This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: v5Q8ZGTeK/qvQxcyFbkaxH+vCYGCLe1bdVq8PwyLKNc= Subject key identifier: 5D:E1:10:C3:C4:E4:28:D8:D3:0A:52:B9:8F:AA:2C:AE:5D:84:8F:82 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 5C0F6D8FEDBE3AB1F4A63B41FA49846C0646C1CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 01F7 Signing time: Fri 05 Dec 2025 22:31:45 +0000 Manifest this update: Fri 05 Dec 2025 22:26:45 +0000 Manifest next update: Tue 09 Dec 2025 08:32:45 +0000 Files and hashes: 1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: 4X1JxcSmayIhgSwsgvbbBh0nVrfOfdW4VG7Ltuesc5s=) 2: 323030313a6466333a336630303a3a2f34382d3438203d3e20313336383731.roa (hash: swZnIrS/N8jbG3MiapPB8F24idMt8GRsGrJ6YtoYjjc=) 3: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: ZAu8OvfBdST7geCHoueCX6+mWd1XZYAPon9a++NmH2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0f:6d:8f:ed:be:3a:b1:f4:a6:3b:41:fa:49:84:6c:06:46:c1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Dec 5 22:26:45 2025 GMT Not After : Dec 9 08:32:45 2025 GMT Subject: CN=5DE110C3C4E428D8D30A52B98FAA2CAE5D848F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:28:3d:2f:48:59:f5:2b:6c:93:30:1d:a0: 49:bc:da:7d:16:0d:14:5d:56:06:61:58:34:8f:c1: 49:35:96:0e:14:f6:f8:bb:8c:94:14:1b:49:f7:b5: b9:aa:1f:d8:e4:ca:7d:d3:cf:d1:91:e2:c4:6c:bf: 1a:0c:62:f5:47:69:57:cc:8e:38:8d:eb:cd:45:94: e1:33:86:bd:01:f7:b9:0b:2a:b0:e2:0e:cd:7f:31: 07:f1:9d:25:ba:82:3a:cc:18:43:7b:82:fb:fe:94: a5:e8:d0:62:13:35:26:81:9d:4b:68:5c:d7:99:38: f5:d7:64:9d:c3:ee:c4:75:ba:81:8a:52:11:fe:fe: a1:13:d0:22:0e:b2:92:31:9e:63:f3:40:18:53:e5: c0:07:ba:ce:96:92:a1:28:ce:fc:d6:3b:ac:30:0f: b8:91:96:aa:d2:83:18:93:81:60:3b:96:f0:2f:66: 4e:3a:e4:98:ef:67:54:6e:25:e8:98:c3:80:7e:44: 51:ca:53:da:c1:8f:4c:28:fe:fb:49:1d:b5:61:1e: 49:c5:ec:8e:2a:8e:eb:0c:52:08:72:49:d5:f9:35: 93:bd:d6:d6:97:49:17:c7:c2:35:41:8f:1e:39:aa: 1a:22:d6:bf:94:df:6f:1c:98:ef:f7:7e:a2:9d:9b: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E1:10:C3:C4:E4:28:D8:D3:0A:52:B9:8F:AA:2C:AE:5D:84:8F:82 X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bc:be:3f:ea:c9:75:e4:a3:67:5f:bc:0f:ec:88:86:f3:73: db:3f:60:62:a3:6f:7e:61:4d:d2:10:c0:9a:7b:0e:00:2d:41: 6d:9b:67:4f:a0:57:41:3b:51:be:c0:d4:b2:7a:e8:2d:8f:76: c0:23:cf:a7:ca:a2:9b:dc:03:0b:b8:ef:f2:34:5d:52:3f:3c: 8c:40:c1:e1:24:2e:47:dd:20:e7:f4:56:74:6e:8c:7a:79:ee: 77:cf:2b:e4:72:ef:f9:48:28:55:1c:2c:08:4c:55:64:4c:d0: b9:37:4c:bb:ec:a4:6b:28:d7:72:ca:6a:7c:6d:63:27:e5:40: 66:0a:7d:39:9b:a6:2c:07:eb:20:07:e1:dd:47:cd:24:8e:92: dc:62:74:3d:62:15:c7:a8:18:f6:72:9c:b7:26:1e:f5:4b:27: 84:34:1a:a0:cc:ad:5f:dc:91:73:24:1d:b7:c1:f4:d2:3e:b9: bd:c4:d0:ef:51:d0:13:13:20:f3:50:7c:c1:9b:78:87:6f:4c: 9a:38:17:5c:fb:0a:66:77:cb:73:44:90:b4:f8:be:e9:03:5e: aa:28:85:50:60:92:91:5c:c4:0c:36:fd:2e:30:cb:14:f9:83: 8a:f9:ec:7e:d3:22:9a:3d:32:8f:e3:de:bf:d0:f2:7d:cc:c8: 61:53:e2:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXA9tj+2+OrH0pjtB+kmEbAZGwc4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTEyMDUyMjI2NDVaFw0yNTEyMDkwODMyNDVaMDMxMTAvBgNV BAMTKDVERTExMEMzQzRFNDI4RDhEMzBBNTJCOThGQUEyQ0FFNUQ4NDhGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHig9L0hZ9StskzAdoEm82n0W DRRdVgZhWDSPwUk1lg4U9vi7jJQUG0n3tbmqH9jkyn3Tz9GR4sRsvxoMYvVHaVfM jjiN681FlOEzhr0B97kLKrDiDs1/MQfxnSW6gjrMGEN7gvv+lKXo0GITNSaBnUto XNeZOPXXZJ3D7sR1uoGKUhH+/qET0CIOspIxnmPzQBhT5cAHus6WkqEozvzWO6ww D7iRlqrSgxiTgWA7lvAvZk465JjvZ1RuJeiYw4B+RFHKU9rBj0wo/vtJHbVhHknF 7I4qjusMUghySdX5NZO91taXSRfHwjVBjx45qhoi1r+U328cmO/3fqKdmxm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXeEQw8TkKNjTClK5j6osrl2Ej4IwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG68vj/qyXXko2dfvA/siIbzc9s/YGKjb35h TdIQwJp7DgAtQW2bZ0+gV0E7Ub7A1LJ66C2PdsAjz6fKopvcAwu47/I0XVI/PIxA weEkLkfdIOf0VnRujHp57nfPK+Ry7/lIKFUcLAhMVWRM0Lk3TLvspGso13LKanxt YyflQGYKfTmbpiwH6yAH4d1HzSSOktxidD1iFceoGPZynLcmHvVLJ4Q0GqDMrV/c kXMkHbfB9NI+ub3E0O9R0BMTIPNQfMGbeIdvTJo4F1z7CmZ3y3NEkLT4vukDXqoo hVBgkpFcxAw2/S4wyxT5g4r57H7TIpo9Mo/j3r/Q8n3MyGFT4pA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:55 2025 by rpki-client