This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: t+KwuVzd5YdXXp0cEzsl3v4aK0xjVjBTGKW/jgtIW5w= Subject key identifier: 3B:33:53:83:24:CE:6D:18:42:7B:A4:2C:D0:C2:A1:2C:48:6C:4C:8B Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 5125AD79BB5C46F393203898846A79D7BB50A6E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 01EF Signing time: Sat 06 Dec 2025 21:21:40 +0000 Manifest this update: Sat 06 Dec 2025 21:16:40 +0000 Manifest next update: Tue 09 Dec 2025 23:23:40 +0000 Files and hashes: 1: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: oG6Z5n7PBLWQXwObHyq0fNY8hlk/dgSiks250RxETxo=) 2: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: OTjo8BebxWTbkp9GU3iAS1zsIPT/ddc2EIBTTW4OZO8=) 3: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: XIO/+nSZhKej3jMnOjZbsCNK4K1ZrGVSBexuH2tpC2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:25:ad:79:bb:5c:46:f3:93:20:38:98:84:6a:79:d7:bb:50:a6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Dec 6 21:16:40 2025 GMT Not After : Dec 9 23:23:40 2025 GMT Subject: CN=3B33538324CE6D18427BA42CD0C2A12C486C4C8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:7e:12:c7:0f:2b:de:11:5e:a2:d2:9c:92: a7:90:3b:96:b3:b5:20:bb:5d:6e:79:d6:e1:80:ff: 9c:70:51:4d:fa:8f:2c:d7:05:ea:a5:a2:7c:78:0c: 99:00:34:2d:7f:37:03:2c:57:bf:0a:e3:e8:e1:7f: fa:19:98:0d:b6:1d:92:48:b3:f9:b1:a0:ce:0f:b0: 8c:e4:ef:41:36:33:78:36:18:b8:74:2c:36:d4:80: b6:51:d0:9e:3c:3b:d3:90:6e:32:be:e3:b9:41:ef: a9:08:39:5f:fe:95:1f:51:12:03:d4:1b:57:ac:0b: f6:a1:d7:17:f0:e5:29:f7:b6:0c:33:cd:41:0a:73: a5:e8:7b:ad:2a:53:1b:de:96:37:2d:74:ff:31:b3: 87:1b:1e:87:30:e3:da:fa:5c:0e:ec:44:62:7c:ae: b2:fa:bc:b6:4f:66:04:fd:fe:e0:ae:46:68:7f:03: 1b:bc:8c:ee:ab:80:81:17:48:25:ad:ee:d8:f4:25: 31:f8:22:ef:5c:2c:b5:ee:f6:91:23:d3:7b:f8:eb: 67:8f:17:ac:7f:89:f3:e9:7a:76:e0:a1:7d:b6:fd: a2:ec:63:0a:5c:9e:67:35:d9:9f:6f:be:b3:83:0f: fd:f0:e4:e5:b5:e9:05:30:ce:e6:69:5d:46:e0:6e: 62:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:33:53:83:24:CE:6D:18:42:7B:A4:2C:D0:C2:A1:2C:48:6C:4C:8B X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:08:07:95:c4:fc:33:9a:b6:b5:e8:d1:67:80:21:d1:a3:9e: e1:77:06:25:aa:06:67:cb:11:7a:a6:a8:ad:80:8e:c1:b3:53: 2e:eb:6f:17:da:40:b4:56:65:c1:8a:ce:1a:5a:35:0e:56:20: 94:4c:48:4e:d5:1c:59:9b:46:cf:d5:2b:12:ff:86:f1:ad:4d: 89:8f:96:30:c2:13:78:6d:3a:13:3b:67:a3:fe:61:cc:6d:bb: e5:8b:07:c9:3c:5d:90:16:c0:0b:cd:a4:db:cb:07:f5:5a:59: 44:71:27:0a:e8:97:eb:1a:ea:33:f6:ce:47:f3:62:93:de:d5: 6f:e7:5b:1e:f8:a1:67:42:4a:c5:26:da:d0:86:ae:ad:0b:1f: 3c:83:a1:dd:9c:3f:94:00:3c:5a:9f:2e:4c:19:74:86:ba:08: fb:d3:d1:d1:a6:c4:14:67:27:5b:04:43:11:53:ad:f4:ee:13: a7:9a:e7:ae:b0:72:9c:b1:6a:36:e9:01:96:a5:8a:93:03:51: f0:b2:86:12:66:2c:ef:61:81:d6:b1:72:fd:d0:10:63:a5:15: 8b:f5:0c:82:81:0e:bb:75:b7:99:38:8b:6c:4f:37:58:d1:9c: 7f:65:03:37:13:62:a2:f7:b0:5f:60:a6:92:60:8a:6d:2e:7f: e7:d5:f0:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUSWtebtcRvOTIDiYhGp517tQpuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTEyMDYyMTE2NDBaFw0yNTEyMDkyMzIzNDBaMDMxMTAvBgNV BAMTKDNCMzM1MzgzMjRDRTZEMTg0MjdCQTQyQ0QwQzJBMTJDNDg2QzRDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Tn4Sxw8r3hFeotKckqeQO5az tSC7XW551uGA/5xwUU36jyzXBeqlonx4DJkANC1/NwMsV78K4+jhf/oZmA22HZJI s/mxoM4PsIzk70E2M3g2GLh0LDbUgLZR0J48O9OQbjK+47lB76kIOV/+lR9REgPU G1esC/ah1xfw5Sn3tgwzzUEKc6Xoe60qUxveljctdP8xs4cbHocw49r6XA7sRGJ8 rrL6vLZPZgT9/uCuRmh/Axu8jO6rgIEXSCWt7tj0JTH4Iu9cLLXu9pEj03v462eP F6x/ifPpenbgoX22/aLsYwpcnmc12Z9vvrODD/3w5OW16QUwzuZpXUbgbmI3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOzNTgyTObRhCe6Qs0MKhLEhsTIswHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0IB5XE/DOatrXo0WeAIdGjnuF3BiWqBmfL EXqmqK2AjsGzUy7rbxfaQLRWZcGKzhpaNQ5WIJRMSE7VHFmbRs/VKxL/hvGtTYmP ljDCE3htOhM7Z6P+Ycxtu+WLB8k8XZAWwAvNpNvLB/VaWURxJwrol+sa6jP2zkfz YpPe1W/nWx74oWdCSsUm2tCGrq0LHzyDod2cP5QAPFqfLkwZdIa6CPvT0dGmxBRn J1sEQxFTrfTuE6ea566wcpyxajbpAZalipMDUfCyhhJmLO9hgdaxcv3QEGOlFYv1 DIKBDrt1t5k4i2xPN1jRnH9lAzcTYqL3sF9gppJgim0uf+fV8Dg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:27 2025 by rpki-client