This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: X2lyAUyKU12bmkLlHhKez+FWT8Quj9lmwIbdwhmkC/k= Subject key identifier: 79:A9:36:B6:DD:5C:DB:CD:B7:12:18:F8:E4:D3:10:3D:DC:48:E0:8B Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 6082A1392E60EEA9E1E1370050249B47458BB2A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 04F0 Signing time: Wed 24 Dec 2025 05:30:46 +0000 Manifest this update: Wed 24 Dec 2025 05:25:46 +0000 Manifest next update: Sat 27 Dec 2025 11:47:46 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: iMQE/Xqg/HRIAc8doeNIRGA5po9bnNG2gL3LzX04oyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:82:a1:39:2e:60:ee:a9:e1:e1:37:00:50:24:9b:47:45:8b:b2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Dec 24 05:25:46 2025 GMT Not After : Dec 27 11:47:46 2025 GMT Subject: CN=79A936B6DD5CDBCDB71218F8E4D3103DDC48E08B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ea:b3:cf:d5:30:2b:32:e3:3b:f5:2b:5e:b8: ec:58:60:2c:cc:2b:c2:29:5a:3d:24:9e:c1:76:57: 63:1c:27:58:8f:9e:42:f5:a0:f0:b9:5f:39:ca:7c: f5:34:87:ae:cd:5c:12:40:86:7c:36:3c:e9:52:1a: f6:30:57:7e:6c:c8:64:56:c4:74:24:24:0b:2f:2c: 44:a1:f7:96:1e:bc:27:0c:6b:51:89:0e:47:1e:ae: 87:69:2b:5a:2c:1b:4b:17:c1:de:52:14:79:57:79: b6:09:b3:6d:ee:ff:34:d4:3c:88:9b:03:c1:91:ee: e0:bd:54:ec:89:04:ac:96:68:5a:3e:b7:36:1a:d8: c6:c1:79:a4:9d:76:1d:89:f8:cb:ed:68:44:71:ed: d8:61:c3:9d:c6:a2:10:4b:05:3e:9d:5d:c4:f3:12: 6c:40:f3:b0:29:04:01:fe:ec:05:3d:fb:36:91:3c: eb:ca:25:4a:83:15:eb:4e:10:c7:cd:b7:ff:12:2c: 2d:09:db:9f:44:c3:a2:a0:1d:64:7b:17:9f:0e:05: 23:69:f8:b9:e2:c5:fd:1f:76:2d:5e:f2:c7:11:1e: ce:33:5d:79:03:42:d8:c9:77:5e:58:3e:5d:b7:d4: a8:4a:b3:10:e0:da:e1:33:b2:b9:cc:31:56:95:84: d9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:36:B6:DD:5C:DB:CD:B7:12:18:F8:E4:D3:10:3D:DC:48:E0:8B X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:52:3c:b5:97:45:22:7e:13:b8:84:68:bf:5c:92:06:11:de: 6a:00:05:06:6d:db:c6:fe:3e:0b:9f:ba:13:a9:4a:7c:dd:c0: fc:6f:4f:cb:40:a7:d0:c8:a7:dc:9f:ca:43:fb:b2:46:9d:b7: 9c:b7:81:5d:b5:89:8d:fd:1c:c4:6e:87:e9:49:82:1a:b1:06: b2:35:62:26:0b:a3:23:17:80:b9:48:c4:ee:50:6d:26:5c:a3: ac:ef:4c:1d:8e:f3:f8:f4:09:54:c8:b2:bd:2b:fa:e6:e0:77: 43:af:68:b6:a1:41:0b:8d:2e:35:55:67:33:0e:18:e4:1a:3e: c5:ee:3a:b1:2f:51:32:cd:83:10:8a:26:8c:c8:c9:0b:2f:9a: 4e:32:21:1e:8d:18:51:a3:eb:75:eb:89:7d:22:75:d2:df:88: 2a:bb:4f:6d:3b:a5:2d:9d:39:77:d8:d4:8f:9e:22:da:76:28: 43:f8:43:a2:78:25:56:ed:98:05:de:56:9e:2d:0c:d6:67:82: 3e:d4:fc:41:ce:c8:db:45:9c:5e:31:32:d5:95:ac:11:ea:44: 85:2a:56:86:4b:0c:a0:78:05:8c:87:a9:2b:af:a6:36:17:21: 56:be:dc:09:a3:f0:93:05:d1:d9:82:56:de:15:a0:5a:97:3f: c4:68:69:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIKhOS5g7qnh4TcAUCSbR0WLsqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTEyMjQwNTI1NDZaFw0yNTEyMjcxMTQ3NDZaMDMxMTAvBgNV BAMTKDc5QTkzNkI2REQ1Q0RCQ0RCNzEyMThGOEU0RDMxMDNEREM0OEUwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD6rPP1TArMuM79SteuOxYYCzM K8IpWj0knsF2V2McJ1iPnkL1oPC5XznKfPU0h67NXBJAhnw2POlSGvYwV35syGRW xHQkJAsvLESh95YevCcMa1GJDkcerodpK1osG0sXwd5SFHlXebYJs23u/zTUPIib A8GR7uC9VOyJBKyWaFo+tzYa2MbBeaSddh2J+MvtaERx7dhhw53GohBLBT6dXcTz EmxA87ApBAH+7AU9+zaRPOvKJUqDFetOEMfNt/8SLC0J259Ew6KgHWR7F58OBSNp +Lnixf0fdi1e8scRHs4zXXkDQtjJd15YPl231KhKsxDg2uEzsrnMMVaVhNn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeak2tt1c2823Ehj45NMQPdxI4IswHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlSPLWXRSJ+E7iEaL9ckgYR3moABQZt28b+ PgufuhOpSnzdwPxvT8tAp9DIp9yfykP7skadt5y3gV21iY39HMRuh+lJghqxBrI1 YiYLoyMXgLlIxO5QbSZco6zvTB2O8/j0CVTIsr0r+ubgd0OvaLahQQuNLjVVZzMO GOQaPsXuOrEvUTLNgxCKJozIyQsvmk4yIR6NGFGj63XriX0iddLfiCq7T207pS2d OXfY1I+eItp2KEP4Q6J4JVbtmAXeVp4tDNZngj7U/EHOyNtFnF4xMtWVrBHqRIUq VoZLDKB4BYyHqSuvpjYXIVa+3Amj8JMF0dmCVt4VoFqXP8RoaZE= -----END CERTIFICATE-----Generated at Wed Dec 24 20:21:58 2025 by rpki-client