This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft File: 01DF4BADDE0B23C16F941DC3468443771C193624.mft (raw, json) Hash identifier: VfUdQCuSCNRn2O1fLHBPdMKsofPIltaXJ/InXzYhrjs= Subject key identifier: DE:3D:5E:59:95:33:C2:D0:D6:00:AD:D0:37:19:1F:E4:DF:03:89:20 Authority key identifier: 01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 Certificate issuer: /CN=01DF4BADDE0B23C16F941DC3468443771C193624 Certificate serial: 77988F7CF3A8998641A3CB88632C8C936B646A9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft Manifest number: 024D Signing time: Fri 05 Dec 2025 14:32:11 +0000 Manifest this update: Fri 05 Dec 2025 14:27:11 +0000 Manifest next update: Tue 09 Dec 2025 01:46:11 +0000 Files and hashes: 1: 3130332e3138342e31342e302f32332d3233203d3e20313533313131.roa (hash: umhcspcoF3bORaGf6sEandLiYRoN5qvo+3ZDwDB3BTA=) 2: 3130332e3138342e31352e302f32342d3234203d3e20313533313131.roa (hash: bIguhZb/xSN8gbqOiUshtwtXS4ifpOsnMSSlWO3KLq4=) 3: 01DF4BADDE0B23C16F941DC3468443771C193624.crl (hash: jHoZae+qREdVrXJ2wpJa6R+xblb2HHgZUABzCLzvAI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:98:8f:7c:f3:a8:99:86:41:a3:cb:88:63:2c:8c:93:6b:64:6a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01DF4BADDE0B23C16F941DC3468443771C193624 Validity Not Before: Dec 5 14:27:11 2025 GMT Not After : Dec 9 01:46:11 2025 GMT Subject: CN=DE3D5E599533C2D0D600ADD037191FE4DF038920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c5:fd:38:64:dd:3a:7c:41:ce:a6:24:e2:5b: 94:fa:47:fd:aa:99:c0:df:b5:ed:ac:ca:cf:37:14: c6:50:75:5a:3a:cd:a7:f1:5c:64:73:92:ed:9f:1e: 74:4a:4a:72:f9:2c:23:bb:e8:bd:0c:09:58:49:75: f3:3e:3c:ae:a0:11:84:42:11:3a:de:71:93:04:df: eb:6f:e4:7c:3e:ce:4b:eb:95:35:d2:15:c1:6b:dc: 2a:5e:79:43:22:6d:9f:21:3a:7d:46:c4:b1:77:ca: ac:41:ce:5e:e8:71:0f:21:3d:b7:8f:74:0f:35:8f: 24:fa:c0:2e:cc:2b:d9:d7:f7:be:00:66:76:eb:92: 1f:41:b6:94:a8:f4:a7:3d:ac:4e:0d:98:dc:6a:49: fb:74:e1:19:26:af:0f:56:a0:1e:6c:48:14:3a:3c: 0d:f6:ce:cc:2e:cc:12:21:88:c3:10:4a:0c:a0:fd: 15:cf:26:e1:4e:82:bd:8f:5d:91:53:02:3f:09:3d: 3f:05:85:e6:2d:2c:4b:30:7d:f7:03:4f:30:46:4a: 4b:94:e4:c1:5d:13:b7:06:78:de:03:61:ec:6f:10: 2f:6c:0f:06:39:90:7c:f0:4b:1a:39:10:a9:59:05: 31:27:5c:0e:a9:7a:bb:b8:2c:28:b9:d4:f5:a8:15: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3D:5E:59:95:33:C2:D0:D6:00:AD:D0:37:19:1F:E4:DF:03:89:20 X509v3 Authority Key Identifier: keyid:01:DF:4B:AD:DE:0B:23:C1:6F:94:1D:C3:46:84:43:77:1C:19:36:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01DF4BADDE0B23C16F941DC3468443771C193624.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5e31ecf-52a4-4677-9103-5f37a4091d75/0/01DF4BADDE0B23C16F941DC3468443771C193624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:12:e1:47:6b:f5:b2:4f:16:c8:fb:f8:47:a9:96:85:c9:df: 34:43:a4:a8:e6:09:6b:45:28:b9:1b:a7:7d:a7:d2:92:94:a7: 79:42:af:33:c0:96:74:a5:e6:1a:96:39:4d:81:ab:9f:57:c0: 5e:a9:b1:54:72:e4:65:cf:be:13:03:b8:51:a9:16:bd:a9:15: b7:79:8d:70:48:1a:0d:11:8b:d8:3d:11:f1:13:9d:04:a1:f5: 79:b5:61:d9:20:cd:a1:4e:70:d9:e8:bb:bd:51:9f:81:40:22: 55:42:eb:38:6f:70:fe:f9:46:84:e0:ec:e0:e3:a3:3e:2a:31: 4d:21:06:d6:5a:bb:72:3e:15:d9:88:a1:88:86:9e:3b:8e:f8: b8:ea:b1:5b:59:5c:c2:a0:b5:c5:94:52:6a:5b:d7:a7:65:7f: 2d:4c:3f:13:fd:44:61:3a:e5:e7:e0:9b:15:e4:b9:f8:2f:b7: e7:3b:75:26:ed:11:cc:19:12:ca:c4:5e:b1:fc:08:39:84:11: 36:95:2c:7a:98:69:39:24:8b:2c:40:8e:45:d0:e3:58:bb:1a: 8a:a5:1a:25:54:3d:f3:1c:dd:cb:e9:e1:3e:39:60:20:95:85: 90:4d:b2:7b:b4:cc:b0:1a:d8:29:7c:32:04:c8:8e:3c:13:a0: 50:56:eb:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd5iPfPOomYZBo8uIYyyMk2tkapowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcx QzE5MzYyNDAeFw0yNTEyMDUxNDI3MTFaFw0yNTEyMDkwMTQ2MTFaMDMxMTAvBgNV BAMTKERFM0Q1RTU5OTUzM0MyRDBENjAwQUREMDM3MTkxRkU0REYwMzg5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xf04ZN06fEHOpiTiW5T6R/2q mcDfte2sys83FMZQdVo6zafxXGRzku2fHnRKSnL5LCO76L0MCVhJdfM+PK6gEYRC ETrecZME3+tv5Hw+zkvrlTXSFcFr3CpeeUMibZ8hOn1GxLF3yqxBzl7ocQ8hPbeP dA81jyT6wC7MK9nX974AZnbrkh9BtpSo9Kc9rE4NmNxqSft04Rkmrw9WoB5sSBQ6 PA32zswuzBIhiMMQSgyg/RXPJuFOgr2PXZFTAj8JPT8FheYtLEswffcDTzBGSkuU 5MFdE7cGeN4DYexvEC9sDwY5kHzwSxo5EKlZBTEnXA6peru4LCi51PWoFVHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3j1eWZUzwtDWAK3QNxkf5N8DiSAwHwYDVR0j BBgwFoAUAd9Lrd4LI8FvlB3DRoRDdxwZNiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWUzMWVjZi01MmE0LTQ2NzctOTEwMy01ZjM3YTQwOTFkNzUvMC8wMURGNEJBRERF MEIyM0MxNkY5NDFEQzM0Njg0NDM3NzFDMTkzNjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQzNzcxQzE5 MzYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzVlMzFlY2YtNTJhNC00Njc3LTkx MDMtNWYzN2E0MDkxZDc1LzAvMDFERjRCQURERTBCMjNDMTZGOTQxREMzNDY4NDQz NzcxQzE5MzYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoS4Udr9bJPFsj7+EeploXJ3zRDpKjmCWtF KLkbp32n0pKUp3lCrzPAlnSl5hqWOU2Bq59XwF6psVRy5GXPvhMDuFGpFr2pFbd5 jXBIGg0Ri9g9EfETnQSh9Xm1YdkgzaFOcNnou71Rn4FAIlVC6zhvcP75RoTg7ODj oz4qMU0hBtZau3I+FdmIoYiGnjuO+LjqsVtZXMKgtcWUUmpb16dlfy1MPxP9RGE6 5efgmxXkufgvt+c7dSbtEcwZEsrEXrH8CDmEETaVLHqYaTkkiyxAjkXQ41i7Goql GiVUPfMc3cvp4T45YCCVhZBNsnu0zLAa2Cl8MgTIjjwToFBW630= -----END CERTIFICATE-----Generated at Sun Dec 7 01:41:25 2025 by rpki-client