This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft File: DD8ADB0CD599281204D387EB652787650920B6C5.mft (raw, json) Hash identifier: 3rP9SIU6lrHd4mPUxspAVz07hZkP1+S6cHEY1hszjHw= Subject key identifier: 81:84:73:7E:11:94:C7:C9:6C:0F:96:33:A6:80:C3:B5:17:7C:C7:05 Authority key identifier: DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 Certificate issuer: /CN=DD8ADB0CD599281204D387EB652787650920B6C5 Certificate serial: 3F4710A3AA3CAF11D223D0D9C2A4AA5FFD5E4ED3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft Manifest number: 014F Signing time: Mon 15 Dec 2025 18:20:41 +0000 Manifest this update: Mon 15 Dec 2025 18:15:41 +0000 Manifest next update: Fri 19 Dec 2025 01:56:41 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: vsLIgIdtrTNWl7Rz7Ctudnow9DnVKuYX5ZMk8sfL1S4=) 2: DD8ADB0CD599281204D387EB652787650920B6C5.crl (hash: Rbp96u3jwrTgbb770El561jJA7x8nrYC4Un4dbDhvJw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 01:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:47:10:a3:aa:3c:af:11:d2:23:d0:d9:c2:a4:aa:5f:fd:5e:4e:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8ADB0CD599281204D387EB652787650920B6C5 Validity Not Before: Dec 15 18:15:41 2025 GMT Not After : Dec 19 01:56:41 2025 GMT Subject: CN=8184737E1194C7C96C0F9633A680C3B5177CC705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:47:a5:02:79:18:14:76:d4:38:6c:ae:57: ba:a3:89:9e:6f:2b:45:57:84:5c:34:35:69:7e:b6: 3b:7c:48:30:19:2e:d7:4b:80:10:cd:08:0d:07:06: 9d:a6:53:40:cc:c3:67:62:01:74:b1:22:88:c2:de: ce:44:8d:40:18:43:94:9b:bd:0d:f8:34:ef:2d:8a: 35:9d:84:35:22:4c:c4:a5:3f:a3:f7:a0:6f:70:6e: 6b:70:66:2e:d6:ec:f3:1a:d2:f3:b4:ec:ee:f0:9f: c4:bb:e5:36:74:a1:f4:7b:84:22:29:ae:1d:f5:46: 0c:f4:00:cf:fe:f6:b0:f0:02:5d:43:83:e0:38:2e: 81:8a:4d:98:b1:2f:84:77:93:6d:e9:27:00:26:e1: c8:de:7e:8a:63:11:75:49:fc:78:3c:7b:b7:02:f7: 30:e3:11:ec:01:2c:9b:2d:db:8d:52:dd:f0:78:29: fc:1b:96:f5:a9:da:7c:0d:be:14:91:fa:f1:1a:1a: e3:a9:6f:62:6d:b6:c9:a1:c0:bc:08:5a:0a:89:ac: d2:96:5f:1f:40:00:49:a8:fe:14:f4:cd:25:5a:c7: e0:7a:e3:3b:33:ce:68:70:c7:a0:70:af:a8:a5:7b: a5:a5:f4:37:02:61:d1:c3:31:ed:bc:6a:15:1c:26: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:84:73:7E:11:94:C7:C9:6C:0F:96:33:A6:80:C3:B5:17:7C:C7:05 X509v3 Authority Key Identifier: keyid:DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ba:44:c5:1b:b0:15:89:50:44:20:1e:2d:e9:90:e1:7a:33: 9b:f3:69:83:2b:d8:55:16:a4:c1:13:d1:ab:ec:e7:a7:fe:f5: b1:f2:6d:d0:6b:84:2d:89:b3:6a:76:71:88:bd:ea:dc:a9:e0: 90:10:08:0d:62:03:b4:4d:25:dd:b0:03:c0:49:30:c8:c0:2f: e5:6a:f3:8a:ad:89:44:d6:d0:4a:44:c2:9a:ef:ba:c1:be:e4: 45:e3:4f:a3:af:85:6b:da:4f:3c:e7:44:c3:14:84:22:5d:f5: 29:0f:4f:3d:47:40:0e:a3:24:27:96:88:e5:51:8e:3e:a3:01: e4:39:8d:31:ac:d9:b1:15:4a:a5:c5:f4:a5:c1:76:54:90:4d: d8:39:18:c4:96:35:ea:98:ea:d1:43:86:b5:d6:91:12:15:de: 15:a8:05:c3:05:c3:7b:00:0e:67:cf:41:42:a6:ef:4f:06:4e: 39:df:69:e1:86:25:51:42:e8:31:a9:a3:61:98:62:a2:16:a8: 59:08:69:1e:5c:df:38:b5:ae:3f:b4:e8:a2:dc:7a:1b:ee:43: f1:58:5f:8d:57:dc:86:eb:11:2c:a5:54:7b:3e:d1:ff:64:aa: d0:c6:b9:75:db:46:ba:2d:43:b6:1b:7b:03:50:fe:b0:d9:2f: 5e:33:f2:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP0cQo6o8rxHSI9DZwqSqX/1eTtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUw OTIwQjZDNTAeFw0yNTEyMTUxODE1NDFaFw0yNTEyMTkwMTU2NDFaMDMxMTAvBgNV BAMTKDgxODQ3MzdFMTE5NEM3Qzk2QzBGOTYzM0E2ODBDM0I1MTc3Q0M3MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAUEelAnkYFHbUOGyuV7qjiZ5v K0VXhFw0NWl+tjt8SDAZLtdLgBDNCA0HBp2mU0DMw2diAXSxIojC3s5EjUAYQ5Sb vQ34NO8tijWdhDUiTMSlP6P3oG9wbmtwZi7W7PMa0vO07O7wn8S75TZ0ofR7hCIp rh31Rgz0AM/+9rDwAl1Dg+A4LoGKTZixL4R3k23pJwAm4cjefopjEXVJ/Hg8e7cC 9zDjEewBLJst241S3fB4KfwblvWp2nwNvhSR+vEaGuOpb2JttsmhwLwIWgqJrNKW Xx9AAEmo/hT0zSVax+B64zszzmhwx6Bwr6ile6Wl9DcCYdHDMe28ahUcJu1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgYRzfhGUx8lsD5YzpoDDtRd8xwUwHwYDVR0j BBgwFoAU3YrbDNWZKBIE04frZSeHZQkgtsUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmU2NGIwZC02NDZjLTRjZWMtOTQxZi03NDNiMmQxYmNlNGUvMC9ERDhBREIwQ0Q1 OTkyODEyMDREMzg3RUI2NTI3ODc2NTA5MjBCNkM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUwOTIw QjZDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3 NjUwOTIwQjZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF66RMUbsBWJUEQgHi3pkOF6M5vzaYMr2FUW pMET0avs56f+9bHybdBrhC2Js2p2cYi96typ4JAQCA1iA7RNJd2wA8BJMMjAL+Vq 84qtiUTW0EpEwprvusG+5EXjT6OvhWvaTzznRMMUhCJd9SkPTz1HQA6jJCeWiOVR jj6jAeQ5jTGs2bEVSqXF9KXBdlSQTdg5GMSWNeqY6tFDhrXWkRIV3hWoBcMFw3sA DmfPQUKm708GTjnfaeGGJVFC6DGpo2GYYqIWqFkIaR5c3zi1rj+06KLcehvuQ/FY X41X3IbrESylVHs+0f9kqtDGuXXbRrotQ7YbewNQ/rDZL14z8sg= -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:23 2025 by rpki-client