This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: XCWqKWacQe4qHCVIuTm4U1DU/SYfwxi6CeOUH08iMyg= Subject key identifier: 8D:4E:DF:18:BD:65:1E:32:5A:03:17:68:49:9B:9C:F9:A8:D7:C2:75 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 56155049438DA0F16434B6622D57FE65FEDEDE7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 01A7 Signing time: Sat 06 Dec 2025 03:42:05 +0000 Manifest this update: Sat 06 Dec 2025 03:37:05 +0000 Manifest next update: Tue 09 Dec 2025 09:54:05 +0000 Files and hashes: 1: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 2: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 3: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: fXjMSTNaxw5YyRETpa2S8s0Yo4mFWejrz2XuSiQiQWE=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: sfj/xLZEElFZFm97ASqdb3Sh5i8unBwVhTxljUPKis0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:15:50:49:43:8d:a0:f1:64:34:b6:62:2d:57:fe:65:fe:de:de:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Dec 6 03:37:05 2025 GMT Not After : Dec 9 09:54:05 2025 GMT Subject: CN=8D4EDF18BD651E325A031768499B9CF9A8D7C275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:1b:65:77:39:62:57:01:35:b2:56:4c:01: 66:ef:2c:a4:85:33:2d:a4:27:59:de:b2:c4:bb:06: b8:af:be:c0:88:e7:88:66:60:ae:2d:4c:0d:00:c7: e8:b3:ad:d6:e5:92:ba:41:ce:b7:47:68:8a:01:1a: 55:6f:b8:0a:32:00:c6:dd:0f:f1:50:5b:25:ad:17: 87:bb:5b:88:4b:c8:29:ef:45:70:d0:04:5f:4b:1d: bf:7a:7b:3a:b7:43:74:55:dd:a6:3e:22:c9:f2:5a: d3:57:38:22:9d:4e:8f:cb:6b:d7:4c:11:e4:21:6d: 6c:38:ef:1b:0e:dc:a2:37:3a:30:a5:06:8e:11:dd: 97:e8:f9:81:2e:3d:cc:59:70:5f:94:41:0f:6b:cb: 28:f0:b5:95:9a:b4:c9:f0:fb:90:53:21:66:34:2c: b1:e7:c1:98:76:16:2a:9e:70:90:86:01:83:bf:1d: 2f:65:75:36:18:5a:47:83:9a:d7:10:26:6a:ad:0c: 67:4f:41:21:02:f8:a7:5f:07:fe:ea:ec:87:ad:c3: 16:26:85:e4:d8:0f:de:79:f2:cb:2c:c3:3b:e4:90: eb:e3:11:03:af:64:11:1a:68:d2:a2:df:98:82:9e: 51:3f:2a:db:09:32:87:d9:a0:45:76:67:a1:44:13: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4E:DF:18:BD:65:1E:32:5A:03:17:68:49:9B:9C:F9:A8:D7:C2:75 X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5d:16:f0:67:ba:cd:e5:06:34:ae:ba:9b:78:4e:d4:66:e4: 79:3d:49:95:cb:60:bb:28:d3:a1:78:58:eb:f8:3e:21:7f:c8: 53:6d:51:ee:02:7c:2d:b8:4b:8b:92:b3:09:bb:21:06:39:53: 30:a1:76:5a:9d:ee:60:7e:d9:a8:21:f1:f3:92:05:cc:8e:fd: 6c:ad:8f:b4:c1:9c:8a:60:fa:be:d8:9b:5e:e9:69:d6:5d:d8: 5a:33:bf:40:52:db:79:64:9d:b0:bd:d1:26:d6:93:9f:22:07: 5e:d4:ce:7c:2e:65:75:cc:39:13:11:ed:3d:91:5d:f7:69:15: 51:d5:b0:f3:fc:da:d0:92:2f:4a:3d:09:7b:10:10:a7:d3:76: 82:18:9f:0a:0a:ae:ec:95:2a:e7:8f:d1:52:9c:75:25:ee:52: 0a:26:97:67:fc:f2:97:72:25:1d:2f:42:72:de:f7:45:7a:75: 05:ec:c6:e9:e6:62:8e:f3:d5:dc:af:c5:53:b3:d7:1a:0e:9a: 24:91:2f:62:1c:4d:20:25:fd:9c:22:c8:d0:dc:76:eb:36:4f: 4e:bb:e0:d3:40:d1:05:ae:a8:8a:3d:bb:f4:62:d3:e9:42:3e: ee:35:74:0f:7c:b5:7a:2a:3f:83:ae:ae:51:7e:97:17:bb:40: 45:6b:67:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVhVQSUONoPFkNLZiLVf+Zf7e3nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTEyMDYwMzM3MDVaFw0yNTEyMDkwOTU0MDVaMDMxMTAvBgNV BAMTKDhENEVERjE4QkQ2NTFFMzI1QTAzMTc2ODQ5OUI5Q0Y5QThEN0MyNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQBtldzliVwE1slZMAWbvLKSF My2kJ1nessS7BrivvsCI54hmYK4tTA0Ax+izrdblkrpBzrdHaIoBGlVvuAoyAMbd D/FQWyWtF4e7W4hLyCnvRXDQBF9LHb96ezq3Q3RV3aY+IsnyWtNXOCKdTo/La9dM EeQhbWw47xsO3KI3OjClBo4R3Zfo+YEuPcxZcF+UQQ9ryyjwtZWatMnw+5BTIWY0 LLHnwZh2FiqecJCGAYO/HS9ldTYYWkeDmtcQJmqtDGdPQSEC+KdfB/7q7IetwxYm heTYD9558ssswzvkkOvjEQOvZBEaaNKi35iCnlE/KtsJMofZoEV2Z6FEE1fDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjU7fGL1lHjJaAxdoSZuc+ajXwnUwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBdFvBnus3lBjSuupt4TtRm5Hk9SZXLYLso 06F4WOv4PiF/yFNtUe4CfC24S4uSswm7IQY5UzChdlqd7mB+2agh8fOSBcyO/Wyt j7TBnIpg+r7Ym17padZd2Fozv0BS23lknbC90SbWk58iB17UznwuZXXMORMR7T2R XfdpFVHVsPP82tCSL0o9CXsQEKfTdoIYnwoKruyVKueP0VKcdSXuUgoml2f88pdy JR0vQnLe90V6dQXsxunmYo7z1dyvxVOz1xoOmiSRL2IcTSAl/ZwiyNDcdus2T067 4NNA0QWuqIo9u/Ri0+lCPu41dA98tXoqP4OurlF+lxe7QEVrZyQ= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:10 2025 by rpki-client