This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: aecJdfL3sYpRiX5d0yxBIw4trnW8ZKappu4nMZ1h0d0= Subject key identifier: DD:D9:8D:2A:29:72:20:91:1B:27:4E:CE:B2:2A:4C:A7:AE:63:0A:E5 Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 7E1F1C15987759496243965035B27FC6A22F81B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 05AC Signing time: Sat 06 Dec 2025 07:20:04 +0000 Manifest this update: Sat 06 Dec 2025 07:15:04 +0000 Manifest next update: Tue 09 Dec 2025 10:44:04 +0000 Files and hashes: 1: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: Mu8Sq9jbWrlRWNeHadkULcyHY5K7Qq3y4h3RpQTmHwI=) 2: AS139994.roa (hash: 3MhCOE1JfpBzQV976XNeUOb97J9ofo+CArIJ1ybLWHw=) 3: AS24203.roa (hash: liOvJt+yX+uMFw47nNBN9GmU7xS1CPE6TUtdH7jFgY4=) 4: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1f:1c:15:98:77:59:49:62:43:96:50:35:b2:7f:c6:a2:2f:81:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Dec 6 07:15:04 2025 GMT Not After : Dec 9 10:44:04 2025 GMT Subject: CN=DDD98D2A297220911B274ECEB22A4CA7AE630AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f1:ff:95:06:ae:e5:a5:74:6c:2b:f4:d9:4f: 5f:ad:1c:b9:eb:25:c0:cb:f0:9e:c0:b2:71:f7:cf: b3:2c:88:82:3a:0d:05:55:19:e5:40:2e:f3:19:8b: 26:68:7e:c1:1c:aa:8b:f3:9a:ac:56:c4:0a:a6:01: 17:b0:19:e2:e8:2e:e9:ed:7d:da:19:d0:92:4a:86: 9c:1d:30:7b:b6:0b:31:fc:02:f7:3a:f3:a4:d8:c8: f3:b7:5d:ca:67:25:85:93:73:e0:12:6f:05:4c:e3: 6c:65:5f:9a:7e:71:bb:cf:38:26:2d:ea:2a:9d:b0: 8f:bd:49:7a:c4:7b:c4:77:57:11:19:f1:a1:a5:26: 98:93:43:a3:50:17:37:7d:77:0f:4f:58:59:1c:64: ba:a6:bf:d1:3b:df:f1:96:15:9f:ea:2a:0e:5f:1d: 31:2b:46:34:10:7d:90:2a:ce:46:35:34:69:c6:52: 6c:3c:33:a5:50:47:51:64:d8:a7:3a:9f:89:6b:53: 1b:7b:b2:72:60:3e:fd:69:dc:03:c0:76:48:be:71: 44:ae:47:f8:cd:3d:dd:c5:af:64:7e:dc:d6:74:a0: 09:89:dd:56:bc:cc:f0:58:9c:0a:bc:7a:10:fb:6a: 74:ab:09:38:ad:0d:7d:7d:89:bf:19:30:a1:b4:0c: f8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D9:8D:2A:29:72:20:91:1B:27:4E:CE:B2:2A:4C:A7:AE:63:0A:E5 X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0b:03:55:9f:7f:c1:7c:dc:45:c2:b8:0b:10:0b:eb:e3:cf: 1f:d5:b2:de:e3:5c:f2:a7:e8:91:b1:30:0e:b4:05:07:63:80: e2:ff:03:ae:ab:ad:4f:33:e8:c3:60:aa:00:73:bd:14:b4:39: b5:85:96:f2:bf:a6:5c:a2:f0:cb:cd:e7:9c:7c:fd:95:c1:f7: b0:58:11:a8:ae:6e:79:eb:30:9e:24:c8:e4:94:a9:5c:9a:99: 3a:80:9c:c0:19:90:3f:97:b1:82:4e:8c:e5:bf:52:b3:e3:18: cf:9f:0f:48:36:a2:c4:92:fe:6a:5f:ed:f4:d6:98:ba:bc:68: 88:cd:4f:45:6c:f4:59:6c:9e:1c:98:2e:5f:79:7b:7d:5d:f5: a9:96:1e:30:10:ab:47:21:3f:17:da:f7:3e:43:02:3e:f0:26: 0b:c6:da:85:24:27:15:51:f8:6e:83:80:93:28:40:e4:bb:dd: dc:03:10:ce:4f:bb:7f:71:b8:f6:a4:d0:fd:d2:b9:36:7e:05: 53:1b:34:9b:31:84:fa:72:86:5e:00:25:61:9b:29:26:ca:99: f2:84:6c:70:12:13:77:20:9f:67:9a:1f:c8:0e:ff:c4:90:6c: a0:fe:8c:25:07:a3:0c:c5:ac:55:ee:19:9f:12:e6:31:23:91: 67:81:f7:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfh8cFZh3WUliQ5ZQNbJ/xqIvgbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTEyMDYwNzE1MDRaFw0yNTEyMDkxMDQ0MDRaMDMxMTAvBgNV BAMTKERERDk4RDJBMjk3MjIwOTExQjI3NEVDRUIyMkE0Q0E3QUU2MzBBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA8f+VBq7lpXRsK/TZT1+tHLnr JcDL8J7AsnH3z7MsiII6DQVVGeVALvMZiyZofsEcqovzmqxWxAqmARewGeLoLunt fdoZ0JJKhpwdMHu2CzH8Avc686TYyPO3XcpnJYWTc+ASbwVM42xlX5p+cbvPOCYt 6iqdsI+9SXrEe8R3VxEZ8aGlJpiTQ6NQFzd9dw9PWFkcZLqmv9E73/GWFZ/qKg5f HTErRjQQfZAqzkY1NGnGUmw8M6VQR1Fk2Kc6n4lrUxt7snJgPv1p3APAdki+cUSu R/jNPd3Fr2R+3NZ0oAmJ3Va8zPBYnAq8ehD7anSrCTitDX19ib8ZMKG0DPi1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3dmNKilyIJEbJ07OsipMp65jCuUwHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHELA1Wff8F83EXCuAsQC+vjzx/Vst7jXPKn 6JGxMA60BQdjgOL/A66rrU8z6MNgqgBzvRS0ObWFlvK/plyi8MvN55x8/ZXB97BY EaiubnnrMJ4kyOSUqVyamTqAnMAZkD+XsYJOjOW/UrPjGM+fD0g2osSS/mpf7fTW mLq8aIjNT0Vs9FlsnhyYLl95e31d9amWHjAQq0chPxfa9z5DAj7wJgvG2oUkJxVR +G6DgJMoQOS73dwDEM5Pu39xuPak0P3SuTZ+BVMbNJsxhPpyhl4AJWGbKSbKmfKE bHASE3cgn2eaH8gO/8SQbKD+jCUHowzFrFXuGZ8S5jEjkWeB90Y= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:42 2025 by rpki-client