This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: ynZvQnYvrYy7Kh2/Qk6zDrkURxA4y+k/Jgb7oiI8UtY= Subject key identifier: B2:F5:1D:F7:A1:71:9C:FE:01:63:A4:00:EF:93:EF:9D:F8:63:B4:F2 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 11FD233CAE66A821E10348A2A531C0947A691A4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 022A Signing time: Thu 25 Dec 2025 19:21:16 +0000 Manifest this update: Thu 25 Dec 2025 19:16:16 +0000 Manifest next update: Sun 28 Dec 2025 20:32:16 +0000 Files and hashes: 1: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: OXRZ526Vg7TmkLT93n/Qe4MisAG7vaUJuVBZqKmzdzU=) 2: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: WbsQ68Cu40oqUa2yh2wFEKvkhfxO2KVKndxoFM4DO5k=) 3: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: veegCj9iGyDgICdSKnqUmxm+8W0aXn33NEDr01IcxOU=) 4: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: H+FNrGTWOm2rEbzW4c22NCPKDmaY/bFliACB6RDfaOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 20:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:fd:23:3c:ae:66:a8:21:e1:03:48:a2:a5:31:c0:94:7a:69:1a:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Dec 25 19:16:16 2025 GMT Not After : Dec 28 20:32:16 2025 GMT Subject: CN=B2F51DF7A1719CFE0163A400EF93EF9DF863B4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a6:43:b7:f3:ed:79:9e:07:dc:af:cd:b6:c2: 0d:39:f6:00:9a:63:ac:cc:e2:bf:ca:22:6f:81:6f: c6:9c:1d:61:a9:73:bd:63:a8:50:3d:6a:7a:d3:5a: 43:82:e4:1f:a7:05:5e:d7:41:d7:24:a2:d5:d5:6e: d6:a3:b7:0a:7f:c2:28:a5:9e:22:ff:31:e2:e9:12: 96:f7:ac:05:98:ac:1f:93:88:17:e0:53:de:3a:c5: 32:83:9c:27:0d:75:e5:15:2e:d5:ad:ef:45:a0:79: 1c:ad:da:62:7a:97:23:ea:e4:0f:68:dc:8c:cc:15: 72:d0:82:ad:14:72:63:a1:21:74:9a:e9:a6:69:03: 94:ee:d0:55:77:98:19:05:a2:3b:c4:a6:5e:90:eb: 39:f7:74:ad:05:ca:ed:28:28:d3:55:cf:b2:59:63: e9:a8:eb:e8:6b:39:72:30:25:b9:9e:65:32:74:07: 6f:8e:cc:c2:57:e3:85:7f:79:67:c0:da:e7:87:b3: cc:e2:c7:f1:32:1f:d9:95:14:88:6f:75:94:d3:56: 7e:54:c6:84:9f:2b:d6:2f:48:19:92:40:78:b1:e2: a2:20:03:b3:81:9b:6d:1a:e0:87:3f:78:9a:65:09: a5:50:a7:e7:ec:36:aa:07:4f:bd:e8:94:9d:18:8e: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F5:1D:F7:A1:71:9C:FE:01:63:A4:00:EF:93:EF:9D:F8:63:B4:F2 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:39:3b:99:a8:e0:62:37:a0:11:02:b4:76:f2:00:2f:7c:e0: 73:e5:7a:f6:14:33:32:af:5c:73:d3:af:7d:e9:08:c4:6f:66: a8:c5:de:26:d4:81:40:66:2d:c6:c3:da:24:1e:2e:a6:75:c5: a5:d4:31:f1:8e:d8:9c:2e:02:5b:27:bc:45:c1:b2:91:89:32: 42:e9:d6:1d:e4:22:a3:72:3c:ea:26:3d:6c:07:c3:47:a7:3b: 57:e9:1c:1b:b2:e1:05:b3:ac:2c:3f:bc:41:d7:9b:60:fb:86: 04:61:4d:fa:b1:33:b2:12:a1:07:82:3b:39:eb:9d:4c:8c:fa: 4b:53:7f:a2:f4:01:e9:27:62:e4:2f:d1:11:7b:b5:55:c6:28: a3:45:c5:e3:f0:22:ed:8c:a4:ad:b4:32:bb:9a:9b:fa:c1:b8: 69:b3:d6:de:8c:48:9d:78:c2:15:e8:8c:28:e9:e9:75:e0:14: 12:86:e3:89:70:ad:47:20:63:70:96:07:e8:10:5b:2e:92:55: 3b:18:37:71:cc:f6:26:ff:39:f9:c5:8d:97:08:4c:f1:5f:4f: 46:d2:e0:9c:99:eb:ba:f7:73:1c:78:18:52:c0:fd:6b:01:c7: 58:4c:9f:4b:16:59:5b:db:a0:40:6a:4d:9f:bd:e5:90:d8:50: 8a:34:d9:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEf0jPK5mqCHhA0iipTHAlHppGkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTEyMjUxOTE2MTZaFw0yNTEyMjgyMDMyMTZaMDMxMTAvBgNV BAMTKEIyRjUxREY3QTE3MTlDRkUwMTYzQTQwMEVGOTNFRjlERjg2M0I0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpkO38+15ngfcr822wg059gCa Y6zM4r/KIm+Bb8acHWGpc71jqFA9anrTWkOC5B+nBV7XQdckotXVbtajtwp/wiil niL/MeLpEpb3rAWYrB+TiBfgU946xTKDnCcNdeUVLtWt70WgeRyt2mJ6lyPq5A9o 3IzMFXLQgq0UcmOhIXSa6aZpA5Tu0FV3mBkFojvEpl6Q6zn3dK0Fyu0oKNNVz7JZ Y+mo6+hrOXIwJbmeZTJ0B2+OzMJX44V/eWfA2ueHs8zix/EyH9mVFIhvdZTTVn5U xoSfK9YvSBmSQHix4qIgA7OBm20a4Ic/eJplCaVQp+fsNqoHT73olJ0YjqLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsvUd96FxnP4BY6QA75PvnfhjtPIwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMU5O5mo4GI3oBECtHbyAC984HPlevYUMzKv XHPTr33pCMRvZqjF3ibUgUBmLcbD2iQeLqZ1xaXUMfGO2JwuAlsnvEXBspGJMkLp 1h3kIqNyPOomPWwHw0enO1fpHBuy4QWzrCw/vEHXm2D7hgRhTfqxM7ISoQeCOznr nUyM+ktTf6L0AeknYuQv0RF7tVXGKKNFxePwIu2MpK20Mruam/rBuGmz1t6MSJ14 whXojCjp6XXgFBKG44lwrUcgY3CWB+gQWy6SVTsYN3HM9ib/OfnFjZcITPFfT0bS 4JyZ67r3cxx4GFLA/WsBx1hMn0sWWVvboEBqTZ+95ZDYUIo02e8= -----END CERTIFICATE-----Generated at Sat Dec 27 15:59:15 2025 by rpki-client