This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: Li/hqByedNWXost310xb1fdbi/3P5W4rv02V3wQEpAI= Subject key identifier: BF:38:D6:6B:DE:5A:80:AB:68:1C:7F:86:42:8E:D5:3D:46:05:DA:DB Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 38FB4C783D98A2AC4CE1F6B03D8A6364EC33799A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 0500 Signing time: Fri 26 Dec 2025 12:31:20 +0000 Manifest this update: Fri 26 Dec 2025 12:26:20 +0000 Manifest next update: Tue 30 Dec 2025 00:25:20 +0000 Files and hashes: 1: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: LnpJLG8weIEL3WWb9LdcNQPY8LmP/dedKLMM3zVXNE0=) 2: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=) 3: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=) 4: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fb:4c:78:3d:98:a2:ac:4c:e1:f6:b0:3d:8a:63:64:ec:33:79:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Dec 26 12:26:20 2025 GMT Not After : Dec 30 00:25:20 2025 GMT Subject: CN=BF38D66BDE5A80AB681C7F86428ED53D4605DADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:bc:0e:cc:da:3b:9d:34:85:c5:ca:60:65: 14:d1:85:9d:93:35:81:80:1b:df:cd:2e:11:b5:18: 84:86:b6:81:fb:16:9e:8e:1e:0e:a9:8f:92:db:f9: 3f:08:ad:35:60:59:96:07:e2:c5:88:2a:b7:cf:ab: 6e:9f:84:3f:43:75:1d:3f:84:c1:b8:49:db:e3:6a: 3a:48:fe:ec:58:5b:67:13:b3:ca:25:44:6b:3f:df: 20:9b:51:57:37:11:31:4b:50:1c:29:26:e3:81:49: 09:66:72:9d:61:b2:01:96:86:b5:90:56:e0:8c:bd: a8:c5:4f:2d:f1:f7:3f:18:f1:42:55:90:f2:eb:f4: d4:79:70:d2:23:01:dd:17:17:d9:f2:5f:ad:1f:26: 26:14:62:94:84:52:3b:2f:dc:ca:d6:0f:26:22:69: 07:13:7e:7f:f9:6e:d1:51:a4:61:26:25:34:2f:07: 02:6e:dd:23:93:75:94:da:8f:e9:f2:b2:e0:82:c6: fc:c1:92:56:f1:f4:19:3e:83:3b:b8:69:e0:09:26: f4:13:5a:96:4b:8a:d7:fb:97:58:a4:de:7f:c3:52: e7:1b:a3:be:d5:50:37:bf:75:75:be:a9:48:09:7d: 8f:62:78:bf:0f:4d:02:1b:c8:8a:b9:1d:0b:13:bc: 87:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:D6:6B:DE:5A:80:AB:68:1C:7F:86:42:8E:D5:3D:46:05:DA:DB X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d4:ac:51:a0:e0:09:11:4c:59:a9:8e:c5:7b:54:f8:81:bd: 6d:ca:e8:2a:26:4d:78:b0:1b:93:07:7b:14:aa:6d:7b:c9:39: a9:5f:62:c7:28:e1:c7:16:79:51:1a:fa:b1:91:5d:82:84:fa: 31:72:4a:78:aa:5a:c6:a3:2d:1f:a1:81:e4:3d:e6:f3:fd:0e: 54:52:79:63:99:6e:ba:35:c4:c1:0f:0d:71:8b:ef:6e:1e:da: 18:20:c5:71:06:b6:a1:a7:f7:a5:8a:f3:a5:bc:36:9d:57:41: 94:30:50:d6:99:35:af:fa:71:76:19:9c:32:0e:ea:f7:bf:9f: 4e:15:78:a8:1f:7d:86:36:af:94:aa:8e:bf:81:8f:85:52:d7: ad:f5:66:02:08:72:bd:68:ec:d0:d8:be:51:d2:c9:19:94:bd: 9b:6a:2e:e9:3e:15:11:49:96:46:be:05:18:20:15:36:ed:0b: c7:ad:23:5a:07:76:f7:72:38:3c:db:e6:d3:c3:b4:12:66:5d: c4:bc:9f:76:67:e3:d9:36:89:d2:35:d2:a7:91:77:94:3a:da: a2:ba:f5:ed:49:f1:d7:0c:df:78:8d:24:79:75:67:00:81:2d: 84:55:c1:fa:ba:73:6f:c7:ae:94:d6:de:8f:ac:c1:b7:b5:81: a2:22:f4:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPtMeD2YoqxM4fawPYpjZOwzeZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTEyMjYxMjI2MjBaFw0yNTEyMzAwMDI1MjBaMDMxMTAvBgNV BAMTKEJGMzhENjZCREU1QTgwQUI2ODFDN0Y4NjQyOEVENTNENDYwNURBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUrwOzNo7nTSFxcpgZRTRhZ2T NYGAG9/NLhG1GISGtoH7Fp6OHg6pj5Lb+T8IrTVgWZYH4sWIKrfPq26fhD9DdR0/ hMG4SdvjajpI/uxYW2cTs8olRGs/3yCbUVc3ETFLUBwpJuOBSQlmcp1hsgGWhrWQ VuCMvajFTy3x9z8Y8UJVkPLr9NR5cNIjAd0XF9nyX60fJiYUYpSEUjsv3MrWDyYi aQcTfn/5btFRpGEmJTQvBwJu3SOTdZTaj+nysuCCxvzBklbx9Bk+gzu4aeAJJvQT WpZLitf7l1ik3n/DUucbo77VUDe/dXW+qUgJfY9ieL8PTQIbyIq5HQsTvIfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvzjWa95agKtoHH+GQo7VPUYF2tswHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDUrFGg4AkRTFmpjsV7VPiBvW3K6ComTXiw G5MHexSqbXvJOalfYsco4ccWeVEa+rGRXYKE+jFySniqWsajLR+hgeQ95vP9DlRS eWOZbro1xMEPDXGL724e2hggxXEGtqGn96WK86W8Np1XQZQwUNaZNa/6cXYZnDIO 6ve/n04VeKgffYY2r5Sqjr+Bj4VS1631ZgIIcr1o7NDYvlHSyRmUvZtqLuk+FRFJ lka+BRggFTbtC8etI1oHdvdyODzb5tPDtBJmXcS8n3Zn49k2idI10qeRd5Q62qK6 9e1J8dcM33iNJHl1ZwCBLYRVwfq6c2/HrpTW3o+swbe1gaIi9I0= -----END CERTIFICATE-----Generated at Sun Dec 28 07:31:46 2025 by rpki-client