This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: guBzuvMtNI0mTgq4UMAoz6/d+zaYZaTKtbk3UPSP3w8= Subject key identifier: BA:25:54:1F:C2:C0:4F:C8:7E:EB:AF:7F:1C:B3:D7:54:5A:CB:52:EA Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 0DEDE181A167A5D97D6994E5B41F447FA6DE059E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 052F Signing time: Fri 05 Dec 2025 04:52:01 +0000 Manifest this update: Fri 05 Dec 2025 04:47:01 +0000 Manifest next update: Mon 08 Dec 2025 16:40:01 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) 2: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: v+BDvIRXYlmFhbcYzu/FTGbB5xukLosF3ExAHv2aTZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ed:e1:81:a1:67:a5:d9:7d:69:94:e5:b4:1f:44:7f:a6:de:05:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Dec 5 04:47:01 2025 GMT Not After : Dec 8 16:40:01 2025 GMT Subject: CN=BA25541FC2C04FC87EEBAF7F1CB3D7545ACB52EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:40:44:60:13:0e:91:e2:68:15:fb:dd:eb:d8: 7f:2e:1f:96:5a:9d:a3:d9:f0:44:fb:3b:74:2a:dd: cd:12:04:14:53:82:b4:1b:62:4e:f6:8c:fc:cc:a0: 66:a4:bd:76:c1:62:db:08:02:c4:46:91:4e:09:3f: 20:d8:af:58:98:61:9c:f8:26:24:69:82:ed:31:8e: c1:ee:d0:24:f6:91:85:1a:9a:cb:50:ec:9e:bc:39: 13:a0:97:9a:0c:6b:9b:7c:1a:60:c4:d3:e1:a8:62: 04:90:6e:53:cb:f5:5b:22:99:31:0e:13:91:91:76: 73:a6:63:d4:2c:82:0a:a3:66:4a:cb:da:a3:8e:30: 32:03:65:af:d3:c4:b8:16:75:5f:bb:37:c6:01:76: fc:2a:2b:3f:23:fe:58:f5:6d:ab:b3:16:f6:b1:b3: f1:63:50:50:4c:59:60:79:7e:dc:75:c8:b4:ad:7d: 50:7d:6b:40:dc:25:08:b6:26:11:4b:65:41:13:1c: 82:a0:8f:0a:b3:8a:31:c5:8d:a8:7c:e4:ce:26:32: 31:f3:94:38:73:50:3b:95:21:04:22:84:64:82:ee: 58:ba:3d:d6:16:06:83:8c:c0:d3:6f:43:31:9b:dc: 5b:2d:2e:fd:74:b9:97:62:41:62:51:0a:8d:b0:03: 50:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:25:54:1F:C2:C0:4F:C8:7E:EB:AF:7F:1C:B3:D7:54:5A:CB:52:EA X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:e2:ad:35:ad:62:9d:33:81:41:20:22:ef:9f:e1:b5:ba:3d: ed:24:a6:77:2d:c5:c0:91:b4:c0:3a:ba:c1:21:f0:c4:bc:86: db:b0:e4:dd:fb:f2:6e:92:f0:d3:69:f2:91:97:12:32:6f:45: 26:3e:39:6e:54:70:17:3f:54:4d:14:60:c9:8d:61:3d:ab:5d: 41:7b:61:3c:af:c6:4c:8a:8c:ae:69:dd:9a:8a:13:6e:57:61: f6:db:97:a7:27:9d:36:3c:86:9c:93:e8:98:08:14:b0:5c:ae: 3b:83:8e:9e:87:97:25:19:01:f3:9d:e6:6f:b7:92:e5:01:50: 70:78:f7:d8:fd:f6:35:2e:2d:dc:a2:b6:fa:28:10:14:37:f2: 7d:d3:0f:ab:cd:f1:d8:00:01:4f:5b:da:a7:a3:83:cf:76:35: 76:92:d9:3c:11:9d:b0:15:38:24:06:36:59:bf:d3:cf:5b:9a: c2:2c:bf:56:8d:15:03:ca:9f:30:7a:88:b5:aa:95:fa:54:45: e7:1b:aa:94:24:88:97:b5:71:19:68:1b:94:c0:0a:91:0a:86: c2:e6:c2:71:18:ea:51:41:13:7e:8c:5c:1a:4f:f8:79:63:b2: ec:8d:5b:26:29:29:2d:bd:08:9b:87:54:1a:56:e2:a7:51:25: a7:c3:8e:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDe3hgaFnpdl9aZTltB9Ef6beBZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTEyMDUwNDQ3MDFaFw0yNTEyMDgxNjQwMDFaMDMxMTAvBgNV BAMTKEJBMjU1NDFGQzJDMDRGQzg3RUVCQUY3RjFDQjNENzU0NUFDQjUyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUQERgEw6R4mgV+93r2H8uH5Za naPZ8ET7O3Qq3c0SBBRTgrQbYk72jPzMoGakvXbBYtsIAsRGkU4JPyDYr1iYYZz4 JiRpgu0xjsHu0CT2kYUamstQ7J68OROgl5oMa5t8GmDE0+GoYgSQblPL9VsimTEO E5GRdnOmY9QsggqjZkrL2qOOMDIDZa/TxLgWdV+7N8YBdvwqKz8j/lj1bauzFvax s/FjUFBMWWB5ftx1yLStfVB9a0DcJQi2JhFLZUETHIKgjwqzijHFjah85M4mMjHz lDhzUDuVIQQihGSC7li6PdYWBoOMwNNvQzGb3FstLv10uZdiQWJRCo2wA1DtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuiVUH8LAT8h+669/HLPXVFrLUuowHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL7irTWtYp0zgUEgIu+f4bW6Pe0kpnctxcCR tMA6usEh8MS8htuw5N378m6S8NNp8pGXEjJvRSY+OW5UcBc/VE0UYMmNYT2rXUF7 YTyvxkyKjK5p3ZqKE25XYfbbl6cnnTY8hpyT6JgIFLBcrjuDjp6HlyUZAfOd5m+3 kuUBUHB499j99jUuLdyitvooEBQ38n3TD6vN8dgAAU9b2qejg892NXaS2TwRnbAV OCQGNlm/089bmsIsv1aNFQPKnzB6iLWqlfpURecbqpQkiJe1cRloG5TACpEKhsLm wnEY6lFBE36MXBpP+HljsuyNWyYpKS29CJuHVBpW4qdRJafDjmw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:56 2025 by rpki-client