This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: aoMfCyEqVxz7iUeIQocvq10DKY1sVv3X8itwPY4YBdw= Subject key identifier: 61:0F:06:37:AD:3A:0E:5A:90:39:2A:5A:8D:AE:B5:54:88:80:C6:FC Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 144590002B38A7FA01BD0A06E3644112A5B195A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: D7 Signing time: Thu 18 Dec 2025 12:12:25 +0000 Manifest this update: Thu 18 Dec 2025 12:07:25 +0000 Manifest next update: Sun 21 Dec 2025 15:35:25 +0000 Files and hashes: 1: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: aFVZHS7nINB+JL7AEdDHRgxQQpnHeECBqD4GE79htH4=) 2: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: ERX7JY9nBs5KDrYBBOBRUjOoVhd3on2gIqIBqT5ePW4=) 3: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: narOg/Y+HQu36n1a+2Amx/Ji0/PrZsxnYg1qBFxyHaM=) 4: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: gVISUrC0w0h01G2FHy4AG7111ikLnz8RrJKjXJHpEPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:45:90:00:2b:38:a7:fa:01:bd:0a:06:e3:64:41:12:a5:b1:95:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Dec 18 12:07:25 2025 GMT Not After : Dec 21 15:35:25 2025 GMT Subject: CN=610F0637AD3A0E5A90392A5A8DAEB5548880C6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:fd:f3:f8:a0:92:60:2c:16:d1:fb:87:e8: cc:7b:3c:be:30:cf:e7:68:94:c7:c7:c5:d0:db:1b: 51:78:c7:64:31:0e:65:78:a4:14:70:c0:61:7c:d4: 44:2d:01:b4:e2:27:b9:b5:d3:3d:13:4a:ba:7f:90: fc:88:d6:f2:57:eb:d2:52:bb:18:98:fc:bd:03:33: f3:13:5b:64:9c:82:9e:aa:7f:0b:b4:5f:46:cc:82: 88:e6:ef:ce:79:82:ed:81:38:ff:15:19:8e:09:c4: 39:c3:72:3d:3d:96:40:a0:97:68:c6:d8:98:41:79: f7:63:bc:72:ea:41:e3:a6:17:75:6d:e9:f0:ad:0c: d1:4e:96:55:f3:3b:65:34:44:72:85:3d:33:7c:bf: 35:74:f4:03:70:2e:15:44:82:52:89:88:ce:2b:6a: b7:96:20:de:db:a6:ee:fe:fa:ee:2f:68:7e:c4:0f: a6:6a:7b:dd:64:2d:d8:57:7e:35:1e:dd:ae:64:66: 4f:99:76:91:01:31:fb:25:d6:ee:ca:c1:29:e1:24: dd:56:d9:e2:df:31:b3:e4:df:a8:1b:f9:b9:05:eb: 12:8b:87:b0:6d:df:8c:23:6c:70:b5:ab:39:69:45: bf:2c:19:5e:f3:07:b0:9d:b3:03:93:8b:49:94:c1: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0F:06:37:AD:3A:0E:5A:90:39:2A:5A:8D:AE:B5:54:88:80:C6:FC X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f6:a6:81:e0:8f:81:c8:be:0e:77:82:34:9b:f5:06:17:0e: 07:6a:be:f4:69:fa:a5:58:bc:b0:85:39:46:65:42:3e:1e:d7: 91:01:ce:9c:8a:58:66:0d:e1:06:b4:77:24:4c:d6:c4:af:28: 51:cb:d0:82:1f:73:96:fe:3e:66:f7:a5:ea:10:6e:51:de:eb: 73:35:2e:3f:8f:87:61:b8:82:84:cc:75:47:a1:64:d7:79:ef: c2:c7:8c:d5:e4:9d:74:8a:5b:df:e3:d1:f7:94:4f:e4:d4:bc: 89:09:c4:18:63:18:0b:7f:f0:8b:00:1a:aa:af:2a:ef:40:73: 86:bd:27:9c:5a:e3:e8:ca:52:e6:c9:af:24:f6:32:24:48:26: 24:da:17:4e:90:5b:40:e3:52:d8:39:f8:df:6c:bc:3f:30:1e: a1:15:f7:54:40:35:96:e0:ba:e3:76:c1:07:8f:ca:b1:32:80: 93:d0:51:5b:19:e1:9e:3b:1d:bb:88:b2:46:dd:58:be:c9:18: 93:41:f0:03:c8:c9:fc:63:7e:bb:02:0c:b1:43:17:90:ca:0c: 59:12:22:c9:1c:ca:04:db:2f:4a:1b:7a:51:9a:24:db:51:c8: 7b:bb:e9:6d:92:bd:d6:1b:10:a8:54:7f:3a:df:45:50:8d:83: 24:33:1c:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFEWQACs4p/oBvQoG42RBEqWxlagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNTEyMTgxMjA3MjVaFw0yNTEyMjExNTM1MjVaMDMxMTAvBgNV BAMTKDYxMEYwNjM3QUQzQTBFNUE5MDM5MkE1QThEQUVCNTU0ODg4MEM2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLf3z+KCSYCwW0fuH6Mx7PL4w z+dolMfHxdDbG1F4x2QxDmV4pBRwwGF81EQtAbTiJ7m10z0TSrp/kPyI1vJX69JS uxiY/L0DM/MTW2Scgp6qfwu0X0bMgojm7855gu2BOP8VGY4JxDnDcj09lkCgl2jG 2JhBefdjvHLqQeOmF3Vt6fCtDNFOllXzO2U0RHKFPTN8vzV09ANwLhVEglKJiM4r areWIN7bpu7++u4vaH7ED6Zqe91kLdhXfjUe3a5kZk+ZdpEBMfsl1u7KwSnhJN1W 2eLfMbPk36gb+bkF6xKLh7Bt34wjbHC1qzlpRb8sGV7zB7CdswOTi0mUwVy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYQ8GN606DlqQOSpaja61VIiAxvwwHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/2poHgj4HIvg53gjSb9QYXDgdqvvRp+qVY vLCFOUZlQj4e15EBzpyKWGYN4Qa0dyRM1sSvKFHL0IIfc5b+Pmb3peoQblHe63M1 Lj+Ph2G4goTMdUehZNd578LHjNXknXSKW9/j0feUT+TUvIkJxBhjGAt/8IsAGqqv Ku9Ac4a9J5xa4+jKUubJryT2MiRIJiTaF06QW0DjUtg5+N9svD8wHqEV91RANZbg uuN2wQePyrEygJPQUVsZ4Z47HbuIskbdWL7JGJNB8APIyfxjfrsCDLFDF5DKDFkS IskcygTbL0obelGaJNtRyHu76W2SvdYbEKhUfzrfRVCNgyQzHMA= -----END CERTIFICATE-----Generated at Sat Dec 20 23:56:22 2025 by rpki-client