This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft File: 01DF4BADDE0B23C16F941DC3468443771C193624.mft (raw, json) Hash identifier: JtKEHjo5tCWWYeR2kseddHVOEssgnuEjXtlrF4LD9QE= Subject key identifier: 19:46:EE:C0:8E:78:BE:AA:4F:F7:A6:45:57:E7:47:98:9F:38:B8:85 Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 Certificate issuer: /CN=01DF4BADDE0B23C16F941DC3468443771C193624 Certificate serial: 5405447C950E078705CEEDCC517A6C58AAC5B81C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft Manifest number: 0255 Signing time: Wed 24 Dec 2025 08:33:23 +0000 Manifest this update: Wed 24 Dec 2025 08:28:23 +0000 Manifest next update: Sat 27 Dec 2025 20:02:23 +0000 Files and hashes: 1: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: bIguhZb/xSN8gbqOiUshtwtXS4ifpOsnMSSlWO3KLq4=) 2: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: umhcspcoF3bORaGf6sEandLiYRoN5qvo+3ZDwDB3BTA=) 3: 01DF4BADDE0B23C16F941DC3468443771C193624.crl (hash: C1xk5TNUFks79fPST2BzSlaqgwCR5SS5vaZ6a3n9xpQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:05:44:7c:95:0e:07:87:05:ce:ed:cc:51:7a:6c:58:aa:c5:b8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624 Validity Not Before: Dec 24 08:28:23 2025 GMT Not After : Dec 27 20:02:23 2025 GMT Subject: CN=1946EEC08E78BEAA4FF7A64557E747989F38B885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:f3:94:9e:9c:0b:9e:08:0c:64:0e:78:4b: 4b:65:ff:43:b8:c6:30:f8:ba:65:d5:52:9c:73:98: 14:8e:31:4c:d0:1d:98:d3:8f:0f:19:e6:e7:c7:cb: 7e:d1:07:83:04:0f:76:57:57:ce:4a:a7:17:fa:86: a3:ae:06:6f:e3:7b:a3:a3:87:e5:03:8e:ee:56:c5: c2:e3:8b:eb:31:3d:1c:d8:76:f7:c3:8e:a9:cd:48: f2:6e:d9:60:62:cd:42:9b:ba:f6:10:05:2d:d6:b6: c7:b6:13:ba:da:cd:f2:da:32:a5:01:32:ab:eb:aa: e1:c6:3a:3a:e4:cf:1e:9b:98:09:da:0a:3a:25:47: 61:91:4d:13:db:ad:b4:b1:f4:a5:a8:16:56:30:64: 7e:d3:8a:35:42:57:a0:7f:b4:8a:db:96:46:d3:8f: 70:7b:63:27:1e:f4:b7:ac:e3:78:7e:1f:2a:90:5b: ba:74:8e:95:1e:c0:37:27:43:94:aa:9c:b8:63:a2: 0f:0a:a8:d8:3a:9c:70:6b:eb:c6:9a:0f:99:73:c9: 0d:ac:1c:77:e2:a6:5e:84:dd:85:11:b6:db:ab:ac: 8b:a5:b9:72:51:27:70:6a:58:0b:5d:bf:bd:15:52: cf:24:47:5a:a8:e0:d2:7b:1d:cd:82:33:49:60:29: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:46:EE:C0:8E:78:BE:AA:4F:F7:A6:45:57:E7:47:98:9F:38:B8:85 X509v3 Authority Key Identifier: keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:46:fe:e9:40:9c:8b:01:82:d5:3b:8c:a5:d6:33:f1:4f:64: f9:f1:d4:13:d3:d1:e4:67:c5:70:a7:fa:1b:be:50:29:aa:3c: 3e:aa:4f:66:c4:eb:bd:43:d9:49:8d:35:3e:70:cc:0b:7f:c5: 09:d0:bb:d2:3b:04:c0:54:8f:08:62:6c:11:8f:cb:70:f6:f0: b7:4e:c4:19:61:5d:69:f3:40:5f:e5:6b:3c:80:f2:81:9e:33: c9:39:08:95:9c:63:ae:61:89:44:d9:d2:4a:d3:51:05:53:be: e4:bc:71:71:80:79:bf:e3:af:3a:d7:d7:da:cb:60:6b:1f:1f: ee:b2:9b:50:dc:fb:fb:0b:06:84:49:39:22:c6:71:58:b9:9b: 66:23:10:92:e3:ac:19:34:db:9c:47:23:27:8e:8e:5c:6a:15: 98:fa:8b:fb:37:45:10:b6:74:02:23:09:85:bf:c6:87:4f:d2: 20:7c:40:09:7f:94:4c:ee:21:57:06:a5:8d:91:69:8c:46:bb: c8:67:e8:4b:e7:ba:50:50:c3:ff:68:03:1b:e9:61:72:8d:fd: e5:95:08:9a:01:27:1b:e7:72:5f:0e:cb:94:af:8d:0a:5f:71: 73:43:d1:86:6a:31:64:53:99:de:6c:f3:97:ee:85:97:00:a2: 6f:d7:9f:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAVEfJUOB4cFzu3MUXpsWKrFuBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcx QzE5MzYyNDAeFw0yNTEyMjQwODI4MjNaFw0yNTEyMjcyMDAyMjNaMDMxMTAvBgNV BAMTKDE5NDZFRUMwOEU3OEJFQUE0RkY3QTY0NTU3RTc0Nzk4OUYzOEI4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOvOUnpwLnggMZA54S0tl/0O4 xjD4umXVUpxzmBSOMUzQHZjTjw8Z5ufHy37RB4MED3ZXV85Kpxf6hqOuBm/je6Oj h+UDju5WxcLji+sxPRzYdvfDjqnNSPJu2WBizUKbuvYQBS3Wtse2E7razfLaMqUB MqvrquHGOjrkzx6bmAnaCjolR2GRTRPbrbSx9KWoFlYwZH7TijVCV6B/tIrblkbT j3B7Yyce9Les43h+HyqQW7p0jpUewDcnQ5SqnLhjog8KqNg6nHBr68aaD5lzyQ2s HHfipl6E3YURtturrIuluXJRJ3BqWAtdv70VUs8kR1qo4NJ7Hc2CM0lgKaSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUbuwI54vqpP96ZFV+dHmJ84uIUwHwYDVR0j BBgwFoAUAd9Lrd4LI8FvlB3DRoRDdxwZNiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWUzMWVjZi01MmE0LTQ2NzctOTEwMy01ZjM3YTQwOTFkNzUvMC8wMURGNEJBRERF MEIyM0MxNkY5NDFEQzM0Njg0NDM3NzFDMTkzNjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcxQzE5 MzYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQz NzcxQzE5MzYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlG/ulAnIsBgtU7jKXWM/FPZPnx1BPT0eRn xXCn+hu+UCmqPD6qT2bE671D2UmNNT5wzAt/xQnQu9I7BMBUjwhibBGPy3D28LdO xBlhXWnzQF/lazyA8oGeM8k5CJWcY65hiUTZ0krTUQVTvuS8cXGAeb/jrzrX19rL YGsfH+6ym1Dc+/sLBoRJOSLGcVi5m2YjEJLjrBk025xHIyeOjlxqFZj6i/s3RRC2 dAIjCYW/xodP0iB8QAl/lEzuIVcGpY2RaYxGu8hn6EvnulBQw/9oAxvpYXKN/eWV CJoBJxvncl8Oy5SvjQpfcXND0YZqMWRTmd5s85fuhZcAom/Xn0s= -----END CERTIFICATE-----Generated at Thu Dec 25 00:58:35 2025 by rpki-client