This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: 3wRmbtkdwKkX1BIw7xHWB70N5r/IeQnZ2FxcV3vOkuI= Subject key identifier: E9:B0:95:AF:07:88:01:1B:B3:00:A5:CA:27:FC:A3:78:E8:70:24:44 Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 4FF217CE4395E251BC20481CE628EE7019D1137B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: 0155 Signing time: Tue 23 Dec 2025 13:02:45 +0000 Manifest this update: Tue 23 Dec 2025 12:57:45 +0000 Manifest next update: Fri 26 Dec 2025 17:38:45 +0000 Files and hashes: 1: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: 4WdhNUp5TIzgDwAbGlW3iHSthR6N1wHDKpbtqK/89Zs=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: VvHLmuXRMUHqTPfrpSgqTa3OVr8h9pb8S/5kTj+y7+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f2:17:ce:43:95:e2:51:bc:20:48:1c:e6:28:ee:70:19:d1:13:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Dec 23 12:57:45 2025 GMT Not After : Dec 26 17:38:45 2025 GMT Subject: CN=E9B095AF0788011BB300A5CA27FCA378E8702444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:b1:5b:57:11:ff:ff:a9:98:1b:62:eb:09: 60:79:4f:2a:13:e6:f1:0a:5e:e4:a6:91:6b:31:38: 22:0e:b8:5f:d5:10:7d:b6:7c:bf:09:08:01:3e:94: bc:e6:4a:07:3c:83:70:b9:f6:01:91:8b:33:50:b9: 37:a7:d0:bf:91:33:91:41:5f:92:3e:6f:18:27:89: b5:35:1d:9c:44:ad:fe:e7:db:de:bb:8b:89:69:9c: 4f:16:4b:80:00:3a:26:ea:8f:cd:a8:19:a3:b6:20: 30:fe:dd:89:32:e2:3d:12:42:67:1a:7a:2e:2e:66: 35:c7:87:36:75:8e:a7:4d:4a:8b:00:79:65:d3:45: cd:45:b4:af:1d:c7:d2:b4:ed:59:62:cf:70:a5:db: 38:93:41:3a:66:06:92:0f:ee:a6:0f:7b:5a:b2:fc: 58:47:0c:ad:a7:a6:48:1a:e0:50:15:de:f7:13:49: 65:65:79:79:66:20:bc:21:80:af:92:81:b2:71:02: ae:9e:fb:84:a1:4a:2e:4a:17:25:86:cf:0a:c9:2b: df:fa:14:a9:bc:91:cf:49:99:ea:73:97:30:88:fb: 89:95:02:29:ae:d7:df:d4:c0:5f:58:5c:fb:22:00: fc:01:f0:7e:f0:b0:68:c8:d8:27:4c:3c:ce:5f:58: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B0:95:AF:07:88:01:1B:B3:00:A5:CA:27:FC:A3:78:E8:70:24:44 X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:21:9e:fd:18:21:49:2b:20:97:71:bd:e5:1e:ac:74:52:38: b3:d1:23:ec:1a:05:99:18:1c:6c:91:82:93:ac:39:2d:d5:1a: 7e:f9:66:c3:4a:ef:a3:e5:fe:72:3c:8b:e5:32:a9:a3:41:0a: 47:df:48:2d:af:94:36:79:65:d3:43:11:28:5d:f7:7a:e5:8d: 9a:d1:0c:7c:a2:c0:da:1b:77:87:18:80:4f:89:b0:13:4b:0f: 41:2d:a3:91:e1:a8:fc:56:a2:20:95:ec:12:4b:33:e0:0c:d9: 6a:70:fa:16:6a:3b:4e:dd:1a:d0:15:8c:5f:f2:79:64:37:c8: 11:8a:56:49:59:9b:75:c1:c5:72:5d:f1:2d:ae:21:cf:dd:22: 58:73:7d:cf:fc:e4:f1:3c:83:b5:f9:76:7c:4f:36:1f:92:91: b8:98:80:18:cf:73:04:8e:72:03:c3:36:e4:ff:ed:9f:0b:0f: d8:f5:39:f0:ed:af:a2:ce:bc:21:3e:a7:f9:84:4d:66:4b:f2: 0c:f7:3a:49:ac:2b:b5:c2:be:20:3c:99:3c:38:3f:aa:ea:75: 9f:33:5d:8f:3b:3a:62:69:03:3b:89:f1:d4:b6:37:43:0b:36: 68:51:80:56:82:8d:2d:16:cb:49:63:41:b8:17:8b:d7:15:4e: 7d:fd:a3:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/IXzkOV4lG8IEgc5ijucBnRE3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTEyMjMxMjU3NDVaFw0yNTEyMjYxNzM4NDVaMDMxMTAvBgNV BAMTKEU5QjA5NUFGMDc4ODAxMUJCMzAwQTVDQTI3RkNBMzc4RTg3MDI0NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MbFbVxH//6mYG2LrCWB5TyoT 5vEKXuSmkWsxOCIOuF/VEH22fL8JCAE+lLzmSgc8g3C59gGRizNQuTen0L+RM5FB X5I+bxgnibU1HZxErf7n2967i4lpnE8WS4AAOibqj82oGaO2IDD+3Yky4j0SQmca ei4uZjXHhzZ1jqdNSosAeWXTRc1FtK8dx9K07Vliz3Cl2ziTQTpmBpIP7qYPe1qy /FhHDK2npkga4FAV3vcTSWVleXlmILwhgK+SgbJxAq6e+4ShSi5KFyWGzwrJK9/6 FKm8kc9JmepzlzCI+4mVAimu19/UwF9YXPsiAPwB8H7wsGjI2CdMPM5fWHwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6bCVrweIARuzAKXKJ/yjeOhwJEQwHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIhnv0YIUkrIJdxveUerHRSOLPRI+waBZkY HGyRgpOsOS3VGn75ZsNK76Pl/nI8i+UyqaNBCkffSC2vlDZ5ZdNDEShd93rljZrR DHyiwNobd4cYgE+JsBNLD0Eto5HhqPxWoiCV7BJLM+AM2Wpw+hZqO07dGtAVjF/y eWQ3yBGKVklZm3XBxXJd8S2uIc/dIlhzfc/85PE8g7X5dnxPNh+SkbiYgBjPcwSO cgPDNuT/7Z8LD9j1OfDtr6LOvCE+p/mETWZL8gz3OkmsK7XCviA8mTw4P6rqdZ8z XY87OmJpAzuJ8dS2N0MLNmhRgFaCjS0Wy0ljQbgXi9cVTn39o6s= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:39 2025 by rpki-client