This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json) Hash identifier: dy1gzFt4BQFXieb5xCV7A6PM1SxW4BDtrXiXjXiUYGo= Subject key identifier: 43:40:1F:9C:A2:08:17:EF:00:4F:55:4A:19:9F:79:4B:47:5A:97:16 Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Certificate serial: 4F9F30D31905196DB4BA0C7A067EB28D7DBED83D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft Manifest number: 01D9 Signing time: Wed 17 Dec 2025 13:50:00 +0000 Manifest this update: Wed 17 Dec 2025 13:45:00 +0000 Manifest next update: Sat 20 Dec 2025 14:19:00 +0000 Files and hashes: 1: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: 7LSMPL8vBB3tryB4W9V+LqRs1lcp8JLOw5O4E5oOPZ8=) 2: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: 8EyryCrJd2oac0IfUEjuHccwo0/snvksPJnN6sNH3xs=) 3: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: N0/JO0oaR76f4qC9rQwj7j3uUoZjxf567pjSkSVvNG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9f:30:d3:19:05:19:6d:b4:ba:0c:7a:06:7e:b2:8d:7d:be:d8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Validity Not Before: Dec 17 13:45:00 2025 GMT Not After : Dec 20 14:19:00 2025 GMT Subject: CN=43401F9CA20817EF004F554A199F794B475A9716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:52:d7:fc:5f:ea:57:cf:de:9f:4f:84:45: 4e:21:86:cd:dc:ff:89:b3:55:13:a5:10:06:b1:7f: 55:0f:f6:03:3c:98:82:b2:84:c2:15:76:8d:01:cb: 5a:01:38:9c:93:c1:7f:88:ea:4d:73:9a:1d:78:35: 73:bc:3b:11:28:80:5e:c0:4b:c4:40:63:73:1a:9a: f3:dc:71:4f:29:b1:07:86:82:2e:18:32:9e:cd:4b: 31:74:5e:da:3c:ae:4f:66:39:5a:16:65:58:0b:53: 89:05:12:fe:d0:8e:71:2d:03:e1:cb:ea:6a:e9:b0: 67:ad:69:e3:89:8f:03:c0:e8:8c:cd:47:91:3b:a6: 54:3e:26:9a:67:c7:e4:0b:44:6e:b8:99:d3:15:ec: b9:57:8f:fa:f3:06:34:7c:17:eb:90:02:6a:80:83: 76:7c:f9:7e:d4:3d:7d:7f:c1:5f:1c:76:ca:b3:b6: 20:0c:ec:8d:db:60:a2:76:f1:27:1d:9d:92:23:05: 3e:52:d2:6c:77:e2:36:62:b8:9f:16:37:4f:66:b2: a1:85:69:59:c6:78:b5:bd:f3:45:66:97:44:d1:4c: a5:ea:44:8b:bc:13:54:97:e1:86:b3:8b:b3:47:0f: 3c:85:14:92:19:fb:98:97:c2:ae:b2:2e:6c:69:21: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:40:1F:9C:A2:08:17:EF:00:4F:55:4A:19:9F:79:4B:47:5A:97:16 X509v3 Authority Key Identifier: keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:bc:ba:62:dc:d5:66:58:9b:95:e1:c2:84:9b:45:7f:40:99: 4e:4d:de:7d:50:f3:fb:f6:5e:b6:96:3d:0e:1a:23:29:12:e0: 02:1e:77:75:c0:ba:95:5a:b5:3a:0a:2c:12:b5:9f:eb:8d:3b: e4:82:d3:0e:60:4a:89:3f:cf:6e:1f:19:7b:55:b9:49:0f:de: d2:dc:a2:69:1a:fc:8d:4f:78:3c:7d:df:dd:d0:4d:39:cf:68: 85:30:8c:ce:54:8e:48:fd:d4:f3:9c:d3:81:9d:dd:ff:c5:7c: 37:15:c7:34:c3:ad:da:b6:30:c2:a1:a2:ef:d6:da:6d:9d:88: a4:a6:b1:78:d7:60:25:c6:1a:5d:10:2f:48:ab:83:e6:18:ab: 24:0c:22:41:c0:9e:57:85:ae:46:d1:a7:44:8e:bd:07:39:ca: 7a:83:34:90:26:11:a1:2c:e7:b6:00:8f:89:85:cc:1d:fd:72: 47:75:fd:4a:55:05:2c:39:50:3b:57:25:07:da:49:52:a5:6d: 39:8d:fd:2f:7a:2e:18:78:c4:e0:f6:98:d1:f1:87:d9:ab:fe: 9b:0a:5c:5d:82:b7:e9:98:ce:3f:97:f8:c6:4a:af:3a:c5:3b: 4f:62:84:16:f8:91:60:b1:98:b5:99:91:4d:a9:08:f1:05:2d: c5:1b:65:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT58w0xkFGW20ugx6Bn6yjX2+2D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJC Q0NGOTFFQTAeFw0yNTEyMTcxMzQ1MDBaFw0yNTEyMjAxNDE5MDBaMDMxMTAvBgNV BAMTKDQzNDAxRjlDQTIwODE3RUYwMDRGNTU0QTE5OUY3OTRCNDc1QTk3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGMlLX/F/qV8/en0+ERU4hhs3c /4mzVROlEAaxf1UP9gM8mIKyhMIVdo0By1oBOJyTwX+I6k1zmh14NXO8OxEogF7A S8RAY3MamvPccU8psQeGgi4YMp7NSzF0Xto8rk9mOVoWZVgLU4kFEv7QjnEtA+HL 6mrpsGetaeOJjwPA6IzNR5E7plQ+Jppnx+QLRG64mdMV7LlXj/rzBjR8F+uQAmqA g3Z8+X7UPX1/wV8cdsqztiAM7I3bYKJ28ScdnZIjBT5S0mx34jZiuJ8WN09msqGF aVnGeLW980Vml0TRTKXqRIu8E1SX4Yazi7NHDzyFFJIZ+5iXwq6yLmxpIZ8rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ0AfnKIIF+8AT1VKGZ95S0dalxYwHwYDVR0j BBgwFoAU0XW9xaZBTOurRy35FZy9MrzPkeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjJkNGQ3NC02Mjk1LTQ0OTYtODIzYS0xZThhM2Q1YmJiNmMvMC9EMTc1QkRDNUE2 NDE0Q0VCQUI0NzJERjkxNTlDQkQzMkJDQ0Y5MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJCQ0NG OTFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JE MzJCQ0NGOTFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABq8umLc1WZYm5XhwoSbRX9AmU5N3n1Q8/v2 XraWPQ4aIykS4AIed3XAupVatToKLBK1n+uNO+SC0w5gSok/z24fGXtVuUkP3tLc omka/I1PeDx9393QTTnPaIUwjM5Ujkj91POc04Gd3f/FfDcVxzTDrdq2MMKhou/W 2m2diKSmsXjXYCXGGl0QL0irg+YYqyQMIkHAnleFrkbRp0SOvQc5ynqDNJAmEaEs 57YAj4mFzB39ckd1/UpVBSw5UDtXJQfaSVKlbTmN/S96Lhh4xOD2mNHxh9mr/psK XF2Ct+mYzj+X+MZKrzrFO09ihBb4kWCxmLWZkU2pCPEFLcUbZbw= -----END CERTIFICATE-----Generated at Thu Dec 18 19:08:52 2025 by rpki-client