This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: 2+16nmZdL9coBHZM43N3HNhYd8TnAdEAgyXh+tqTfh8= Subject key identifier: 06:21:AE:CA:8F:B9:48:20:55:CC:DC:5E:40:36:10:3C:FE:0E:31:CD Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 35FE911D9AFC5514DB7DB16D3836E943D93C54F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: AC Signing time: Sat 20 Dec 2025 03:01:42 +0000 Manifest this update: Sat 20 Dec 2025 02:56:42 +0000 Manifest next update: Tue 23 Dec 2025 13:37:42 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: amumi/WYE2A4FB3wGrZMgKCqFZMIGROo7mRPUcV+x9E=) 2: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: NWPdpnzjvUkWFT639EpYBF/gai4l8goVCGsjws+hbv0=) 3: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: j2jeNWrMnOWA3HVjk7O9Qz3LOhi+j72z4nmZQhM1gNs=) 4: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: QUsJrZRGXJDFzZ+1pHT3fdPTroXSO+QgOlMU54vcE+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 13:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:fe:91:1d:9a:fc:55:14:db:7d:b1:6d:38:36:e9:43:d9:3c:54:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Dec 20 02:56:42 2025 GMT Not After : Dec 23 13:37:42 2025 GMT Subject: CN=0621AECA8FB9482055CCDC5E4036103CFE0E31CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:8d:bb:a7:91:d9:b9:8c:90:9f:bc:d9:88: 3b:f7:36:f6:7c:50:64:ce:35:17:9e:24:f8:fb:e9: 55:ad:a0:a9:8b:fe:3b:4c:82:33:2a:7a:cd:10:6a: cc:9a:14:1c:f0:a9:7b:c1:72:49:70:f9:cc:e8:e1: 56:4d:6b:86:bc:89:71:df:74:f1:6b:cd:c3:03:ce: 51:60:47:35:b5:c6:c0:54:da:80:7e:17:1e:16:df: 82:b3:7c:cd:ea:f1:f4:28:16:86:b0:29:ca:89:4d: 8a:8f:8d:39:88:43:46:9a:62:6d:fb:35:29:69:f1: 50:df:a9:61:b9:74:ba:fe:b4:0c:70:a8:91:5f:e0: 66:b0:42:72:7e:99:41:52:81:20:68:1d:31:c0:f7: 65:73:ee:58:0f:87:5b:b7:94:41:af:e1:db:47:3a: ab:27:64:0d:ae:eb:c4:ed:01:c0:38:88:df:c9:b0: 42:3b:27:ac:df:49:ab:ec:65:07:9c:7e:87:b4:8c: 72:b4:a8:5b:76:bf:1c:17:63:a3:e3:55:f2:12:70: 98:00:b8:0b:64:22:68:b3:4c:eb:e7:33:b4:0d:0f: b4:37:49:e1:88:b8:33:96:d2:33:1f:3d:8a:ff:e2: 36:94:d5:bd:58:2b:58:ad:6a:fd:2e:cb:a1:b6:36: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:21:AE:CA:8F:B9:48:20:55:CC:DC:5E:40:36:10:3C:FE:0E:31:CD X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:dd:df:ca:16:22:9f:1f:1f:3d:3c:7a:c6:a2:60:3f:78:21: 62:fb:67:aa:f5:c9:a2:56:10:da:13:24:05:3e:fc:89:c8:20: ff:34:a1:1f:c9:d1:b9:d4:c1:b5:c4:c3:fd:49:be:97:ba:99: 53:4c:c6:e4:9c:23:f5:fe:ed:bc:4b:d1:6a:fe:c7:a0:14:cf: 02:f2:03:27:ea:78:71:c2:4d:14:df:96:01:bf:2d:e3:09:34: 8a:3d:23:0c:0c:56:ca:48:4b:5a:53:42:bf:03:b9:38:ab:e5: 38:6c:0a:e9:78:dd:73:23:cf:b8:5d:ef:9c:8a:e5:30:77:af: cf:53:9f:e1:28:60:c0:0a:4b:b8:21:39:90:e8:43:44:76:ae: 1a:74:a3:2b:17:9f:e1:03:a7:a7:89:3d:a7:49:3e:be:df:27: af:5c:94:b5:b0:e0:1d:5e:c8:33:43:f4:fc:5c:6a:72:57:88: c5:7e:68:46:e5:ca:dc:6a:0b:bd:19:e5:d3:7c:ad:09:55:d5: 8d:15:e4:7b:88:15:1d:63:44:f7:22:af:12:0a:e7:d6:39:b9: 46:05:ce:8e:48:ef:7f:53:ed:e3:df:66:46:d6:25:fd:27:a6: c4:38:ee:5b:13:b6:45:64:41:19:1f:e4:71:62:af:95:73:04: 19:fa:7f:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNf6RHZr8VRTbfbFtODbpQ9k8VPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTEyMjAwMjU2NDJaFw0yNTEyMjMxMzM3NDJaMDMxMTAvBgNV BAMTKDA2MjFBRUNBOEZCOTQ4MjA1NUNDREM1RTQwMzYxMDNDRkUwRTMxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/OI27p5HZuYyQn7zZiDv3NvZ8 UGTONReeJPj76VWtoKmL/jtMgjMqes0QasyaFBzwqXvBcklw+czo4VZNa4a8iXHf dPFrzcMDzlFgRzW1xsBU2oB+Fx4W34KzfM3q8fQoFoawKcqJTYqPjTmIQ0aaYm37 NSlp8VDfqWG5dLr+tAxwqJFf4GawQnJ+mUFSgSBoHTHA92Vz7lgPh1u3lEGv4dtH OqsnZA2u68TtAcA4iN/JsEI7J6zfSavsZQecfoe0jHK0qFt2vxwXY6PjVfIScJgA uAtkImizTOvnM7QND7Q3SeGIuDOW0jMfPYr/4jaU1b1YK1itav0uy6G2NqWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBiGuyo+5SCBVzNxeQDYQPP4OMc0wHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjd38oWIp8fHz08esaiYD94IWL7Z6r1yaJW ENoTJAU+/InIIP80oR/J0bnUwbXEw/1Jvpe6mVNMxuScI/X+7bxL0Wr+x6AUzwLy AyfqeHHCTRTflgG/LeMJNIo9IwwMVspIS1pTQr8DuTir5ThsCul43XMjz7hd75yK 5TB3r89Tn+EoYMAKS7ghOZDoQ0R2rhp0oysXn+EDp6eJPadJPr7fJ69clLWw4B1e yDND9PxcanJXiMV+aEblytxqC70Z5dN8rQlV1Y0V5HuIFR1jRPcirxIK59Y5uUYF zo5I739T7ePfZkbWJf0npsQ47lsTtkVkQRkf5HFir5VzBBn6f0E= -----END CERTIFICATE-----Generated at Sun Dec 21 22:56:27 2025 by rpki-client