This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: xBPWzMKPeDOmuN9UDmX6mcdU4rl6E2iah+WhfhMR6bo= Subject key identifier: 25:9D:B4:B0:2F:FC:E3:F0:10:2D:77:FB:45:BC:DD:44:E5:EE:D7:07 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 6E70581F818D1B46E7DFBEE2B90B19344EF0F84C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 022C Signing time: Mon 15 Dec 2025 13:41:59 +0000 Manifest this update: Mon 15 Dec 2025 13:36:59 +0000 Manifest next update: Fri 19 Dec 2025 00:24:59 +0000 Files and hashes: 1: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: cw5L9ry0rQfYsLfzL4nezizvx+TLYRTzfD8MCMcX6Fk=) 2: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 00:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:70:58:1f:81:8d:1b:46:e7:df:be:e2:b9:0b:19:34:4e:f0:f8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Dec 15 13:36:59 2025 GMT Not After : Dec 19 00:24:59 2025 GMT Subject: CN=259DB4B02FFCE3F0102D77FB45BCDD44E5EED707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ee:11:5e:49:54:47:3e:26:96:d5:ac:e5:f9: fe:cb:76:d6:0c:e5:60:64:d1:8a:f4:09:bb:11:cc: 8f:84:95:bb:54:f7:e2:ca:73:b3:ec:53:88:05:e0: bc:65:cf:e4:75:23:47:23:27:a5:e4:d9:bc:7c:16: 66:0a:62:3d:b7:ed:ab:92:19:45:c8:f7:1a:a0:51: 35:40:40:5c:a5:e5:5f:e0:9a:56:63:06:49:4d:31: be:f3:cc:3b:b7:72:7d:41:f7:0a:fe:04:7e:53:ed: 73:26:c7:8f:77:f6:85:66:f7:08:60:4c:97:f8:db: 96:d9:26:c3:b1:71:09:3b:7f:f9:43:f0:14:5d:a4: 14:34:ee:52:a7:7f:77:59:ef:80:d5:90:58:e9:84: e5:1c:45:f2:52:a3:b5:fe:96:2b:e8:43:e4:e6:e5: bd:1f:1e:b5:68:8e:14:a5:aa:19:c4:00:71:f5:a7: a4:fa:48:12:6f:2e:d7:8b:b0:17:5f:89:a2:5b:9d: d1:d7:1b:01:18:20:36:1e:7d:c9:67:62:b2:5b:20: a6:22:61:0b:7a:53:91:4d:24:c3:2c:f7:b2:8a:68: 57:fe:2d:62:85:52:78:87:6b:2e:f5:0b:88:84:7a: 88:cd:9d:82:d7:c5:ad:f0:96:27:21:6e:3b:cb:51: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9D:B4:B0:2F:FC:E3:F0:10:2D:77:FB:45:BC:DD:44:E5:EE:D7:07 X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f4:97:85:43:06:2e:4c:67:d0:09:7c:34:74:c3:64:44:b6: 3d:3d:bc:e1:4e:5e:5e:18:87:ab:c6:26:80:fb:e6:d1:7f:34: e2:34:f5:89:35:5d:56:be:e8:ec:2c:01:4c:f2:2e:aa:8d:ba: b8:c8:2d:e9:fe:fd:50:10:ee:7b:f0:04:8a:e5:72:80:00:9b: 63:59:57:c5:b0:ae:3d:d9:b8:b7:30:ca:0d:2b:75:49:bc:ab: 87:a9:df:f0:84:1f:6a:2b:8b:fa:95:e2:ba:89:16:d2:b5:4a: 7e:db:d1:e1:ff:a7:ab:1e:0d:c9:2c:b1:f4:57:8a:3e:c6:49: 5c:2a:41:b1:b8:5f:26:61:ba:53:1f:d9:21:b9:a1:04:76:07: 2a:0b:15:d0:a3:f9:df:4c:2e:06:07:2a:8a:c5:aa:bc:e0:f0: 35:11:a4:c2:bc:80:af:6e:27:f3:9c:4f:20:80:c6:f3:fd:b7: 8f:22:2d:02:1d:ee:04:33:65:54:16:38:5d:38:a2:92:22:bf: 09:5b:0b:08:d5:a1:e6:d3:50:1f:2a:07:18:7d:1d:9e:7e:ed: 91:c3:c4:8c:75:0e:33:34:8a:c0:d7:7e:5f:7e:73:37:e8:6f: 6e:14:32:26:8f:44:89:62:54:39:40:54:af:3b:5b:e3:bd:96: d6:5c:9c:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnBYH4GNG0bn377iuQsZNE7w+EwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNTEyMTUxMzM2NTlaFw0yNTEyMTkwMDI0NTlaMDMxMTAvBgNV BAMTKDI1OURCNEIwMkZGQ0UzRjAxMDJENzdGQjQ1QkNERDQ0RTVFRUQ3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl7hFeSVRHPiaW1azl+f7LdtYM 5WBk0Yr0CbsRzI+ElbtU9+LKc7PsU4gF4Lxlz+R1I0cjJ6Xk2bx8FmYKYj237auS GUXI9xqgUTVAQFyl5V/gmlZjBklNMb7zzDu3cn1B9wr+BH5T7XMmx4939oVm9whg TJf425bZJsOxcQk7f/lD8BRdpBQ07lKnf3dZ74DVkFjphOUcRfJSo7X+livoQ+Tm 5b0fHrVojhSlqhnEAHH1p6T6SBJvLteLsBdfiaJbndHXGwEYIDYefclnYrJbIKYi YQt6U5FNJMMs97KKaFf+LWKFUniHay71C4iEeojNnYLXxa3wlichbjvLUQjlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJZ20sC/84/AQLXf7RbzdROXu1wcwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJf0l4VDBi5MZ9AJfDR0w2REtj09vOFOXl4Y h6vGJoD75tF/NOI09Yk1XVa+6OwsAUzyLqqNurjILen+/VAQ7nvwBIrlcoAAm2NZ V8Wwrj3ZuLcwyg0rdUm8q4ep3/CEH2ori/qV4rqJFtK1Sn7b0eH/p6seDckssfRX ij7GSVwqQbG4XyZhulMf2SG5oQR2ByoLFdCj+d9MLgYHKorFqrzg8DURpMK8gK9u J/OcTyCAxvP9t48iLQId7gQzZVQWOF04opIivwlbCwjVoebTUB8qBxh9HZ5+7ZHD xIx1DjM0isDXfl9+czfob24UMiaPRIliVDlAVK87W+O9ltZcnFQ= -----END CERTIFICATE-----Generated at Wed Dec 17 18:33:37 2025 by rpki-client