This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft File: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft (raw, json) Hash identifier: SDjuF8R7ujSy6CmN7azMfTNXeLk+fiK0iRD9U/C/sWk= Subject key identifier: 92:5C:F0:68:CB:F2:5C:8F:9E:95:01:9E:DF:AD:B5:92:C2:AB:DC:25 Authority key identifier: DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C Certificate issuer: /CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Certificate serial: 657C747555FEE0C178D384F280BDB5C8727E48DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft Manifest number: AA Signing time: Fri 05 Dec 2025 23:41:42 +0000 Manifest this update: Fri 05 Dec 2025 23:36:42 +0000 Manifest next update: Tue 09 Dec 2025 11:25:42 +0000 Files and hashes: 1: DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl (hash: +c5bs7T3k1JyJd6VOtHwGt5UQ8LKT/Y7nSOmL0FVseA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:7c:74:75:55:fe:e0:c1:78:d3:84:f2:80:bd:b5:c8:72:7e:48:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C Validity Not Before: Dec 5 23:36:42 2025 GMT Not After : Dec 9 11:25:42 2025 GMT Subject: CN=925CF068CBF25C8F9E95019EDFADB592C2ABDC25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:2b:67:c9:ce:4f:ef:c5:58:6c:5b:97:73: 5e:0e:c3:b5:4e:98:8d:2a:56:8b:70:84:8c:69:a9: 34:cb:00:55:18:11:79:77:45:86:1b:00:7e:69:65: 3e:07:55:ad:9d:bf:c0:1f:19:73:8b:92:fd:e2:13: 59:e2:39:36:4e:95:2d:80:46:0d:ff:f4:cc:a0:5b: 80:9a:b3:a6:40:90:c6:26:25:28:a2:8b:96:76:39: 4d:b0:4f:98:06:df:50:48:5e:66:58:0b:83:67:a6: 22:77:3b:29:6c:35:7d:83:83:37:8d:f2:83:62:63: 84:ee:28:17:13:68:e5:e0:1d:78:43:cc:6d:10:de: c7:9c:69:63:d2:5e:60:4f:e8:13:89:8e:b2:96:7b: ec:c8:13:33:61:25:c2:dc:65:61:6c:c8:1b:1a:73: ef:e9:62:53:48:4c:44:df:4a:2c:a0:32:ff:93:8e: b4:33:e8:0b:27:f0:bf:0e:f4:ab:37:e3:8c:6b:a5: ca:e5:ae:b8:31:3b:a5:8c:04:58:70:99:f6:8b:35: ca:8c:57:38:27:ed:94:be:13:39:a0:f4:65:4e:d3: 25:d3:4f:af:e0:82:48:54:c5:de:73:29:c6:92:14: fe:9b:69:1e:b0:5b:c8:e1:ce:ff:d5:ed:99:00:df: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5C:F0:68:CB:F2:5C:8F:9E:95:01:9E:DF:AD:B5:92:C2:AB:DC:25 X509v3 Authority Key Identifier: keyid:DD:E6:AD:13:09:7A:5B:5A:4A:46:73:90:8C:84:F4:C8:9D:2E:CF:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/1/DDE6AD13097A5B5A4A4673908C84F4C89D2ECF7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:90:8d:5f:d6:d6:e7:59:f7:e9:cb:b4:46:e8:c4:7a:d7:91: 3e:9c:60:7a:8f:1a:40:c7:4d:67:d8:8f:a6:5f:f2:2b:f4:16: d7:43:a2:ca:39:d2:9a:34:5c:e3:b9:33:d8:a6:0f:ea:7b:41: 65:98:1e:1c:b8:eb:4d:fa:7f:ae:10:f2:c6:57:e3:f7:3a:37: 11:39:1b:19:3f:46:5c:59:ca:c9:89:6d:26:64:6f:b5:aa:61: 6e:df:ca:6d:90:86:de:6c:d2:ee:af:09:9b:aa:79:f3:69:43: 67:3c:00:1f:4e:c9:c8:4d:13:1a:27:e7:a2:15:69:24:cc:01: ea:c4:a0:d5:85:e7:8d:67:be:c9:ec:f7:a8:76:9e:16:02:7e: 29:01:d3:d3:01:20:39:61:37:81:26:1b:5a:5a:2b:93:63:dc: a2:88:9d:b4:12:8d:73:81:fc:d6:fe:20:d2:16:63:ec:b4:1f: ed:6b:7e:e8:f6:ca:d6:2a:27:36:6c:2a:02:6e:01:69:d5:0a: c3:dc:d1:70:28:6c:9c:12:66:e8:96:41:4e:07:e7:0f:67:97: 7c:7d:1c:84:25:58:25:82:9f:b0:63:87:9e:77:fd:55:84:8d: 9d:ea:cc:e9:e5:6b:83:28:60:1b:db:9f:e3:1b:f4:54:6f:95: 3f:00:81:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZXx0dVX+4MF404TygL21yHJ+SN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5 RDJFQ0Y3QzAeFw0yNTEyMDUyMzM2NDJaFw0yNTEyMDkxMTI1NDJaMDMxMTAvBgNV BAMTKDkyNUNGMDY4Q0JGMjVDOEY5RTk1MDE5RURGQURCNTkyQzJBQkRDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnCtnyc5P78VYbFuXc14Ow7VO mI0qVotwhIxpqTTLAFUYEXl3RYYbAH5pZT4HVa2dv8AfGXOLkv3iE1niOTZOlS2A Rg3/9MygW4Cas6ZAkMYmJSiii5Z2OU2wT5gG31BIXmZYC4NnpiJ3OylsNX2DgzeN 8oNiY4TuKBcTaOXgHXhDzG0Q3secaWPSXmBP6BOJjrKWe+zIEzNhJcLcZWFsyBsa c+/pYlNITETfSiygMv+TjrQz6Asn8L8O9Ks344xrpcrlrrgxO6WMBFhwmfaLNcqM Vzgn7ZS+Ezmg9GVO0yXTT6/ggkhUxd5zKcaSFP6baR6wW8jhzv/V7ZkA39XLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUklzwaMvyXI+elQGe3621ksKr3CUwHwYDVR0j BBgwFoAU3eatEwl6W1pKRnOQjIT0yJ0uz3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMS9EREU2QUQxMzA5 N0E1QjVBNEE0NjczOTA4Qzg0RjRDODlEMkVDRjdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0Qzg5RDJF Q0Y3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzEvRERFNkFEMTMwOTdBNUI1QTRBNDY3MzkwOEM4NEY0 Qzg5RDJFQ0Y3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSQjV/W1udZ9+nLtEboxHrXkT6cYHqPGkDH TWfYj6Zf8iv0FtdDoso50po0XOO5M9imD+p7QWWYHhy46036f64Q8sZX4/c6NxE5 Gxk/RlxZysmJbSZkb7WqYW7fym2Qht5s0u6vCZuqefNpQ2c8AB9OychNExon56IV aSTMAerEoNWF541nvsns96h2nhYCfikB09MBIDlhN4EmG1paK5Nj3KKInbQSjXOB /Nb+INIWY+y0H+1rfuj2ytYqJzZsKgJuAWnVCsPc0XAobJwSZuiWQU4H5w9nl3x9 HIQlWCWCn7Bjh553/VWEjZ3qzOnla4MoYBvbn+Mb9FRvlT8AgYI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:09 2025 by rpki-client