This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft File: D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json) Hash identifier: TqttPCwxmtr5KEmdprxK/hP9wRQiDEoStp0ReTS+LvY= Subject key identifier: FB:51:F9:4B:EE:F1:A7:64:32:E1:F1:91:77:3F:D4:8F:81:48:B5:B2 Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 Certificate issuer: /CN=D6729321F95E264CBE7373469790C77F8B57E268 Certificate serial: 533CE98A649C273E683AB3F8F24DB68EBC097B71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft Manifest number: 02D8 Signing time: Fri 05 Dec 2025 13:00:00 +0000 Manifest this update: Fri 05 Dec 2025 12:55:00 +0000 Manifest next update: Mon 08 Dec 2025 15:53:00 +0000 Files and hashes: 1: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: NlWIcKh3FkOe7ho+6skD68O6GlHm2CrEKAPzOqBl0Ps=) 2: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: h9HWpUZjqwuAaP7uxV6EjM70C86M9FZJ3xzAzgOHeaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3c:e9:8a:64:9c:27:3e:68:3a:b3:f8:f2:4d:b6:8e:bc:09:7b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268 Validity Not Before: Dec 5 12:55:00 2025 GMT Not After : Dec 8 15:53:00 2025 GMT Subject: CN=FB51F94BEEF1A76432E1F191773FD48F8148B5B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:b6:d7:c9:e0:2e:de:13:8c:9e:14:48:74: 4c:31:b4:f4:9d:5f:5a:f0:14:85:cc:a1:12:a3:c7: 29:1d:47:6a:84:47:21:68:86:b4:7a:ea:fb:b5:ae: 2f:11:69:eb:b6:b1:3c:93:db:91:41:33:1b:c5:7a: 73:1e:a8:74:54:30:d8:ec:d3:2f:50:97:1a:ca:7b: 69:1e:97:65:17:ca:36:91:0e:71:be:d9:c2:62:6d: ee:82:38:17:69:7f:78:b9:40:7b:e4:d3:53:32:4c: 4d:d4:a3:f2:c0:d7:56:ca:7f:7a:19:83:3a:f6:12: c6:61:58:ee:e4:3e:82:b9:df:2c:df:33:a2:0b:00: ac:f3:bd:c2:df:91:8f:cf:a5:9f:a7:f9:ca:93:2c: f0:dc:8c:f4:51:c8:62:5a:0c:0a:ba:d1:02:8f:3d: 25:eb:3d:79:10:a6:67:46:b7:18:dd:c1:22:6d:d8: da:10:23:f0:41:b5:22:39:d9:ab:74:33:bf:1e:fd: 51:d2:81:a7:2e:26:4a:96:ec:e6:b3:1a:c9:35:a3: 01:01:d0:84:54:90:ac:40:ea:b5:1d:67:58:64:f9: 6c:ca:53:52:aa:b1:a7:fc:7b:52:54:b1:f2:a5:2f: a8:02:6a:bc:c3:8a:67:e0:89:de:1a:8b:70:c1:7c: 5a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:51:F9:4B:EE:F1:A7:64:32:E1:F1:91:77:3F:D4:8F:81:48:B5:B2 X509v3 Authority Key Identifier: keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:69:b8:19:fe:57:d0:78:e6:fa:a8:a2:8b:b4:cc:d0:0d:1b: 2d:13:6a:7c:6b:96:21:f5:7e:41:b5:aa:61:84:b4:79:58:cd: 38:f9:a9:b0:45:48:15:7b:d8:ed:ab:e7:50:37:a3:2f:8a:4f: 9e:fb:c7:86:8e:08:1a:92:2e:49:c1:9c:32:1c:b6:d1:e3:7f: fe:f3:dd:8c:02:75:3f:8f:f6:d2:27:ab:30:3c:93:aa:a7:85: ae:35:5f:99:4a:98:88:e6:66:fe:3f:86:62:c2:a2:dc:75:94: 76:db:75:0e:77:da:ab:96:66:5f:26:99:a6:15:cb:c7:b7:63: 62:70:90:b1:87:8a:8e:fd:fc:d9:ba:97:77:57:a9:c1:4c:63: d1:8d:58:2f:d9:92:62:b1:8e:e4:90:dc:be:c2:91:f0:63:6f: eb:72:df:9c:96:16:e5:51:41:21:43:cb:ce:ef:e8:b7:83:b0: 47:07:a6:5e:fb:2d:1b:43:ba:03:b8:2e:12:65:0e:04:af:d0: db:62:f9:f9:12:cf:d9:5b:33:51:0f:57:26:a4:d5:f9:3e:4e: d7:ee:58:6f:78:47:f9:50:96:c0:b1:c8:99:43:70:fc:54:b9: cc:24:6f:2d:ac:d1:38:cf:41:75:30:1f:03:cd:92:15:cc:d9: 13:f8:78:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzzpimScJz5oOrP48k22jrwJe3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4 QjU3RTI2ODAeFw0yNTEyMDUxMjU1MDBaFw0yNTEyMDgxNTUzMDBaMDMxMTAvBgNV BAMTKEZCNTFGOTRCRUVGMUE3NjQzMkUxRjE5MTc3M0ZENDhGODE0OEI1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2rbXyeAu3hOMnhRIdEwxtPSd X1rwFIXMoRKjxykdR2qERyFohrR66vu1ri8Raeu2sTyT25FBMxvFenMeqHRUMNjs 0y9QlxrKe2kel2UXyjaRDnG+2cJibe6COBdpf3i5QHvk01MyTE3Uo/LA11bKf3oZ gzr2EsZhWO7kPoK53yzfM6ILAKzzvcLfkY/PpZ+n+cqTLPDcjPRRyGJaDAq60QKP PSXrPXkQpmdGtxjdwSJt2NoQI/BBtSI52at0M78e/VHSgacuJkqW7OazGsk1owEB 0IRUkKxA6rUdZ1hk+WzKU1Kqsaf8e1JUsfKlL6gCarzDimfgid4ai3DBfFqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+1H5S+7xp2Qy4fGRdz/Uj4FItbIwHwYDVR0j BBgwFoAU1nKTIfleJky+c3NGl5DHf4tX4mgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RjZjBhNC1hZDFiLTRiNzItODQwZi0xZjRhODA3ZjY1OTQvMC9ENjcyOTMyMUY5 NUUyNjRDQkU3MzczNDY5NzkwQzc3RjhCNTdFMjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4QjU3 RTI2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkY2YwYTQtYWQxYi00YjcyLTg0 MGYtMWY0YTgwN2Y2NTk0LzAvRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3 N0Y4QjU3RTI2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5puBn+V9B45vqooou0zNANGy0TanxrliH1 fkG1qmGEtHlYzTj5qbBFSBV72O2r51A3oy+KT577x4aOCBqSLknBnDIcttHjf/7z 3YwCdT+P9tInqzA8k6qnha41X5lKmIjmZv4/hmLCotx1lHbbdQ532quWZl8mmaYV y8e3Y2JwkLGHio79/Nm6l3dXqcFMY9GNWC/ZkmKxjuSQ3L7CkfBjb+ty35yWFuVR QSFDy87v6LeDsEcHpl77LRtDugO4LhJlDgSv0Nti+fkSz9lbM1EPVyak1fk+Ttfu WG94R/lQlsCxyJlDcPxUucwkby2s0TjPQXUwHwPNkhXM2RP4eAg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:57 2025 by rpki-client