This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: jeuch1Ke0mZLt1EyQS3gkoVb8HsqqwI61Ff6tG9Ot6Y= Subject key identifier: 3F:59:D3:EB:D3:A9:B6:C0:59:38:B3:6D:E0:36:10:E5:9F:66:F5:AF Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 43BE42F62534F505D547DC71F8C909893EF1EEF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 10:30:03 +0000 Manifest this update: Fri 05 Dec 2025 10:25:03 +0000 Manifest next update: Mon 08 Dec 2025 16:19:03 +0000 Files and hashes: 1: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: CnkFn4j+02dxSR1zteGPdvruZ0EdKovgRlzDBVzoUR4=) 2: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) 3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:be:42:f6:25:34:f5:05:d5:47:dc:71:f8:c9:09:89:3e:f1:ee:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Dec 5 10:25:03 2025 GMT Not After : Dec 8 16:19:03 2025 GMT Subject: CN=3F59D3EBD3A9B6C05938B36DE03610E59F66F5AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:35:10:13:49:32:8e:5f:94:7b:f5:c2:dd: 4c:c4:92:71:91:30:94:44:48:e0:fe:48:7e:bc:c5: ed:34:b7:1e:3f:13:70:c9:48:30:8c:ee:55:96:b1: a1:da:d6:b9:3a:2f:43:a5:53:26:3f:64:e6:36:b4: 64:41:30:91:4c:1b:64:37:4a:64:38:86:0c:74:a3: 19:ae:4f:cf:34:03:93:24:ff:78:f7:77:af:a5:51: 93:7d:7d:0d:77:f7:79:0e:fe:9b:04:3b:f2:d7:74: 8d:29:4c:d3:42:d3:90:9e:08:e5:e6:10:df:f0:92: 61:cf:47:98:4d:d5:13:68:b4:27:82:ad:91:d8:e5: a9:1f:0d:8b:d5:50:ff:93:38:16:b8:25:a8:93:d0: 0d:6d:2a:87:47:1d:39:d9:43:aa:c5:a0:89:72:98: d4:a8:fc:4f:e0:13:fd:1e:0e:17:64:ff:e2:12:56: ca:5e:05:cb:85:d2:cf:1b:cb:d5:2f:8d:06:5e:35: 7a:5b:b3:91:ed:f4:09:09:d7:d4:3c:94:94:48:59: 7a:84:fd:91:74:02:32:64:11:b0:43:c6:0a:8f:68: d7:a5:02:67:c0:76:e6:21:88:9a:3b:9b:ef:42:6c: 4e:b2:9a:c6:93:54:9c:68:37:01:bc:59:bf:8b:e2: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:59:D3:EB:D3:A9:B6:C0:59:38:B3:6D:E0:36:10:E5:9F:66:F5:AF X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c3:11:42:e8:aa:2d:73:09:55:69:7c:b0:40:0b:30:19:7b: af:7b:38:dc:6f:cc:2b:cc:32:61:d4:ec:44:4a:d6:92:b1:0c: 2d:7b:47:38:79:2a:f5:8c:a5:33:fc:d8:3e:e2:87:1c:e8:04: 9d:00:77:f0:08:33:d8:1b:12:08:5d:8b:ca:0d:a7:a2:61:9e: 15:6e:d0:6f:bb:b9:d3:a5:1b:c8:9e:4c:fe:72:34:5e:de:60: dd:da:28:4f:1d:00:10:d2:66:50:80:9e:f5:ae:e9:a8:6f:8f: 7a:95:b8:0f:55:5b:15:48:83:e9:8b:b7:93:2d:cf:b2:1c:c2: 44:b2:35:c3:ad:f7:c8:39:9b:4c:6e:82:90:3e:68:6a:82:4b: f9:6b:fc:95:7a:b5:e3:33:2a:b1:f3:d2:91:f4:2e:2f:01:ce: 6d:88:50:9a:2c:e7:63:6c:5b:b1:df:cc:a4:6e:ec:b4:a7:77: be:c2:0f:96:3c:da:09:62:43:4e:4b:73:e7:b6:58:7d:f4:4a: 64:2f:32:d6:97:df:35:96:f1:77:17:5d:bf:e3:74:5b:a2:e5: d9:17:a0:4c:ed:c8:e6:08:11:00:b9:4a:fe:82:6a:b5:59:ec: 4c:b8:3d:85:7a:27:e1:5b:b3:6c:67:5f:a0:0b:c6:97:b9:c3: 91:a1:3c:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ75C9iU09QXVR9xx+MkJiT7x7vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTEyMDUxMDI1MDNaFw0yNTEyMDgxNjE5MDNaMDMxMTAvBgNV BAMTKDNGNTlEM0VCRDNBOUI2QzA1OTM4QjM2REUwMzYxMEU1OUY2NkY1QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4STUQE0kyjl+Ue/XC3UzEknGR MJRESOD+SH68xe00tx4/E3DJSDCM7lWWsaHa1rk6L0OlUyY/ZOY2tGRBMJFMG2Q3 SmQ4hgx0oxmuT880A5Mk/3j3d6+lUZN9fQ1393kO/psEO/LXdI0pTNNC05CeCOXm EN/wkmHPR5hN1RNotCeCrZHY5akfDYvVUP+TOBa4JaiT0A1tKodHHTnZQ6rFoIly mNSo/E/gE/0eDhdk/+ISVspeBcuF0s8by9UvjQZeNXpbs5Ht9AkJ19Q8lJRIWXqE /ZF0AjJkEbBDxgqPaNelAmfAduYhiJo7m+9CbE6ymsaTVJxoNwG8Wb+L4vtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP1nT69OptsBZOLNt4DYQ5Z9m9a8wHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPDEULoqi1zCVVpfLBACzAZe697ONxvzCvM MmHU7ERK1pKxDC17Rzh5KvWMpTP82D7ihxzoBJ0Ad/AIM9gbEghdi8oNp6JhnhVu 0G+7udOlG8ieTP5yNF7eYN3aKE8dABDSZlCAnvWu6ahvj3qVuA9VWxVIg+mLt5Mt z7IcwkSyNcOt98g5m0xugpA+aGqCS/lr/JV6teMzKrHz0pH0Li8Bzm2IUJos52Ns W7HfzKRu7LSnd77CD5Y82gliQ05Lc+e2WH30SmQvMtaX3zWW8XcXXb/jdFui5dkX oEztyOYIEQC5Sv6CarVZ7Ey4PYV6J+Fbs2xnX6ALxpe5w5GhPCE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:35 2025 by rpki-client