This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: jyquomv73EkkXkviXKJxPif3oDzPcUVvRT0dCfryw58= Subject key identifier: E0:A5:6D:9D:03:FD:D0:0D:C1:A8:DE:40:92:9F:4F:4A:51:7F:B6:DF Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 7E755878E01BE698AB24AC9F17D0BD28A855ED16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 052A Signing time: Sat 06 Dec 2025 00:11:20 +0000 Manifest this update: Sat 06 Dec 2025 00:06:20 +0000 Manifest next update: Tue 09 Dec 2025 11:03:20 +0000 Files and hashes: 1: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 3: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: A+PqGuMv0gytbP/kcq/ENzoxWMs3WWx+5mqUQiqbPfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:75:58:78:e0:1b:e6:98:ab:24:ac:9f:17:d0:bd:28:a8:55:ed:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Dec 6 00:06:20 2025 GMT Not After : Dec 9 11:03:20 2025 GMT Subject: CN=E0A56D9D03FDD00DC1A8DE40929F4F4A517FB6DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:b0:90:cf:30:31:fa:14:20:65:e3:32:cd: e9:2e:d6:f5:0f:a3:95:d6:95:97:ca:d0:5f:01:3f: 0f:68:af:e6:17:fe:21:cb:d6:4a:60:83:9d:fb:ff: f2:b5:fd:42:5b:fc:45:28:02:ae:77:be:50:b0:2e: 1c:9e:9c:06:f4:a5:51:3b:2a:31:d3:93:e8:08:9b: 39:11:2a:33:04:ac:7f:93:53:6d:ef:b2:1f:05:32: 96:89:48:22:e9:15:b3:37:11:56:71:b2:56:8d:44: 53:c9:0b:48:9e:f7:4f:c7:02:3b:ee:e1:a5:e3:53: 77:b0:70:60:31:9b:5c:c5:d3:e0:b0:59:9d:29:d1: a4:8d:5c:2f:ae:7d:d0:91:df:93:5e:b4:63:be:20: 87:39:84:cf:86:26:54:c5:1a:60:39:d8:1b:d4:0d: 1c:12:bb:0e:cf:66:b7:cf:cb:37:29:e0:14:29:50: aa:f7:1d:3c:cc:fa:af:e5:19:2e:1e:7f:ed:a4:25: 68:93:42:be:e0:61:d6:0d:4c:22:a4:8e:85:71:9d: 44:01:0a:a5:4f:2b:03:0e:f0:fc:03:ab:3d:37:59: b3:3b:99:17:58:40:ef:3b:aa:31:fd:7f:bc:af:00: 5e:42:b1:b3:d3:2e:f8:b9:2c:7e:d1:90:60:77:62: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A5:6D:9D:03:FD:D0:0D:C1:A8:DE:40:92:9F:4F:4A:51:7F:B6:DF X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ab:2f:fb:48:dc:36:65:ce:d8:34:f5:e4:bb:83:ac:62:47: 00:d0:67:d2:9a:a7:5b:3d:a3:c3:de:d4:02:57:e3:33:5b:90: 32:9d:79:22:27:e7:fc:b7:1b:24:09:9b:13:6e:8b:42:87:c2: 1e:59:1a:71:9e:40:94:5e:3c:1c:8b:61:be:d5:c1:ae:ae:b6: fa:84:ca:4a:3b:49:03:bb:48:95:62:f2:d7:6f:9b:3e:37:21: 85:bd:61:df:e9:b9:14:be:01:bf:de:90:7b:e3:4b:b4:f0:63: 91:32:94:84:f7:58:77:ae:72:a2:81:84:87:3d:eb:49:0b:9e: 93:89:34:27:02:28:24:bd:1b:5d:01:6d:97:0b:86:5c:3c:1d: a2:29:df:42:34:af:67:28:60:c4:85:57:11:10:5d:b2:8a:e1: 4d:c6:81:95:c7:4f:53:af:d5:2e:b2:50:1d:2a:ca:a4:5a:a5: 87:de:f8:a0:b1:1e:bf:e0:0d:9f:11:ec:3f:77:fb:82:1f:86: 81:f8:ee:02:85:57:c5:65:c3:12:48:92:ad:4a:35:30:9b:3c: f7:75:17:25:79:48:ff:2e:82:14:aa:29:05:c4:ea:a3:f4:0c: a7:1e:38:e3:18:1f:32:84:2e:65:14:e8:0c:60:e6:93:46:24: 59:09:81:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnVYeOAb5pirJKyfF9C9KKhV7RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNTEyMDYwMDA2MjBaFw0yNTEyMDkxMTAzMjBaMDMxMTAvBgNV BAMTKEUwQTU2RDlEMDNGREQwMERDMUE4REU0MDkyOUY0RjRBNTE3RkI2REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFzrCQzzAx+hQgZeMyzeku1vUP o5XWlZfK0F8BPw9or+YX/iHL1kpgg537//K1/UJb/EUoAq53vlCwLhyenAb0pVE7 KjHTk+gImzkRKjMErH+TU23vsh8FMpaJSCLpFbM3EVZxslaNRFPJC0ie90/HAjvu 4aXjU3ewcGAxm1zF0+CwWZ0p0aSNXC+ufdCR35NetGO+IIc5hM+GJlTFGmA52BvU DRwSuw7PZrfPyzcp4BQpUKr3HTzM+q/lGS4ef+2kJWiTQr7gYdYNTCKkjoVxnUQB CqVPKwMO8PwDqz03WbM7mRdYQO87qjH9f7yvAF5CsbPTLvi5LH7RkGB3YqLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4KVtnQP90A3BqN5Akp9PSlF/tt8wHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+rL/tI3DZlztg09eS7g6xiRwDQZ9Kap1s9 o8Pe1AJX4zNbkDKdeSIn5/y3GyQJmxNui0KHwh5ZGnGeQJRePByLYb7Vwa6utvqE yko7SQO7SJVi8tdvmz43IYW9Yd/puRS+Ab/ekHvjS7TwY5EylIT3WHeucqKBhIc9 60kLnpOJNCcCKCS9G10BbZcLhlw8HaIp30I0r2coYMSFVxEQXbKK4U3GgZXHT1Ov 1S6yUB0qyqRapYfe+KCxHr/gDZ8R7D93+4IfhoH47gKFV8VlwxJIkq1KNTCbPPd1 FyV5SP8ughSqKQXE6qP0DKceOOMYHzKELmUU6Axg5pNGJFkJgbM= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:33 2025 by rpki-client