This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: deJxWoJ9aDNYyaZywswUJ72h9aACGxtJ3Lq4GowbE28= Subject key identifier: 13:89:B8:57:C0:3A:9E:8C:34:83:02:2D:93:C3:40:85:22:1C:09:10 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 7F948C5F3E5949EA89EDEE519A85649A1D89449A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 037A Signing time: Fri 05 Dec 2025 21:41:59 +0000 Manifest this update: Fri 05 Dec 2025 21:36:59 +0000 Manifest next update: Tue 09 Dec 2025 00:13:59 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: /rt35EUSw4Ix6/cmxLUEYEesdVZ42xEum9IJJSBZ0aY=) 2: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: 4VygTj7CtLEAY8Yew87Loc6vTSwdYP0qwIXE5kSpG38=) 3: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: KGeHvvLL7YUj6ruPXwXmEedVa7petv8U3MdeekZgjts=) 4: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: yhKeiwU+JCs9UN8oh228h1Q0h11o4+yJwLGZRxsDQjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:94:8c:5f:3e:59:49:ea:89:ed:ee:51:9a:85:64:9a:1d:89:44:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Dec 5 21:36:59 2025 GMT Not After : Dec 9 00:13:59 2025 GMT Subject: CN=1389B857C03A9E8C3483022D93C34085221C0910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:b6:f2:b7:bb:16:06:58:4d:f8:d1:11:2f: 53:22:e2:94:fd:fe:fc:7e:39:c5:9b:16:8d:2f:ef: 7f:5c:6e:4c:e7:65:f9:41:70:d6:64:3c:43:8a:be: 47:38:1e:ce:52:2b:af:8b:5c:f5:72:29:e7:76:ee: 21:36:cb:2a:08:5e:30:e4:9f:2f:bf:67:d6:0f:3a: 78:ad:07:d9:b4:6d:61:f5:61:fb:71:48:a6:5b:3b: c5:fa:05:21:31:f3:b5:32:4e:ac:7f:d0:f2:be:83: 9e:d3:c0:7c:7c:fd:bc:8b:a7:96:08:3a:72:3f:ed: 4f:fd:60:ae:6b:25:42:6d:8d:2c:33:04:50:4f:ee: cc:a3:46:a0:9c:8c:fe:56:d5:4e:7b:b8:c2:52:77: a4:67:08:6d:11:19:5c:e3:02:68:fd:6f:49:88:71: ac:b3:5a:e9:8a:5f:6b:34:24:ed:5f:69:4e:e4:03: f7:2f:3c:49:5e:59:30:9b:93:46:fd:30:f0:de:ab: 1c:aa:22:05:46:e7:c6:a5:ef:fc:22:a1:6b:0f:7a: d4:c1:58:bc:74:32:52:46:e5:b1:9e:00:2d:eb:ab: 94:e6:6f:6e:50:3f:c7:9d:b4:ec:81:92:df:e1:e2: bd:0a:2b:a1:1a:0a:98:95:96:38:64:52:d1:83:22: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:89:B8:57:C0:3A:9E:8C:34:83:02:2D:93:C3:40:85:22:1C:09:10 X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:43:b1:ca:26:6e:0e:7b:73:ba:c4:42:6a:94:1f:f0:6d:98: 78:a2:ae:1c:56:64:94:43:c3:b9:1e:7c:fe:f2:49:2c:3d:c3: c2:0e:e4:7a:5a:92:d6:99:90:c8:4c:ad:95:29:14:b9:2c:c0: 9f:9d:20:8f:17:4c:a3:44:c1:9a:b6:c1:65:54:f6:d2:9a:3c: 7b:35:d0:6a:49:52:53:b1:1d:86:1f:c5:4c:61:a9:4f:8b:57: 1e:c8:a8:ea:8c:8a:6f:16:65:71:1a:f3:c7:67:d8:f8:ae:e2: 56:93:4e:5e:27:f1:56:bc:11:7d:2e:96:4a:d5:79:9c:bc:d9: d6:97:93:38:7c:2e:e4:1c:19:85:6d:ba:b6:53:86:9c:38:41: f8:70:f0:c4:29:f0:1a:98:66:0e:79:c0:a6:00:32:9e:de:34: 2b:ca:38:cb:b2:6c:25:73:2a:fb:ca:49:f1:80:62:a8:36:9e: 3d:3e:84:5b:5b:a9:e4:d2:92:5b:9b:6e:c9:c3:cd:cf:e1:5f: 0e:65:b6:cf:34:80:e6:2a:1e:70:d5:4b:64:05:ab:ba:e4:d7: 31:0b:b9:4a:87:21:03:87:de:2c:e4:76:a7:c5:b3:1d:e6:75: 6a:a4:2f:ec:90:f6:d8:dc:cb:e0:6a:8e:9a:5b:96:29:79:bd: 5c:f7:d6:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5SMXz5ZSeqJ7e5RmoVkmh2JRJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNTEyMDUyMTM2NTlaFw0yNTEyMDkwMDEzNTlaMDMxMTAvBgNV BAMTKDEzODlCODU3QzAzQTlFOEMzNDgzMDIyRDkzQzM0MDg1MjIxQzA5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0Lbyt7sWBlhN+NERL1Mi4pT9 /vx+OcWbFo0v739cbkznZflBcNZkPEOKvkc4Hs5SK6+LXPVyKed27iE2yyoIXjDk ny+/Z9YPOnitB9m0bWH1YftxSKZbO8X6BSEx87UyTqx/0PK+g57TwHx8/byLp5YI OnI/7U/9YK5rJUJtjSwzBFBP7syjRqCcjP5W1U57uMJSd6RnCG0RGVzjAmj9b0mI cayzWumKX2s0JO1faU7kA/cvPEleWTCbk0b9MPDeqxyqIgVG58al7/wioWsPetTB WLx0MlJG5bGeAC3rq5Tmb25QP8edtOyBkt/h4r0KK6EaCpiVljhkUtGDIj49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE4m4V8A6now0gwItk8NAhSIcCRAwHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZDscombg57c7rEQmqUH/BtmHiirhxWZJRD w7kefP7ySSw9w8IO5HpaktaZkMhMrZUpFLkswJ+dII8XTKNEwZq2wWVU9tKaPHs1 0GpJUlOxHYYfxUxhqU+LVx7IqOqMim8WZXEa88dn2Piu4laTTl4n8Va8EX0ulkrV eZy82daXkzh8LuQcGYVturZThpw4Qfhw8MQp8BqYZg55wKYAMp7eNCvKOMuybCVz KvvKSfGAYqg2nj0+hFtbqeTSklubbsnDzc/hXw5lts80gOYqHnDVS2QFq7rk1zEL uUqHIQOH3izkdqfFsx3mdWqkL+yQ9tjcy+Bqjppblil5vVz31vs= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:54 2025 by rpki-client