This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: WDt7C2418O6hhsuDzv3/2+JWs1cLBs7OjiuI1iF8OUI= Subject key identifier: 21:3E:4E:A1:F9:F4:41:A5:A1:6C:26:C5:91:3C:F2:37:E2:14:4A:42 Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 0804309B986BD7FAB4150D2BCC85B095BD4C0C1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 026F Signing time: Thu 25 Dec 2025 02:41:51 +0000 Manifest this update: Thu 25 Dec 2025 02:36:51 +0000 Manifest next update: Sun 28 Dec 2025 09:40:51 +0000 Files and hashes: 1: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: 0zeOMcJLti5PO9rOACuwXhf403LkxSHV9NKFjogohdU=) 2: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: tgk3NoI7Yl9Wh8OuLguFYhMn+bQWgfMhzVajW1+V2GA=) 3: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: 6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=) 4: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: 8k5DQdShfF1LLL6tlnALBNsa0H5JvdmBz45qLP8B2NI=) 5: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: S46aE/ncRXMf/O3Dr/ibsClJZkbck2hq6Vl5nt7lzws=) 6: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: IanTd1Ew7ExQBR3Hbp/UbGcMBP1W/gVyCU+cOeKGZLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 09:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:04:30:9b:98:6b:d7:fa:b4:15:0d:2b:cc:85:b0:95:bd:4c:0c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: Dec 25 02:36:51 2025 GMT Not After : Dec 28 09:40:51 2025 GMT Subject: CN=213E4EA1F9F441A5A16C26C5913CF237E2144A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:70:6b:d8:4c:e0:30:b5:53:86:89:b0:22: 0c:b2:fd:d5:c9:c3:d6:e0:6c:81:a0:76:8c:d7:86: 35:e7:f2:95:17:3f:29:b4:40:c5:21:b2:14:fc:ff: 2f:af:9c:6a:7d:9e:02:20:7f:af:80:2b:59:c6:73: b7:cd:29:e7:73:9f:ee:85:b0:01:4e:49:6e:21:92: bf:6d:28:31:30:be:e3:91:5e:a8:d8:ba:40:cc:fd: 93:90:10:7c:c7:89:7c:a7:01:d8:49:68:fc:07:e8: c6:4a:04:ed:e7:3b:21:c8:45:e3:27:7f:ac:e2:da: 32:57:5b:ff:bb:58:85:63:05:00:8a:26:4b:58:26: b2:0e:95:83:a0:3e:91:45:98:3f:86:5a:49:f1:0a: 39:c2:2d:c4:60:f8:3b:ce:6f:8c:78:f0:49:fe:21: 44:3c:31:9b:f9:6e:f2:d0:65:bc:67:4c:77:0a:b7: 06:e8:16:0c:6f:07:21:b0:73:45:f7:6e:bc:e7:6b: 61:c6:92:65:4f:60:53:24:53:cf:88:fb:64:a4:6f: 86:9f:b6:fe:2d:95:8e:ea:1d:13:67:6a:f4:a2:fb: 4e:db:ed:5c:64:9a:d6:d6:9b:4b:f3:95:b0:52:ec: 3c:20:8a:29:6d:c4:32:da:04:43:14:7c:d2:3f:9b: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3E:4E:A1:F9:F4:41:A5:A1:6C:26:C5:91:3C:F2:37:E2:14:4A:42 X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:87:4e:03:cc:b8:17:f7:6d:79:44:bb:42:ae:da:43:cb:bc: 04:bf:a2:6b:20:21:22:65:51:b5:7c:8c:98:71:87:40:79:c6: b8:29:c5:88:21:a0:88:c4:a1:9e:24:61:c7:b3:81:8b:74:1a: 5e:2d:28:ee:2b:d3:60:8b:d0:5b:a0:12:0d:3b:a8:09:95:4f: d5:36:5b:fc:5e:83:57:d3:74:ac:fc:03:fe:79:fd:95:40:a5: 14:f4:c6:97:0f:20:23:b5:da:72:8a:49:d6:04:15:1f:85:0a: 6f:ca:72:0b:b4:e5:ff:40:82:7c:66:5a:1b:7d:d6:2d:1b:e4: 2b:c7:04:a9:93:84:4e:e5:54:6d:83:42:50:cf:59:09:bb:d2: c3:9f:7a:b0:36:67:b1:97:3d:b3:07:f8:87:22:2b:94:5b:5e: 6a:34:fe:13:4e:50:15:2e:ef:9e:17:41:c4:16:c8:bb:95:da: db:a5:ea:5b:da:a4:d1:54:2e:33:9a:6b:af:03:32:c3:fe:8a: 6c:4a:2c:2e:ec:dd:2e:8e:a6:31:58:4d:61:bd:0e:07:27:48: d8:16:62:9b:6f:1c:17:f4:a8:2e:10:af:81:e2:94:79:e0:74: 09:ba:95:c7:b2:eb:00:ff:de:97:13:7b:a8:ba:ef:15:d1:cb: 73:55:ff:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAQwm5hr1/q0FQ0rzIWwlb1MDB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNTEyMjUwMjM2NTFaFw0yNTEyMjgwOTQwNTFaMDMxMTAvBgNV BAMTKDIxM0U0RUExRjlGNDQxQTVBMTZDMjZDNTkxM0NGMjM3RTIxNDRBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4XBr2EzgMLVThomwIgyy/dXJ w9bgbIGgdozXhjXn8pUXPym0QMUhshT8/y+vnGp9ngIgf6+AK1nGc7fNKedzn+6F sAFOSW4hkr9tKDEwvuORXqjYukDM/ZOQEHzHiXynAdhJaPwH6MZKBO3nOyHIReMn f6zi2jJXW/+7WIVjBQCKJktYJrIOlYOgPpFFmD+GWknxCjnCLcRg+DvOb4x48En+ IUQ8MZv5bvLQZbxnTHcKtwboFgxvByGwc0X3brzna2HGkmVPYFMkU8+I+2Skb4af tv4tlY7qHRNnavSi+07b7VxkmtbWm0vzlbBS7DwgiiltxDLaBEMUfNI/m+fBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIT5Oofn0QaWhbCbFkTzyN+IUSkIwHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqHTgPMuBf3bXlEu0Ku2kPLvAS/omsgISJl UbV8jJhxh0B5xrgpxYghoIjEoZ4kYcezgYt0Gl4tKO4r02CL0FugEg07qAmVT9U2 W/xeg1fTdKz8A/55/ZVApRT0xpcPICO12nKKSdYEFR+FCm/Kcgu05f9AgnxmWht9 1i0b5CvHBKmThE7lVG2DQlDPWQm70sOferA2Z7GXPbMH+IciK5RbXmo0/hNOUBUu 754XQcQWyLuV2tul6lvapNFULjOaa68DMsP+imxKLC7s3S6OpjFYTWG9DgcnSNgW YptvHBf0qC4Qr4HilHngdAm6lcey6wD/3pcTe6i67xXRy3NV/5M= -----END CERTIFICATE-----Generated at Thu Dec 25 08:22:56 2025 by rpki-client