This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: AYmKWrgKXNcMsEVgc6yLc4fnIbXWLfWn1P/aGSWoYqM= Subject key identifier: 4D:FF:74:DA:9E:3B:F2:26:0C:43:0E:FE:F2:6A:0B:C4:9F:BD:D2:37 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 4FAEAF4ED0E7986762566201BAFB6CB2A33DC1E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 0210 Signing time: Mon 15 Dec 2025 17:01:52 +0000 Manifest this update: Mon 15 Dec 2025 16:56:52 +0000 Manifest next update: Fri 19 Dec 2025 02:46:52 +0000 Files and hashes: 1: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: wlhhz4T86+ShRU2p6Up+KvbeI0BWxilrsa27X54ni/4=) 2: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: G0nS8vUxFNTrHeO1Dtw6yc5EaSQ0hGmwGtW0kVtFvo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 02:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ae:af:4e:d0:e7:98:67:62:56:62:01:ba:fb:6c:b2:a3:3d:c1:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Dec 15 16:56:52 2025 GMT Not After : Dec 19 02:46:52 2025 GMT Subject: CN=4DFF74DA9E3BF2260C430EFEF26A0BC49FBDD237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f2:41:c6:05:d0:29:39:01:f9:7c:66:f0:e4: d3:af:53:74:2e:14:ae:c7:91:af:86:1c:80:9b:eb: 01:0b:14:02:cd:89:0c:7b:f3:cf:bf:91:7f:3c:a7: 03:4a:76:d6:b8:48:56:86:45:55:d6:fc:87:a7:20: 1f:bf:56:50:ca:1f:d0:97:ec:01:e3:dc:a7:87:50: f8:d6:7a:a7:b0:78:97:d1:3c:a0:af:4e:b6:e9:58: ce:d8:73:2b:bd:43:b8:03:d1:d6:4b:b0:2a:4e:50: 52:dd:4f:d0:bd:95:c7:bf:9e:e0:fa:ec:08:41:77: 22:58:71:46:91:fd:9b:72:26:35:ed:52:dd:1c:44: 4b:33:bd:89:0c:4e:3b:dc:08:ac:2b:5c:99:4f:b2: 94:16:52:6f:c7:64:89:86:4c:57:5d:59:80:4d:f4: 36:a1:ae:e2:12:50:15:e6:8f:8b:61:6f:87:3b:9b: bb:54:de:3e:6f:5c:8d:0f:10:a7:a6:19:62:f8:cd: 76:d8:cc:9b:c0:0a:ed:f1:c2:d2:3b:11:31:4d:d4: 99:db:f9:70:df:99:c8:cb:29:6a:4e:ad:db:28:6e: 96:9e:ba:e1:d2:8b:bc:1d:ac:35:f2:dd:ce:1e:68: a0:27:7b:26:91:0c:32:40:e7:f7:2c:66:80:22:a4: 71:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FF:74:DA:9E:3B:F2:26:0C:43:0E:FE:F2:6A:0B:C4:9F:BD:D2:37 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a2:d8:f9:9f:33:09:47:d7:a4:63:e0:bc:61:21:d8:7b:21: d4:18:c1:5d:a5:e4:f0:14:f3:97:42:6a:d7:72:4d:e3:cd:a7: e7:6c:9a:5c:00:6a:8b:d8:dd:9c:a7:19:b8:28:ad:a3:b9:ec: 79:67:f4:e6:da:7f:8b:a2:39:e4:f9:85:f1:2c:f9:20:7f:44: 89:d0:16:40:a1:09:be:89:dc:23:90:5f:b1:ef:a5:84:f9:ea: 5c:b1:d7:a4:a7:8f:db:0a:75:18:61:c3:b5:ab:31:5c:82:94: 91:11:8d:c4:af:be:bc:75:3a:34:72:cd:fb:5a:83:04:a5:e1: 67:2b:10:f1:5f:75:fc:f2:d9:ca:ed:2e:43:97:50:90:50:ce: 22:3e:6b:8b:50:d8:c8:6c:d5:a1:d1:b3:dd:11:d5:7b:00:9f: e5:02:a7:e1:e1:4d:57:67:8d:34:27:97:f2:2b:8e:9f:ca:0e: 51:fd:6b:7c:b1:1b:da:ae:bc:51:1f:e3:fc:48:d9:f9:73:4e: f7:09:e9:50:a4:45:31:8e:91:d0:dc:17:29:d9:ef:96:b8:98: 34:04:66:e6:5c:af:d6:fe:b1:5d:5a:6d:eb:6d:98:41:2c:9a: 9b:6c:b2:1a:b3:2c:bb:22:39:e0:57:60:da:6c:22:0f:7b:91: b4:43:40:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT66vTtDnmGdiVmIBuvtssqM9weYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNTEyMTUxNjU2NTJaFw0yNTEyMTkwMjQ2NTJaMDMxMTAvBgNV BAMTKDRERkY3NERBOUUzQkYyMjYwQzQzMEVGRUYyNkEwQkM0OUZCREQyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ8kHGBdApOQH5fGbw5NOvU3Qu FK7Hka+GHICb6wELFALNiQx788+/kX88pwNKdta4SFaGRVXW/IenIB+/VlDKH9CX 7AHj3KeHUPjWeqeweJfRPKCvTrbpWM7Ycyu9Q7gD0dZLsCpOUFLdT9C9lce/nuD6 7AhBdyJYcUaR/ZtyJjXtUt0cREszvYkMTjvcCKwrXJlPspQWUm/HZImGTFddWYBN 9DahruISUBXmj4thb4c7m7tU3j5vXI0PEKemGWL4zXbYzJvACu3xwtI7ETFN1Jnb +XDfmcjLKWpOrdsobpaeuuHSi7wdrDXy3c4eaKAneyaRDDJA5/csZoAipHFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTf902p478iYMQw7+8moLxJ+90jcwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJui2PmfMwlH16Rj4LxhIdh7IdQYwV2l5PAU 85dCatdyTePNp+dsmlwAaovY3ZynGbgoraO57Hln9Obaf4uiOeT5hfEs+SB/RInQ FkChCb6J3COQX7HvpYT56lyx16Snj9sKdRhhw7WrMVyClJERjcSvvrx1OjRyzfta gwSl4WcrEPFfdfzy2crtLkOXUJBQziI+a4tQ2Mhs1aHRs90R1XsAn+UCp+HhTVdn jTQnl/Irjp/KDlH9a3yxG9quvFEf4/xI2flzTvcJ6VCkRTGOkdDcFynZ75a4mDQE ZuZcr9b+sV1abettmEEsmptsshqzLLsiOeBXYNpsIg97kbRDQK0= -----END CERTIFICATE-----Generated at Wed Dec 17 13:28:28 2025 by rpki-client