This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft File: D1C35136280415655DEC1D442C7C982FD36A5B86.mft (raw, json) Hash identifier: ab4AQLwnXBwDbau7k4o5q/BQch5Xe26ztgKKYhIFpRw= Subject key identifier: 3C:CD:F7:F2:CF:FD:DD:7E:75:6C:5B:54:A7:C6:F8:59:08:3E:31:CD Authority key identifier: D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 Certificate issuer: /CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Certificate serial: 4C06CC740C88DE28ACE84C94D8FB3E99ADC5D059 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft Manifest number: A4 Signing time: Thu 18 Dec 2025 20:13:13 +0000 Manifest this update: Thu 18 Dec 2025 20:08:13 +0000 Manifest next update: Mon 22 Dec 2025 02:28:13 +0000 Files and hashes: 1: D1C35136280415655DEC1D442C7C982FD36A5B86.crl (hash: QjtZpzmWHd7Njey+LIpUr4EaRq/A69hhs/+0KCIWpsM=) 2: 3130332e39382e3233392e302f32342d3234203d3e20313336383339.roa (hash: t33hGK2tWrXOFyyr6frOa0APXlIHVzP4IgSNamcMq50=) 3: 323030313a6466323a336430303a3a2f34382d3438203d3e20313336383339.roa (hash: EbL+LGKDt0V5U6jXXy9+v+fX+4Su7Ml6HM1hNFrtkbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:06:cc:74:0c:88:de:28:ac:e8:4c:94:d8:fb:3e:99:ad:c5:d0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1C35136280415655DEC1D442C7C982FD36A5B86 Validity Not Before: Dec 18 20:08:13 2025 GMT Not After : Dec 22 02:28:13 2025 GMT Subject: CN=3CCDF7F2CFFDDD7E756C5B54A7C6F859083E31CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:30:b8:6d:97:c6:3c:d1:22:08:10:eb:ad:fd: 03:6b:43:b6:7a:81:b9:f2:13:4c:74:cd:31:d2:32: 5f:b3:da:f1:46:7f:81:d4:24:ca:1f:8f:01:68:c8: a9:29:fd:61:e9:cb:07:cb:94:76:51:9d:84:41:4d: f1:e8:bb:02:49:6e:b4:55:24:0d:07:c9:3f:35:03: b3:59:1e:be:91:e1:9a:2b:d9:e6:64:cb:58:f1:39: 81:e3:10:42:47:38:f2:36:87:07:7f:28:92:a8:ba: 0c:e1:a2:d6:f5:97:9f:ca:f5:47:53:b2:ea:f8:4a: 67:3c:ff:d2:cf:b1:e1:75:cd:a8:8a:27:df:44:4a: 68:7b:a0:58:f4:02:0b:8b:fc:9a:9d:e3:8c:7b:d7: 03:82:5d:0e:ff:3e:c2:55:99:32:53:2c:dd:b4:5a: c5:68:26:f7:4e:31:be:6e:52:96:50:e6:20:e8:87: 94:16:27:49:dc:f9:65:7a:ad:bb:a0:f7:6f:c6:1c: a7:74:f1:14:09:0a:54:31:cd:a6:04:63:ea:37:f1: 7d:fb:8c:8e:20:4d:fa:f2:f3:9e:a8:8d:3c:29:e4: 39:f9:a1:80:31:2b:03:e2:c0:11:4c:a8:a2:7d:65: cc:8e:f6:fd:cf:ce:bd:d5:66:c5:5b:84:96:30:ad: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CD:F7:F2:CF:FD:DD:7E:75:6C:5B:54:A7:C6:F8:59:08:3E:31:CD X509v3 Authority Key Identifier: keyid:D1:C3:51:36:28:04:15:65:5D:EC:1D:44:2C:7C:98:2F:D3:6A:5B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1C35136280415655DEC1D442C7C982FD36A5B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf9c029a-db51-4a0e-9203-6ee2332df83f/0/D1C35136280415655DEC1D442C7C982FD36A5B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7b:e0:e3:2d:52:89:e0:3b:95:10:16:40:13:a9:3f:fe:c3: 22:d4:63:d4:e9:f2:39:c1:6b:61:d2:10:06:26:2a:1b:57:f5: 0a:6f:b6:05:95:65:03:f9:7a:c5:d3:d6:ef:60:bd:19:55:f5: f5:c5:f2:9b:19:9e:9a:93:1b:17:a0:1b:9f:33:02:7b:7a:8e: bc:5b:84:1a:7a:01:25:bb:9e:e5:03:6a:0e:19:0a:37:e8:ee: 41:f3:29:1d:77:8b:e0:61:c1:a0:9c:e8:bd:c0:8d:28:2c:bc: 8a:f6:1c:68:f6:46:7c:0d:0c:fc:5a:06:8a:0b:fd:3b:c1:09: a8:e6:f9:89:b1:da:7a:17:aa:0e:d6:3f:15:56:79:7b:dd:1f: 1f:3a:3f:21:f2:b0:af:25:25:25:4a:fd:33:71:97:7d:b7:e6: b9:2b:c3:e1:e1:43:59:14:c4:44:05:67:fc:5f:89:88:ed:f5: cd:68:d0:31:e1:b2:7e:b5:c5:d0:e8:08:29:74:01:96:92:bc: 09:66:ea:c6:19:61:d5:e6:f4:57:42:a7:4a:29:e0:3c:11:15: 91:d5:6b:35:7d:84:72:e1:15:14:59:e2:d4:96:89:f5:36:3b: 28:9d:fb:f4:d4:0a:4b:84:8e:36:2a:bb:d2:bf:6b:f4:b7:a8: db:d3:4b:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTAbMdAyI3iis6EyU2Ps+ma3F0FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZE MzZBNUI4NjAeFw0yNTEyMTgyMDA4MTNaFw0yNTEyMjIwMjI4MTNaMDMxMTAvBgNV BAMTKDNDQ0RGN0YyQ0ZGREREN0U3NTZDNUI1NEE3QzZGODU5MDgzRTMxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMLhtl8Y80SIIEOut/QNrQ7Z6 gbnyE0x0zTHSMl+z2vFGf4HUJMofjwFoyKkp/WHpywfLlHZRnYRBTfHouwJJbrRV JA0HyT81A7NZHr6R4Zor2eZky1jxOYHjEEJHOPI2hwd/KJKougzhotb1l5/K9UdT sur4Smc8/9LPseF1zaiKJ99ESmh7oFj0AguL/Jqd44x71wOCXQ7/PsJVmTJTLN20 WsVoJvdOMb5uUpZQ5iDoh5QWJ0nc+WV6rbug92/GHKd08RQJClQxzaYEY+o38X37 jI4gTfry856ojTwp5Dn5oYAxKwPiwBFMqKJ9ZcyO9v3Pzr3VZsVbhJYwrYELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPM338s/93X51bFtUp8b4WQg+Mc0wHwYDVR0j BBgwFoAU0cNRNigEFWVd7B1ELHyYL9NqW4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjljMDI5YS1kYjUxLTRhMGUtOTIwMy02ZWUyMzMyZGY4M2YvMC9EMUMzNTEzNjI4 MDQxNTY1NURFQzFENDQyQzdDOTgyRkQzNkE1Qjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4MkZEMzZB NUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Y5YzAyOWEtZGI1MS00YTBlLTky MDMtNmVlMjMzMmRmODNmLzAvRDFDMzUxMzYyODA0MTU2NTVERUMxRDQ0MkM3Qzk4 MkZEMzZBNUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE574OMtUongO5UQFkATqT/+wyLUY9Tp8jnB a2HSEAYmKhtX9QpvtgWVZQP5esXT1u9gvRlV9fXF8psZnpqTGxegG58zAnt6jrxb hBp6ASW7nuUDag4ZCjfo7kHzKR13i+BhwaCc6L3AjSgsvIr2HGj2RnwNDPxaBooL /TvBCajm+Ymx2noXqg7WPxVWeXvdHx86PyHysK8lJSVK/TNxl3235rkrw+HhQ1kU xEQFZ/xfiYjt9c1o0DHhsn61xdDoCCl0AZaSvAlm6sYZYdXm9FdCp0op4DwRFZHV azV9hHLhFRRZ4tSWifU2Oyid+/TUCkuEjjYqu9K/a/S3qNvTSxI= -----END CERTIFICATE-----Generated at Fri Dec 19 18:17:07 2025 by rpki-client