This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: GJc2yR7zggxkGATDSNYVL0sx4WzzYdNesm34LJkYDU4= Subject key identifier: 44:03:B4:A2:B9:AA:F1:EF:52:18:C9:BB:9F:B8:C2:FF:D3:C3:06:28 Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 7EE83BF3174B4596F2CF9FC2D64F19AFB451879E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: B8 Signing time: Tue 23 Dec 2025 12:11:46 +0000 Manifest this update: Tue 23 Dec 2025 12:06:46 +0000 Manifest next update: Fri 26 Dec 2025 22:40:46 +0000 Files and hashes: 1: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: R0av0XFKsIG6wkD5jGb6ewkYZTxEvYldQow/nqCUbyg=) 2: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 22:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e8:3b:f3:17:4b:45:96:f2:cf:9f:c2:d6:4f:19:af:b4:51:87:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Dec 23 12:06:46 2025 GMT Not After : Dec 26 22:40:46 2025 GMT Subject: CN=4403B4A2B9AAF1EF5218C9BB9FB8C2FFD3C30628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:93:60:9d:e1:b8:6d:86:bb:12:81:50:92:2d: 4c:ee:0c:b9:29:d5:33:f7:bd:48:f8:dd:0d:02:f6: eb:ac:73:bb:36:c4:21:8b:bc:ed:93:4c:54:71:5d: 9d:6f:e4:cb:05:3b:af:f9:38:f0:06:9c:39:34:1a: 63:48:3e:b9:d7:e1:9f:6e:44:5b:34:63:87:dc:cb: e1:2d:19:34:55:3b:86:37:f3:f9:65:d1:a8:a6:e4: 28:d7:52:ce:4f:59:da:75:f1:b5:ce:89:37:e1:19: 0b:91:86:60:28:e1:c2:d0:fc:e0:5f:62:d0:97:55: 6f:66:10:50:e0:df:03:dc:18:25:6a:87:44:81:3f: b3:81:e6:d1:61:ad:a6:e5:e8:89:29:10:0e:18:f0: 34:6a:b3:75:95:4c:f5:22:63:7d:e9:38:88:db:e1: 9f:31:20:6c:a7:ac:4a:67:f8:d2:48:55:1b:15:06: e6:5c:5d:1f:51:82:73:07:b9:40:3d:6a:c9:54:a1: 11:42:2e:91:b5:2a:56:7c:e7:00:92:7e:08:f7:e3: 14:62:6d:18:37:83:69:bd:d7:1c:c1:0b:95:8f:c7: d4:72:77:c6:40:3d:b5:1c:bf:53:d0:01:d7:75:cd: 78:d0:2e:1a:26:1d:ac:9b:b4:92:1a:ca:35:27:19: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:03:B4:A2:B9:AA:F1:EF:52:18:C9:BB:9F:B8:C2:FF:D3:C3:06:28 X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9b:57:1d:07:94:f7:08:e3:6d:10:4e:60:93:45:de:79:83: 59:54:e7:e6:25:78:3f:fe:3c:50:d5:cd:ac:6a:68:0b:d6:ef: 52:e4:3c:de:41:55:1d:7a:7a:3c:64:af:17:3b:a8:d7:c2:1b: 82:0d:90:91:4c:97:1b:12:50:8b:4e:86:3f:e6:79:b9:39:f1: 89:c3:d2:0a:ac:c6:83:f0:ac:68:ea:39:ff:64:3d:bd:6c:73: 64:b7:51:23:0e:5a:88:be:0b:14:fb:ea:8c:64:13:55:cc:ee: 06:28:0c:64:e6:b5:12:fc:49:8d:5d:2e:57:fb:1e:fb:a5:76: c6:c6:c4:e4:98:b2:b5:1b:76:96:9c:a7:e4:af:d1:2c:f8:88: 58:34:db:28:bd:4f:d7:a7:6e:d3:77:06:2e:51:40:8c:24:fb: 28:8a:b3:c8:0e:a6:dc:f4:1d:42:d4:a1:e2:b3:d1:d9:07:93: 2d:d3:a8:e9:f8:86:31:56:7e:25:22:c9:65:0b:24:2d:38:b9: a0:49:4a:06:87:c8:77:10:92:ac:27:61:6b:2a:0f:7f:70:0d: 00:7d:ab:81:52:f1:30:6d:de:a8:e9:6f:a7:3f:01:bd:46:c1: 71:5b:ce:56:42:31:96:0a:9a:d2:d4:15:51:9e:99:58:f9:8f: ea:e0:d4:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfug78xdLRZbyz5/C1k8Zr7RRh54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTEyMjMxMjA2NDZaFw0yNTEyMjYyMjQwNDZaMDMxMTAvBgNV BAMTKDQ0MDNCNEEyQjlBQUYxRUY1MjE4QzlCQjlGQjhDMkZGRDNDMzA2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyk2Cd4bhthrsSgVCSLUzuDLkp 1TP3vUj43Q0C9uusc7s2xCGLvO2TTFRxXZ1v5MsFO6/5OPAGnDk0GmNIPrnX4Z9u RFs0Y4fcy+EtGTRVO4Y38/ll0aim5CjXUs5PWdp18bXOiTfhGQuRhmAo4cLQ/OBf YtCXVW9mEFDg3wPcGCVqh0SBP7OB5tFhrabl6IkpEA4Y8DRqs3WVTPUiY33pOIjb 4Z8xIGynrEpn+NJIVRsVBuZcXR9RgnMHuUA9aslUoRFCLpG1KlZ85wCSfgj34xRi bRg3g2m91xzBC5WPx9Ryd8ZAPbUcv1PQAdd1zXjQLhomHaybtJIayjUnGbNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURAO0ormq8e9SGMm7n7jC/9PDBigwHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGbVx0HlPcI420QTmCTRd55g1lU5+YleD/+ PFDVzaxqaAvW71LkPN5BVR16ejxkrxc7qNfCG4INkJFMlxsSUItOhj/mebk58YnD 0gqsxoPwrGjqOf9kPb1sc2S3USMOWoi+CxT76oxkE1XM7gYoDGTmtRL8SY1dLlf7 HvuldsbGxOSYsrUbdpacp+Sv0Sz4iFg02yi9T9enbtN3Bi5RQIwk+yiKs8gOptz0 HULUoeKz0dkHky3TqOn4hjFWfiUiyWULJC04uaBJSgaHyHcQkqwnYWsqD39wDQB9 q4FS8TBt3qjpb6c/Ab1GwXFbzlZCMZYKmtLUFVGemVj5j+rg1G0= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:18 2025 by rpki-client