This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft File: D2EA420344F486935839E03DF1B3C237F295C2DE.mft (raw, json) Hash identifier: SUcFb67V3pDg1Ho+hLKPHjHyDknO2+uOxCPjyzABArw= Subject key identifier: 8B:6E:CD:BB:62:3A:66:2D:C8:F9:E1:BB:64:FB:1B:5C:D8:07:8A:B6 Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE Certificate issuer: /CN=D2EA420344F486935839E03DF1B3C237F295C2DE Certificate serial: 4B8FFA84FE9619B6989B2A542AB8288981C6D4B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft Manifest number: 0503 Signing time: Fri 19 Dec 2025 14:22:24 +0000 Manifest this update: Fri 19 Dec 2025 14:17:24 +0000 Manifest next update: Mon 22 Dec 2025 15:41:24 +0000 Files and hashes: 1: 3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (hash: Z1/0hxtcuucuwACdWQq+JfghAHLR9fBRu9+nQ76ie1Y=) 2: 323430323a386163303a3a2f33322d3438203d3e20313337333230.roa (hash: oHAd0vkxRqWyozAmCufOZ+4unG6aZz/EmEBi8K1zkKg=) 3: D2EA420344F486935839E03DF1B3C237F295C2DE.crl (hash: aGgmygAIJj39m+qGGMcyNXcHjKy7LADqggmH1kE4xuw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 15:41:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8f:fa:84:fe:96:19:b6:98:9b:2a:54:2a:b8:28:89:81:c6:d4:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE Validity Not Before: Dec 19 14:17:24 2025 GMT Not After : Dec 22 15:41:24 2025 GMT Subject: CN=8B6ECDBB623A662DC8F9E1BB64FB1B5CD8078AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3d:63:d9:cb:28:b2:46:dc:c8:4b:aa:27:c3: df:d3:cb:23:10:5e:bb:35:52:e0:a5:22:86:1b:23: 7d:59:a4:f3:05:04:4b:5b:c9:16:4f:93:5d:0f:f5: b1:cf:f9:70:b2:b8:80:dc:4a:a5:02:3a:97:6c:d7: 5a:1a:a2:be:90:52:50:b5:11:a4:a8:03:7b:78:b3: b2:ff:d7:fd:a1:09:ae:67:75:77:15:b6:1a:e4:f1: 9c:1e:2a:74:f9:c9:d8:b4:a4:50:ca:7e:9c:29:35: 00:9e:76:db:ca:ce:98:39:d8:b9:85:56:a3:47:1d: b4:22:43:6a:d5:4e:f2:f1:ec:75:6a:3c:1f:a4:9f: 9b:0a:36:65:fe:84:22:3a:be:b8:aa:83:5c:93:64: 7e:5b:24:c2:2a:6c:8a:7c:ad:ce:88:bb:6a:56:16: 8f:f6:c8:af:1b:83:53:b0:cb:94:33:56:fd:b9:18: 51:c1:6f:2a:de:7b:74:a4:f3:95:b0:7b:0e:3e:47: 9b:37:c5:e0:52:c9:02:ce:ff:b9:ec:7c:a0:83:d7: 5b:8c:af:f0:66:02:33:ce:72:3c:b7:da:7d:68:ad: 9c:07:93:52:8f:a5:46:be:94:ac:1c:90:27:0a:2e: 3c:c1:ab:26:b9:db:d0:22:d0:15:13:df:66:73:53: 73:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6E:CD:BB:62:3A:66:2D:C8:F9:E1:BB:64:FB:1B:5C:D8:07:8A:B6 X509v3 Authority Key Identifier: keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b9:ec:c1:f3:8f:a0:1b:b4:34:3c:6f:20:82:72:81:c2:90: 3b:e3:8a:07:e0:c1:5d:ea:e4:61:22:cc:13:fd:10:20:63:6d: d7:43:a6:a5:18:15:c1:9d:ae:31:1b:b7:05:c3:4f:09:b1:81: 2a:41:2f:de:43:eb:71:02:56:f4:f3:9b:df:f7:e7:7a:f9:c3: 73:cb:0d:b8:cf:94:d6:f5:15:dc:a9:6d:85:a5:36:b2:40:ae: 54:59:c2:ee:44:a5:9b:af:b9:b1:74:27:37:2f:74:15:14:b4: da:1a:26:d0:60:f5:72:63:5b:8d:78:c4:40:c4:e0:74:41:91: 5d:ee:b7:61:ac:a4:4c:f1:4c:63:32:0c:8c:41:7c:de:7a:9b: ce:45:d1:33:69:5d:1e:1b:3a:86:58:2f:ea:11:1b:86:20:be: 29:d7:67:73:2b:f6:09:2f:cf:58:71:f0:5a:09:a0:45:46:a4: 6f:85:a7:af:11:f7:3e:e1:6d:71:35:61:a0:da:6b:69:f7:5b: ff:82:0f:88:3d:30:1f:c4:ad:64:ae:ed:d3:de:a3:e9:aa:bb: dd:81:8e:f5:cc:55:6a:06:f3:3e:c4:37:9c:86:22:5c:7a:66: e6:48:c2:96:ab:0a:8c:75:cb:01:df:f4:b4:9e:a3:b6:63:9a: 16:19:f3:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4/6hP6WGbaYmypUKrgoiYHG1LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdG Mjk1QzJERTAeFw0yNTEyMTkxNDE3MjRaFw0yNTEyMjIxNTQxMjRaMDMxMTAvBgNV BAMTKDhCNkVDREJCNjIzQTY2MkRDOEY5RTFCQjY0RkIxQjVDRDgwNzhBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5PWPZyyiyRtzIS6onw9/TyyMQ Xrs1UuClIoYbI31ZpPMFBEtbyRZPk10P9bHP+XCyuIDcSqUCOpds11oaor6QUlC1 EaSoA3t4s7L/1/2hCa5ndXcVthrk8ZweKnT5ydi0pFDKfpwpNQCedtvKzpg52LmF VqNHHbQiQ2rVTvLx7HVqPB+kn5sKNmX+hCI6vriqg1yTZH5bJMIqbIp8rc6Iu2pW Fo/2yK8bg1Owy5QzVv25GFHBbyree3Sk85Wwew4+R5s3xeBSyQLO/7nsfKCD11uM r/BmAjPOcjy32n1orZwHk1KPpUa+lKwckCcKLjzBqya529Ai0BUT32ZzU3MxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi27Nu2I6Zi3I+eG7ZPsbXNgHirYwHwYDVR0j BBgwFoAU0upCA0T0hpNYOeA98bPCN/KVwt4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDA4ODNmMy00NTdhLTRjMTQtOTU3Ny02N2UxNTBhMmIxMmEvMC9EMkVBNDIwMzQ0 RjQ4NjkzNTgzOUUwM0RGMUIzQzIzN0YyOTVDMkRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0MyMzdGMjk1 QzJERS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQwODgzZjMtNDU3YS00YzE0LTk1 NzctNjdlMTUwYTJiMTJhLzAvRDJFQTQyMDM0NEY0ODY5MzU4MzlFMDNERjFCM0My MzdGMjk1QzJERS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACi57MHzj6AbtDQ8byCCcoHCkDvjigfgwV3q 5GEizBP9ECBjbddDpqUYFcGdrjEbtwXDTwmxgSpBL95D63ECVvTzm9/353r5w3PL DbjPlNb1FdypbYWlNrJArlRZwu5EpZuvubF0JzcvdBUUtNoaJtBg9XJjW414xEDE 4HRBkV3ut2GspEzxTGMyDIxBfN56m85F0TNpXR4bOoZYL+oRG4YgvinXZ3Mr9gkv z1hx8FoJoEVGpG+Fp68R9z7hbXE1YaDaa2n3W/+CD4g9MB/ErWSu7dPeo+mqu92B jvXMVWoG8z7EN5yGIlx6ZuZIwparCox1ywHf9LSeo7ZjmhYZ8xQ= -----END CERTIFICATE-----Generated at Sun Dec 21 08:51:55 2025 by rpki-client