This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: P6dRBZuihqdczM15+ij+U/Dn1F6R6NXuHg/ARdRImTg= Subject key identifier: 02:72:45:32:C1:66:1B:47:CB:ED:77:4A:9E:1A:B6:8A:20:C0:F6:D2 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 4F03AE8FDCE56674C59790C815F69F778A49068C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 021B Signing time: Tue 23 Dec 2025 22:51:55 +0000 Manifest this update: Tue 23 Dec 2025 22:46:55 +0000 Manifest next update: Sat 27 Dec 2025 05:21:55 +0000 Files and hashes: 1: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: tP+SXvUY1Y50LeciOeilPjD5GcG2nUwu4KefVm/yIIE=) 2: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 05:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:03:ae:8f:dc:e5:66:74:c5:97:90:c8:15:f6:9f:77:8a:49:06:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Dec 23 22:46:55 2025 GMT Not After : Dec 27 05:21:55 2025 GMT Subject: CN=02724532C1661B47CBED774A9E1AB68A20C0F6D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:34:58:73:52:df:4d:86:e3:88:9c:fb:3c: 51:cc:07:5f:f0:31:8a:11:42:ac:f8:28:a3:14:72: 57:b1:18:3b:73:bc:dc:ab:36:ba:d6:c4:0f:fd:2a: 1f:a5:32:ae:e3:1a:8e:65:ed:96:80:3d:15:8d:cf: bf:39:23:db:e6:6e:77:3b:37:d4:74:62:3d:bc:63: d4:a7:16:a1:34:8a:29:72:ec:54:cd:a2:c9:83:3d: 9e:38:cb:88:8b:88:69:42:10:06:0c:cb:85:40:3c: 19:3d:09:5c:e1:ed:43:b7:b3:3f:85:9d:b2:d8:fd: 23:ce:e4:9c:b2:0d:4b:fe:df:79:ca:47:5d:59:78: 91:1a:b7:bd:be:bd:5c:09:a4:70:fd:a8:db:64:07: ab:dc:4c:9a:53:9b:4b:3a:70:78:7a:e0:46:16:6f: ae:35:f9:de:ea:f2:fb:83:82:ec:09:e4:a5:07:1e: 52:fd:01:62:ff:d8:ae:76:1a:43:a8:f4:d8:46:e5: f2:02:54:5f:9c:0a:ea:fc:be:ef:9d:69:5c:3c:b3: f6:40:6a:ab:75:f1:5f:72:b0:11:7e:62:24:b0:cb: 2e:ac:a2:c9:ef:f2:ec:84:b7:91:66:ee:ff:de:a2: 05:db:26:0b:b2:19:01:c1:89:d3:f6:a6:34:74:13: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:72:45:32:C1:66:1B:47:CB:ED:77:4A:9E:1A:B6:8A:20:C0:F6:D2 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:46:e1:b5:2e:e4:c4:cb:e8:48:73:64:7f:23:47:c9:5f:47: a8:e5:04:34:3c:5a:e2:1d:b6:7d:1f:fb:47:a7:ca:4a:e5:e6: e5:28:bf:e5:c9:5a:00:cc:0f:90:a6:c2:53:56:7a:d1:3e:2a: da:cb:15:f8:15:14:9f:67:b3:f2:37:40:b4:fc:ed:6c:26:9b: 70:0d:75:4e:8f:6b:4c:66:1f:15:76:d6:e2:7d:2c:8d:a8:00: 33:57:fb:01:54:dd:b5:cb:3e:61:ac:68:bb:1d:f8:31:f2:27: a9:d1:26:97:76:0d:ff:13:f2:61:87:ca:2b:3d:79:5c:45:62: b0:4d:81:cb:99:94:f3:83:21:ab:9b:25:55:4d:fc:de:c2:46: f8:73:f7:d0:55:09:93:d8:24:a2:b6:37:59:6f:bf:91:1e:30: 30:1e:ff:71:43:87:45:ec:43:c6:a0:b0:a3:1b:8e:3b:eb:3f: be:d0:97:b8:33:47:f9:14:77:e7:5b:d4:44:ef:1a:7d:3a:3e: 82:71:ce:58:12:6d:c9:3a:d9:2c:a2:ce:9e:8c:3c:95:3d:32: ad:c1:2a:31:b6:1e:78:23:47:30:8d:df:2a:48:e5:b3:17:41: 1c:ff:9b:a0:f6:fb:cc:b7:5a:0f:13:f2:4c:ae:f1:df:2e:ae: cf:08:11:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwOuj9zlZnTFl5DIFfafd4pJBowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNTEyMjMyMjQ2NTVaFw0yNTEyMjcwNTIxNTVaMDMxMTAvBgNV BAMTKDAyNzI0NTMyQzE2NjFCNDdDQkVENzc0QTlFMUFCNjhBMjBDMEY2RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cDRYc1LfTYbjiJz7PFHMB1/w MYoRQqz4KKMUclexGDtzvNyrNrrWxA/9Kh+lMq7jGo5l7ZaAPRWNz785I9vmbnc7 N9R0Yj28Y9SnFqE0iily7FTNosmDPZ44y4iLiGlCEAYMy4VAPBk9CVzh7UO3sz+F nbLY/SPO5JyyDUv+33nKR11ZeJEat72+vVwJpHD9qNtkB6vcTJpTm0s6cHh64EYW b641+d7q8vuDguwJ5KUHHlL9AWL/2K52GkOo9NhG5fICVF+cCur8vu+daVw8s/ZA aqt18V9ysBF+YiSwyy6sosnv8uyEt5Fm7v/eogXbJguyGQHBidP2pjR0Ew4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAnJFMsFmG0fL7XdKnhq2iiDA9tIwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVG4bUu5MTL6EhzZH8jR8lfR6jlBDQ8WuId tn0f+0enykrl5uUov+XJWgDMD5CmwlNWetE+KtrLFfgVFJ9ns/I3QLT87Wwmm3AN dU6Pa0xmHxV21uJ9LI2oADNX+wFU3bXLPmGsaLsd+DHyJ6nRJpd2Df8T8mGHyis9 eVxFYrBNgcuZlPODIaubJVVN/N7CRvhz99BVCZPYJKK2N1lvv5EeMDAe/3FDh0Xs Q8agsKMbjjvrP77Ql7gzR/kUd+db1ETvGn06PoJxzlgSbck62Syizp6MPJU9Mq3B KjG2HngjRzCN3ypI5bMXQRz/m6D2+8y3Wg8T8kyu8d8urs8IEeU= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:06 2025 by rpki-client