This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: n/ZqtIm4f1BL6IHnGdbWx8m4rTSR/sShkEIDrUlRmDw= Subject key identifier: 45:B4:2C:E4:53:CB:E9:75:D2:5B:71:6A:0B:6F:CA:20:97:12:1F:C5 Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 59D768974AD8A95AEE6240F611F083BE12F393B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 0196 Signing time: Fri 05 Dec 2025 13:32:11 +0000 Manifest this update: Fri 05 Dec 2025 13:27:11 +0000 Manifest next update: Mon 08 Dec 2025 20:19:11 +0000 Files and hashes: 1: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) 2: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: xg8ZCn9F5jieVjisJ8RLCB/nYyFVmJIFH5rsg+97kns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d7:68:97:4a:d8:a9:5a:ee:62:40:f6:11:f0:83:be:12:f3:93:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Dec 5 13:27:11 2025 GMT Not After : Dec 8 20:19:11 2025 GMT Subject: CN=45B42CE453CBE975D25B716A0B6FCA2097121FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f3:25:7d:12:f4:fc:b7:61:a4:6b:1e:66:3e: f6:84:66:7e:2b:d4:86:de:40:b0:43:ff:e7:d0:06: e9:5f:62:ec:9e:33:0b:75:61:56:b5:54:8c:85:d0: d4:00:a0:35:85:3e:27:bc:3c:8c:13:1d:24:cf:e7: e9:08:eb:92:34:27:2e:76:c5:89:17:a3:f6:d5:92: c4:92:07:7e:4d:33:9a:d5:28:a9:f6:05:94:75:ba: da:bd:de:c6:31:36:c8:b6:b9:90:33:76:1d:76:b2: ee:c9:e4:ff:6b:b1:9d:6a:17:ea:6e:13:02:94:4c: 9c:2f:54:c2:f1:2c:56:97:ff:40:3d:0a:0a:56:27: 35:57:04:a2:2e:ed:4a:a2:84:2e:0c:d1:af:ca:c6: 57:fa:de:7f:6b:8f:e3:a2:5b:b1:d8:60:18:23:74: 73:12:df:4b:5d:01:b9:a6:05:e7:67:3a:18:10:61: a5:dc:3b:6b:f9:21:d1:3c:f2:dd:2e:7a:e9:28:37: b7:9d:6b:3f:5b:80:dd:db:4a:0a:43:1f:b6:27:e8: 45:e3:b2:8a:1a:51:a3:08:d4:41:d1:cb:90:9c:db: e1:09:b1:ed:a4:a9:4d:b7:9a:87:57:8f:af:d6:b0: 83:c4:91:57:20:ed:de:7f:45:50:ed:35:ea:bc:ae: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B4:2C:E4:53:CB:E9:75:D2:5B:71:6A:0B:6F:CA:20:97:12:1F:C5 X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cb:52:c1:31:01:1a:f1:6f:e8:92:80:6b:21:4e:32:34:31: 29:a5:ae:73:b0:1b:35:6a:13:81:08:87:64:c7:03:39:a5:80: a6:b5:f7:d9:97:ea:30:e7:31:5b:1f:51:ff:80:5f:0d:c4:d1: c1:86:14:c3:3b:7e:69:ea:e7:d4:ea:7b:8a:38:4c:12:7a:a6: 9e:af:93:ff:79:85:45:89:11:db:94:63:e8:03:b7:f7:c6:68: ca:35:e4:80:4a:03:be:bb:4d:41:c7:b8:95:e2:9f:22:d9:49: d6:40:f4:87:7c:cf:6d:de:1a:9e:e8:09:fe:8a:19:e1:cc:0c: 45:94:d9:84:bf:6e:39:a4:53:09:d3:ad:3a:7c:95:95:bb:c8: ae:61:d7:52:e7:f4:f0:03:25:07:c2:32:fa:32:b2:3d:8d:59: 2c:c1:78:88:ae:93:3c:33:85:a4:28:cc:1c:a4:3b:42:8d:6c: 52:22:28:80:0e:44:f4:2e:78:3c:6c:c7:6b:2d:c1:4a:ac:a9: de:3d:a2:52:11:1d:b1:59:4e:76:d1:a8:ef:4b:f6:c7:93:95: bf:fe:35:d0:33:a6:ef:7f:34:41:34:27:07:ae:13:94:e2:c3: 7d:7c:7f:93:d6:aa:66:c1:a6:91:0b:79:3a:a5:93:5f:c9:f3: 64:04:54:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWddol0rYqVruYkD2EfCDvhLzk7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNTEyMDUxMzI3MTFaFw0yNTEyMDgyMDE5MTFaMDMxMTAvBgNV BAMTKDQ1QjQyQ0U0NTNDQkU5NzVEMjVCNzE2QTBCNkZDQTIwOTcxMjFGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz8yV9EvT8t2Gkax5mPvaEZn4r 1IbeQLBD/+fQBulfYuyeMwt1YVa1VIyF0NQAoDWFPie8PIwTHSTP5+kI65I0Jy52 xYkXo/bVksSSB35NM5rVKKn2BZR1utq93sYxNsi2uZAzdh12su7J5P9rsZ1qF+pu EwKUTJwvVMLxLFaX/0A9CgpWJzVXBKIu7UqihC4M0a/Kxlf63n9rj+OiW7HYYBgj dHMS30tdAbmmBednOhgQYaXcO2v5IdE88t0ueukoN7edaz9bgN3bSgpDH7Yn6EXj sooaUaMI1EHRy5Cc2+EJse2kqU23modXj6/WsIPEkVcg7d5/RVDtNeq8rnXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURbQs5FPL6XXSW3FqC2/KIJcSH8UwHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzLUsExARrxb+iSgGshTjI0MSmlrnOwGzVq E4EIh2THAzmlgKa199mX6jDnMVsfUf+AXw3E0cGGFMM7fmnq59Tqe4o4TBJ6pp6v k/95hUWJEduUY+gDt/fGaMo15IBKA767TUHHuJXinyLZSdZA9Id8z23eGp7oCf6K GeHMDEWU2YS/bjmkUwnTrTp8lZW7yK5h11Ln9PADJQfCMvoysj2NWSzBeIiukzwz haQozBykO0KNbFIiKIAORPQueDxsx2stwUqsqd49olIRHbFZTnbRqO9L9seTlb/+ NdAzpu9/NEE0JweuE5Tiw318f5PWqmbBppELeTqlk1/J82QEVJI= -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:13 2025 by rpki-client