This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: 9ZzWBXoOtWRUN7VDthUx5ZvFM/KkUyDrEfJ1rBDAcok= Subject key identifier: 51:51:C4:04:3E:65:AD:DD:09:BE:AF:69:23:6B:DF:B4:BB:DC:7C:79 Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 2F8B09FAA4AE2EB7974619789C441C75462C6ED1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: 0139 Signing time: Sun 21 Dec 2025 13:01:28 +0000 Manifest this update: Sun 21 Dec 2025 12:56:28 +0000 Manifest next update: Wed 24 Dec 2025 16:43:28 +0000 Files and hashes: 1: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: D8V9Ti1MiqCoDzJ7ekoPuNqjW7Yshnj+Rr7KMkTOEU8=) 2: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: Dw31EdkkqE44eq1AnUHix9Mf5h38woQtP6BC5QCkZuA=) 3: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: DNipIl+k+OoAsJK+hewT9b6De2It7gzVdw4T99uEPSg=) 4: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: qbymQcWrHfUJL/+zfay4GCgmn2N2MJnny8eN/n0IMAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8b:09:fa:a4:ae:2e:b7:97:46:19:78:9c:44:1c:75:46:2c:6e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Dec 21 12:56:28 2025 GMT Not After : Dec 24 16:43:28 2025 GMT Subject: CN=5151C4043E65ADDD09BEAF69236BDFB4BBDC7C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:f9:14:1f:9b:5b:3e:37:2c:e6:63:6e:2d: 1c:ba:cf:87:9a:f6:e5:41:97:7c:79:79:f1:37:3f: 29:ce:0b:e1:1d:43:a8:05:7e:15:7b:7f:f9:84:25: 82:49:b8:b9:71:40:75:5d:f6:7e:65:dd:d3:ce:8d: 02:0a:58:fd:05:ff:fb:a3:aa:c5:95:8e:e3:bb:9a: 11:84:17:4d:3d:c8:ab:8a:e8:ae:a7:9d:77:30:45: 11:d2:d9:ce:72:86:20:b9:f4:3d:48:1e:ce:d4:4b: bb:60:42:b1:31:3a:82:2b:2a:ce:27:c8:b3:0d:14: 23:6a:7e:54:48:31:1a:1a:b2:bb:a2:9a:a2:bb:84: 7e:0f:26:ba:26:b6:ee:eb:f2:e0:4f:60:a8:20:a9: 6a:3f:63:f0:80:03:0b:f4:df:00:8a:f5:44:78:02: 27:43:23:dd:69:3f:01:b4:a7:7d:ef:a6:1f:cd:7e: bf:54:58:b1:68:1a:cf:df:15:65:7d:34:b8:11:f6: a4:ef:90:6d:1e:a0:28:12:36:98:d3:9a:ff:b5:00: b0:3e:f5:16:8c:de:0e:a7:c8:f4:08:9d:bc:ec:7c: eb:f3:fe:a9:f9:ca:b3:d6:47:56:30:7a:42:bf:9b: e8:e8:50:3c:60:0a:8d:31:4a:f9:0e:ff:a6:a4:9e: a1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:51:C4:04:3E:65:AD:DD:09:BE:AF:69:23:6B:DF:B4:BB:DC:7C:79 X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6c:e9:0f:7b:dc:55:0a:26:97:87:b3:13:e4:c7:a2:22:dd: 15:56:0a:a1:5b:87:5c:c1:18:54:59:e6:f2:24:8f:40:69:e1: cd:73:2b:af:2d:54:9a:f1:5e:0d:24:28:37:0a:3d:b6:5d:7d: 09:71:48:17:3b:d4:d2:d5:e9:73:c4:e8:1c:1f:34:e6:96:31: 6e:6c:06:cf:3a:7c:48:69:5a:87:f6:92:1d:9a:2e:dd:61:92: 02:42:f5:e1:78:87:93:df:c6:75:4d:4f:e1:5e:da:dd:81:0a: d2:57:83:3c:8d:de:35:8f:d7:c0:4f:18:4b:98:b3:df:e1:c2: 43:16:ba:06:9a:77:a2:16:d6:a4:e7:29:8a:ce:84:11:ec:65: 15:21:08:47:51:1f:7a:df:41:3e:27:9c:9d:d3:80:50:65:e8: 83:48:f4:39:82:af:da:1f:1b:ac:47:28:b3:a5:79:35:57:bc: f5:ef:82:2b:50:f8:f9:73:e3:6c:e1:11:2f:8b:98:ce:eb:2f: 56:74:64:d1:d2:ad:e7:55:b0:6a:7e:ec:2e:0d:d9:21:ee:b3: 59:73:89:04:5b:d6:5f:2d:d6:81:3a:bd:6d:5a:49:b5:3e:c0: 92:b7:a4:e3:8a:26:de:62:cf:2f:a9:77:f1:3c:73:1d:63:d7: de:5e:d5:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4sJ+qSuLreXRhl4nEQcdUYsbtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTEyMjExMjU2MjhaFw0yNTEyMjQxNjQzMjhaMDMxMTAvBgNV BAMTKDUxNTFDNDA0M0U2NUFEREQwOUJFQUY2OTIzNkJERkI0QkJEQzdDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqI/kUH5tbPjcs5mNuLRy6z4ea 9uVBl3x5efE3PynOC+EdQ6gFfhV7f/mEJYJJuLlxQHVd9n5l3dPOjQIKWP0F//uj qsWVjuO7mhGEF009yKuK6K6nnXcwRRHS2c5yhiC59D1IHs7US7tgQrExOoIrKs4n yLMNFCNqflRIMRoasruimqK7hH4PJromtu7r8uBPYKggqWo/Y/CAAwv03wCK9UR4 AidDI91pPwG0p33vph/Nfr9UWLFoGs/fFWV9NLgR9qTvkG0eoCgSNpjTmv+1ALA+ 9RaM3g6nyPQInbzsfOvz/qn5yrPWR1YwekK/m+joUDxgCo0xSvkO/6aknqHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUVHEBD5lrd0Jvq9pI2vftLvcfHkwHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRs6Q973FUKJpeHsxPkx6Ii3RVWCqFbh1zB GFRZ5vIkj0Bp4c1zK68tVJrxXg0kKDcKPbZdfQlxSBc71NLV6XPE6BwfNOaWMW5s Bs86fEhpWof2kh2aLt1hkgJC9eF4h5PfxnVNT+Fe2t2BCtJXgzyN3jWP18BPGEuY s9/hwkMWugaad6IW1qTnKYrOhBHsZRUhCEdRH3rfQT4nnJ3TgFBl6INI9DmCr9of G6xHKLOleTVXvPXvgitQ+Plz42zhES+LmM7rL1Z0ZNHSredVsGp+7C4N2SHus1lz iQRb1l8t1oE6vW1aSbU+wJK3pOOKJt5izy+pd/E8cx1j195e1Qc= -----END CERTIFICATE-----Generated at Tue Dec 23 09:18:47 2025 by rpki-client