This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: oU9B48qeHLhseni4AtxVkPbQFtoL7zl2GUIIUV+mIOg= Subject key identifier: 0D:5B:38:D6:0B:5F:F4:81:CB:6E:FA:10:C6:AA:EA:07:55:BD:5D:9E Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 5887EFFA77AA579C5DC91D4278683D8CF6634461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 0534 Signing time: Tue 16 Dec 2025 17:11:58 +0000 Manifest this update: Tue 16 Dec 2025 17:06:58 +0000 Manifest next update: Sat 20 Dec 2025 04:04:58 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) 2: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: u6yesndZkss95yqt3VHE73ARu7X3X1aYaSRSb/iDU4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 21:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:87:ef:fa:77:aa:57:9c:5d:c9:1d:42:78:68:3d:8c:f6:63:44:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Dec 16 17:06:58 2025 GMT Not After : Dec 20 04:04:58 2025 GMT Subject: CN=0D5B38D60B5FF481CB6EFA10C6AAEA0755BD5D9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:de:83:d3:66:78:86:00:b6:a7:29:10:a1: 4f:ea:73:c9:c1:91:81:91:02:7c:12:52:2a:10:c2: a5:82:75:f4:99:9e:fc:c4:9b:09:e6:e1:18:4e:1a: 74:a1:26:af:4d:61:e9:86:5d:94:71:56:2b:77:6a: d9:a7:7c:31:ec:65:d9:13:b5:00:77:96:41:0a:af: 10:7f:e5:46:88:c8:06:3d:d0:19:f9:fc:21:45:0c: 56:37:e9:de:a8:88:8d:23:4d:7d:5f:68:5b:63:27: 34:41:dd:ae:3f:e7:41:d2:77:11:df:ab:fa:d6:ab: a5:42:de:41:cd:ca:03:28:7a:65:85:a5:61:83:d3: c8:84:0f:ba:c9:4f:d0:f3:6f:99:06:e4:e0:8e:e0: 6a:50:bf:f0:44:aa:45:7f:47:64:ff:92:c5:5c:5a: 6b:83:07:5c:9f:80:3e:72:ad:33:b2:21:bc:6a:d8: 18:4c:37:2d:f5:86:e6:b4:79:34:8f:09:63:8d:ac: 3c:a6:eb:f6:06:a1:ae:2a:7f:e8:49:fc:3d:33:47: 77:5f:7d:5e:eb:e4:fd:a4:4e:c2:cd:39:91:98:6c: b9:c2:bf:22:7b:1c:73:37:eb:01:86:38:35:0a:f6: 65:07:03:23:d0:b9:f3:f4:72:c0:cd:cf:dd:60:9a: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5B:38:D6:0B:5F:F4:81:CB:6E:FA:10:C6:AA:EA:07:55:BD:5D:9E X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:cf:5e:f9:1c:24:3c:5a:df:d7:b8:25:c3:15:24:11:5b:b7: af:6c:56:18:b6:1f:32:9e:61:3c:e8:c1:7e:f3:b5:63:2c:a3: 71:9d:f0:db:13:2a:68:a2:69:a4:19:79:2a:89:cb:dd:bc:f6: 90:08:ec:4b:71:ae:61:f9:6a:7d:de:37:76:20:3b:db:70:08: 31:1c:55:c7:c0:c9:2b:c7:c3:f9:6a:67:85:c3:7c:e4:4f:9c: b1:8d:f0:90:a7:4f:5e:2a:e1:4c:1c:69:9c:de:57:49:6b:ff: 3d:43:16:6b:b8:0d:84:f4:90:f6:f2:4f:b6:19:98:80:3f:2c: a4:87:69:70:70:07:49:f6:32:87:dc:13:61:aa:e1:d6:66:b3: e5:83:17:f3:58:8f:36:ed:cd:ae:51:49:a6:92:21:06:4e:d8: f4:09:c3:27:d8:75:a0:92:67:3c:bb:03:2b:78:ef:4c:c4:54: 4c:a3:81:f2:d5:d7:0d:0a:b3:bd:60:8c:e4:85:65:f6:41:69: 1d:fe:a7:4e:f2:40:c5:92:51:9e:6c:b9:75:36:e8:d0:a0:d5: 11:ac:4f:cd:03:ca:dc:cc:bb:80:b8:90:d9:8b:a3:eb:63:54: 4e:56:c9:89:ed:42:63:bd:2e:03:a6:11:c9:49:68:86:95:52: a0:06:8e:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIfv+neqV5xdyR1CeGg9jPZjRGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTEyMTYxNzA2NThaFw0yNTEyMjAwNDA0NThaMDMxMTAvBgNV BAMTKDBENUIzOEQ2MEI1RkY0ODFDQjZFRkExMEM2QUFFQTA3NTVCRDVEOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ct6D02Z4hgC2pykQoU/qc8nB kYGRAnwSUioQwqWCdfSZnvzEmwnm4RhOGnShJq9NYemGXZRxVit3atmnfDHsZdkT tQB3lkEKrxB/5UaIyAY90Bn5/CFFDFY36d6oiI0jTX1faFtjJzRB3a4/50HSdxHf q/rWq6VC3kHNygMoemWFpWGD08iED7rJT9Dzb5kG5OCO4GpQv/BEqkV/R2T/ksVc WmuDB1yfgD5yrTOyIbxq2BhMNy31hua0eTSPCWONrDym6/YGoa4qf+hJ/D0zR3df fV7r5P2kTsLNOZGYbLnCvyJ7HHM36wGGODUK9mUHAyPQufP0csDNz91gmq2TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVs41gtf9IHLbvoQxqrqB1W9XZ4wHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHPXvkcJDxa39e4JcMVJBFbt69sVhi2HzKe YTzowX7ztWMso3Gd8NsTKmiiaaQZeSqJy9289pAI7EtxrmH5an3eN3YgO9twCDEc VcfAySvHw/lqZ4XDfORPnLGN8JCnT14q4UwcaZzeV0lr/z1DFmu4DYT0kPbyT7YZ mIA/LKSHaXBwB0n2MofcE2Gq4dZms+WDF/NYjzbtza5RSaaSIQZO2PQJwyfYdaCS Zzy7Ayt470zEVEyjgfLV1w0Ks71gjOSFZfZBaR3+p07yQMWSUZ5suXU26NCg1RGs T80DytzMu4C4kNmLo+tjVE5WyYntQmO9LgOmEclJaIaVUqAGjgM= -----END CERTIFICATE-----Generated at Tue Dec 16 20:57:35 2025 by rpki-client