This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: CCR/zyG817i3Km+GGLp6WNYgP7rObfQAZyJLfTMuxiY= Subject key identifier: 6C:67:39:58:F8:8C:A6:01:1A:53:0A:CD:FC:2B:E7:CE:3B:62:56:14 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 5C85575A7AA28904363B38D34BD4EDD08D36BD57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: F2 Signing time: Tue 23 Dec 2025 22:52:28 +0000 Manifest this update: Tue 23 Dec 2025 22:47:28 +0000 Manifest next update: Sat 27 Dec 2025 10:29:28 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) 2: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: F/HtuIvL8Zzn45pnNaZH/YVyysPA0PQT1l4kfPuy3MU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 10:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:85:57:5a:7a:a2:89:04:36:3b:38:d3:4b:d4:ed:d0:8d:36:bd:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Dec 23 22:47:28 2025 GMT Not After : Dec 27 10:29:28 2025 GMT Subject: CN=6C673958F88CA6011A530ACDFC2BE7CE3B625614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:b6:f4:34:f7:c6:51:ca:b1:ef:b7:b8:bd: bd:66:aa:6c:a7:b6:b5:98:a2:0a:03:21:46:91:b4: f7:8c:75:24:18:94:5a:12:ac:45:af:74:04:39:0a: 0a:c8:5a:bd:b6:2f:85:ce:c4:fa:3c:42:30:ab:3a: e5:a3:2b:bf:bd:7b:d1:b0:84:42:73:0f:35:79:a4: 71:4b:6e:30:f1:63:95:38:d8:a1:6a:7c:cb:88:cc: 05:33:17:ac:8b:c5:a5:d1:8b:07:8b:78:73:5e:0b: 1e:45:d7:ee:9c:3f:a5:09:d2:22:e3:63:03:70:08: 77:6f:35:aa:2d:19:0b:c6:7f:b2:11:8e:f2:e9:b3: 81:67:a1:b0:ae:08:f3:71:f6:47:d9:33:b0:c3:55: 33:f9:ff:6e:c0:8c:44:f3:c7:ba:66:e5:09:a5:5c: 33:5c:3c:43:e5:30:4b:0c:78:06:dd:aa:89:c9:3a: 7a:71:b9:82:af:e0:f6:46:c4:9f:e4:c7:e6:aa:28: e9:6e:32:01:bb:54:f1:27:db:d8:dc:75:a3:1f:f7: 8a:b0:87:66:56:25:7a:08:3c:69:9a:a6:00:8c:30: 68:91:09:f1:32:4a:8a:0c:b3:20:1a:62:96:09:f3: 94:bb:b5:fc:8f:a9:45:44:57:ab:4d:45:d6:aa:0c: 1d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:67:39:58:F8:8C:A6:01:1A:53:0A:CD:FC:2B:E7:CE:3B:62:56:14 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ba:5c:9d:df:81:bf:c3:d7:57:92:9e:e7:32:71:51:c1:61: e5:d0:8f:84:cd:6e:e3:26:af:b2:0d:50:39:54:1a:60:37:34: 3c:96:e0:ae:3c:90:bb:c9:50:a5:7f:ac:65:4c:93:43:3e:a2: 73:c8:58:0c:c3:97:a5:3b:f1:6b:25:21:b9:7b:3a:e5:06:74: 77:cb:fc:aa:7c:15:50:0f:db:a6:5c:86:d4:0c:98:ef:ed:1a: 8a:a1:af:35:cc:f8:f2:28:7d:70:4b:f6:09:d3:cd:54:69:45: c8:fe:0e:ea:66:e3:50:60:57:58:c0:5c:d4:2a:61:0e:bc:90: 35:c2:ba:24:ff:d8:bf:ef:3a:21:03:5e:23:bc:23:35:92:f3: 43:f5:db:ac:f8:26:2b:da:21:5c:46:6e:4e:2d:6b:6b:59:f6: 46:bd:95:ba:7b:54:f4:c1:34:32:42:7e:b8:45:bc:ed:a1:21: 51:77:8d:75:99:e7:e2:93:68:f9:1d:e0:3c:2c:e8:ab:97:ce: 01:af:b1:f4:0e:d0:fe:f5:76:7c:d2:af:3d:d7:d1:1f:9a:ed: 20:8b:7e:8c:71:10:5d:fd:41:a3:88:30:33:c6:4b:31:10:a6: d8:f2:89:30:41:38:b6:aa:ea:c1:54:3b:8d:bb:78:5d:b1:b7: 24:9e:e1:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIVXWnqiiQQ2OzjTS9Tt0I02vVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTEyMjMyMjQ3MjhaFw0yNTEyMjcxMDI5MjhaMDMxMTAvBgNV BAMTKDZDNjczOTU4Rjg4Q0E2MDExQTUzMEFDREZDMkJFN0NFM0I2MjU2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBbb0NPfGUcqx77e4vb1mqmyn trWYogoDIUaRtPeMdSQYlFoSrEWvdAQ5CgrIWr22L4XOxPo8QjCrOuWjK7+9e9Gw hEJzDzV5pHFLbjDxY5U42KFqfMuIzAUzF6yLxaXRiweLeHNeCx5F1+6cP6UJ0iLj YwNwCHdvNaotGQvGf7IRjvLps4FnobCuCPNx9kfZM7DDVTP5/27AjETzx7pm5Qml XDNcPEPlMEsMeAbdqonJOnpxuYKv4PZGxJ/kx+aqKOluMgG7VPEn29jcdaMf94qw h2ZWJXoIPGmapgCMMGiRCfEySooMsyAaYpYJ85S7tfyPqUVEV6tNRdaqDB2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbGc5WPiMpgEaUwrN/CvnzjtiVhQwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKW6XJ3fgb/D11eSnucycVHBYeXQj4TNbuMm r7INUDlUGmA3NDyW4K48kLvJUKV/rGVMk0M+onPIWAzDl6U78WslIbl7OuUGdHfL /Kp8FVAP26ZchtQMmO/tGoqhrzXM+PIofXBL9gnTzVRpRcj+Dupm41BgV1jAXNQq YQ68kDXCuiT/2L/vOiEDXiO8IzWS80P126z4JivaIVxGbk4ta2tZ9ka9lbp7VPTB NDJCfrhFvO2hIVF3jXWZ5+KTaPkd4Dws6KuXzgGvsfQO0P71dnzSrz3X0R+a7SCL foxxEF39QaOIMDPGSzEQptjyiTBBOLaq6sFUO427eF2xtySe4Zk= -----END CERTIFICATE-----Generated at Thu Dec 25 01:22:02 2025 by rpki-client