This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: SdVWDywrku+eM9DetBif/eIcVxLFwrtOEHNTgLR5kOs= Subject key identifier: 69:D1:E9:21:B8:5C:D0:39:1C:9A:48:F7:DE:E7:5B:89:B9:C6:65:1C Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 2C9BCCDFC3B0FE5583178B72BE3DA4D607D2ECE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: 0126 Signing time: Fri 05 Dec 2025 13:41:51 +0000 Manifest this update: Fri 05 Dec 2025 13:36:51 +0000 Manifest next update: Mon 08 Dec 2025 18:29:51 +0000 Files and hashes: 1: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) 2: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) 3: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: P0iTeR20le2aEb8RxPaYHISC9vJ6/76aOzWWlnoUHi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:9b:cc:df:c3:b0:fe:55:83:17:8b:72:be:3d:a4:d6:07:d2:ec:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Dec 5 13:36:51 2025 GMT Not After : Dec 8 18:29:51 2025 GMT Subject: CN=69D1E921B85CD0391C9A48F7DEE75B89B9C6651C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:d6:03:f0:4f:0f:61:90:18:29:59:9e:2b: dc:c0:fb:d2:ea:c4:db:fa:d7:81:fe:e2:69:ac:a7: de:1f:ca:e6:d8:c1:7a:a6:d5:c6:3a:7f:d2:5c:f2: 7c:f2:67:2d:4a:db:20:97:43:96:e5:3f:1c:8b:f8: 0e:f0:43:58:96:43:bd:f9:87:96:05:be:57:83:0e: 72:d6:5d:9c:ac:ee:5e:13:d4:ea:91:e6:14:32:63: 1d:a2:40:d2:41:19:4b:5a:45:ca:07:63:95:df:95: 5c:00:82:46:e5:63:c3:a0:18:b6:0f:5e:b0:7d:82: bf:7f:a3:8d:5e:8d:9a:c7:86:29:ba:fd:1d:b0:69: ba:60:c9:96:60:07:0e:da:92:7b:1e:9e:f4:a0:84: 98:c5:f4:22:27:f9:f1:bb:17:91:6f:66:c8:47:d8: 35:f9:a0:78:be:f7:79:79:c3:75:e0:1e:a5:c2:19: e7:6c:31:7a:5b:7d:92:01:09:70:f5:a1:17:1a:16: 89:55:ed:83:7e:25:63:dc:a0:e3:d9:2b:a1:eb:49: bc:0a:68:29:7f:5a:a1:d8:2d:00:52:4f:68:cd:c3: ae:62:23:88:85:8e:af:c7:60:bd:56:3a:0a:25:5a: 7a:56:ae:f3:62:62:6c:d8:df:a0:98:ed:cf:46:70: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D1:E9:21:B8:5C:D0:39:1C:9A:48:F7:DE:E7:5B:89:B9:C6:65:1C X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:20:23:f0:03:b8:71:17:ac:c7:7a:3a:66:5a:da:c9:2f:9e: db:bc:fa:75:e8:4a:45:9c:3d:fa:7a:3c:7d:5a:29:b4:9c:a6: b0:09:e1:79:81:7f:fc:c4:9d:fc:45:94:c3:5a:80:b7:58:63: 19:28:8b:ba:a3:7f:bc:c4:90:36:15:1f:39:bf:65:7b:cf:0a: ef:e8:29:3e:e5:4f:6c:02:a7:82:dd:28:d1:dd:41:e9:fd:87: fe:fe:82:54:aa:74:49:36:9a:d0:2b:39:9c:d0:22:71:ed:09: 9b:b3:8e:9d:b1:27:34:9a:56:bb:73:e3:1f:e1:3d:67:93:cc: 2b:07:e2:9a:14:af:ec:b2:93:0f:d0:73:75:5d:d8:51:e9:b9: f0:49:5a:51:fb:36:d0:16:a2:51:a7:61:87:c7:94:ff:43:27: a2:2f:74:d2:cc:f1:31:0f:5b:0b:71:11:18:e2:e3:d9:44:09: cc:4a:59:8c:e4:45:c7:a0:fa:31:d4:24:b9:51:4d:a4:e4:28: 6b:f2:8c:0b:6c:73:b1:3c:d4:82:a3:18:a6:a4:71:a0:f5:e9: eb:9d:2c:0d:7d:2c:eb:75:8a:c0:98:6b:b5:e0:94:e8:8e:ae: 5a:7a:fc:6b:c1:b2:89:ae:1e:37:44:6d:51:a7:6e:ad:b4:c5: 3e:a1:e8:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJvM38Ow/lWDF4tyvj2k1gfS7OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTEyMDUxMzM2NTFaFw0yNTEyMDgxODI5NTFaMDMxMTAvBgNV BAMTKDY5RDFFOTIxQjg1Q0QwMzkxQzlBNDhGN0RFRTc1Qjg5QjlDNjY1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWotYD8E8PYZAYKVmeK9zA+9Lq xNv614H+4mmsp94fyubYwXqm1cY6f9Jc8nzyZy1K2yCXQ5blPxyL+A7wQ1iWQ735 h5YFvleDDnLWXZys7l4T1OqR5hQyYx2iQNJBGUtaRcoHY5XflVwAgkblY8OgGLYP XrB9gr9/o41ejZrHhim6/R2wabpgyZZgBw7aknsenvSghJjF9CIn+fG7F5FvZshH 2DX5oHi+93l5w3XgHqXCGedsMXpbfZIBCXD1oRcaFolV7YN+JWPcoOPZK6HrSbwK aCl/WqHYLQBST2jNw65iI4iFjq/HYL1WOgolWnpWrvNiYmzY36CY7c9GcFv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUadHpIbhc0Dkcmkj33udbibnGZRwwHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIgI/ADuHEXrMd6OmZa2skvntu8+nXoSkWc Pfp6PH1aKbScprAJ4XmBf/zEnfxFlMNagLdYYxkoi7qjf7zEkDYVHzm/ZXvPCu/o KT7lT2wCp4LdKNHdQen9h/7+glSqdEk2mtArOZzQInHtCZuzjp2xJzSaVrtz4x/h PWeTzCsH4poUr+yykw/Qc3Vd2FHpufBJWlH7NtAWolGnYYfHlP9DJ6IvdNLM8TEP WwtxERji49lECcxKWYzkRceg+jHUJLlRTaTkKGvyjAtsc7E81IKjGKakcaD16eud LA19LOt1isCYa7XglOiOrlp6/GvBsomuHjdEbVGnbq20xT6h6KU= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:02 2025 by rpki-client