This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft File: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft (raw, json) Hash identifier: YQDpor7cHTJN5uTRQ9FukVGuMTaq4fVRp3zJRQv878A= Subject key identifier: 4A:72:84:31:63:3C:F7:C3:A8:E4:44:25:0F:0D:D8:40:FA:5D:45:F8 Authority key identifier: 99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF Certificate issuer: /CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Certificate serial: 5E6E9A96939F03782750E33AB912D41BDB8A775C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft Manifest number: 0531 Signing time: Mon 22 Dec 2025 11:41:31 +0000 Manifest this update: Mon 22 Dec 2025 11:36:31 +0000 Manifest next update: Thu 25 Dec 2025 14:26:31 +0000 Files and hashes: 1: 323030313a6466323a393130303a3a2f34382d3438203d3e20313336383433.roa (hash: xEl9WKNeil5vick+EZGgBmq+d9hvCJ6SFKXlmIh83hQ=) 2: 99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl (hash: ZNDGXe7EhJdceS+sr2kE6Et6kJD5qO+qHf8q9iXAD9Q=) 3: 3130332e3130312e35322e302f32342d3234203d3e20313336383433.roa (hash: pD/9ZN/LtEEVzbK2xymhrif8EXzbhQ+acqdIY2pf7Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:6e:9a:96:93:9f:03:78:27:50:e3:3a:b9:12:d4:1b:db:8a:77:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF Validity Not Before: Dec 22 11:36:31 2025 GMT Not After : Dec 25 14:26:31 2025 GMT Subject: CN=4A728431633CF7C3A8E444250F0DD840FA5D45F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:98:aa:07:98:c5:aa:28:6e:cb:bd:97:b0:ee: 07:3f:f1:f8:ef:26:ca:03:69:96:99:5f:08:08:cc: f3:2f:dd:61:84:da:0c:67:9c:00:10:e2:c7:07:a9: e5:fe:5d:27:98:bc:d7:d5:44:e1:3d:30:ce:c8:8e: b7:88:64:15:d7:60:63:c2:a2:d4:d7:6e:b8:49:10: df:89:9b:db:c0:fd:bf:0e:2f:5b:af:10:a2:a5:c8: 2a:90:82:72:f9:8a:a0:ab:e5:bc:47:9e:c2:60:76: 3c:f6:38:bd:41:27:f5:1f:db:df:64:cc:1a:35:e0: 64:49:21:97:3f:af:2c:2d:19:ac:c0:8f:89:2a:3b: 59:81:d6:5c:58:25:7b:c4:de:0a:e8:f4:51:6c:52: bd:3d:16:bd:61:a6:0f:5f:68:db:ee:61:8b:5c:5a: 5b:2a:01:a8:c9:1c:e6:6f:e5:e1:05:5a:00:23:7c: 1b:d1:bf:9c:d7:05:80:49:0f:2d:65:08:7a:c5:b2: b0:29:35:49:c2:2d:0e:db:be:48:58:d6:1d:a3:0c: 60:cf:2a:a3:00:f8:1c:40:a3:12:29:51:1a:f5:aa: 82:fd:a8:1c:23:35:78:2a:8e:30:a2:3f:23:53:d1: cd:c2:6c:d0:f2:f6:57:6d:96:ce:21:4e:08:8b:ef: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:72:84:31:63:3C:F7:C3:A8:E4:44:25:0F:0D:D8:40:FA:5D:45:F8 X509v3 Authority Key Identifier: keyid:99:CD:13:E1:44:9F:A4:48:AB:F9:FC:6A:74:D3:B1:31:3D:DF:AB:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca0b4f15-7720-4f2a-8343-8e37fae87a54/0/99CD13E1449FA448ABF9FC6A74D3B1313DDFABCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:29:20:68:91:a6:c9:d2:c9:3f:81:38:28:be:0c:ef:11:bb: fb:fd:20:23:1e:7d:de:88:52:ef:31:bd:23:cc:e1:67:4f:42: 19:24:26:82:e8:25:c2:da:49:39:9b:b5:1f:87:85:c3:3b:09: 94:49:4f:01:71:a4:56:0a:18:8c:2c:fc:c2:a9:67:da:40:29: c6:71:8c:23:43:ed:c9:7b:37:89:51:4e:96:03:1a:d9:83:80: 4b:6e:bc:f4:e1:6e:51:47:6c:ed:7a:a3:58:e7:3e:7b:cd:5f: 83:a6:23:c0:89:49:3e:84:8f:7e:8c:02:17:ba:f0:b6:f8:4e: ed:41:02:2b:fb:8c:78:d3:c3:74:e8:23:c0:30:b1:56:6f:95: 94:39:c9:d6:18:4f:0a:7a:e6:ae:15:e0:fc:5d:c1:74:11:71: 80:fc:48:a6:1d:01:3c:db:63:0e:fd:93:8a:6e:1d:7d:6d:7e: 5a:1d:2f:b5:ec:8a:89:57:03:30:db:0a:c5:5b:2e:bf:3d:51: e9:16:db:7c:ad:0c:fd:6a:87:4c:ca:33:8e:cf:c1:00:b1:26: 91:36:74:50:bc:4e:17:11:69:3c:66:8e:db:d4:38:bf:0b:2a: 1b:24:31:e2:67:5a:30:82:e2:ab:11:87:17:ad:f2:e7:29:90: 41:24:5e:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXm6alpOfA3gnUOM6uRLUG9uKd1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEz RERGQUJDRjAeFw0yNTEyMjIxMTM2MzFaFw0yNTEyMjUxNDI2MzFaMDMxMTAvBgNV BAMTKDRBNzI4NDMxNjMzQ0Y3QzNBOEU0NDQyNTBGMEREODQwRkE1RDQ1RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXmKoHmMWqKG7LvZew7gc/8fjv JsoDaZaZXwgIzPMv3WGE2gxnnAAQ4scHqeX+XSeYvNfVROE9MM7IjreIZBXXYGPC otTXbrhJEN+Jm9vA/b8OL1uvEKKlyCqQgnL5iqCr5bxHnsJgdjz2OL1BJ/Uf299k zBo14GRJIZc/rywtGazAj4kqO1mB1lxYJXvE3gro9FFsUr09Fr1hpg9faNvuYYtc WlsqAajJHOZv5eEFWgAjfBvRv5zXBYBJDy1lCHrFsrApNUnCLQ7bvkhY1h2jDGDP KqMA+BxAoxIpURr1qoL9qBwjNXgqjjCiPyNT0c3CbNDy9ldtls4hTgiL747tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSnKEMWM898Oo5EQlDw3YQPpdRfgwHwYDVR0j BBgwFoAUmc0T4USfpEir+fxqdNOxMT3fq88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTBiNGYxNS03NzIwLTRmMmEtODM0My04ZTM3ZmFlODdhNTQvMC85OUNEMTNFMTQ0 OUZBNDQ4QUJGOUZDNkE3NEQzQjEzMTNEREZBQkNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0IxMzEzRERG QUJDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EwYjRmMTUtNzcyMC00ZjJhLTgz NDMtOGUzN2ZhZTg3YTU0LzAvOTlDRDEzRTE0NDlGQTQ0OEFCRjlGQzZBNzREM0Ix MzEzRERGQUJDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIpIGiRpsnSyT+BOCi+DO8Ru/v9ICMefd6I Uu8xvSPM4WdPQhkkJoLoJcLaSTmbtR+HhcM7CZRJTwFxpFYKGIws/MKpZ9pAKcZx jCND7cl7N4lRTpYDGtmDgEtuvPThblFHbO16o1jnPnvNX4OmI8CJST6Ej36MAhe6 8Lb4Tu1BAiv7jHjTw3ToI8AwsVZvlZQ5ydYYTwp65q4V4PxdwXQRcYD8SKYdATzb Yw79k4puHX1tflodL7XsiolXAzDbCsVbLr89UekW23ytDP1qh0zKM47PwQCxJpE2 dFC8ThcRaTxmjtvUOL8LKhskMeJnWjCC4qsRhxet8ucpkEEkXm4= -----END CERTIFICATE-----Generated at Tue Dec 23 20:50:56 2025 by rpki-client