This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft File: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft (raw, json) Hash identifier: Kn9Xfm9KXQy2eIjVRVEiev27ebD8oSsjWF2mJ5QiQSA= Subject key identifier: EA:0B:D5:08:30:37:B5:D9:8F:72:5D:73:7C:07:EB:66:BB:CB:E5:DF Authority key identifier: D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED Certificate issuer: /CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Certificate serial: 5577795AB195056ED50B3F7BF267D0EAF8325466 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft Manifest number: B0 Signing time: Fri 05 Dec 2025 14:21:10 +0000 Manifest this update: Fri 05 Dec 2025 14:16:10 +0000 Manifest next update: Mon 08 Dec 2025 17:10:10 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: U1yBT1SPjwTm71wjsvPBRQ+2gxg77ajbPlJlD+suADk=) 2: D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl (hash: oyrxPayHAafPHIttPhfpPGu6KU0AyoNlePRB0ZyrWKM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:77:79:5a:b1:95:05:6e:d5:0b:3f:7b:f2:67:d0:ea:f8:32:54:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED Validity Not Before: Dec 5 14:16:10 2025 GMT Not After : Dec 8 17:10:10 2025 GMT Subject: CN=EA0BD5083037B5D98F725D737C07EB66BBCBE5DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:fc:28:48:5d:ad:a7:f7:a6:30:c4:e1:28: 0b:0b:82:d8:39:6d:03:e6:04:e7:b2:60:97:38:77: 9f:37:39:01:f4:5f:7a:1c:89:31:27:a6:3e:c5:a5: 4d:5a:17:7a:91:a6:f8:88:0d:1c:86:c6:6b:0d:2c: 49:79:9b:f9:d6:a8:1c:a9:b1:57:30:8d:8d:2a:62: 96:38:13:21:ad:7e:62:9c:e4:51:ef:ea:fb:20:f6: 70:03:18:3e:bb:3a:83:b1:d1:8c:0f:13:07:6f:02: 27:21:47:35:13:fd:e7:3b:6c:c4:b9:fc:09:c2:0c: 11:d1:2e:37:cd:f1:7a:68:3c:4c:36:38:86:7c:48: 7b:ef:30:19:ac:c5:06:e6:1e:79:b9:ca:1f:47:60: bb:1b:30:f0:a5:f1:07:2e:23:22:ab:fd:83:fa:03: fb:01:75:fc:10:93:51:a9:a9:94:b1:9b:29:14:28: 18:82:2c:a0:a7:8d:d3:ad:31:57:f0:b4:02:13:6a: 95:a2:4c:f7:3e:a1:b6:a5:eb:e9:96:18:74:7d:f0: ac:07:c4:34:3c:3a:bb:47:ec:2d:9a:ea:36:62:75: 3d:a3:02:2d:20:dd:05:38:2f:ef:74:3e:5e:2e:3c: 51:0c:63:54:56:80:cc:c3:5a:15:c1:31:29:ad:9f: db:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0B:D5:08:30:37:B5:D9:8F:72:5D:73:7C:07:EB:66:BB:CB:E5:DF X509v3 Authority Key Identifier: keyid:D5:54:24:C9:15:3D:E3:C2:85:DA:2B:00:86:FF:76:EF:FD:F6:D0:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/D55424C9153DE3C285DA2B0086FF76EFFDF6D0ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ea:75:fc:9d:46:ec:d3:5c:55:3d:c4:09:f8:c5:1f:02:12: 1b:1f:22:f6:1d:cb:a2:bb:f7:5f:d1:01:54:6c:ec:54:91:74: f7:d7:3c:9e:64:a5:9b:93:03:6f:a9:5a:4e:b4:b4:ee:b3:51: b9:9c:ae:8e:f2:af:29:8d:2e:7b:77:4a:24:89:1d:3c:ff:e1: 43:81:b6:af:08:66:82:e4:56:9b:5b:de:6a:fe:2b:ae:fd:e1: b0:43:61:ea:8a:e2:e5:52:cd:71:98:8e:a4:72:2d:a4:7a:1e: 30:58:4e:ff:c5:fb:c4:f1:38:4a:dd:9f:ba:8b:51:26:da:43: 81:da:a7:f4:1d:ae:d6:53:84:11:e5:e4:8f:66:a9:3b:76:60: 3d:ab:96:b1:9f:e0:12:58:a2:6e:9b:de:c4:11:fa:81:35:2a: 7a:28:40:e3:63:c2:e1:61:08:e4:9e:73:0f:9c:be:8a:53:1e: 8e:b9:5e:4a:d0:f2:ba:97:92:83:09:8f:ae:5c:68:08:7b:d0: 62:3b:d9:aa:b8:10:38:f8:be:66:a6:be:82:59:89:dc:e4:37: 76:25:f8:ca:6e:b9:61:51:c8:d7:58:71:e1:0f:24:a9:3c:82: 3e:90:0c:3b:b1:8d:ff:2a:2c:bf:d1:8f:0e:6c:59:ae:04:83: f9:86:4c:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXd5WrGVBW7VCz978mfQ6vgyVGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZG REY2RDBFRDAeFw0yNTEyMDUxNDE2MTBaFw0yNTEyMDgxNzEwMTBaMDMxMTAvBgNV BAMTKEVBMEJENTA4MzAzN0I1RDk4RjcyNUQ3MzdDMDdFQjY2QkJDQkU1REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuofwoSF2tp/emMMThKAsLgtg5 bQPmBOeyYJc4d583OQH0X3ociTEnpj7FpU1aF3qRpviIDRyGxmsNLEl5m/nWqByp sVcwjY0qYpY4EyGtfmKc5FHv6vsg9nADGD67OoOx0YwPEwdvAichRzUT/ec7bMS5 /AnCDBHRLjfN8XpoPEw2OIZ8SHvvMBmsxQbmHnm5yh9HYLsbMPCl8QcuIyKr/YP6 A/sBdfwQk1GpqZSxmykUKBiCLKCnjdOtMVfwtAITapWiTPc+obal6+mWGHR98KwH xDQ8OrtH7C2a6jZidT2jAi0g3QU4L+90Pl4uPFEMY1RWgMzDWhXBMSmtn9tVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6gvVCDA3tdmPcl1zfAfrZrvL5d8wHwYDVR0j BBgwFoAU1VQkyRU948KF2isAhv927/320O0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMS9ENTU0MjRDOTE1 M0RFM0MyODVEQTJCMDA4NkZGNzZFRkZERjZEMEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2RUZGREY2 RDBFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRDU1NDI0QzkxNTNERTNDMjg1REEyQjAwODZGRjc2 RUZGREY2RDBFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzqdfydRuzTXFU9xAn4xR8CEhsfIvYdy6K7 91/RAVRs7FSRdPfXPJ5kpZuTA2+pWk60tO6zUbmcro7yrymNLnt3SiSJHTz/4UOB tq8IZoLkVptb3mr+K6794bBDYeqK4uVSzXGYjqRyLaR6HjBYTv/F+8TxOErdn7qL USbaQ4Hap/QdrtZThBHl5I9mqTt2YD2rlrGf4BJYom6b3sQR+oE1KnooQONjwuFh COSecw+cvopTHo65XkrQ8rqXkoMJj65caAh70GI72aq4EDj4vmamvoJZidzkN3Yl +MpuuWFRyNdYceEPJKk8gj6QDDuxjf8qLL/Rjw5sWa4Eg/mGTLQ= -----END CERTIFICATE-----Generated at Sun Dec 7 07:43:10 2025 by rpki-client