This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft File: 01DF4BADDE0B23C16F941DC3468443771C193624.mft (raw, json) Hash identifier: 40co+K2lTtqbzmu2i4fqe5zYW3IT8Xi1+epV6HzoMa0= Subject key identifier: DB:A7:AB:79:54:73:F4:EC:A5:9D:B1:11:FB:AD:F7:F2:FF:E6:1D:3C Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 Certificate issuer: /CN=01DF4BADDE0B23C16F941DC3468443771C193624 Certificate serial: 310D01613EBD3A4ED11B30E9EF522FE0565A3C8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft Manifest number: 0253 Signing time: Fri 19 Dec 2025 17:53:21 +0000 Manifest this update: Fri 19 Dec 2025 17:48:21 +0000 Manifest next update: Mon 22 Dec 2025 21:52:21 +0000 Files and hashes: 1: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: umhcspcoF3bORaGf6sEandLiYRoN5qvo+3ZDwDB3BTA=) 2: 01DF4BADDE0B23C16F941DC3468443771C193624.crl (hash: UpclcGXJxLMMUMISR82egvF7ezVw3lIekDF27eKEOJ4=) 3: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: bIguhZb/xSN8gbqOiUshtwtXS4ifpOsnMSSlWO3KLq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 21:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:0d:01:61:3e:bd:3a:4e:d1:1b:30:e9:ef:52:2f:e0:56:5a:3c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624 Validity Not Before: Dec 19 17:48:21 2025 GMT Not After : Dec 22 21:52:21 2025 GMT Subject: CN=DBA7AB795473F4ECA59DB111FBADF7F2FFE61D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:97:eb:f9:33:0d:8a:bb:58:d0:b3:e7:4c: 09:d0:5e:0f:ff:c6:ce:0a:7a:49:45:76:1e:78:2d: 9c:e5:f9:06:e1:83:0c:4d:df:96:57:cc:52:a6:3f: d4:37:96:12:c4:44:05:b7:19:9f:07:62:16:95:76: 05:8d:87:22:f1:05:9b:8e:b4:12:53:43:e0:4f:31: 6c:1d:8c:7f:31:63:ad:00:09:18:28:03:fb:5d:24: 3c:60:bb:9e:e0:ff:93:e6:95:01:84:58:86:b7:67: 2f:46:fb:51:ac:fe:38:4e:00:13:fd:81:94:9d:19: b0:c8:17:d6:6a:3d:96:0a:99:71:61:22:7f:e6:8b: 63:3a:43:ed:73:ca:81:9a:25:5e:c5:5a:9d:7f:64: 37:23:4b:31:9b:50:e4:cb:86:d7:0e:e7:31:b4:3d: 48:ad:e0:42:eb:ec:de:f9:d3:9d:27:24:e3:c6:b3: e8:76:d4:b9:2a:77:cb:2b:4b:d3:5b:98:74:49:4f: 32:ae:72:37:da:5e:8d:5d:26:0b:19:1a:91:9a:a8: 23:0b:36:03:96:b1:86:69:50:4e:85:90:78:ce:64: 4a:d3:f0:40:7b:f0:8b:c7:9e:3d:2a:dc:a1:87:e5: c7:ff:a6:31:4b:8b:e6:26:c9:6a:48:64:7e:dc:1a: a1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A7:AB:79:54:73:F4:EC:A5:9D:B1:11:FB:AD:F7:F2:FF:E6:1D:3C X509v3 Authority Key Identifier: keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:b0:16:3c:66:92:d3:13:b6:be:2c:4c:9c:02:da:cc:1a:7b: fb:c9:b4:00:d4:27:db:79:84:6f:90:47:cd:a9:a6:95:40:39: 12:93:4d:82:5f:b0:58:de:16:19:19:a5:1f:26:02:7d:a2:61: 00:0d:44:b8:51:ae:5f:15:22:96:d0:f4:1a:53:1e:24:1e:d0: 25:99:ab:36:11:e8:0a:96:ba:0b:c4:b3:57:52:1e:65:60:1b: 01:a1:22:3e:0d:8c:63:c0:41:ec:e5:d9:f7:c8:4b:40:d6:90: 23:fc:5e:b5:b5:94:20:d4:96:3c:f9:19:28:5d:e3:c3:51:d8: c6:14:d9:cb:f4:01:7b:87:be:d6:92:44:4b:d0:56:9b:7c:7e: e0:54:7f:0c:2a:26:33:57:97:7d:0f:40:96:d3:a2:c4:af:6c: 63:ff:75:1c:80:31:dd:60:2b:5f:20:ea:6c:3d:0f:01:90:29: ec:ed:1e:2c:7a:45:67:f0:7e:c4:01:5c:78:4e:62:ef:38:65: cd:84:d1:1c:b3:0a:1c:d8:1f:95:9c:fe:16:b2:a6:5f:9b:27: 2d:63:6b:8f:09:6f:2d:30:d1:28:bf:bf:3e:e6:09:7e:c4:0c: 6a:03:93:74:06:5d:6c:ba:29:a3:e8:5d:4b:10:57:9f:70:d2: fb:ac:5c:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQ0BYT69Ok7RGzDp71Iv4FZaPI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcx QzE5MzYyNDAeFw0yNTEyMTkxNzQ4MjFaFw0yNTEyMjIyMTUyMjFaMDMxMTAvBgNV BAMTKERCQTdBQjc5NTQ3M0Y0RUNBNTlEQjExMUZCQURGN0YyRkZFNjFEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivJfr+TMNirtY0LPnTAnQXg// xs4KeklFdh54LZzl+QbhgwxN35ZXzFKmP9Q3lhLERAW3GZ8HYhaVdgWNhyLxBZuO tBJTQ+BPMWwdjH8xY60ACRgoA/tdJDxgu57g/5PmlQGEWIa3Zy9G+1Gs/jhOABP9 gZSdGbDIF9ZqPZYKmXFhIn/mi2M6Q+1zyoGaJV7FWp1/ZDcjSzGbUOTLhtcO5zG0 PUit4ELr7N75050nJOPGs+h21Lkqd8srS9NbmHRJTzKucjfaXo1dJgsZGpGaqCML NgOWsYZpUE6FkHjOZErT8EB78IvHnj0q3KGH5cf/pjFLi+YmyWpIZH7cGqGfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU26ereVRz9OylnbER+6338v/mHTwwHwYDVR0j BBgwFoAUAd9Lrd4LI8FvlB3DRoRDdxwZNiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWUzMWVjZi01MmE0LTQ2NzctOTEwMy01ZjM3YTQwOTFkNzUvMC8wMURGNEJBRERF MEIyM0MxNkY5NDFEQzM0Njg0NDM3NzFDMTkzNjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcxQzE5 MzYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQz NzcxQzE5MzYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGwFjxmktMTtr4sTJwC2swae/vJtADUJ9t5 hG+QR82pppVAORKTTYJfsFjeFhkZpR8mAn2iYQANRLhRrl8VIpbQ9BpTHiQe0CWZ qzYR6AqWugvEs1dSHmVgGwGhIj4NjGPAQezl2ffIS0DWkCP8XrW1lCDUljz5GShd 48NR2MYU2cv0AXuHvtaSREvQVpt8fuBUfwwqJjNXl30PQJbTosSvbGP/dRyAMd1g K18g6mw9DwGQKeztHix6RWfwfsQBXHhOYu84Zc2E0RyzChzYH5Wc/haypl+bJy1j a48Jby0w0Si/vz7mCX7EDGoDk3QGXWy6KaPoXUsQV59w0vusXKA= -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:12 2025 by rpki-client