This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: PNir08WqCi6x11MbYZXXnS1VZb8SIYw1j2A4lE+NmPM= Subject key identifier: B1:E4:FB:F1:AC:7D:8E:34:00:4F:A7:35:A3:0C:E5:55:EF:69:14:56 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 5EA3ACB79DBE6691D20B324164F9C5EA26CC53EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: EA Signing time: Sat 06 Dec 2025 10:01:50 +0000 Manifest this update: Sat 06 Dec 2025 09:56:50 +0000 Manifest next update: Tue 09 Dec 2025 19:11:50 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: TKXDUHh1t8mtQi4naXyKvXUBHMTJG7N6MALAiE8leAU=) 2: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: fVMYBDppf4hlpdRnBrtdae5reCZ74UIjvvbAO9TU7nU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a3:ac:b7:9d:be:66:91:d2:0b:32:41:64:f9:c5:ea:26:cc:53:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Dec 6 09:56:50 2025 GMT Not After : Dec 9 19:11:50 2025 GMT Subject: CN=B1E4FBF1AC7D8E34004FA735A30CE555EF691456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5a:3e:d7:9d:24:72:a8:6b:24:19:5b:ad:f6: c0:db:bc:de:35:3d:96:5a:8b:a5:04:41:88:05:85: 3b:f0:3c:94:d9:6b:56:91:42:d2:73:f2:a6:40:48: e4:48:2b:c0:a7:3e:ab:94:ed:6a:fc:1f:4b:ae:0d: e1:58:b4:0f:70:30:90:ba:76:e8:7f:07:33:3e:12: 6f:40:05:db:3d:3e:1f:90:6c:91:f9:22:b7:b4:cf: 77:dd:73:87:d8:60:fd:d9:5c:58:51:91:46:b2:38: 27:06:b0:6c:03:01:3b:cd:b3:fc:63:e6:73:80:1a: 46:ba:27:99:60:9a:96:a2:c6:5b:82:85:4b:a4:af: 49:23:ef:4b:1a:d5:c2:34:4a:0d:b2:e6:63:5d:fe: 02:7a:e0:7c:06:60:f7:dd:da:74:f8:25:eb:df:c6: e2:58:79:1b:31:2f:28:aa:d0:71:4e:1d:ba:f6:99: 46:1c:b5:a3:8b:04:29:36:28:49:a9:df:b2:ed:eb: ef:3f:b6:f4:b8:68:59:a4:87:08:05:a7:b0:7a:36: 14:9f:0a:da:7c:93:28:70:3b:32:f8:08:30:66:4c: 35:13:ed:a8:c3:92:7b:02:5a:dd:a7:33:e6:35:a1: 8e:a2:e1:3d:ec:17:bf:77:dc:67:ad:aa:ce:5e:7f: 88:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E4:FB:F1:AC:7D:8E:34:00:4F:A7:35:A3:0C:E5:55:EF:69:14:56 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4b:3d:f0:ca:e4:4e:d2:f7:cc:67:47:5e:21:7b:3f:0c:17: e5:72:e2:14:91:9c:2b:ef:4c:7d:4b:29:7a:16:93:e6:36:df: a2:70:a5:d5:9e:df:6b:79:c5:d7:02:dd:dd:e2:7e:54:ef:84: ef:da:43:2e:97:9a:51:50:66:9c:63:a6:2e:dc:b1:dc:0a:c2: c6:9d:50:13:14:46:17:d0:f5:44:df:6a:50:b3:ee:8f:91:ab: ac:03:f9:ed:f6:dd:56:ea:d4:57:f9:0f:fb:ba:36:35:af:a1: ee:1d:a4:82:1f:ad:c0:e1:89:0d:77:ca:94:72:a6:29:b8:f1: f6:5d:93:a0:1d:a2:92:f4:76:3f:71:d2:7f:de:f1:c5:45:da: f9:01:2c:9d:f6:1b:1d:79:54:12:3e:e9:94:eb:fd:fb:85:aa: dc:3a:aa:0b:e0:3d:f2:2d:0a:f3:f7:f2:07:d9:0a:50:0f:c2: 33:6a:a8:61:42:5f:4e:1f:28:20:0a:af:6e:42:0e:d0:17:e7: 19:84:47:e0:b3:a0:a3:e1:22:29:86:98:3f:08:50:59:39:d7: 66:f5:c9:80:78:e8:a1:0d:50:59:96:9b:78:66:a2:98:dd:3a: 60:16:19:24:ee:a1:18:c9:64:00:f9:68:d8:ba:ed:9c:c6:55: ee:34:aa:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXqOst52+ZpHSCzJBZPnF6ibMU+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTEyMDYwOTU2NTBaFw0yNTEyMDkxOTExNTBaMDMxMTAvBgNV BAMTKEIxRTRGQkYxQUM3RDhFMzQwMDRGQTczNUEzMENFNTU1RUY2OTE0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWj7XnSRyqGskGVut9sDbvN41 PZZai6UEQYgFhTvwPJTZa1aRQtJz8qZASORIK8CnPquU7Wr8H0uuDeFYtA9wMJC6 duh/BzM+Em9ABds9Ph+QbJH5Ire0z3fdc4fYYP3ZXFhRkUayOCcGsGwDATvNs/xj 5nOAGka6J5lgmpaixluChUukr0kj70sa1cI0Sg2y5mNd/gJ64HwGYPfd2nT4Jevf xuJYeRsxLyiq0HFOHbr2mUYctaOLBCk2KEmp37Lt6+8/tvS4aFmkhwgFp7B6NhSf Ctp8kyhwOzL4CDBmTDUT7ajDknsCWt2nM+Y1oY6i4T3sF7933Getqs5ef4i1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUseT78ax9jjQAT6c1owzlVe9pFFYwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtLPfDK5E7S98xnR14hez8MF+Vy4hSRnCvv TH1LKXoWk+Y236JwpdWe32t5xdcC3d3iflTvhO/aQy6XmlFQZpxjpi7csdwKwsad UBMURhfQ9UTfalCz7o+Rq6wD+e323Vbq1Ff5D/u6NjWvoe4dpIIfrcDhiQ13ypRy pim48fZdk6AdopL0dj9x0n/e8cVF2vkBLJ32Gx15VBI+6ZTr/fuFqtw6qgvgPfIt CvP38gfZClAPwjNqqGFCX04fKCAKr25CDtAX5xmER+CzoKPhIimGmD8IUFk512b1 yYB46KENUFmWm3hmopjdOmAWGSTuoRjJZAD5aNi67ZzGVe40qqg= -----END CERTIFICATE-----Generated at Sat Dec 6 16:20:59 2025 by rpki-client