This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json) Hash identifier: bm2TzU9vs2wk4NCLh+P1xjRvJwqLJOVE5lDmKbm5yl0= Subject key identifier: 46:A6:0E:C2:25:44:61:E1:5F:8C:58:F8:D5:B7:CE:26:77:08:E1:3C Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Certificate serial: 74F65C55381ADDB6225D168C5E020A08E2D51B29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft Manifest number: 01DC Signing time: Tue 23 Dec 2025 20:40:08 +0000 Manifest this update: Tue 23 Dec 2025 20:35:08 +0000 Manifest next update: Fri 26 Dec 2025 23:49:08 +0000 Files and hashes: 1: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: N0/JO0oaR76f4qC9rQwj7j3uUoZjxf567pjSkSVvNG0=) 2: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: ay9OFi0Lz8dA3pS1sF2JJ4NyDT5i/0QOnijWdOmMXiM=) 3: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: 7LSMPL8vBB3tryB4W9V+LqRs1lcp8JLOw5O4E5oOPZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 23:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f6:5c:55:38:1a:dd:b6:22:5d:16:8c:5e:02:0a:08:e2:d5:1b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Validity Not Before: Dec 23 20:35:08 2025 GMT Not After : Dec 26 23:49:08 2025 GMT Subject: CN=46A60EC2254461E15F8C58F8D5B7CE267708E13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:bc:8d:56:63:f5:4f:a0:11:8e:38:be:3c: 18:4a:f0:38:11:72:80:8e:ab:e1:93:82:37:0a:3e: 0b:d5:f9:ef:87:79:8d:1a:35:e7:79:d7:b5:42:58: 65:bf:a8:bb:80:a5:c3:9d:be:42:ec:98:09:57:71: fe:13:b3:8b:bd:02:51:4c:4b:01:d9:f9:60:2b:48: 5f:a5:f9:9f:ff:59:7e:b1:6c:f8:49:4e:7c:38:67: 3a:97:1b:72:44:47:e1:85:af:e3:d0:00:99:23:72: 7c:b8:1e:07:6f:52:f3:76:67:70:f5:4a:9b:6a:bc: 3a:7f:48:81:b3:29:a4:ee:f2:84:05:15:56:1e:16: e5:2f:1d:ac:9a:db:c1:74:5e:95:7f:e3:1d:27:44: 68:d8:c5:4c:d9:72:1e:e3:92:90:f5:f1:c5:47:d3: e1:df:3e:79:d5:f4:92:8f:6a:bc:6a:b0:78:7a:eb: 55:87:f0:3f:80:67:5a:9b:3f:0d:27:e8:0a:c3:f8: c9:42:9a:ae:a7:fd:7d:b5:db:3f:6d:d8:62:53:34: 88:39:78:1b:56:08:62:34:9b:01:57:47:e7:bc:43: 57:8c:0e:35:6a:ed:a6:8d:d4:47:0f:19:e0:9e:1e: 6c:c0:08:f9:e9:06:7a:9f:bb:57:9d:09:5a:c5:00: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A6:0E:C2:25:44:61:E1:5F:8C:58:F8:D5:B7:CE:26:77:08:E1:3C X509v3 Authority Key Identifier: keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e6:50:44:f2:7f:7f:b7:b3:8d:13:98:45:37:d2:12:6e:0a: 18:89:96:b7:f5:05:f6:12:78:3b:c6:25:08:c0:8b:c7:51:24: a2:fc:15:2c:13:87:08:a9:62:d4:d9:cd:ab:46:78:e8:20:fb: 7f:fc:b7:ff:1c:3b:1e:86:5e:02:a3:72:f3:db:d2:08:ce:07: 68:88:c5:b0:cb:c7:4a:af:22:f9:9b:dd:8d:a5:75:02:fa:de: 34:ce:2f:69:c2:b3:28:b3:61:c0:fb:34:40:42:93:0b:54:9d: 26:f8:dc:65:ec:22:da:45:27:9b:89:21:cc:a2:09:7c:7a:49: 34:bd:e7:21:4a:3d:ad:60:61:72:52:57:fd:c9:55:3e:0c:e1: 2b:60:c4:3d:02:17:c8:be:ba:3c:94:15:36:14:c0:43:65:03: b5:fb:2a:0a:d0:46:c5:89:12:dc:1c:01:70:e7:17:24:13:6d: fe:79:26:2a:ea:1d:40:61:22:c9:19:9b:2f:94:49:37:26:6a: 6b:a8:5c:6b:88:a8:98:f6:04:40:4a:e2:42:5f:f3:ec:dc:ce: 0a:a5:92:01:d7:b7:d8:ed:48:98:fd:aa:e2:96:a3:04:14:5a: 97:30:66:86:48:3d:ab:2d:43:80:f2:cb:cd:c1:64:28:13:fd: f3:66:f0:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPZcVTga3bYiXRaMXgIKCOLVGykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJC Q0NGOTFFQTAeFw0yNTEyMjMyMDM1MDhaFw0yNTEyMjYyMzQ5MDhaMDMxMTAvBgNV BAMTKDQ2QTYwRUMyMjU0NDYxRTE1RjhDNThGOEQ1QjdDRTI2NzcwOEUxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf1LyNVmP1T6ARjji+PBhK8DgR coCOq+GTgjcKPgvV+e+HeY0aNed517VCWGW/qLuApcOdvkLsmAlXcf4Ts4u9AlFM SwHZ+WArSF+l+Z//WX6xbPhJTnw4ZzqXG3JER+GFr+PQAJkjcny4HgdvUvN2Z3D1 SptqvDp/SIGzKaTu8oQFFVYeFuUvHaya28F0XpV/4x0nRGjYxUzZch7jkpD18cVH 0+HfPnnV9JKParxqsHh661WH8D+AZ1qbPw0n6ArD+MlCmq6n/X212z9t2GJTNIg5 eBtWCGI0mwFXR+e8Q1eMDjVq7aaN1EcPGeCeHmzACPnpBnqfu1edCVrFAGI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURqYOwiVEYeFfjFj41bfOJncI4TwwHwYDVR0j BBgwFoAU0XW9xaZBTOurRy35FZy9MrzPkeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjJkNGQ3NC02Mjk1LTQ0OTYtODIzYS0xZThhM2Q1YmJiNmMvMC9EMTc1QkRDNUE2 NDE0Q0VCQUI0NzJERjkxNTlDQkQzMkJDQ0Y5MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJCQ0NG OTFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JE MzJCQ0NGOTFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzmUETyf3+3s40TmEU30hJuChiJlrf1BfYS eDvGJQjAi8dRJKL8FSwThwipYtTZzatGeOgg+3/8t/8cOx6GXgKjcvPb0gjOB2iI xbDLx0qvIvmb3Y2ldQL63jTOL2nCsyizYcD7NEBCkwtUnSb43GXsItpFJ5uJIcyi CXx6STS95yFKPa1gYXJSV/3JVT4M4StgxD0CF8i+ujyUFTYUwENlA7X7KgrQRsWJ EtwcAXDnFyQTbf55JirqHUBhIskZmy+USTcmamuoXGuIqJj2BEBK4kJf8+zczgql kgHXt9jtSJj9quKWowQUWpcwZoZIPastQ4Dyy83BZCgT/fNm8PI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:55 2025 by rpki-client