This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: JZ+Vage8cB3U71aNuC7f6R0PuyLqWRdusbv8ahppxoY= Subject key identifier: D7:8A:2F:AB:32:74:60:34:1A:99:00:81:0F:57:00:56:10:05:AF:B5 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 7222D26BFE56F2FCFB571FD808D57B9ED0887CA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 0372 Signing time: Fri 19 Dec 2025 17:31:34 +0000 Manifest this update: Fri 19 Dec 2025 17:26:34 +0000 Manifest next update: Tue 23 Dec 2025 00:51:34 +0000 Files and hashes: 1: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 2: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: J0EZhqosWRvlsFynFqUSuIzOBFwrUDGcW8i8aa6gdz0=) 3: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 4: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 5: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: JBTT95tgZh/X/QugtDrHY7+xX4nEcgcpicxDVZKVxRA=) 6: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 7: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) 8: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 9: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: OFDQYMDUzzw/NR3byvCOl5TPkT2ECqeDKEs5NeoLbQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:22:d2:6b:fe:56:f2:fc:fb:57:1f:d8:08:d5:7b:9e:d0:88:7c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Dec 19 17:26:34 2025 GMT Not After : Dec 23 00:51:34 2025 GMT Subject: CN=D78A2FAB327460341A9900810F5700561005AFB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f2:bf:96:30:4f:c5:c5:4d:6a:ee:ff:9d:5a: c1:82:e3:1b:41:50:e9:64:cd:72:0e:34:6b:3e:9a: 12:f0:de:e8:96:b7:a0:c6:be:21:da:c8:e2:ea:a7: a9:07:cb:3c:9c:8e:2f:48:ec:e1:7b:9b:41:2d:1f: d4:12:6d:cc:5c:34:87:3a:72:6d:25:85:52:25:d4: 59:98:b9:9c:b0:08:b9:8a:89:c7:23:91:d0:93:b1: 68:d9:a9:96:6f:9f:fe:49:5f:84:3f:8b:f6:fd:90: 30:e9:75:7e:77:0e:50:0c:a9:2e:44:67:8c:51:0c: 79:4d:93:1a:2d:95:1a:80:bb:da:71:69:e7:54:54: 3d:02:83:b1:47:05:80:58:71:a3:b3:21:28:72:db: 2d:f9:ad:fd:e2:80:52:1c:b8:e1:88:a0:71:57:97: 98:a5:a4:68:9b:6b:44:cb:56:7f:34:67:79:47:b4: 4b:0c:2f:04:5d:80:f7:77:35:d8:28:14:e6:cb:ae: fb:90:a4:48:4d:d9:34:b1:31:48:2d:4b:d5:29:4e: d4:6b:ce:ce:53:b3:9c:bc:c7:8f:0a:ca:54:59:98: 60:ab:f8:ec:6b:32:17:8b:34:69:63:f3:c7:0b:52: 98:e8:0c:d9:73:ce:ea:1a:f1:cd:33:8a:d2:96:14: 57:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:8A:2F:AB:32:74:60:34:1A:99:00:81:0F:57:00:56:10:05:AF:B5 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:8e:de:8b:d6:7c:b8:71:25:e3:96:b2:e0:c3:a0:3a:53:cf: 4b:3c:79:74:78:55:55:8f:b6:06:99:a1:88:62:48:42:8a:31: 07:94:d6:e1:18:ba:88:4d:59:8a:84:54:d7:5d:18:07:17:15: 70:b9:ee:d8:8a:5e:4a:1d:3e:5b:cd:15:71:fb:24:46:7c:e6: 2a:43:be:6c:a1:b2:5f:f5:cb:ba:ce:1f:d2:4e:a4:36:1e:ee: b8:9e:a9:43:b3:e7:0c:d0:5e:20:8b:25:71:80:d5:72:65:e4: 60:be:81:0b:31:08:5b:8c:81:0b:de:73:2b:7d:9b:09:52:82: b7:c1:ff:95:bf:51:4a:63:9b:9d:93:85:d0:75:16:c7:66:3c: 8f:8e:c1:41:0e:bb:55:5b:fc:b3:f9:f1:79:58:63:25:28:7f: 4f:28:ff:95:8a:be:4e:11:23:a3:75:ed:4c:82:05:14:86:4a: a5:a8:b7:89:a7:ec:b1:0b:86:43:02:a4:39:30:17:63:7e:2b: 3f:41:6c:83:d1:84:08:93:2d:5c:40:cb:79:fe:b2:03:33:9c: a8:00:2a:14:c7:7a:27:f3:51:b9:82:99:9e:76:64:56:e9:8a: 7c:81:ec:65:c7:7d:a4:61:84:60:bf:92:ff:16:64:3f:21:96: 85:b0:b3:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciLSa/5W8vz7Vx/YCNV7ntCIfKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTEyMTkxNzI2MzRaFw0yNTEyMjMwMDUxMzRaMDMxMTAvBgNV BAMTKEQ3OEEyRkFCMzI3NDYwMzQxQTk5MDA4MTBGNTcwMDU2MTAwNUFGQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8r+WME/FxU1q7v+dWsGC4xtB UOlkzXIONGs+mhLw3uiWt6DGviHayOLqp6kHyzycji9I7OF7m0EtH9QSbcxcNIc6 cm0lhVIl1FmYuZywCLmKiccjkdCTsWjZqZZvn/5JX4Q/i/b9kDDpdX53DlAMqS5E Z4xRDHlNkxotlRqAu9pxaedUVD0Cg7FHBYBYcaOzIShy2y35rf3igFIcuOGIoHFX l5ilpGiba0TLVn80Z3lHtEsMLwRdgPd3NdgoFObLrvuQpEhN2TSxMUgtS9UpTtRr zs5Ts5y8x48KylRZmGCr+OxrMheLNGlj88cLUpjoDNlzzuoa8c0zitKWFFenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU14ovqzJ0YDQamQCBD1cAVhAFr7UwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeO3ovWfLhxJeOWsuDDoDpTz0s8eXR4VVWP tgaZoYhiSEKKMQeU1uEYuohNWYqEVNddGAcXFXC57tiKXkodPlvNFXH7JEZ85ipD vmyhsl/1y7rOH9JOpDYe7rieqUOz5wzQXiCLJXGA1XJl5GC+gQsxCFuMgQvecyt9 mwlSgrfB/5W/UUpjm52ThdB1FsdmPI+OwUEOu1Vb/LP58XlYYyUof08o/5WKvk4R I6N17UyCBRSGSqWot4mn7LELhkMCpDkwF2N+Kz9BbIPRhAiTLVxAy3n+sgMznKgA KhTHeifzUbmCmZ52ZFbpinyB7GXHfaRhhGC/kv8WZD8hloWws5A= -----END CERTIFICATE-----Generated at Sat Dec 20 10:35:49 2025 by rpki-client