This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft File: D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft (raw, json) Hash identifier: 2MuTSAYjjIL3wqBLetiIq2+wxHhpXSMJSfgxS8xPstQ= Subject key identifier: 02:97:60:71:1B:D6:DB:F9:F1:53:E3:32:84:19:01:EA:A8:67:D8:A9 Authority key identifier: D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B Certificate issuer: /CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Certificate serial: 547043E03BCF2CFD3A40F305CC5150FA7D3A66E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft Manifest number: FF Signing time: Sat 06 Dec 2025 04:11:15 +0000 Manifest this update: Sat 06 Dec 2025 04:06:15 +0000 Manifest next update: Tue 09 Dec 2025 15:06:15 +0000 Files and hashes: 1: 3135372e36362e3137372e302f32342d3234203d3e20313532373536.roa (hash: ihqP0wUIsQgvCUAc6MPq5r3ZCl+93CJYEtJ3kKzkDF0=) 2: 3135372e36362e3137362e302f32332d3233203d3e20313532373536.roa (hash: ep04UBArCBQWkLiZKMcJT4iBnkYi8gyyZr2lPtSwbI8=) 3: D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl (hash: ScAwtGw2AjgdPLBl+1sI7NDbD2oWKTgEDyWsMt5Dkc4=) 4: 3135372e36362e3137362e302f32342d3234203d3e20313532373536.roa (hash: /s+DQzvA6xhmuW7v3g8lejSeio++18zSamEuf0+coIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:70:43:e0:3b:cf:2c:fd:3a:40:f3:05:cc:51:50:fa:7d:3a:66:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00F48BC877910FDD0B7FF229FD7DA516769C90B Validity Not Before: Dec 6 04:06:15 2025 GMT Not After : Dec 9 15:06:15 2025 GMT Subject: CN=029760711BD6DBF9F153E332841901EAA867D8A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:50:12:63:51:ec:fc:03:4e:ec:24:3c:1c: bd:c9:da:66:7d:39:79:0f:02:de:2b:62:0c:51:bd: f6:e0:50:fe:8b:b9:4b:55:75:58:49:d1:d3:27:6e: 75:e5:09:fd:10:ea:d7:c0:fb:8b:4a:c7:0a:fe:99: bb:c6:be:07:48:55:8e:9b:f8:7f:13:ef:5b:dc:b4: 2b:fc:8f:f0:f1:d7:7e:97:b3:a5:90:27:23:f5:26: 1a:de:c5:9d:8f:27:52:62:89:c6:a5:03:14:cc:d2: 40:77:9e:b8:d4:45:04:aa:8c:fc:52:b3:93:fd:72: df:d9:72:78:2a:c3:bb:c2:ab:dd:cc:5e:9e:87:a4: 4b:fa:4d:c3:9b:fc:da:fd:ab:03:2e:89:15:9d:a2: 68:fe:e4:1d:d2:dc:66:23:97:cf:c8:53:82:55:fd: f3:0c:31:05:86:f7:50:d6:59:ed:cb:a9:c6:67:e6: 2c:f1:90:cb:ee:eb:22:64:f3:b5:63:0d:3e:af:d7: a4:1a:90:70:ed:9e:68:46:04:77:33:8d:0f:5a:1b: be:e0:5b:9e:38:4f:1f:ba:3c:02:44:61:66:a5:14: 26:44:d3:dc:44:bd:1c:58:b6:4b:96:99:61:4f:52: 1f:f7:fe:3b:28:bd:e2:13:c7:a5:a1:f4:6c:b4:43: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:97:60:71:1B:D6:DB:F9:F1:53:E3:32:84:19:01:EA:A8:67:D8:A9 X509v3 Authority Key Identifier: keyid:D0:0F:48:BC:87:79:10:FD:D0:B7:FF:22:9F:D7:DA:51:67:69:C9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D00F48BC877910FDD0B7FF229FD7DA516769C90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aab4e14d-021d-40dc-923a-c12d1af443b5/0/D00F48BC877910FDD0B7FF229FD7DA516769C90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b3:52:01:d5:fe:30:6b:58:24:1e:7a:a8:1b:07:eb:d6:47: fd:be:d2:24:67:42:2c:ed:d7:c8:1c:93:a8:48:04:dc:ba:cc: 2a:27:36:d9:33:fd:f0:83:e3:8d:2d:f5:c3:55:c6:c3:4b:a2: 25:c7:7d:3c:ac:cf:01:04:2b:a3:ee:58:d6:ac:54:c0:b1:01: 7e:0f:b5:78:aa:da:4c:95:28:3b:57:7b:b6:f7:07:c5:fc:81: f8:6f:dc:40:29:c5:58:f1:18:1f:82:38:d7:2e:8e:ed:3b:0f: e9:2f:d6:95:0e:22:7f:c6:90:65:3d:fc:87:17:34:a8:ad:5b: 34:3c:72:61:fb:ce:65:73:9e:f3:fe:47:f8:42:9e:73:d9:5e: 14:f6:55:bd:21:99:96:24:ee:00:d5:f8:9f:af:fb:fd:64:a2: 0a:86:22:dd:fe:ca:1d:a8:60:34:61:cc:8c:46:54:13:8e:52: d0:2b:9b:3c:88:17:7e:9c:00:71:b3:8d:ce:5b:fe:d9:d9:c4: 8e:f1:07:66:b6:29:7a:22:ef:70:af:d7:84:97:88:a6:b9:b4: 90:a6:0e:37:5f:31:8e:f7:7d:68:a2:cc:a6:54:6b:0a:20:2f: 17:a7:1f:d6:a7:f0:5a:e0:f1:b7:ed:4a:58:b9:c3:07:62:c4: 5a:0f:3e:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVHBD4DvPLP06QPMFzFFQ+n06ZuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2 NzY5QzkwQjAeFw0yNTEyMDYwNDA2MTVaFw0yNTEyMDkxNTA2MTVaMDMxMTAvBgNV BAMTKDAyOTc2MDcxMUJENkRCRjlGMTUzRTMzMjg0MTkwMUVBQTg2N0Q4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOlASY1Hs/ANO7CQ8HL3J2mZ9 OXkPAt4rYgxRvfbgUP6LuUtVdVhJ0dMnbnXlCf0Q6tfA+4tKxwr+mbvGvgdIVY6b +H8T71vctCv8j/Dx136Xs6WQJyP1JhrexZ2PJ1JiicalAxTM0kB3nrjURQSqjPxS s5P9ct/Zcngqw7vCq93MXp6HpEv6TcOb/Nr9qwMuiRWdomj+5B3S3GYjl8/IU4JV /fMMMQWG91DWWe3LqcZn5izxkMvu6yJk87VjDT6v16QakHDtnmhGBHczjQ9aG77g W544Tx+6PAJEYWalFCZE09xEvRxYtkuWmWFPUh/3/jsoveITx6Wh9Gy0Q+0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUApdgcRvW2/nxU+MyhBkB6qhn2KkwHwYDVR0j BBgwFoAU0A9IvId5EP3Qt/8in9faUWdpyQswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWI0ZTE0ZC0wMjFkLTQwZGMtOTIzYS1jMTJkMWFmNDQzYjUvMC9EMDBGNDhCQzg3 NzkxMEZERDBCN0ZGMjI5RkQ3REE1MTY3NjlDOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RBNTE2NzY5 QzkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFiNGUxNGQtMDIxZC00MGRjLTky M2EtYzEyZDFhZjQ0M2I1LzAvRDAwRjQ4QkM4Nzc5MTBGREQwQjdGRjIyOUZEN0RB NTE2NzY5QzkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqzUgHV/jBrWCQeeqgbB+vWR/2+0iRnQizt 18gck6hIBNy6zConNtkz/fCD440t9cNVxsNLoiXHfTyszwEEK6PuWNasVMCxAX4P tXiq2kyVKDtXe7b3B8X8gfhv3EApxVjxGB+CONcuju07D+kv1pUOIn/GkGU9/IcX NKitWzQ8cmH7zmVznvP+R/hCnnPZXhT2Vb0hmZYk7gDV+J+v+/1kogqGIt3+yh2o YDRhzIxGVBOOUtArmzyIF36cAHGzjc5b/tnZxI7xB2a2KXoi73Cv14SXiKa5tJCm DjdfMY73fWiizKZUawogLxenH9an8Frg8bftSli5wwdixFoPPoY= -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:33 2025 by rpki-client