This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft (raw, json) Hash identifier: RzO0c8Fu3BZGv3pEcHGvci/v0aIZT2io9LlA63dxyrA= Subject key identifier: B5:2B:DE:1E:43:92:F3:EE:CB:DC:AA:3E:5B:5B:66:75:D3:0E:C0:53 Authority key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Certificate issuer: /CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Certificate serial: 3218571C254DDDEB298598BB808C825295712983 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft Manifest number: 01D4 Signing time: Fri 05 Dec 2025 14:20:00 +0000 Manifest this update: Fri 05 Dec 2025 14:15:00 +0000 Manifest next update: Tue 09 Dec 2025 02:11:00 +0000 Files and hashes: 1: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl (hash: oBBwgiNUJnWs37HpcJq9NYIVagCyYLMhXMyEDxsmtq4=) 2: 323030313a6466313a646534303a3a2f34382d3438203d3e20313530353033.roa (hash: 7LSMPL8vBB3tryB4W9V+LqRs1lcp8JLOw5O4E5oOPZ8=) 3: 3130332e3132362e3233382e302f32342d3234203d3e20313530353033.roa (hash: N0/JO0oaR76f4qC9rQwj7j3uUoZjxf567pjSkSVvNG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:11:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:18:57:1c:25:4d:dd:eb:29:85:98:bb:80:8c:82:52:95:71:29:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Validity Not Before: Dec 5 14:15:00 2025 GMT Not After : Dec 9 02:11:00 2025 GMT Subject: CN=B52BDE1E4392F3EECBDCAA3E5B5B6675D30EC053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:5e:3c:7e:79:6e:70:57:8f:68:c3:7f:9a: b7:9e:c6:05:16:db:7a:81:ba:33:07:cd:ad:04:8a: 16:0c:ef:33:af:12:d3:29:6e:f3:62:82:30:90:00: 41:88:44:1f:a0:ba:59:6d:a4:02:84:9d:45:2d:83: 12:00:a7:d5:8e:76:0b:12:19:7d:fb:bc:b5:0c:bd: f5:94:0d:7a:ef:ff:68:cb:a3:4d:a4:fa:0c:78:b8: 25:1c:24:b7:69:c9:70:69:9f:88:bc:85:e4:02:99: 85:67:6c:f5:a3:a3:93:33:b8:6d:47:b1:ef:8d:79: 3d:28:32:8b:e3:83:47:bc:ce:a0:de:d9:f9:2c:8e: 0d:53:a3:98:07:73:f6:62:82:b3:ba:4b:1d:01:da: 38:49:92:0e:73:d1:2e:d1:f1:31:00:99:9c:46:3a: 0a:6f:2c:07:14:53:8b:53:7a:f8:ee:7c:b4:9a:c7: 2c:8a:5d:57:72:f2:91:8c:e3:2a:9f:16:15:a8:a5: 00:6c:33:a0:32:95:72:63:ea:44:78:f5:0a:fd:d1: 7c:13:45:af:e2:7d:89:e0:60:72:8d:89:8a:84:d8: 55:40:01:e9:00:14:ff:3c:37:b7:8b:87:c3:1a:b0: 04:41:49:cd:22:fe:4f:dd:c3:f2:b0:f2:32:64:53: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:2B:DE:1E:43:92:F3:EE:CB:DC:AA:3E:5B:5B:66:75:D3:0E:C0:53 X509v3 Authority Key Identifier: keyid:D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:98:9a:0a:85:07:f5:74:16:b4:e4:d3:0a:b1:0a:77:49:1d: 3a:dd:2b:55:69:9e:78:65:a1:25:33:88:aa:e6:9d:56:00:86: c8:51:2c:7d:2d:fd:6b:35:e7:11:2b:26:90:b4:e6:2f:aa:58: b8:e5:3d:c7:2d:a3:0e:34:5c:e2:d5:16:8b:de:76:fc:04:1e: 1b:ac:17:f9:9f:b9:bf:f5:e6:91:cc:39:69:a8:d5:c9:bf:c6: 3d:68:8e:48:c1:63:66:7a:71:49:cc:c5:ab:9e:40:d6:8b:ed: d1:8f:1d:1c:35:bf:12:ee:c4:e0:cd:66:d9:3d:d5:54:78:9b: bd:ff:0e:9f:6c:01:3b:ca:b1:c7:64:45:9d:59:e2:b9:f3:b5: b5:51:c2:22:c5:64:a2:0d:ae:01:d5:9c:4a:66:62:e7:c7:75: 61:e8:a2:c5:b8:47:33:c4:89:f4:4a:4c:72:1c:25:df:66:6b: f6:fa:dd:1a:f5:3e:18:a6:62:47:f1:b3:60:d2:f2:d3:f7:94: f5:6e:aa:3d:99:69:da:9a:64:13:f0:46:02:9d:76:a0:64:3b: 9d:74:7c:fa:d5:6e:20:13:f9:e3:6f:3f:4f:6d:f8:b3:90:9f: 96:44:dc:c9:29:3f:cf:f0:b0:83:23:17:2a:85:8c:2d:f1:e6: cb:bb:db:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhhXHCVN3esphZi7gIyCUpVxKYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJC Q0NGOTFFQTAeFw0yNTEyMDUxNDE1MDBaFw0yNTEyMDkwMjExMDBaMDMxMTAvBgNV BAMTKEI1MkJERTFFNDM5MkYzRUVDQkRDQUEzRTVCNUI2Njc1RDMwRUMwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFc148fnlucFePaMN/mreexgUW 23qBujMHza0EihYM7zOvEtMpbvNigjCQAEGIRB+gulltpAKEnUUtgxIAp9WOdgsS GX37vLUMvfWUDXrv/2jLo02k+gx4uCUcJLdpyXBpn4i8heQCmYVnbPWjo5MzuG1H se+NeT0oMovjg0e8zqDe2fksjg1To5gHc/ZigrO6Sx0B2jhJkg5z0S7R8TEAmZxG OgpvLAcUU4tTevjufLSaxyyKXVdy8pGM4yqfFhWopQBsM6AylXJj6kR49Qr90XwT Ra/ifYngYHKNiYqE2FVAAekAFP88N7eLh8MasARBSc0i/k/dw/Kw8jJkUw9HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtSveHkOS8+7L3Ko+W1tmddMOwFMwHwYDVR0j BBgwFoAU0XW9xaZBTOurRy35FZy9MrzPkeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjJkNGQ3NC02Mjk1LTQ0OTYtODIzYS0xZThhM2Q1YmJiNmMvMC9EMTc1QkRDNUE2 NDE0Q0VCQUI0NzJERjkxNTlDQkQzMkJDQ0Y5MUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JEMzJCQ0NG OTFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQtNjI5NS00NDk2LTgy M2EtMWU4YTNkNWJiYjZjLzAvRDE3NUJEQzVBNjQxNENFQkFCNDcyREY5MTU5Q0JE MzJCQ0NGOTFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaYmgqFB/V0FrTk0wqxCndJHTrdK1Vpnnhl oSUziKrmnVYAhshRLH0t/Ws15xErJpC05i+qWLjlPcctow40XOLVFovedvwEHhus F/mfub/15pHMOWmo1cm/xj1ojkjBY2Z6cUnMxaueQNaL7dGPHRw1vxLuxODNZtk9 1VR4m73/Dp9sATvKscdkRZ1Z4rnztbVRwiLFZKINrgHVnEpmYufHdWHoosW4RzPE ifRKTHIcJd9ma/b63Rr1PhimYkfxs2DS8tP3lPVuqj2ZadqaZBPwRgKddqBkO510 fPrVbiAT+eNvP09t+LOQn5ZE3MkpP8/wsIMjFyqFjC3x5su725M= -----END CERTIFICATE-----Generated at Sun Dec 7 02:08:57 2025 by rpki-client