This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft File: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft (raw, json) Hash identifier: f261ilVr7jXEORoN7yC+qr6j3HyRXhObFAuJ3bK38bc= Subject key identifier: D8:86:30:20:90:21:36:90:95:5D:F5:A3:BE:B8:5F:A0:DD:61:8D:15 Authority key identifier: 0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F Certificate issuer: /CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Certificate serial: 10B8DA5E1714B1B82C31D6760857EA08D124D5A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft Manifest number: 052D Signing time: Fri 05 Dec 2025 06:00:04 +0000 Manifest this update: Fri 05 Dec 2025 05:55:04 +0000 Manifest next update: Mon 08 Dec 2025 11:58:04 +0000 Files and hashes: 1: 0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl (hash: 0IR3GnYXw5S/i0c/FrQgIsNWg0/NGzKXgt7uo+m7bXk=) 2: 3130332e3134302e3130382e302f32342d3234203d3e203538333639.roa (hash: TU9zvXhzWTJdHe9aJGaZ4ESWd+R9UnSTLhOnKf2ldQw=) 3: 3130332e3134302e3130382e302f32332d3233203d3e203538333639.roa (hash: 3sAJshp+EPOwtrV5/4YJuemXpZyIihe64Jp+iK5G1jY=) 4: 3130332e3134302e3130392e302f32342d3234203d3e203538333639.roa (hash: BUjAtiDKImhm44uw2SFH6kSw2t9lwdf9XIcal9kQ1mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:b8:da:5e:17:14:b1:b8:2c:31:d6:76:08:57:ea:08:d1:24:d5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D5DCD544694BBE8DB99D2D8DAB98314745CD97F Validity Not Before: Dec 5 05:55:04 2025 GMT Not After : Dec 8 11:58:04 2025 GMT Subject: CN=D886302090213690955DF5A3BEB85FA0DD618D15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:c6:eb:c7:f9:5f:70:29:3b:55:0d:73:18: 8e:a9:50:0f:c1:1e:8d:b0:07:13:ea:65:5a:02:e8: 64:d5:70:4f:7f:b4:8e:76:e2:cc:f3:88:8b:03:a9: bc:37:f0:59:70:80:c2:1c:c8:d9:d4:82:09:87:7d: ca:a8:cd:5f:92:f9:c1:20:34:46:a0:3c:e9:b0:a9: f9:9c:29:7f:61:57:e1:43:fb:f1:64:fa:0c:d8:c9: b5:ac:a7:ae:14:4a:41:2a:82:77:e9:20:43:6f:02: 89:77:94:24:51:37:3f:bb:d0:6d:32:64:a8:f0:f8: 77:c7:8d:5e:42:3a:4c:49:f3:9e:b6:a6:45:55:5a: 1d:f8:37:c6:10:ed:94:bb:34:52:87:00:3f:41:01: 1e:77:58:94:f8:f7:b3:5a:dd:f8:48:3d:f5:df:7a: c8:dd:91:df:80:f1:05:94:af:6e:40:37:b3:ae:c0: 8a:6a:ec:f2:37:03:e8:ed:76:ac:f9:75:98:0c:92: 86:7f:29:41:a7:9c:b2:e2:ce:1b:2a:e1:03:85:5a: 64:78:d0:e9:26:12:ce:14:f3:b2:e4:ba:30:cf:37: 6e:07:0f:95:59:69:d7:20:ac:cf:4f:8a:a2:10:16: b3:06:97:10:05:a7:f0:5c:66:ba:31:cb:1b:ad:cb: ce:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:86:30:20:90:21:36:90:95:5D:F5:A3:BE:B8:5F:A0:DD:61:8D:15 X509v3 Authority Key Identifier: keyid:0D:5D:CD:54:46:94:BB:E8:DB:99:D2:D8:DA:B9:83:14:74:5C:D9:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a4a21b9-f912-41f3-b62c-1217581c948a/0/0D5DCD544694BBE8DB99D2D8DAB98314745CD97F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b1:b7:cb:56:99:50:a4:1f:f7:8f:b5:f5:eb:83:e1:74:22: 0c:ae:06:fe:ba:4a:81:8c:16:d6:23:a2:c0:87:aa:8f:21:c1: 40:fe:64:fa:c7:0d:bc:f8:2a:f1:98:4d:d6:7d:5f:3f:12:15: e5:af:8a:1a:eb:5a:00:52:e4:2d:d0:5a:27:34:73:5f:c0:50: 15:31:cc:06:20:5a:a3:76:09:9c:41:6d:d7:d0:19:e8:17:00: 18:e9:e7:c7:a3:b9:6f:98:30:b6:27:d6:02:51:c3:e9:82:dd: 27:07:d2:30:ac:f2:d6:42:a0:73:2d:fa:6a:5f:76:67:bc:02: 24:0c:ae:34:29:4d:7f:19:d0:20:c5:c8:5a:92:d4:ee:b0:9e: 91:ae:56:3d:59:45:f9:4c:96:f3:52:03:97:07:21:7d:89:f8: 6c:28:66:59:62:ed:9e:d9:ae:23:20:11:38:fc:73:08:f9:30: 37:bd:37:7f:50:29:95:40:ad:91:8c:f5:27:12:d5:38:cb:91: 19:67:27:1c:3b:60:6d:91:0e:48:c6:e4:de:37:d2:b7:72:ad: a6:f1:30:ca:1c:a2:51:38:78:a0:92:98:7e:a2:10:52:95:7b: e6:d2:48:9c:79:cf:51:9c:75:6c:8a:e7:8c:85:18:d9:7c:5a: 7c:3a:c9:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELjaXhcUsbgsMdZ2CFfqCNEk1aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3 NDVDRDk3RjAeFw0yNTEyMDUwNTU1MDRaFw0yNTEyMDgxMTU4MDRaMDMxMTAvBgNV BAMTKEQ4ODYzMDIwOTAyMTM2OTA5NTVERjVBM0JFQjg1RkEwREQ2MThEMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRMbrx/lfcCk7VQ1zGI6pUA/B Ho2wBxPqZVoC6GTVcE9/tI524szziIsDqbw38FlwgMIcyNnUggmHfcqozV+S+cEg NEagPOmwqfmcKX9hV+FD+/Fk+gzYybWsp64USkEqgnfpIENvAol3lCRRNz+70G0y ZKjw+HfHjV5COkxJ8562pkVVWh34N8YQ7ZS7NFKHAD9BAR53WJT497Na3fhIPfXf esjdkd+A8QWUr25AN7OuwIpq7PI3A+jtdqz5dZgMkoZ/KUGnnLLizhsq4QOFWmR4 0OkmEs4U87LkujDPN24HD5VZadcgrM9PiqIQFrMGlxAFp/BcZroxyxuty84NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2IYwIJAhNpCVXfWjvrhfoN1hjRUwHwYDVR0j BBgwFoAUDV3NVEaUu+jbmdLY2rmDFHRc2X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTRhMjFiOS1mOTEyLTQxZjMtYjYyYy0xMjE3NTgxYzk0OGEvMC8wRDVEQ0Q1NDQ2 OTRCQkU4REI5OUQyRDhEQUI5ODMxNDc0NUNEOTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgzMTQ3NDVD RDk3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE0YTIxYjktZjkxMi00MWYzLWI2 MmMtMTIxNzU4MWM5NDhhLzAvMEQ1RENENTQ0Njk0QkJFOERCOTlEMkQ4REFCOTgz MTQ3NDVDRDk3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqxt8tWmVCkH/ePtfXrg+F0IgyuBv66SoGM FtYjosCHqo8hwUD+ZPrHDbz4KvGYTdZ9Xz8SFeWvihrrWgBS5C3QWic0c1/AUBUx zAYgWqN2CZxBbdfQGegXABjp58ejuW+YMLYn1gJRw+mC3ScH0jCs8tZCoHMt+mpf dme8AiQMrjQpTX8Z0CDFyFqS1O6wnpGuVj1ZRflMlvNSA5cHIX2J+GwoZlli7Z7Z riMgETj8cwj5MDe9N39QKZVArZGM9ScS1TjLkRlnJxw7YG2RDkjG5N430rdyrabx MMocolE4eKCSmH6iEFKVe+bSSJx5z1GcdWyK54yFGNl8Wnw6yR0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:51 2025 by rpki-client