This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: lVUE0/9FSz9aPaPffnMaefvV19f6DPekextNJUIVji4= Subject key identifier: CE:6D:96:E8:5A:3B:66:7B:2B:15:82:DD:81:A5:62:CE:88:CA:00:3D Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 2C978E50CE15E25B4BAB8A92D8D45399EFC4884A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 0228 Signing time: Sat 06 Dec 2025 00:31:57 +0000 Manifest this update: Sat 06 Dec 2025 00:26:57 +0000 Manifest next update: Tue 09 Dec 2025 07:52:57 +0000 Files and hashes: 1: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: 8jr7Lu0aNimueJkbgkE2EFbUmKVJRc+0jfMrH6BKbb8=) 2: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:52:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:97:8e:50:ce:15:e2:5b:4b:ab:8a:92:d8:d4:53:99:ef:c4:88:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Dec 6 00:26:57 2025 GMT Not After : Dec 9 07:52:57 2025 GMT Subject: CN=CE6D96E85A3B667B2B1582DD81A562CE88CA003D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:ea:45:27:12:29:df:8a:75:bb:f5:23:0e: f0:0d:e7:42:ca:81:53:ee:fe:7e:4f:a9:31:e1:dd: c2:83:32:21:af:75:7a:46:d7:46:33:2e:8f:c0:6d: 5c:a6:16:13:66:d5:55:b7:24:f2:3e:4a:79:ac:c6: e2:a8:b8:18:d6:74:8f:4c:65:e6:22:3a:32:d9:39: 3d:e6:bc:54:75:7f:29:18:04:df:bc:f7:64:86:41: 38:6c:17:25:5f:0a:95:b2:c0:91:42:eb:d1:6c:0a: 21:fb:8f:89:c4:58:ce:1e:8d:6b:de:cb:35:9c:94: 28:c7:76:fc:c9:ff:06:cd:eb:aa:c8:d2:35:2b:22: 89:49:89:c7:3e:3a:52:9c:e4:64:d0:e9:1b:39:82: da:56:5e:f7:a9:31:5e:56:1c:2f:f4:ae:0d:c6:1f: d4:80:72:9a:a3:12:2f:9c:78:14:83:1a:63:d5:7e: a8:57:13:a6:06:2a:22:0e:e3:6f:02:22:c1:d6:6e: a2:5d:ef:98:00:a1:4e:87:25:ef:dc:4f:05:5d:a4: 9e:3f:22:6b:b0:12:f4:f6:7b:42:4a:3d:df:3d:8c: 4e:f8:42:9b:37:e6:a4:84:1f:48:b6:5c:1a:7a:6d: 87:af:10:b7:2a:85:37:29:5a:fc:c2:3d:3f:5b:f4: bb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6D:96:E8:5A:3B:66:7B:2B:15:82:DD:81:A5:62:CE:88:CA:00:3D X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b6:6a:8c:a8:47:db:d2:40:bd:06:79:cf:44:54:7e:43:81: 38:f8:41:77:37:91:02:80:e0:04:6d:27:50:ae:26:dc:9d:ed: 08:d3:7d:08:ff:a1:8f:e1:f0:e5:9c:44:37:96:54:3d:e6:a6: ac:73:69:60:19:65:4f:28:d6:bb:d1:b8:cb:b1:fb:8a:28:b9: ca:0d:de:32:52:00:e3:06:1b:e7:1d:e0:c3:d1:88:dd:91:80: f8:01:65:e5:3c:be:5d:b1:63:86:56:6f:09:f5:8b:7d:61:80: 98:c5:19:f0:52:72:cc:a5:8d:a4:45:df:94:7a:bd:70:84:67: b1:6d:38:43:f2:69:ce:58:a5:1e:9f:6d:63:08:53:05:2e:b3: 93:ee:b0:b3:76:93:40:1c:4a:78:b4:a3:ab:d8:f0:a9:88:34: eb:1b:6c:78:8c:a2:15:76:2f:f5:d8:ba:ba:11:51:2f:f6:f1: 63:ef:a7:35:a5:a9:06:b3:22:4b:82:aa:80:0c:63:ea:66:03: 2d:a4:79:f0:47:7c:f4:cb:10:f0:0f:97:43:52:9a:54:89:f6: 0d:4c:f7:ef:57:20:79:34:08:f9:3c:46:7b:51:88:cf:ef:59: 51:2c:71:17:3a:2f:33:d1:c4:86:4a:7e:f1:4a:26:0b:b7:38: c7:ea:88:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJeOUM4V4ltLq4qS2NRTme/EiEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNTEyMDYwMDI2NTdaFw0yNTEyMDkwNzUyNTdaMDMxMTAvBgNV BAMTKENFNkQ5NkU4NUEzQjY2N0IyQjE1ODJERDgxQTU2MkNFODhDQTAwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BOpFJxIp34p1u/UjDvAN50LK gVPu/n5PqTHh3cKDMiGvdXpG10YzLo/AbVymFhNm1VW3JPI+SnmsxuKouBjWdI9M ZeYiOjLZOT3mvFR1fykYBN+892SGQThsFyVfCpWywJFC69FsCiH7j4nEWM4ejWve yzWclCjHdvzJ/wbN66rI0jUrIolJicc+OlKc5GTQ6Rs5gtpWXvepMV5WHC/0rg3G H9SAcpqjEi+ceBSDGmPVfqhXE6YGKiIO428CIsHWbqJd75gAoU6HJe/cTwVdpJ4/ ImuwEvT2e0JKPd89jE74Qps35qSEH0i2XBp6bYevELcqhTcpWvzCPT9b9LtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzm2W6Fo7ZnsrFYLdgaVizojKAD0wHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIu2aoyoR9vSQL0Gec9EVH5DgTj4QXc3kQKA 4ARtJ1CuJtyd7QjTfQj/oY/h8OWcRDeWVD3mpqxzaWAZZU8o1rvRuMux+4ooucoN 3jJSAOMGG+cd4MPRiN2RgPgBZeU8vl2xY4ZWbwn1i31hgJjFGfBScsyljaRF35R6 vXCEZ7FtOEPyac5YpR6fbWMIUwUus5PusLN2k0AcSni0o6vY8KmINOsbbHiMohV2 L/XYuroRUS/28WPvpzWlqQazIkuCqoAMY+pmAy2kefBHfPTLEPAPl0NSmlSJ9g1M 9+9XIHk0CPk8RntRiM/vWVEscRc6LzPRxIZKfvFKJgu3OMfqiH4= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:56 2025 by rpki-client