This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json) Hash identifier: /m9apP3Pvp1mGwHffzL37JL7fgIlJJiWOEyNuRZRs+E= Subject key identifier: BD:3F:35:A6:CB:9C:23:DF:04:CD:BB:AA:90:C3:87:C8:DE:C7:84:FF Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Certificate serial: 37238A740F3AA49B234D6762E346CC7BAB27319F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft Manifest number: 015A Signing time: Tue 16 Dec 2025 20:41:30 +0000 Manifest this update: Tue 16 Dec 2025 20:36:30 +0000 Manifest next update: Sat 20 Dec 2025 07:59:30 +0000 Files and hashes: 1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=) 2: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=) 3: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: haHDe0nIwXc7cq+K6rd7BeXvO9lEaOmU4bSeBQHNlmI=) 4: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 07:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:23:8a:74:0f:3a:a4:9b:23:4d:67:62:e3:46:cc:7b:ab:27:31:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Validity Not Before: Dec 16 20:36:30 2025 GMT Not After : Dec 20 07:59:30 2025 GMT Subject: CN=BD3F35A6CB9C23DF04CDBBAA90C387C8DEC784FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:97:78:1c:f3:ba:5e:0f:0d:63:cc:38:f9:76: c0:a7:9f:32:76:c3:ca:ee:21:ba:e0:c8:54:d1:e1: 14:bf:0d:85:2f:d1:fd:6e:d8:13:85:6b:eb:a0:6d: 38:0b:c2:9f:78:4d:a3:08:0f:a8:de:e0:8f:21:43: 74:cd:c0:27:fa:5e:f6:b1:09:5c:83:d4:cd:5c:58: 81:b6:e5:dd:94:6a:cd:aa:a3:55:24:f0:d9:8d:d4: 01:91:60:17:87:2e:f2:8d:06:9e:e3:5e:98:13:d4: 03:76:8b:41:93:4f:2a:11:84:45:f1:4a:df:c1:b7: 80:09:5b:a6:af:ce:02:e1:f1:e7:10:72:a2:bf:09: 51:b5:7c:58:ff:42:01:6e:3c:48:45:45:ea:8f:95: 42:1e:bd:5e:df:63:f2:0a:5c:57:4e:a7:5c:aa:7d: ee:4b:9a:ae:06:c2:29:46:b0:5d:13:00:82:c0:41: b8:a6:83:5e:af:31:72:f2:35:16:a2:45:0d:fa:00: 77:37:77:5a:b2:d4:04:ad:4e:b2:96:e5:55:80:f8: fb:32:56:74:e2:42:cb:65:ba:e6:3c:51:7d:bd:0f: 3e:bb:fc:88:50:22:f6:21:1e:a2:db:3f:88:62:53: 20:6d:bc:2d:c9:0a:21:a0:fd:86:18:4c:fe:6c:7e: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3F:35:A6:CB:9C:23:DF:04:CD:BB:AA:90:C3:87:C8:DE:C7:84:FF X509v3 Authority Key Identifier: keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:1c:69:56:ab:f8:29:74:73:98:8b:71:73:2f:6c:27:5c:bc: f0:3d:83:c4:d2:6c:e4:dc:98:d5:59:ee:33:05:72:d4:f1:e8: 94:06:05:f5:6d:09:f0:8e:63:8c:0d:be:17:12:68:ca:c4:1f: 2f:21:9e:cc:e2:73:cf:99:2e:c2:33:9e:59:7a:ff:4e:a2:d6: 41:da:c3:73:d3:4c:48:e9:99:3a:62:49:ed:de:ba:5b:bd:43: de:a1:7d:40:0a:7a:ff:cc:e8:f7:94:31:91:df:bd:d1:82:eb: 3f:41:4b:5c:26:a8:85:71:4a:14:6d:e5:7f:8c:31:0a:56:55: c9:02:4a:94:5f:63:17:16:f4:1f:d4:d1:94:1f:1b:7b:fd:fe: b6:2c:d2:81:dc:96:7b:ed:39:92:68:7f:6e:49:fa:d8:ce:01: a3:fc:49:9f:46:31:5c:34:0d:53:c9:54:07:61:83:f5:2b:c1: 28:1a:42:c1:3f:a4:ad:7d:ab:a4:47:f1:d7:bb:15:b1:86:83: 43:e7:b6:1d:66:ce:e4:f6:7d:04:2c:7f:8a:93:0a:86:e5:fc: d0:2e:77:a5:42:0f:53:45:cd:34:c3:d1:1b:c8:27:1f:29:f0: 78:bb:69:6a:7f:1c:bb:46:6a:00:54:db:58:a9:4b:68:cf:37: a5:7a:03:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNyOKdA86pJsjTWdi40bMe6snMZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx MDg0NUE5QzAeFw0yNTEyMTYyMDM2MzBaFw0yNTEyMjAwNzU5MzBaMDMxMTAvBgNV BAMTKEJEM0YzNUE2Q0I5QzIzREYwNENEQkJBQTkwQzM4N0M4REVDNzg0RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVl3gc87peDw1jzDj5dsCnnzJ2 w8ruIbrgyFTR4RS/DYUv0f1u2BOFa+ugbTgLwp94TaMID6je4I8hQ3TNwCf6Xvax CVyD1M1cWIG25d2Uas2qo1Uk8NmN1AGRYBeHLvKNBp7jXpgT1AN2i0GTTyoRhEXx St/Bt4AJW6avzgLh8ecQcqK/CVG1fFj/QgFuPEhFReqPlUIevV7fY/IKXFdOp1yq fe5Lmq4GwilGsF0TAILAQbimg16vMXLyNRaiRQ36AHc3d1qy1AStTrKW5VWA+Psy VnTiQstluuY8UX29Dz67/IhQIvYhHqLbP4hiUyBtvC3JCiGg/YYYTP5sfig/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvT81psucI98EzbuqkMOHyN7HhP8wHwYDVR0j BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0 NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgcaVar+Cl0c5iLcXMvbCdcvPA9g8TSbOTc mNVZ7jMFctTx6JQGBfVtCfCOY4wNvhcSaMrEHy8hnszic8+ZLsIznll6/06i1kHa w3PTTEjpmTpiSe3eulu9Q96hfUAKev/M6PeUMZHfvdGC6z9BS1wmqIVxShRt5X+M MQpWVckCSpRfYxcW9B/U0ZQfG3v9/rYs0oHclnvtOZJof25J+tjOAaP8SZ9GMVw0 DVPJVAdhg/UrwSgaQsE/pK19q6RH8de7FbGGg0Pnth1mzuT2fQQsf4qTCobl/NAu d6VCD1NFzTTD0RvIJx8p8Hi7aWp/HLtGagBU21ipS2jPN6V6A6c= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:00 2025 by rpki-client