This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft File: D4DD8244BC2EB2B187B4181226714505DF8F4452.mft (raw, json) Hash identifier: tZAC8iix83v2FoF87sksUurFzBxRTZXBOfhF/ofGaJY= Subject key identifier: 37:EF:95:C8:B5:E4:BF:0D:77:DD:B2:16:EB:42:16:4B:D2:FC:41:19 Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Certificate issuer: /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Certificate serial: 18735704CA96EB1C4F43FFC4E0B14F3E37983CA1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft Manifest number: 0226 Signing time: Wed 17 Dec 2025 11:31:15 +0000 Manifest this update: Wed 17 Dec 2025 11:26:15 +0000 Manifest next update: Sat 20 Dec 2025 15:58:15 +0000 Files and hashes: 1: 3130332e3137302e3138362e302f32332d3234203d3e20313432333635.roa (hash: H+FNrGTWOm2rEbzW4c22NCPKDmaY/bFliACB6RDfaOU=) 2: 3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (hash: OXRZ526Vg7TmkLT93n/Qe4MisAG7vaUJuVBZqKmzdzU=) 3: D4DD8244BC2EB2B187B4181226714505DF8F4452.crl (hash: cXIvUjPCQ7I3RSFNy599yCq4Wr4EthhJpmMZ7Q+4GoM=) 4: 3130332e3137302e3138372e302f32342d3234203d3e20313432333635.roa (hash: WbsQ68Cu40oqUa2yh2wFEKvkhfxO2KVKndxoFM4DO5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:73:57:04:ca:96:eb:1c:4f:43:ff:c4:e0:b1:4f:3e:37:98:3c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Validity Not Before: Dec 17 11:26:15 2025 GMT Not After : Dec 20 15:58:15 2025 GMT Subject: CN=37EF95C8B5E4BF0D77DDB216EB42164BD2FC4119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b8:c4:53:73:9c:f1:76:42:4c:b8:c3:bd:e6: ad:a2:3f:d4:48:62:8e:45:e1:cc:14:da:bb:c3:f2: 9d:53:ce:0b:8a:0f:b8:8a:72:27:9b:ab:18:5f:32: 25:2f:9f:b2:73:14:00:a4:4f:a8:80:b1:bd:c9:4f: 9b:e5:9f:38:18:bf:90:fb:b7:98:37:11:4c:1e:09: ef:9e:72:4d:29:77:16:27:8b:ec:4c:d5:9a:02:56: 7b:06:27:8e:16:08:45:8a:dd:43:d4:f8:b3:31:0d: e0:72:b2:35:c4:44:d1:30:25:12:92:d9:b1:06:72: 13:8d:79:b2:aa:e8:e5:96:2c:99:1e:a1:40:a3:e5: 91:85:3d:4f:52:cb:b0:08:cd:75:0d:b5:6c:ec:62: e6:bd:d6:c8:ef:fb:8f:21:88:1d:db:b1:12:78:56: ef:55:5a:46:be:4b:b3:b1:c0:87:59:f5:1b:53:49: c0:64:27:99:96:e2:95:18:7c:d9:cd:76:a8:d6:76: 46:93:70:f1:a9:68:8b:c8:5a:41:cd:12:2d:79:14: 36:72:d5:ac:67:f1:96:ae:18:3e:8b:76:c1:c1:e9: d6:d0:39:a8:c1:ef:89:70:69:86:3b:d3:6e:e2:3e: 8d:58:08:f8:db:70:ca:51:41:ca:22:e7:98:fd:cf: e5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EF:95:C8:B5:E4:BF:0D:77:DD:B2:16:EB:42:16:4B:D2:FC:41:19 X509v3 Authority Key Identifier: keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:5e:c7:8c:f1:a4:cd:81:33:ec:72:6e:2f:a0:0d:93:5d:d5: 5d:6e:24:04:31:8c:ea:20:aa:20:89:77:4f:4e:2c:04:9b:4e: a3:ce:e4:93:35:d7:12:cf:db:9f:d8:de:7e:fc:88:ce:e4:b4: 05:06:05:e5:ef:18:83:ae:20:2f:f7:be:4a:9e:12:0a:86:64: 67:de:26:7b:21:3c:56:b1:af:29:f7:3c:ed:9d:5c:2f:68:dd: 3c:67:a5:b3:92:f3:fb:b4:3f:d0:eb:00:e9:62:59:26:32:5e: 85:e2:37:41:ab:05:24:61:9d:5d:e4:ea:67:d1:92:4a:28:ca: 60:6b:dc:90:ec:be:a6:41:b9:84:4c:20:8a:1f:b6:7d:c4:f1: 76:74:b8:3e:f2:aa:35:fc:f5:97:df:17:57:fe:f3:b4:ff:38: b2:86:cf:ff:d1:4d:4b:6a:50:b9:ff:67:35:b7:1f:5e:f6:97: e9:c8:c7:ce:0d:01:48:e6:a3:93:be:ea:27:f6:64:97:78:31: df:af:3f:e2:d6:a7:4f:e8:36:db:e8:b8:08:7a:b7:43:c7:33: ca:21:00:18:7a:e8:62:95:3b:29:3b:d2:5d:13:26:ef:ca:a1: 0d:62:e4:1f:92:bd:64:05:4e:25:12:8e:df:42:fe:8f:21:08: e2:02:34:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHNXBMqW6xxPQ//E4LFPPjeYPKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVE RjhGNDQ1MjAeFw0yNTEyMTcxMTI2MTVaFw0yNTEyMjAxNTU4MTVaMDMxMTAvBgNV BAMTKDM3RUY5NUM4QjVFNEJGMEQ3N0REQjIxNkVCNDIxNjRCRDJGQzQxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uMRTc5zxdkJMuMO95q2iP9RI Yo5F4cwU2rvD8p1TzguKD7iKciebqxhfMiUvn7JzFACkT6iAsb3JT5vlnzgYv5D7 t5g3EUweCe+eck0pdxYni+xM1ZoCVnsGJ44WCEWK3UPU+LMxDeBysjXERNEwJRKS 2bEGchONebKq6OWWLJkeoUCj5ZGFPU9Sy7AIzXUNtWzsYua91sjv+48hiB3bsRJ4 Vu9VWka+S7OxwIdZ9RtTScBkJ5mW4pUYfNnNdqjWdkaTcPGpaIvIWkHNEi15FDZy 1axn8ZauGD6LdsHB6dbQOajB74lwaYY7027iPo1YCPjbcMpRQcoi55j9z+UBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN++VyLXkvw133bIW60IWS9L8QRkwHwYDVR0j BBgwFoAU1N2CRLwusrGHtBgSJnFFBd+PRFIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMC9ENEREODI0NEJD MkVCMkIxODdCNDE4MTIyNjcxNDUwNURGOEY0NDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1MDVERjhG NDQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFmMGY0MjMtM2JlZC00OTM4LTlm ODktMTVlNjI2OWJkZGNhLzAvRDRERDgyNDRCQzJFQjJCMTg3QjQxODEyMjY3MTQ1 MDVERjhGNDQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVex4zxpM2BM+xybi+gDZNd1V1uJAQxjOog qiCJd09OLASbTqPO5JM11xLP25/Y3n78iM7ktAUGBeXvGIOuIC/3vkqeEgqGZGfe JnshPFaxryn3PO2dXC9o3TxnpbOS8/u0P9DrAOliWSYyXoXiN0GrBSRhnV3k6mfR kkooymBr3JDsvqZBuYRMIIoftn3E8XZ0uD7yqjX89ZffF1f+87T/OLKGz//RTUtq ULn/ZzW3H172l+nIx84NAUjmo5O+6if2ZJd4Md+vP+LWp0/oNtvouAh6t0PHM8oh ABh66GKVOyk70l0TJu/KoQ1i5B+SvWQFTiUSjt9C/o8hCOICNGc= -----END CERTIFICATE-----Generated at Fri Dec 19 16:03:00 2025 by rpki-client