This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: BkaqDQGTRNQ/tLkB/WQ5EjHsYt9jwRbTX6h1wgK9BtU= Subject key identifier: B0:2A:94:C9:91:E0:41:A8:62:F8:34:DC:66:C3:4E:1B:01:EA:64:17 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 1BEB5FCF8999A6BF7ACAE9EA14F7EEA681B18891 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 022C Signing time: Mon 29 Dec 2025 23:41:16 +0000 Manifest this update: Mon 29 Dec 2025 23:36:15 +0000 Manifest next update: Fri 02 Jan 2026 10:29:15 +0000 Files and hashes: 1: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: WbsQ68Cu40oqUa2yh2wFEKvkhfxO2KVKndxoFM4DO5k=) 2: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: H+FNrGTWOm2rEbzW4c22NCPKDmaY/bFliACB6RDfaOU=) 3: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: OXRZ526Vg7TmkLT93n/Qe4MisAG7vaUJuVBZqKmzdzU=) 4: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: oMcTJUDbbO5uMa7eH5gyXjfjS70Uc3MaaeFNzJRBS1c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 10:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:eb:5f:cf:89:99:a6:bf:7a:ca:e9:ea:14:f7:ee:a6:81:b1:88:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Dec 29 23:36:15 2025 GMT Not After : Jan 2 10:29:15 2026 GMT Subject: CN=B02A94C991E041A862F834DC66C34E1B01EA6417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6e:d6:cc:63:17:47:33:98:b1:72:03:13:46: 7f:24:7b:3d:41:6f:35:66:13:38:5e:2e:22:37:14: 7b:55:00:c8:f9:28:dc:60:53:5c:7f:d7:d0:90:a3: b7:0c:f0:65:bd:d4:65:a6:00:13:b0:60:7b:08:2a: 4d:a0:07:9f:06:81:fa:8e:f9:29:02:76:48:86:f6: f0:0f:4b:c7:09:e9:3a:be:74:de:dc:03:f5:68:36: 70:f8:93:f7:2c:dd:f2:93:75:b5:aa:72:f2:91:23: 77:11:01:6f:7c:c1:f2:1a:c8:0d:e4:a3:a5:af:14: 10:6a:8c:e1:55:6e:8f:a4:c4:30:c0:c4:82:df:bf: 8e:65:d8:1a:38:85:6c:4a:7b:4b:fd:b0:43:e2:86: 4b:09:e8:49:3e:b4:1c:4d:49:79:4a:4d:19:26:98: f8:f1:91:64:cc:6b:1d:8c:ad:d5:58:87:7b:e9:25: 49:26:aa:91:a0:70:c1:86:d6:b0:23:c3:b9:78:bb: c9:43:29:92:de:73:7d:d6:b3:a2:64:55:b6:6f:a6: b3:97:75:51:1e:55:f7:d4:7c:89:1d:04:4d:0e:99: 76:eb:e5:67:93:5e:e2:e2:b8:fe:1a:37:fe:7e:c4: cd:72:7c:ad:6e:63:f0:61:16:04:84:2a:8e:fb:8e: 41:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2A:94:C9:91:E0:41:A8:62:F8:34:DC:66:C3:4E:1B:01:EA:64:17 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:fa:5c:1f:99:2f:9a:73:b9:99:8d:25:ce:77:c3:a9:7b:3b: 07:0c:6b:41:9e:6d:5e:f8:33:ac:6b:c8:95:e9:96:89:d1:00: 2b:40:2b:fc:c8:55:0a:79:97:c3:87:94:f0:5f:2a:d0:ab:8c: 28:32:b4:a0:3a:15:23:2b:53:e2:e3:02:a5:4f:08:87:df:45: de:fd:1f:b3:a1:72:30:53:84:ea:be:e2:fd:53:33:a8:ec:73: db:38:c4:5d:11:00:fb:8c:d0:26:29:1f:ac:36:a4:03:c2:3b: ab:60:42:bf:01:0d:e1:d4:51:94:d2:40:24:4c:9d:18:33:c4: 30:d9:b9:ed:33:f6:e5:27:68:bd:dc:da:0e:a5:ff:90:25:8b: 57:b5:dc:81:0e:e8:3d:04:f0:0d:a7:0a:ba:36:25:e7:a8:85: 39:3e:07:d7:c1:59:dc:70:17:49:78:2d:82:a6:3a:02:4d:72: 18:55:d6:02:04:1c:e0:34:0b:37:ae:34:e8:7b:2b:35:ff:e4: ee:09:79:c8:19:ff:09:8f:95:9d:68:6c:6f:88:b9:66:84:c2: e3:92:0c:3b:67:7b:2f:3f:57:f8:06:69:03:10:2a:7f:60:8c: 79:2b:b5:75:dc:33:25:32:f6:8a:1b:3c:67:97:1f:13:dc:00: e0:f3:55:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+tfz4mZpr96yunqFPfupoGxiJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTEyMjkyMzM2MTVaFw0yNjAxMDIxMDI5MTVaMDMxMTAvBgNV BAMTKEIwMkE5NEM5OTFFMDQxQTg2MkY4MzREQzY2QzM0RTFCMDFFQTY0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhbtbMYxdHM5ixcgMTRn8kez1B bzVmEzheLiI3FHtVAMj5KNxgU1x/19CQo7cM8GW91GWmABOwYHsIKk2gB58GgfqO +SkCdkiG9vAPS8cJ6Tq+dN7cA/VoNnD4k/cs3fKTdbWqcvKRI3cRAW98wfIayA3k o6WvFBBqjOFVbo+kxDDAxILfv45l2Bo4hWxKe0v9sEPihksJ6Ek+tBxNSXlKTRkm mPjxkWTMax2MrdVYh3vpJUkmqpGgcMGG1rAjw7l4u8lDKZLec33Ws6JkVbZvprOX dVEeVffUfIkdBE0OmXbr5WeTXuLiuP4aN/5+xM1yfK1uY/BhFgSEKo77jkHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsCqUyZHgQahi+DTcZsNOGwHqZBcwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD6XB+ZL5pzuZmNJc53w6l7OwcMa0GebV74 M6xryJXplonRACtAK/zIVQp5l8OHlPBfKtCrjCgytKA6FSMrU+LjAqVPCIffRd79 H7OhcjBThOq+4v1TM6jsc9s4xF0RAPuM0CYpH6w2pAPCO6tgQr8BDeHUUZTSQCRM nRgzxDDZue0z9uUnaL3c2g6l/5Ali1e13IEO6D0E8A2nCro2JeeohTk+B9fBWdxw F0l4LYKmOgJNchhV1gIEHOA0CzeuNOh7KzX/5O4JecgZ/wmPlZ1obG+IuWaEwuOS DDtney8/V/gGaQMQKn9gjHkrtXXcMyUy9oobPGeXHxPcAODzVUc= -----END CERTIFICATE-----Generated at Wed Dec 31 03:36:14 2025 by rpki-client