This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: MIjRULLGfbmHi6m4v1P9b8J/SRApRqiCvuJTStA1y8M= Subject key identifier: 6A:74:4B:52:99:9D:8D:18:F9:BE:F1:AC:B4:49:10:F0:3C:61:68:34 Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 1BCCA9AA116BB64F278820129F7A30F41653F627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: 012B Signing time: Wed 17 Dec 2025 03:41:49 +0000 Manifest this update: Wed 17 Dec 2025 03:36:49 +0000 Manifest next update: Sat 20 Dec 2025 06:31:49 +0000 Files and hashes: 1: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) 2: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: BgmrqEp2OitZYsEgLo+E1enWkw9+xiQJsV6Vz/Ue94o=) 3: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cc:a9:aa:11:6b:b6:4f:27:88:20:12:9f:7a:30:f4:16:53:f6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Dec 17 03:36:49 2025 GMT Not After : Dec 20 06:31:49 2025 GMT Subject: CN=6A744B52999D8D18F9BEF1ACB44910F03C616834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:61:c5:95:ad:e0:d2:8d:5c:f5:4b:dd:bf: ce:a9:0c:69:bc:c2:1c:09:a1:f2:7e:c4:f8:22:e2: e7:71:5e:c5:60:e2:51:fb:35:e9:39:13:b4:8a:68: a1:c6:51:f7:bd:d4:9a:9f:e9:83:44:f0:5d:59:78: 1b:5f:c4:35:7b:2f:de:dc:b6:5d:68:8e:98:46:9f: 7b:60:03:c4:f3:f9:62:76:d2:aa:9f:2f:90:52:23: be:51:13:ea:34:a1:09:90:f6:8d:57:20:1d:4a:fd: e7:4f:f4:f3:78:e7:a4:22:47:74:3e:94:6c:1e:4d: f9:36:fd:0e:22:c4:80:37:39:6f:65:89:fe:20:c8: 56:fc:3b:d6:b9:2e:e8:b3:80:4e:fa:9b:ec:01:50: 2c:cc:b8:1d:bd:63:e3:ae:55:24:f9:63:b9:08:e8: 9e:95:c7:e4:35:68:3e:0a:bc:91:4c:ec:b3:d4:bb: 01:bd:d1:56:b3:ec:d3:cb:30:89:d0:b0:7e:6c:65: f2:29:ae:0e:aa:87:61:d6:72:e4:73:bd:74:9f:cd: e5:99:a2:1c:46:74:c8:d8:2e:49:ef:f2:7f:4e:a1: c6:32:d9:a7:f1:85:6c:b1:3a:c6:61:e3:cf:b0:42: 8c:b5:bd:31:6a:ce:ab:ee:9d:aa:30:6a:1e:54:eb: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:74:4B:52:99:9D:8D:18:F9:BE:F1:AC:B4:49:10:F0:3C:61:68:34 X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:29:f5:3d:4d:5e:24:c0:bc:68:9a:37:cb:51:0d:6c:15:ea: 1a:38:98:c0:93:68:7a:58:76:44:bb:e4:c8:a9:90:1b:61:9b: 3e:aa:0b:85:36:3b:ca:54:b4:49:74:0c:0d:c5:a3:bc:63:3f: a2:8c:4d:1e:ed:6f:39:9d:4b:76:66:fb:1c:c0:8c:87:2c:c7: 6d:d6:c0:a7:ab:11:ca:69:00:ff:8c:ff:31:12:63:20:b0:fe: b6:48:2b:fe:4c:aa:66:cb:d4:8b:fd:9e:ab:87:ad:13:1e:e8: 58:33:e1:dc:35:da:0f:9d:b0:aa:9c:5c:0c:2d:25:6b:67:a2: 02:82:90:81:23:aa:3e:3d:11:f8:6c:a3:a4:ae:ab:21:78:71: bf:bf:6d:99:2c:fa:43:65:29:52:6c:a0:9a:6b:92:ac:84:f9: a4:65:d1:e4:c2:c0:82:ce:30:3a:6c:b8:88:b0:bf:47:7e:0f: 7e:49:b0:b4:e1:94:10:68:81:d4:63:56:6d:92:b0:3a:35:00: 9e:09:f1:33:03:90:5b:52:d3:3d:8c:7a:5c:03:1e:5d:b2:23: bf:19:64:36:a8:2c:c2:92:c8:82:22:5d:fa:b8:07:48:4a:2a: 7c:b7:6f:d9:71:f0:9e:76:aa:dc:3e:97:a9:0b:be:e9:f3:19: 62:6c:7e:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8ypqhFrtk8niCASn3ow9BZT9icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTEyMTcwMzM2NDlaFw0yNTEyMjAwNjMxNDlaMDMxMTAvBgNV BAMTKDZBNzQ0QjUyOTk5RDhEMThGOUJFRjFBQ0I0NDkxMEYwM0M2MTY4MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzK2HFla3g0o1c9Uvdv86pDGm8 whwJofJ+xPgi4udxXsVg4lH7Nek5E7SKaKHGUfe91Jqf6YNE8F1ZeBtfxDV7L97c tl1ojphGn3tgA8Tz+WJ20qqfL5BSI75RE+o0oQmQ9o1XIB1K/edP9PN456QiR3Q+ lGweTfk2/Q4ixIA3OW9lif4gyFb8O9a5LuizgE76m+wBUCzMuB29Y+OuVST5Y7kI 6J6Vx+Q1aD4KvJFM7LPUuwG90Vaz7NPLMInQsH5sZfIprg6qh2HWcuRzvXSfzeWZ ohxGdMjYLknv8n9OocYy2afxhWyxOsZh48+wQoy1vTFqzqvunaowah5U6+q/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUanRLUpmdjRj5vvGstEkQ8DxhaDQwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsp9T1NXiTAvGiaN8tRDWwV6ho4mMCTaHpY dkS75MipkBthmz6qC4U2O8pUtEl0DA3Fo7xjP6KMTR7tbzmdS3Zm+xzAjIcsx23W wKerEcppAP+M/zESYyCw/rZIK/5MqmbL1Iv9nquHrRMe6Fgz4dw12g+dsKqcXAwt JWtnogKCkIEjqj49Efhso6SuqyF4cb+/bZks+kNlKVJsoJprkqyE+aRl0eTCwILO MDpsuIiwv0d+D35JsLThlBBogdRjVm2SsDo1AJ4J8TMDkFtS0z2MelwDHl2yI78Z ZDaoLMKSyIIiXfq4B0hKKny3b9lx8J52qtw+l6kLvunzGWJsflk= -----END CERTIFICATE-----Generated at Wed Dec 17 22:10:14 2025 by rpki-client