This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft File: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft (raw, json) Hash identifier: 3Ln3WP6I970YQ7oFlvflrVQ+6n8x6Uv2Sutq0W8vvN8= Subject key identifier: 07:57:95:4B:4C:74:A9:42:2E:1A:72:E0:2A:46:BE:CF:DE:DA:42:04 Authority key identifier: D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA Certificate issuer: /CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Certificate serial: 77BA4C67E00AC195174A18C41D89DA0A215C737F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft Manifest number: 0212 Signing time: Fri 05 Dec 2025 19:40:48 +0000 Manifest this update: Fri 05 Dec 2025 19:35:48 +0000 Manifest next update: Tue 09 Dec 2025 07:19:48 +0000 Files and hashes: 1: 3130332e34312e3234382e302f32332d3233203d3e20313336383431.roa (hash: Q9gcXsnmhgdIFiAoT+4PlNJP+vGRpaSMes16ABWpf6E=) 2: D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl (hash: 5hatvDd2hCYYNwVckGo7MXmGKs1yJ4ukCEr/vwpi1t4=) 3: 3130332e34312e3234382e302f32342d3234203d3e20313336383431.roa (hash: V3NQepAED/G4v92/Kw8wwvusDJ/oK/3dp6EJLA6gw0s=) 4: 3130332e34312e3234392e302f32342d3234203d3e20313336383431.roa (hash: 7IiFMO+HhVDLxjHT2X4iJ4FHi1Re2KahShbn05EtlK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ba:4c:67:e0:0a:c1:95:17:4a:18:c4:1d:89:da:0a:21:5c:73:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D469937BD030575A6389B1FF4CDB185EFBC4B1FA Validity Not Before: Dec 5 19:35:48 2025 GMT Not After : Dec 9 07:19:48 2025 GMT Subject: CN=0757954B4C74A9422E1A72E02A46BECFDEDA4204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:a1:ac:92:8f:fe:63:16:f2:52:db:b0:1c: 18:89:d3:f3:55:2b:17:1e:19:8b:e7:6b:75:75:10: ec:79:a1:eb:45:a9:e1:c4:c7:33:26:d4:67:39:24: 4d:5f:b2:01:c6:44:6a:07:5f:8d:4b:8d:77:d5:f7: 51:4a:b5:6c:2b:47:f3:d3:bc:e3:66:4f:49:96:d6: 58:ca:bd:5d:31:a9:2c:58:ae:3b:80:8b:56:b1:df: 7b:a3:d0:2c:14:f7:d0:ce:dc:5a:5f:06:19:68:f2: 7e:6f:7a:85:e3:47:b7:d2:49:77:67:8e:ce:50:4e: a1:68:fb:13:15:bd:67:f7:a2:24:34:da:59:57:fb: a0:e7:80:03:a8:28:c6:67:4d:00:0a:2a:fa:e0:10: 42:d1:35:d3:49:0b:5e:49:6e:27:19:18:07:ee:bc: ff:ec:78:db:1a:5d:b2:d1:8d:3b:8c:1e:a2:cf:62: 7b:29:81:aa:d3:6b:ff:d8:c8:77:75:57:db:83:8f: 1f:a5:5f:fe:ba:7c:1a:ab:2f:59:91:db:d8:96:f7: 0c:49:8d:27:76:78:1f:af:ab:d8:b9:32:e8:de:d1: fa:f1:a7:a9:9f:72:65:3d:a7:88:40:c2:d0:7e:7c: 48:07:0f:1b:94:d6:d4:67:2a:6c:3d:64:ee:06:28: dd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:57:95:4B:4C:74:A9:42:2E:1A:72:E0:2A:46:BE:CF:DE:DA:42:04 X509v3 Authority Key Identifier: keyid:D4:69:93:7B:D0:30:57:5A:63:89:B1:FF:4C:DB:18:5E:FB:C4:B1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/775277e8-7d0f-4184-9c28-a6635efef29c/0/D469937BD030575A6389B1FF4CDB185EFBC4B1FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cd:f0:68:81:5a:e1:b1:1b:fd:2a:e1:ca:c0:75:7e:5d:f1: 62:a5:3f:5e:c7:f4:c0:23:43:e6:f2:8b:ec:93:e8:df:ab:33: b4:f3:73:85:04:06:b3:c6:61:97:d8:a6:09:e6:e9:44:df:fb: b9:13:03:aa:6a:ea:c5:56:f1:2b:02:75:53:7d:4b:ae:9f:bd: b5:e5:e4:30:f7:30:0a:e4:c8:3e:42:7e:6c:8a:ba:6f:d4:de: cf:b5:91:e6:f2:ef:42:21:b1:a7:bf:48:02:5d:57:6c:25:c7: 95:7a:cb:5e:ff:53:de:ff:f5:bf:c1:6e:cd:5d:ce:c0:1f:3d: df:57:7f:76:8b:e4:90:97:90:d4:a2:91:28:c6:a1:16:d2:14: 89:a8:f3:f4:69:3d:bd:51:f9:95:a2:e5:0a:53:e7:14:08:31: b4:23:0c:12:13:5d:71:91:fe:56:38:24:75:76:12:10:76:7d: 22:b7:c3:db:fc:21:c2:fb:9f:a5:3f:e9:70:19:57:8f:83:55: 82:0b:1e:e2:bc:c7:16:f1:9a:b3:f4:d0:46:f6:87:1e:29:51: 6a:8d:29:14:38:83:bf:43:06:3f:4e:c2:5c:e1:9c:58:b7:28: 94:8a:b0:f8:83:f1:d5:14:12:86:76:ba:06:a4:2c:38:37:03: 53:00:c9:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7pMZ+AKwZUXShjEHYnaCiFcc38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVG QkM0QjFGQTAeFw0yNTEyMDUxOTM1NDhaFw0yNTEyMDkwNzE5NDhaMDMxMTAvBgNV BAMTKDA3NTc5NTRCNEM3NEE5NDIyRTFBNzJFMDJBNDZCRUNGREVEQTQyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZqGsko/+YxbyUtuwHBiJ0/NV KxceGYvna3V1EOx5oetFqeHExzMm1Gc5JE1fsgHGRGoHX41LjXfV91FKtWwrR/PT vONmT0mW1ljKvV0xqSxYrjuAi1ax33uj0CwU99DO3FpfBhlo8n5veoXjR7fSSXdn js5QTqFo+xMVvWf3oiQ02llX+6DngAOoKMZnTQAKKvrgEELRNdNJC15JbicZGAfu vP/seNsaXbLRjTuMHqLPYnspgarTa//YyHd1V9uDjx+lX/66fBqrL1mR29iW9wxJ jSd2eB+vq9i5Muje0frxp6mfcmU9p4hAwtB+fEgHDxuU1tRnKmw9ZO4GKN03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB1eVS0x0qUIuGnLgKka+z97aQgQwHwYDVR0j BBgwFoAU1GmTe9AwV1pjibH/TNsYXvvEsfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzUyNzdlOC03ZDBmLTQxODQtOWMyOC1hNjYzNWVmZWYyOWMvMC9ENDY5OTM3QkQw MzA1NzVBNjM4OUIxRkY0Q0RCMTg1RUZCQzRCMUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4NUVGQkM0 QjFGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc1Mjc3ZTgtN2QwZi00MTg0LTlj MjgtYTY2MzVlZmVmMjljLzAvRDQ2OTkzN0JEMDMwNTc1QTYzODlCMUZGNENEQjE4 NUVGQkM0QjFGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILN8GiBWuGxG/0q4crAdX5d8WKlP17H9MAj Q+byi+yT6N+rM7Tzc4UEBrPGYZfYpgnm6UTf+7kTA6pq6sVW8SsCdVN9S66fvbXl 5DD3MArkyD5CfmyKum/U3s+1keby70Ihsae/SAJdV2wlx5V6y17/U97/9b/Bbs1d zsAfPd9Xf3aL5JCXkNSikSjGoRbSFImo8/RpPb1R+ZWi5QpT5xQIMbQjDBITXXGR /lY4JHV2EhB2fSK3w9v8IcL7n6U/6XAZV4+DVYILHuK8xxbxmrP00Eb2hx4pUWqN KRQ4g79DBj9OwlzhnFi3KJSKsPiD8dUUEoZ2ugakLDg3A1MAySw= -----END CERTIFICATE-----Generated at Sun Dec 7 02:50:36 2025 by rpki-client