This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: f4lBnC8dRr2ntlW4b74k4W0PE+FFTgSoDQErjQcsjpc= Subject key identifier: AA:B7:A8:92:8C:FF:73:1F:25:60:51:50:D5:32:B9:5A:2F:FA:0E:85 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 549ACEEB21F80BAAAEB1CA04E4A72CFAA5A5A03F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 022B Signing time: Thu 18 Dec 2025 19:43:00 +0000 Manifest this update: Thu 18 Dec 2025 19:38:00 +0000 Manifest next update: Sun 21 Dec 2025 23:04:00 +0000 Files and hashes: 1: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: +mYc6uiYT8Hg8aHRJbXybkpBH5KoAxmPOzNntL+YKAI=) 2: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 3: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) 4: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9a:ce:eb:21:f8:0b:aa:ae:b1:ca:04:e4:a7:2c:fa:a5:a5:a0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Dec 18 19:38:00 2025 GMT Not After : Dec 21 23:04:00 2025 GMT Subject: CN=AAB7A8928CFF731F25605150D532B95A2FFA0E85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:7e:36:98:29:aa:81:5b:a8:5f:1f:ab:2c: 72:f5:af:62:ca:a6:57:3f:e8:61:44:2e:21:92:a5: 74:5b:63:e6:ef:ba:c5:2b:8d:05:df:b6:75:bb:1d: 50:07:63:3c:5d:8b:e6:ca:40:6f:6c:a6:9a:40:28: ff:46:63:cd:63:20:79:66:10:f4:0c:2c:4b:cc:be: 70:ad:23:1a:5a:e7:e5:5e:ee:a7:c8:19:22:3b:8a: 2c:0f:44:32:bc:ee:9e:ba:ed:6d:5c:86:68:e9:77: 7c:77:79:f6:4e:dd:ff:2c:4a:e1:1b:5b:8e:9a:e7: 52:e7:d4:6a:a7:3f:c3:33:c7:74:9f:f0:4d:45:a6: 8e:33:b2:0c:a0:6b:54:69:cc:64:c7:7e:fd:6a:16: e1:ee:b1:35:af:9f:db:ac:88:bc:01:b5:e6:a2:1c: b9:aa:da:a9:50:fc:dd:28:b3:14:4c:a7:6b:d2:f7: 4b:d9:98:55:fc:4c:5e:03:6b:f8:bf:d7:13:e3:80: ae:be:2a:ce:8e:b0:63:d3:67:d6:94:e7:af:8d:89: 79:ec:87:0a:c8:2e:95:66:42:21:29:24:03:07:de: fb:e7:dd:05:a7:7e:f5:ca:be:5c:d0:be:9d:97:78: 4d:4b:18:43:0c:dc:53:1c:f6:09:c7:56:9b:b3:ec: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B7:A8:92:8C:FF:73:1F:25:60:51:50:D5:32:B9:5A:2F:FA:0E:85 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:0b:9f:bb:53:7d:77:74:d4:e1:c8:56:c8:26:d9:8a:fb:08: e4:30:7a:1f:1a:1d:8e:f3:d9:1c:b4:25:d7:5e:c1:db:d6:63: b8:b6:11:88:ac:08:63:30:07:03:68:df:dd:37:88:3e:3d:17: 37:ad:ae:24:5d:ac:b7:35:d2:3c:63:a8:36:73:d4:30:ca:91: 62:46:8f:16:b5:28:70:f3:61:a6:01:49:bf:8e:8c:df:6d:19: 34:89:66:38:d6:9b:7a:4c:a4:d5:18:73:bf:ad:53:69:8e:68: 09:32:7c:8a:aa:1f:3c:82:fd:55:fb:e3:34:0f:bd:a6:7d:99: 70:5d:6d:b8:3f:ff:ac:e0:d2:43:31:c6:17:5f:17:43:e7:be: a2:b8:91:79:3f:fb:b6:30:e9:f0:c7:93:31:98:7b:4f:9b:48: 12:e3:d2:18:7d:8a:46:eb:db:ab:b4:ba:d7:18:f8:39:0c:d8: 7c:fe:d8:48:66:b4:86:69:db:21:47:87:f1:a6:7c:4a:70:c0: 8a:32:27:e8:9a:82:a9:02:4a:8f:96:62:2f:27:46:f3:cc:b1: ce:26:62:07:2e:a5:bf:54:53:c3:b3:b5:56:1a:a0:33:cb:83: 08:c4:e3:bd:ed:37:a6:1c:ef:ef:16:ad:9b:06:f5:fe:ce:18: a1:7d:cd:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJrO6yH4C6quscoE5Kcs+qWloD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTEyMTgxOTM4MDBaFw0yNTEyMjEyMzA0MDBaMDMxMTAvBgNV BAMTKEFBQjdBODkyOENGRjczMUYyNTYwNTE1MEQ1MzJCOTVBMkZGQTBFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+uH42mCmqgVuoXx+rLHL1r2LK plc/6GFELiGSpXRbY+bvusUrjQXftnW7HVAHYzxdi+bKQG9spppAKP9GY81jIHlm EPQMLEvMvnCtIxpa5+Ve7qfIGSI7iiwPRDK87p667W1chmjpd3x3efZO3f8sSuEb W46a51Ln1GqnP8Mzx3Sf8E1Fpo4zsgyga1RpzGTHfv1qFuHusTWvn9usiLwBteai HLmq2qlQ/N0osxRMp2vS90vZmFX8TF4Da/i/1xPjgK6+Ks6OsGPTZ9aU56+NiXns hwrILpVmQiEpJAMH3vvn3QWnfvXKvlzQvp2XeE1LGEMM3FMc9gnHVpuz7ClVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqreokoz/cx8lYFFQ1TK5Wi/6DoUwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQLn7tTfXd01OHIVsgm2Yr7COQweh8aHY7z 2Ry0JddewdvWY7i2EYisCGMwBwNo3903iD49FzetriRdrLc10jxjqDZz1DDKkWJG jxa1KHDzYaYBSb+OjN9tGTSJZjjWm3pMpNUYc7+tU2mOaAkyfIqqHzyC/VX74zQP vaZ9mXBdbbg//6zg0kMxxhdfF0PnvqK4kXk/+7Yw6fDHkzGYe0+bSBLj0hh9ikbr 26u0utcY+DkM2Hz+2EhmtIZp2yFHh/GmfEpwwIoyJ+iagqkCSo+WYi8nRvPMsc4m Ygcupb9UU8OztVYaoDPLgwjE473tN6Yc7+8WrZsG9f7OGKF9zaQ= -----END CERTIFICATE-----Generated at Fri Dec 19 17:22:54 2025 by rpki-client