This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft File: 04D3D2E060243AD917D4F682922E4A805EDE3300.mft (raw, json) Hash identifier: E7rDD0+pa+s/Iuy1O1Q3vHjCi+cH15A74D/O4jU8V1k= Subject key identifier: 20:A9:9A:B5:55:C8:68:68:81:4F:97:15:94:19:5D:78:9E:E0:00:87 Authority key identifier: 04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 Certificate issuer: /CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Certificate serial: 227A4381A3790E973A94F13C608889AE27F9C1A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft Manifest number: FD Signing time: Thu 04 Dec 2025 18:22:01 +0000 Manifest this update: Thu 04 Dec 2025 18:17:01 +0000 Manifest next update: Sun 07 Dec 2025 19:04:01 +0000 Files and hashes: 1: 3135372e32302e3235332e302f32342d3234203d3e20313338303839.roa (hash: MxcV0VQaTxMuBGbZxjauXv5QA5Vg8BL6BVoMBR3myP8=) 2: 3135372e32302e3235322e302f32332d3233203d3e20313338303839.roa (hash: UvJvnJi0DpPbEtS7oOVZoco+ytQPNHRypimtkzre3+M=) 3: 04D3D2E060243AD917D4F682922E4A805EDE3300.crl (hash: GMDW7SC/Pcx0hnfclm7+0bKs5ji9zpff+BAupgwAXlU=) 4: 3135372e32302e3235322e302f32342d3234203d3e20313338303839.roa (hash: tAOR3+qopwEEpOJ1MoufsE4Gb6QgCqX7uwexYPM3lns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 19:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7a:43:81:a3:79:0e:97:3a:94:f1:3c:60:88:89:ae:27:f9:c1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04D3D2E060243AD917D4F682922E4A805EDE3300 Validity Not Before: Dec 4 18:17:01 2025 GMT Not After : Dec 7 19:04:01 2025 GMT Subject: CN=20A99AB555C86868814F971594195D789EE00087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c8:5f:7a:be:e3:10:15:ae:9e:2a:41:63:1f: f6:0f:25:1f:cf:8d:8b:ae:83:4d:c0:11:66:9a:3c: d7:24:0e:0a:7b:83:67:f8:e7:b9:5c:ac:88:b9:63: 14:b0:85:6b:12:c6:e4:11:e8:81:68:81:db:ca:28: dd:15:50:bb:49:bc:6c:8f:8c:8f:10:c0:a5:55:3f: c4:2c:28:af:ef:0c:c1:64:53:6f:f4:a8:45:6b:34: 89:a6:57:aa:df:c7:19:84:3c:02:6d:41:de:d9:27: e6:bf:72:c6:65:49:c6:7d:e4:df:98:b4:8f:87:3c: af:bf:c1:d5:8c:33:bd:7d:65:89:06:c6:31:0e:01: e7:75:fa:21:40:9e:18:44:ff:3a:0c:31:31:89:3d: f0:5f:9d:27:eb:b9:7b:1d:45:24:83:81:b6:ed:3a: 39:7f:c5:4e:fa:96:7d:be:75:e9:4d:50:9f:79:dd: 03:2d:3c:20:9c:8f:07:22:55:63:70:57:45:f3:5b: 77:90:69:5e:0c:8d:2b:2d:26:1d:f3:ee:88:a7:da: 7c:d1:21:52:d3:bc:c1:d0:2f:b5:c2:65:22:64:71: e0:50:38:ad:7b:b3:9c:94:7f:13:0d:83:a2:1f:c0: df:5e:9f:03:98:e7:4a:6e:ad:7c:0f:a1:4d:b0:27: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A9:9A:B5:55:C8:68:68:81:4F:97:15:94:19:5D:78:9E:E0:00:87 X509v3 Authority Key Identifier: keyid:04:D3:D2:E0:60:24:3A:D9:17:D4:F6:82:92:2E:4A:80:5E:DE:33:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/04D3D2E060243AD917D4F682922E4A805EDE3300.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e8d58a8-e197-4179-b73c-608e047d09a3/0/04D3D2E060243AD917D4F682922E4A805EDE3300.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ed:ee:2f:32:27:65:e0:24:92:ed:dc:a2:03:38:d5:32:b3: c8:2c:33:65:24:5c:0c:01:21:5b:02:1c:31:cd:e4:d4:89:fd: bf:a1:0f:93:e2:c7:49:24:c9:3f:9f:45:60:c3:fe:95:1a:25: 01:77:25:e7:ef:7b:e1:d4:41:15:ac:d0:28:b1:f6:4a:ba:87: aa:6d:90:69:c1:83:60:71:4d:c5:fa:69:fb:3b:09:db:d2:2d: 25:c3:52:31:0a:71:03:d9:b4:c3:03:20:bf:45:9b:24:2d:b9: 8d:cb:f2:2e:70:63:a1:77:3d:6c:31:6d:94:a6:0b:7d:ec:0c: 02:12:0a:e2:84:8e:bb:f6:9b:c1:a6:d9:e1:7f:0b:27:16:c5: 9b:4c:a5:76:e8:2f:9d:7a:fc:66:d0:a2:f6:95:56:1c:6c:71: 7b:38:2c:96:20:82:51:4c:b7:2d:86:7c:f7:2f:1a:22:80:8b: e9:f3:21:e3:2c:55:f1:f2:e0:6f:2e:8b:d4:9a:1c:88:43:bf: bd:08:01:2c:59:81:2c:22:ef:d9:69:c4:33:51:11:65:40:51: b1:78:3f:ad:65:03:ab:33:4f:44:54:ec:f6:c2:3d:24:9f:fb: 59:d0:1a:6c:41:13:59:b6:f8:2c:06:79:78:42:c4:5c:2d:44: 32:10:fc:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInpDgaN5Dpc6lPE8YIiJrif5waMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1 RURFMzMwMDAeFw0yNTEyMDQxODE3MDFaFw0yNTEyMDcxOTA0MDFaMDMxMTAvBgNV BAMTKDIwQTk5QUI1NTVDODY4Njg4MTRGOTcxNTk0MTk1RDc4OUVFMDAwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2yF96vuMQFa6eKkFjH/YPJR/P jYuug03AEWaaPNckDgp7g2f457lcrIi5YxSwhWsSxuQR6IFogdvKKN0VULtJvGyP jI8QwKVVP8QsKK/vDMFkU2/0qEVrNImmV6rfxxmEPAJtQd7ZJ+a/csZlScZ95N+Y tI+HPK+/wdWMM719ZYkGxjEOAed1+iFAnhhE/zoMMTGJPfBfnSfruXsdRSSDgbbt Ojl/xU76ln2+delNUJ953QMtPCCcjwciVWNwV0XzW3eQaV4MjSstJh3z7oin2nzR IVLTvMHQL7XCZSJkceBQOK17s5yUfxMNg6IfwN9enwOY50purXwPoU2wJ6AvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIKmatVXIaGiBT5cVlBldeJ7gAIcwHwYDVR0j BBgwFoAUBNPS4GAkOtkX1PaCki5KgF7eMwAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZThkNThhOC1lMTk3LTQxNzktYjczYy02MDhlMDQ3ZDA5YTMvMC8wNEQzRDJFMDYw MjQzQUQ5MTdENEY2ODI5MjJFNEE4MDVFREUzMzAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRBODA1RURF MzMwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU4ZDU4YTgtZTE5Ny00MTc5LWI3 M2MtNjA4ZTA0N2QwOWEzLzAvMDREM0QyRTA2MDI0M0FEOTE3RDRGNjgyOTIyRTRB ODA1RURFMzMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3t7i8yJ2XgJJLt3KIDONUys8gsM2UkXAwB IVsCHDHN5NSJ/b+hD5Pix0kkyT+fRWDD/pUaJQF3Jefve+HUQRWs0Cix9kq6h6pt kGnBg2BxTcX6afs7CdvSLSXDUjEKcQPZtMMDIL9FmyQtuY3L8i5wY6F3PWwxbZSm C33sDAISCuKEjrv2m8Gm2eF/CycWxZtMpXboL516/GbQovaVVhxscXs4LJYgglFM ty2GfPcvGiKAi+nzIeMsVfHy4G8ui9SaHIhDv70IASxZgSwi79lpxDNREWVAUbF4 P61lA6szT0RU7PbCPSSf+1nQGmxBE1m2+CwGeXhCxFwtRDIQ/Oc= -----END CERTIFICATE-----Generated at Sat Dec 6 17:53:34 2025 by rpki-client