This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft File: D454E26475969CECE78A97B9152AFC76DB922AA3.mft (raw, json) Hash identifier: RY+e5/lhGL/fZoegm8uslVZWR6YKvMvBd/mdOaKIl+8= Subject key identifier: CD:DE:44:06:16:27:12:69:33:ED:0C:22:7C:AA:21:5F:52:41:B8:BD Authority key identifier: D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 Certificate issuer: /CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Certificate serial: 51306C8A6E0456E1BA43714E2C64A1FD9AD7BAA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft Manifest number: 01D9 Signing time: Thu 18 Dec 2025 17:13:06 +0000 Manifest this update: Thu 18 Dec 2025 17:08:06 +0000 Manifest next update: Mon 22 Dec 2025 02:20:06 +0000 Files and hashes: 1: D454E26475969CECE78A97B9152AFC76DB922AA3.crl (hash: Wy5qmtj4MbFO8/9RfVFRhj6QsbVh6av04AdvzrIe3NM=) 2: 3130332e3136342e36312e302f32342d3234203d3e20313431393632.roa (hash: jkJd+M5rwtfeJj5Wy3BROoY6ivNRSiwWeiLPr6W2/x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:20:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:30:6c:8a:6e:04:56:e1:ba:43:71:4e:2c:64:a1:fd:9a:d7:ba:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D454E26475969CECE78A97B9152AFC76DB922AA3 Validity Not Before: Dec 18 17:08:06 2025 GMT Not After : Dec 22 02:20:06 2025 GMT Subject: CN=CDDE44061627126933ED0C227CAA215F5241B8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:9d:d2:10:5d:fb:9f:11:45:d2:1f:5a:61: 6b:8a:f7:b6:61:79:0e:df:11:26:d8:10:f3:71:13: 2d:99:d4:38:db:e0:98:82:c3:23:8e:70:49:fa:df: 74:77:3a:85:ab:56:3e:b4:36:8b:cc:6b:f2:d7:70: f5:2f:3c:28:85:09:23:b9:07:aa:dc:a1:39:47:30: b7:31:b9:66:37:36:9a:54:61:ec:f2:8c:4c:50:e2: a2:1e:ff:35:93:e5:40:8b:a7:a1:0c:0e:7b:d1:c0: 2d:bf:4b:6d:d1:9b:c4:77:75:cd:43:26:5c:07:40: e6:e0:d8:59:e8:09:11:bb:be:d4:5c:a9:69:8d:6e: dc:40:bd:5e:12:48:6a:4b:5f:67:0e:c5:ca:ae:6f: 2d:86:de:c9:92:26:79:09:db:bb:d6:05:7b:ef:08: 8c:b4:49:94:c7:35:7c:21:94:27:3d:1b:d3:95:43: 91:61:1c:00:93:c5:df:b7:11:09:92:40:42:e3:6c: d2:e7:5e:f4:22:b3:f5:6a:a9:7f:3b:17:c7:c7:7f: 51:3c:5c:43:3e:ca:f4:39:52:7a:e1:2f:ce:98:55: f1:87:16:d1:6a:2c:c5:9c:73:2e:cc:50:e7:96:37: 5b:dc:10:ce:b4:55:cf:c1:65:c2:ba:40:fd:3a:c2: 07:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DE:44:06:16:27:12:69:33:ED:0C:22:7C:AA:21:5F:52:41:B8:BD X509v3 Authority Key Identifier: keyid:D4:54:E2:64:75:96:9C:EC:E7:8A:97:B9:15:2A:FC:76:DB:92:2A:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D454E26475969CECE78A97B9152AFC76DB922AA3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb17c206-9b63-4c56-9436-475d82141a66/0/D454E26475969CECE78A97B9152AFC76DB922AA3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:9c:6a:53:ce:81:dc:09:cb:8b:d4:3a:94:f8:8e:65:94:af: a8:5c:82:ae:b6:91:3c:bb:b5:1b:bd:45:8f:79:83:e4:5e:4b: a0:cd:16:d9:98:86:bb:1d:ad:f6:47:c6:37:91:af:1d:ce:d9: 2d:b5:d7:53:66:62:3c:4b:be:2a:ef:d3:a5:b8:76:50:60:1b: 2d:4c:88:ca:26:22:f0:10:ed:04:64:16:0f:c0:ee:7d:2c:9e: 33:de:cf:f9:ad:a3:38:4a:cd:b7:97:cd:64:ab:be:b9:7f:96: 84:e0:65:bb:6d:37:27:f4:64:80:29:09:2f:d7:1a:be:75:fd: bb:7c:44:22:93:c0:d7:05:94:b5:72:2a:d0:d4:77:0a:46:92: c7:6a:e5:21:46:9d:03:8e:1b:9a:28:f3:62:7f:a8:d6:d5:e4: 48:3b:23:82:f0:da:5b:ea:31:26:99:7f:60:60:70:67:85:78: 01:2b:7d:b3:89:cd:5e:33:d4:f5:0d:3b:26:60:2a:a0:8a:f0: 5e:f5:db:a2:16:3e:16:7d:e3:ee:55:0c:7c:43:0a:57:a1:8c: b2:aa:69:1d:55:21:4e:c9:36:da:10:ac:9f:48:6b:53:08:e5: 44:1a:1e:c7:36:e8:1d:f7:b8:b0:39:7c:8a:a5:b5:50:94:35: 59:c3:17:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUTBsim4EVuG6Q3FOLGSh/ZrXuqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZE QjkyMkFBMzAeFw0yNTEyMTgxNzA4MDZaFw0yNTEyMjIwMjIwMDZaMDMxMTAvBgNV BAMTKENEREU0NDA2MTYyNzEyNjkzM0VEMEMyMjdDQUEyMTVGNTI0MUI4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA6J3SEF37nxFF0h9aYWuK97Zh eQ7fESbYEPNxEy2Z1Djb4JiCwyOOcEn633R3OoWrVj60NovMa/LXcPUvPCiFCSO5 B6rcoTlHMLcxuWY3NppUYezyjExQ4qIe/zWT5UCLp6EMDnvRwC2/S23Rm8R3dc1D JlwHQObg2FnoCRG7vtRcqWmNbtxAvV4SSGpLX2cOxcquby2G3smSJnkJ27vWBXvv CIy0SZTHNXwhlCc9G9OVQ5FhHACTxd+3EQmSQELjbNLnXvQis/VqqX87F8fHf1E8 XEM+yvQ5UnrhL86YVfGHFtFqLMWccy7MUOeWN1vcEM60Vc/BZcK6QP06wgcdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzd5EBhYnEmkz7QwifKohX1JBuL0wHwYDVR0j BBgwFoAU1FTiZHWWnOznipe5FSr8dtuSKqMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjE3YzIwNi05YjYzLTRjNTYtOTQzNi00NzVkODIxNDFhNjYvMC9ENDU0RTI2NDc1 OTY5Q0VDRTc4QTk3QjkxNTJBRkM3NkRCOTIyQUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZDNzZEQjky MkFBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIxN2MyMDYtOWI2My00YzU2LTk0 MzYtNDc1ZDgyMTQxYTY2LzAvRDQ1NEUyNjQ3NTk2OUNFQ0U3OEE5N0I5MTUyQUZD NzZEQjkyMkFBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKcalPOgdwJy4vUOpT4jmWUr6hcgq62kTy7 tRu9RY95g+ReS6DNFtmYhrsdrfZHxjeRrx3O2S2111NmYjxLvirv06W4dlBgGy1M iMomIvAQ7QRkFg/A7n0snjPez/mtozhKzbeXzWSrvrl/loTgZbttNyf0ZIApCS/X Gr51/bt8RCKTwNcFlLVyKtDUdwpGksdq5SFGnQOOG5oo82J/qNbV5Eg7I4Lw2lvq MSaZf2BgcGeFeAErfbOJzV4z1PUNOyZgKqCK8F7126IWPhZ94+5VDHxDClehjLKq aR1VIU7JNtoQrJ9Ia1MI5UQaHsc26B33uLA5fIqltVCUNVnDF1Y= -----END CERTIFICATE-----Generated at Fri Dec 19 10:55:10 2025 by rpki-client