This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft File: DD8ADB0CD599281204D387EB652787650920B6C5.mft (raw, json) Hash identifier: QzBXiAPH4vj3fDT9XssmjpOEkKCzHpkahnrxMh6r8zU= Subject key identifier: 4F:29:61:19:FD:DB:EC:3A:48:97:E5:C3:4C:21:B3:F1:26:DB:22:39 Authority key identifier: DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 Certificate issuer: /CN=DD8ADB0CD599281204D387EB652787650920B6C5 Certificate serial: 68ED35596E09E15DDDDDAC87B9EA6BFB79604B57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft Manifest number: 014B Signing time: Sat 06 Dec 2025 19:00:42 +0000 Manifest this update: Sat 06 Dec 2025 18:55:41 +0000 Manifest next update: Tue 09 Dec 2025 23:44:41 +0000 Files and hashes: 1: 34352e3131372e3133322e302f32332d3234203d3e20313532303038.roa (hash: vsLIgIdtrTNWl7Rz7Ctudnow9DnVKuYX5ZMk8sfL1S4=) 2: DD8ADB0CD599281204D387EB652787650920B6C5.crl (hash: HXKAVn0N55YT3b4Ui6zGpeoaFPjssCwBNBtC5FyaSzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ed:35:59:6e:09:e1:5d:dd:dd:ac:87:b9:ea:6b:fb:79:60:4b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8ADB0CD599281204D387EB652787650920B6C5 Validity Not Before: Dec 6 18:55:41 2025 GMT Not After : Dec 9 23:44:41 2025 GMT Subject: CN=4F296119FDDBEC3A4897E5C34C21B3F126DB2239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:da:b7:3b:3e:b4:1d:76:90:62:9a:b9:e8: bf:f1:ac:44:9b:3f:e9:44:c7:48:40:40:d8:e4:be: f7:72:6c:d4:4a:7a:be:30:56:4a:95:2c:46:dc:64: a1:d0:4d:3d:3b:16:b3:ca:2e:f4:b5:58:5f:34:4c: 09:cd:8a:f2:3c:69:9f:b7:28:d3:cf:04:13:79:f0: 70:38:c3:65:41:5f:19:18:af:bb:bc:9f:69:63:80: d9:93:27:19:d3:8d:2d:41:48:c4:83:fd:b8:5a:36: 94:59:ae:4e:1c:dc:eb:51:8a:9d:b7:5e:2e:af:e8: 0b:b3:31:7d:2b:e5:dc:15:e1:5a:a3:c6:ab:68:71: 3c:4a:37:b0:88:19:6a:7a:b9:f0:d3:56:de:d3:24: 2b:4b:e8:a8:f4:5b:26:f8:27:db:02:c4:e9:66:a2: 3a:0e:81:09:cf:31:9e:72:2a:8e:bc:10:96:de:c2: d3:47:bc:54:4c:3d:44:02:0c:af:29:bd:d7:ae:35: 62:13:74:8f:5d:32:fb:27:ef:d1:5a:50:87:b3:6a: ea:4e:47:19:07:04:39:7d:33:c0:75:28:e4:1b:b9: 04:3d:92:9b:79:3e:b5:ef:7b:19:1a:2a:5a:ea:5f: 8d:05:d5:13:bc:cb:85:19:1c:82:16:e8:d5:d3:b5: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:29:61:19:FD:DB:EC:3A:48:97:E5:C3:4C:21:B3:F1:26:DB:22:39 X509v3 Authority Key Identifier: keyid:DD:8A:DB:0C:D5:99:28:12:04:D3:87:EB:65:27:87:65:09:20:B6:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD8ADB0CD599281204D387EB652787650920B6C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22e64b0d-646c-4cec-941f-743b2d1bce4e/0/DD8ADB0CD599281204D387EB652787650920B6C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:7c:16:5f:65:20:8d:ec:50:c1:c2:36:d3:6a:c7:71:99:14: 02:87:be:3a:0b:a9:5e:73:2a:9c:74:c3:f9:f2:ea:b9:4a:94: 34:85:5d:69:4a:0c:c4:29:7d:8c:31:c3:3c:ff:a3:98:db:ef: 58:90:57:2e:52:9e:01:2e:66:3e:f6:31:66:82:2f:24:5e:ea: 8c:ad:8c:a5:96:77:a2:95:f0:bc:db:93:2f:57:e5:c2:67:36: b7:cb:4a:5f:6f:e8:00:d4:8f:8e:1a:e2:35:71:64:06:e3:31: 27:46:0b:f9:91:9e:90:fd:4c:4f:1f:66:15:73:b4:42:1a:35: 50:20:fa:24:c7:05:53:18:ef:18:cc:7b:2a:9b:35:5a:ba:97: 11:93:93:4b:42:27:9d:dd:fd:57:82:37:91:3b:3a:82:95:f1: f0:16:dd:e2:39:0d:65:7c:1b:f0:3a:bb:ed:34:26:22:6f:a1: c3:dc:4e:a8:7d:ed:22:0c:48:16:15:71:45:d6:21:b5:e1:23: 95:12:52:cc:0a:ee:63:72:de:14:a6:61:62:bc:30:67:c3:bf: de:3f:d8:d3:3b:8f:0d:aa:ec:0e:37:08:2f:9b:a2:17:c7:91: d2:5a:c3:2d:14:54:ad:10:cd:77:35:2d:90:cf:93:f9:f4:0b: ba:67:3c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaO01WW4J4V3d3ayHuepr+3lgS1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUw OTIwQjZDNTAeFw0yNTEyMDYxODU1NDFaFw0yNTEyMDkyMzQ0NDFaMDMxMTAvBgNV BAMTKDRGMjk2MTE5RkREQkVDM0E0ODk3RTVDMzRDMjFCM0YxMjZEQjIyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLStq3Oz60HXaQYpq56L/xrESb P+lEx0hAQNjkvvdybNRKer4wVkqVLEbcZKHQTT07FrPKLvS1WF80TAnNivI8aZ+3 KNPPBBN58HA4w2VBXxkYr7u8n2ljgNmTJxnTjS1BSMSD/bhaNpRZrk4c3OtRip23 Xi6v6AuzMX0r5dwV4VqjxqtocTxKN7CIGWp6ufDTVt7TJCtL6Kj0Wyb4J9sCxOlm ojoOgQnPMZ5yKo68EJbewtNHvFRMPUQCDK8pvdeuNWITdI9dMvsn79FaUIezaupO RxkHBDl9M8B1KOQbuQQ9kpt5PrXvexkaKlrqX40F1RO8y4UZHIIW6NXTta2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTylhGf3b7DpIl+XDTCGz8SbbIjkwHwYDVR0j BBgwFoAU3YrbDNWZKBIE04frZSeHZQkgtsUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmU2NGIwZC02NDZjLTRjZWMtOTQxZi03NDNiMmQxYmNlNGUvMC9ERDhBREIwQ0Q1 OTkyODEyMDREMzg3RUI2NTI3ODc2NTA5MjBCNkM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3NjUwOTIw QjZDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJlNjRiMGQtNjQ2Yy00Y2VjLTk0 MWYtNzQzYjJkMWJjZTRlLzAvREQ4QURCMENENTk5MjgxMjA0RDM4N0VCNjUyNzg3 NjUwOTIwQjZDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKp8Fl9lII3sUMHCNtNqx3GZFAKHvjoLqV5z Kpx0w/ny6rlKlDSFXWlKDMQpfYwxwzz/o5jb71iQVy5SngEuZj72MWaCLyRe6oyt jKWWd6KV8Lzbky9X5cJnNrfLSl9v6ADUj44a4jVxZAbjMSdGC/mRnpD9TE8fZhVz tEIaNVAg+iTHBVMY7xjMeyqbNVq6lxGTk0tCJ53d/VeCN5E7OoKV8fAW3eI5DWV8 G/A6u+00JiJvocPcTqh97SIMSBYVcUXWIbXhI5USUswK7mNy3hSmYWK8MGfDv94/ 2NM7jw2q7A43CC+bohfHkdJawy0UVK0QzXc1LZDPk/n0C7pnPCA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:32 2025 by rpki-client