This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft File: D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft (raw, json) Hash identifier: nI8rsZEoe8Ay2Tgun8/RX5GyV6E1jljYSOA8EzykkOs= Subject key identifier: 98:E0:B9:DF:64:56:6A:1B:D9:BA:4E:BA:ED:72:FE:FE:EF:13:6C:0C Authority key identifier: D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 Certificate issuer: /CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Certificate serial: 29FFDAF91883433E20B68555BA78FAF49FCDA0F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft Manifest number: 021B Signing time: Sat 06 Dec 2025 19:21:13 +0000 Manifest this update: Sat 06 Dec 2025 19:16:13 +0000 Manifest next update: Tue 09 Dec 2025 23:26:13 +0000 Files and hashes: 1: D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl (hash: qZAdSKoBlxAF2eCiMDxybZkjna1LQoP1gojU39KRKUM=) 2: 3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (hash: 6UhOGV8DI7PfyTejWhCSmpLpe0trLgn56lREPd3WDVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ff:da:f9:18:83:43:3e:20:b6:85:55:ba:78:fa:f4:9f:cd:a0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4171C4C06975A4309FC59F2D340D6801EC26DD1 Validity Not Before: Dec 6 19:16:13 2025 GMT Not After : Dec 9 23:26:13 2025 GMT Subject: CN=98E0B9DF64566A1BD9BA4EBAED72FEFEEF136C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e7:e3:66:59:5a:53:27:b6:88:1c:2e:ba:a5: b9:4f:60:e9:60:20:a7:84:26:37:57:09:e0:6f:00: 0a:55:10:64:9b:70:6f:56:9e:28:97:22:a9:5f:83: a3:ae:f9:e6:84:e2:63:05:b0:8f:f8:e6:e8:c9:b5: 4d:6b:08:b8:47:53:f8:bd:26:8b:fa:78:f6:08:73: af:5b:6c:e6:5e:61:52:a1:a6:ef:f0:e3:77:d6:59: 02:2e:3d:01:86:b1:c0:bd:08:7c:81:46:37:b4:46: ae:86:be:2d:57:93:18:7d:44:b6:d5:31:6f:41:d0: 56:c0:f4:75:90:c7:8c:d1:33:0d:a7:fc:f5:f7:a8: 89:c7:af:58:75:b4:08:d2:d2:79:91:58:b6:1e:4b: 16:45:b3:94:9d:32:43:12:32:6e:c5:d5:87:82:e0: 1a:bc:2e:f1:a4:ae:ac:11:b7:bc:d3:01:60:a7:3e: 4c:17:67:74:de:dc:78:a3:d1:9a:d3:d1:06:1c:ef: 2d:24:14:38:0d:02:5e:be:65:6a:58:9a:5d:1c:4b: 4b:98:a0:b8:dd:76:3c:34:18:b7:06:cd:a0:d3:1d: 35:e5:68:55:df:8f:46:7b:21:ab:65:9c:57:89:29: 72:e4:19:59:e3:f7:3e:36:6e:7d:03:a8:ca:a8:02: 78:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E0:B9:DF:64:56:6A:1B:D9:BA:4E:BA:ED:72:FE:FE:EF:13:6C:0C X509v3 Authority Key Identifier: keyid:D4:17:1C:4C:06:97:5A:43:09:FC:59:F2:D3:40:D6:80:1E:C2:6D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4171C4C06975A4309FC59F2D340D6801EC26DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/D4171C4C06975A4309FC59F2D340D6801EC26DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b4:51:11:14:e2:b9:8a:d6:1b:28:61:6f:50:f1:7f:15:d2: b5:4f:2b:e6:f8:57:ad:ef:aa:66:8a:dd:02:2b:5c:f6:74:76: e8:40:54:09:e8:c8:38:65:e3:b8:18:f3:a8:83:51:7e:56:ca: 9e:49:21:fa:22:a6:84:30:ba:79:24:d2:29:9a:d0:8f:be:6e: d8:60:d4:28:41:7d:45:4c:45:27:bd:7c:1b:12:7d:46:00:fd: 7e:86:6a:03:11:d5:ca:53:1f:8e:c6:e2:5e:f7:c6:f2:a1:a7: 43:98:59:3f:7a:77:2d:d0:29:61:15:d5:39:dd:c9:99:a2:45: 3a:2c:39:be:25:20:ab:a1:75:08:80:d2:e9:8c:a1:e8:13:d3: d3:81:b6:dd:f5:81:d0:7f:e1:07:4e:e6:c0:27:fd:db:7a:b7: e9:39:5a:0b:c8:b2:1b:a4:42:0c:f4:7b:5d:1a:9d:ce:66:d8: 7e:ae:95:9c:9c:2f:0b:ca:8d:42:f1:0b:cd:2d:68:21:5a:03: 5e:36:bb:7f:5a:ff:8a:f1:91:ee:ef:1c:5a:46:8c:11:09:66: db:da:8d:60:a9:86:40:fe:0d:07:c8:54:b6:61:07:01:4c:98: 77:4d:a7:78:9d:78:aa:80:f1:bb:06:e8:ad:a7:53:13:ec:56: ad:09:09:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKf/a+RiDQz4gtoVVunj69J/NoPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAx RUMyNkREMTAeFw0yNTEyMDYxOTE2MTNaFw0yNTEyMDkyMzI2MTNaMDMxMTAvBgNV BAMTKDk4RTBCOURGNjQ1NjZBMUJEOUJBNEVCQUVENzJGRUZFRUYxMzZDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY5+NmWVpTJ7aIHC66pblPYOlg IKeEJjdXCeBvAApVEGSbcG9WniiXIqlfg6Ou+eaE4mMFsI/45ujJtU1rCLhHU/i9 Jov6ePYIc69bbOZeYVKhpu/w43fWWQIuPQGGscC9CHyBRje0Rq6Gvi1Xkxh9RLbV MW9B0FbA9HWQx4zRMw2n/PX3qInHr1h1tAjS0nmRWLYeSxZFs5SdMkMSMm7F1YeC 4Bq8LvGkrqwRt7zTAWCnPkwXZ3Te3Hij0ZrT0QYc7y0kFDgNAl6+ZWpYml0cS0uY oLjddjw0GLcGzaDTHTXlaFXfj0Z7IatlnFeJKXLkGVnj9z42bn0DqMqoAnjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmOC532RWahvZuk667XL+/u8TbAwwHwYDVR0j BBgwFoAU1BccTAaXWkMJ/Fny00DWgB7CbdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzY4MGQwZC1lMjQwLTRhYWYtYmMyMy0yODIzNTkzNzMyODkvMC9ENDE3MUM0QzA2 OTc1QTQzMDlGQzU5RjJEMzQwRDY4MDFFQzI2REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2ODAxRUMy NkREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDc2ODBkMGQtZTI0MC00YWFmLWJj MjMtMjgyMzU5MzczMjg5LzAvRDQxNzFDNEMwNjk3NUE0MzA5RkM1OUYyRDM0MEQ2 ODAxRUMyNkREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK0UREU4rmK1hsoYW9Q8X8V0rVPK+b4V63v qmaK3QIrXPZ0duhAVAnoyDhl47gY86iDUX5Wyp5JIfoipoQwunkk0ima0I++bthg 1ChBfUVMRSe9fBsSfUYA/X6GagMR1cpTH47G4l73xvKhp0OYWT96dy3QKWEV1Tnd yZmiRTosOb4lIKuhdQiA0umMoegT09OBtt31gdB/4QdO5sAn/dt6t+k5WgvIshuk Qgz0e10anc5m2H6ulZycLwvKjULxC80taCFaA142u39a/4rxke7vHFpGjBEJZtva jWCphkD+DQfIVLZhBwFMmHdNp3ideKqA8bsG6K2nUxPsVq0JCQw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:28 2025 by rpki-client