This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json) Hash identifier: j211qZyLiac0HroplqnBVQTFyLHDWSVImLxExbvi7EQ= Subject key identifier: 0F:0D:0C:38:72:85:8A:D5:FA:2B:DC:59:FA:D2:AC:D7:A6:46:0F:7B Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Certificate serial: 40237765EC8497C90FBC8CAF1F383A8F29FEEB97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft Manifest number: 01AD Signing time: Wed 17 Dec 2025 15:31:38 +0000 Manifest this update: Wed 17 Dec 2025 15:26:38 +0000 Manifest next update: Sat 20 Dec 2025 20:54:38 +0000 Files and hashes: 1: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=) 2: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: OZCnCzGcALZ2EUZfz9Sw+/baOmletA0jNpZu+6dEvss=) 3: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=) 4: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:23:77:65:ec:84:97:c9:0f:bc:8c:af:1f:38:3a:8f:29:fe:eb:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Validity Not Before: Dec 17 15:26:38 2025 GMT Not After : Dec 20 20:54:38 2025 GMT Subject: CN=0F0D0C3872858AD5FA2BDC59FAD2ACD7A6460F7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:e7:8a:4a:cf:9b:17:3b:49:cc:4a:65:8e: 61:88:04:3d:73:52:d7:fc:4d:1a:8d:46:48:de:e7: e6:77:84:5e:3a:98:42:7f:62:b9:fe:77:b4:cb:60: e1:7d:8b:c5:c1:ef:84:59:e1:0d:c9:c6:b2:e4:e5: 1b:6c:6b:14:60:18:43:5a:a8:5d:a5:dd:3b:d3:f1: e6:61:d6:31:30:6e:cd:c1:d1:df:ec:be:fe:9c:f8: 9b:b0:2e:27:1c:57:7c:d9:32:d7:c2:97:2e:2a:48: 64:db:a3:b2:29:e9:0e:3a:79:03:fc:d0:e6:6c:3c: 92:bc:7a:3a:2d:a3:68:6a:41:4f:ec:33:4f:1f:cb: 75:f3:5a:0f:5e:48:75:f3:02:7f:6e:4e:02:b3:51: cc:f4:f2:52:29:b0:20:be:24:16:3b:5b:89:d2:a7: 51:80:25:fa:1a:28:89:97:75:13:82:49:3b:03:14: 2d:47:6c:11:5a:ce:8d:7f:dc:b5:d3:fc:d1:02:c3: b5:b7:c9:16:b1:81:66:e4:27:d7:c1:59:e7:dd:90: 7d:5c:5b:b5:e1:9a:1f:77:ae:68:ef:e5:ba:1c:de: c4:d0:d3:cf:b1:19:0b:94:c1:1a:d3:95:a5:b0:6c: 79:b6:cb:70:5f:ca:34:d1:9e:37:94:26:a7:0d:8e: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0D:0C:38:72:85:8A:D5:FA:2B:DC:59:FA:D2:AC:D7:A6:46:0F:7B X509v3 Authority Key Identifier: keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ca:08:f2:e1:cc:78:f1:a8:00:a1:46:5b:93:77:34:63:cb: 34:54:46:e4:8c:a2:53:3c:62:25:8a:13:7c:ab:42:c1:9a:44: ed:bf:98:fb:76:99:7f:e9:21:72:e9:d4:20:80:5c:b2:b4:d3: 3e:83:d0:bc:96:02:15:17:14:7a:7d:1c:6a:0b:25:69:5d:60: 63:bb:a1:aa:78:0b:22:cc:5a:5c:93:3f:5e:5a:bb:ee:21:7a: 7e:59:27:10:29:66:20:4c:89:21:f7:c4:0f:67:ea:bc:bf:5d: d3:a4:00:e9:bd:a7:d4:3c:0f:ce:9a:90:98:77:a5:3a:b8:c9: 9a:a6:a3:32:4c:fa:0a:68:b7:78:4c:81:6a:94:6c:be:68:2d: c6:f1:b9:e4:d3:02:3a:6a:e5:5e:ee:92:a9:37:0c:91:ba:51: 0d:53:6f:56:cf:25:b0:09:f0:6e:99:f8:95:7d:02:95:71:fa: 57:06:0f:d3:2c:e3:a8:7a:46:f5:d1:6a:05:cc:3f:9f:3f:be: 32:d6:05:9b:4d:ca:0d:bb:ed:8f:57:bc:4e:16:3c:9f:19:e2: 2d:98:5d:c0:f3:22:72:e6:b0:ed:4b:ff:e4:66:9f:d4:d4:39: 9b:79:1e:11:0f:ed:44:c4:ae:e0:b6:16:cf:73:fb:43:e6:97: c3:22:52:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCN3ZeyEl8kPvIyvHzg6jyn+65cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB RTA5RTdGMzAeFw0yNTEyMTcxNTI2MzhaFw0yNTEyMjAyMDU0MzhaMDMxMTAvBgNV BAMTKDBGMEQwQzM4NzI4NThBRDVGQTJCREM1OUZBRDJBQ0Q3QTY0NjBGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yueKSs+bFztJzEpljmGIBD1z Utf8TRqNRkje5+Z3hF46mEJ/Yrn+d7TLYOF9i8XB74RZ4Q3JxrLk5RtsaxRgGENa qF2l3TvT8eZh1jEwbs3B0d/svv6c+JuwLiccV3zZMtfCly4qSGTbo7Ip6Q46eQP8 0OZsPJK8ejoto2hqQU/sM08fy3XzWg9eSHXzAn9uTgKzUcz08lIpsCC+JBY7W4nS p1GAJfoaKImXdROCSTsDFC1HbBFazo1/3LXT/NECw7W3yRaxgWbkJ9fBWefdkH1c W7Xhmh93rmjv5boc3sTQ08+xGQuUwRrTlaWwbHm2y3BfyjTRnjeUJqcNjrdbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDw0MOHKFitX6K9xZ+tKs16ZGD3swHwYDVR0j BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5 RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfKCPLhzHjxqAChRluTdzRjyzRURuSMolM8 YiWKE3yrQsGaRO2/mPt2mX/pIXLp1CCAXLK00z6D0LyWAhUXFHp9HGoLJWldYGO7 oap4CyLMWlyTP15au+4hen5ZJxApZiBMiSH3xA9n6ry/XdOkAOm9p9Q8D86akJh3 pTq4yZqmozJM+gpot3hMgWqUbL5oLcbxueTTAjpq5V7ukqk3DJG6UQ1Tb1bPJbAJ 8G6Z+JV9ApVx+lcGD9Ms46h6RvXRagXMP58/vjLWBZtNyg277Y9XvE4WPJ8Z4i2Y XcDzInLmsO1L/+Rmn9TUOZt5HhEP7UTEruC2Fs9z+0Pml8MiUr4= -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:17 2025 by rpki-client