBLpxJ1FjMl26gG+9DLMZRe1b3Sdh+yTZUFUKGz6C2wOH5h 3fhN4wmk5t77ExsSYYdZdD28JKGYuyJNdDiY3Wha/jULCZK/e5r7S7ev9zk6QjO4 71RPXbLlFNB+d4g5ova+CJDgLMD5T3hDSNIVdYH83vA66hJKJv13q+pvdQQjxPR2 7SBOg1P2jX5LSy0OdyMG9EzkqBQXQDoXSq5G6ityBUPEBmETSTqFDjlE+fDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd4nPLjOsr5xLzX1zb9I+RgWTOiowHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPpLn837/c391ou/7O0cI6r7Ff8gYf+RB9d iVGW+LQ5rBGTZsXuYemoqH9InymngU/O8/k6rGkGNQXDmnlHO0Ud513PAiYaLZGl pm9HZfAxLtBSaZWr/X107pVpSiK6yYTELD1ccUdP6fc1YhuIHZEhNEinXRD+VREz X95q7lscnOrr6u7C9hrsDrksCXqT4//CpFSxS9ivQN3bGwEOpnsiiCQrOzj1V1v9 f/rzjQAgJj1t2J3c25EgLSY0l56MacrwXeyTpnJx2WTrVmHVAeTn0UbpW1Yoa3BK QNfMbINi7193CwxfBSBmoL7XtHygkFiQ5Vmp4aUXplvIhdUnZbs= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:16 2025 by rpki-client