This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft File: D84954514E2FF8171F1DC8D8C911A96481911DBB.mft (raw, json) Hash identifier: t9AJuTvKOnSNp0cnOkPUHewlqAQNtGbvLRUoj1at+Ks= Subject key identifier: D9:66:EE:46:9E:57:27:81:7B:1E:78:3D:FF:68:7B:2C:EB:57:C5:12 Authority key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Certificate issuer: /CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Certificate serial: 5531268DC85C59BF4D2142236ACB05481F647ABC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft Manifest number: 0232 Signing time: Wed 24 Dec 2025 09:21:25 +0000 Manifest this update: Wed 24 Dec 2025 09:16:25 +0000 Manifest next update: Sat 27 Dec 2025 13:50:25 +0000 Files and hashes: 1: D84954514E2FF8171F1DC8D8C911A96481911DBB.crl (hash: ui3bOx2lH5Jv4EM1WaZO8eNB+yHo4gXrIKH9/QrspdY=) 2: 3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (hash: rSj9OVlqtiPPskUUwR+sB8KTVHxG2CyA4iMG/fwGrQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:31:26:8d:c8:5c:59:bf:4d:21:42:23:6a:cb:05:48:1f:64:7a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Validity Not Before: Dec 24 09:16:25 2025 GMT Not After : Dec 27 13:50:25 2025 GMT Subject: CN=D966EE469E5727817B1E783DFF687B2CEB57C512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:a5:b5:57:3f:48:5b:77:3e:4c:b1:2c:e5: fa:ca:b6:ef:6d:be:f0:31:35:43:94:10:97:b7:f7: 68:59:d2:67:be:81:cf:d3:58:45:77:c8:e4:20:d3: b6:b6:bd:98:33:d6:72:aa:26:b1:a8:2d:ee:e6:58: 73:c1:fd:f4:60:ef:62:8f:47:77:cc:0f:fb:5f:a4: 55:58:6a:57:0e:86:bf:e3:e5:29:b8:05:e6:ee:7a: 8a:e8:17:e8:c1:6c:1b:53:5c:e8:cf:0c:f4:49:d8: 72:53:5d:b7:46:46:61:e4:a0:ff:80:32:35:70:4c: be:c8:cb:35:1e:ff:d9:64:34:61:b2:12:40:ef:26: 12:1b:78:87:f2:f1:23:88:d0:00:a0:e5:33:46:27: 90:57:3a:2d:b4:7f:bb:3d:25:f1:44:4c:63:0f:da: 26:9f:43:e2:8b:20:de:80:db:91:63:b5:19:e4:e5: c2:9f:5d:29:b3:7e:aa:f6:31:c2:6f:f5:d3:ca:c1: 43:62:9d:5c:2d:eb:97:dd:0b:21:13:c2:d7:f9:60: 44:5e:fb:27:95:f9:94:8b:60:d6:6d:a2:4f:a2:10: 27:82:79:07:0d:8e:77:d9:9d:ed:7f:90:a5:b3:7d: d9:a8:7a:c7:49:f1:c8:35:d1:0b:9e:81:73:ba:e9: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:66:EE:46:9E:57:27:81:7B:1E:78:3D:FF:68:7B:2C:EB:57:C5:12 X509v3 Authority Key Identifier: keyid:D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:83:7f:a1:e9:1f:92:9f:a3:78:6e:be:f3:58:7c:42:5e:43: 11:ec:cc:56:d7:c9:fc:0b:8f:77:f8:5f:e9:db:d6:65:18:51: 0c:2e:91:03:b9:50:27:62:99:8f:37:4f:10:ba:1e:8f:d8:8d: 9f:17:7d:31:02:f7:ce:6b:52:d2:94:16:26:96:03:6d:7e:f5: 61:92:88:5a:2b:26:78:bb:7c:1d:6e:45:e5:22:bc:19:90:10: 09:c8:8d:fd:9a:8e:90:ab:c0:8b:64:70:c9:d6:c4:75:46:bc: 36:81:c1:ed:4b:54:b7:52:da:e5:48:58:4c:28:13:4d:2a:f6: 59:ae:0b:2d:f7:77:f0:59:aa:89:8b:aa:6b:9b:d7:dd:f2:14: c1:7c:79:b5:f4:3b:58:b5:26:c1:a9:8d:45:b4:02:16:43:b0: fc:d4:3c:14:27:63:0c:ad:e2:1d:ad:13:9f:0d:84:3f:93:37: 13:13:8b:4c:2c:41:cc:7c:71:65:6d:08:bc:73:e8:c7:49:d3: 5e:5f:87:7b:cb:ef:1d:5d:5e:05:a8:2f:56:77:dc:81:81:54: ac:bd:7f:5f:fa:f1:e1:18:dd:23:e0:a4:57:c6:c5:0d:20:7c: 3d:1e:68:f4:3a:50:bd:82:a8:a5:76:9c:cc:60:c3:1a:cb:d4: 91:aa:4c:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVTEmjchcWb9NIUIjassFSB9kerwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4 MTkxMURCQjAeFw0yNTEyMjQwOTE2MjVaFw0yNTEyMjcxMzUwMjVaMDMxMTAvBgNV BAMTKEQ5NjZFRTQ2OUU1NzI3ODE3QjFFNzgzREZGNjg3QjJDRUI1N0M1MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvaW1Vz9IW3c+TLEs5frKtu9t vvAxNUOUEJe392hZ0me+gc/TWEV3yOQg07a2vZgz1nKqJrGoLe7mWHPB/fRg72KP R3fMD/tfpFVYalcOhr/j5Sm4BebueoroF+jBbBtTXOjPDPRJ2HJTXbdGRmHkoP+A MjVwTL7IyzUe/9lkNGGyEkDvJhIbeIfy8SOI0ACg5TNGJ5BXOi20f7s9JfFETGMP 2iafQ+KLIN6A25FjtRnk5cKfXSmzfqr2McJv9dPKwUNinVwt65fdCyETwtf5YERe +yeV+ZSLYNZtok+iECeCeQcNjnfZne1/kKWzfdmoesdJ8cg10QuegXO66c89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WbuRp5XJ4F7Hng9/2h7LOtXxRIwHwYDVR0j BBgwFoAU2ElUUU4v+BcfHcjYyRGpZIGRHbswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMC9EODQ5NTQ1MTRF MkZGODE3MUYxREM4RDhDOTExQTk2NDgxOTExREJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5NjQ4MTkx MURCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjViODQ1OWEtZTM1MS00YzhkLWJj MjktNWZkMDhjNGM1OTQxLzAvRDg0OTU0NTE0RTJGRjgxNzFGMURDOEQ4QzkxMUE5 NjQ4MTkxMURCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKDf6HpH5Kfo3huvvNYfEJeQxHszFbXyfwL j3f4X+nb1mUYUQwukQO5UCdimY83TxC6Ho/YjZ8XfTEC985rUtKUFiaWA21+9WGS iForJni7fB1uReUivBmQEAnIjf2ajpCrwItkcMnWxHVGvDaBwe1LVLdS2uVIWEwo E00q9lmuCy33d/BZqomLqmub193yFMF8ebX0O1i1JsGpjUW0AhZDsPzUPBQnYwyt 4h2tE58NhD+TNxMTi0wsQcx8cWVtCLxz6MdJ015fh3vL7x1dXgWoL1Z33IGBVKy9 f1/68eEY3SPgpFfGxQ0gfD0eaPQ6UL2CqKV2nMxgwxrL1JGqTKk= -----END CERTIFICATE-----Generated at Wed Dec 24 20:20:47 2025 by rpki-client