This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft File: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft (raw, json) Hash identifier: 18xN2OLhNn8ZYleBCoh2bD2e0eqzI5gdGkFhu55/ffQ= Subject key identifier: C0:CA:CF:87:7D:23:04:88:60:36:C3:A1:C4:51:CB:D1:6E:B8:30:FA Authority key identifier: DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 Certificate issuer: /CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Certificate serial: 2D70B5644B5C11B19D0AF70A2C6250602B154E1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft Manifest number: 04E8 Signing time: Sat 06 Dec 2025 19:30:46 +0000 Manifest this update: Sat 06 Dec 2025 19:25:46 +0000 Manifest next update: Wed 10 Dec 2025 00:22:46 +0000 Files and hashes: 1: DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl (hash: NfHJ+XFtAUprL/CrOk2KxmWR6xtyD1kou1Y+NoLt9YA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:70:b5:64:4b:5c:11:b1:9d:0a:f7:0a:2c:62:50:60:2b:15:4e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9 Validity Not Before: Dec 6 19:25:46 2025 GMT Not After : Dec 10 00:22:46 2025 GMT Subject: CN=C0CACF877D2304886036C3A1C451CBD16EB830FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:ec:e9:0d:2c:25:bd:c0:ea:57:51:28:92: dd:74:e8:95:86:4b:81:c1:88:40:68:23:eb:95:a2: 2b:96:a7:3b:38:79:86:10:6a:a5:12:dd:17:55:cf: 3c:93:de:6f:0f:19:d6:1c:6c:82:5f:ce:41:e1:15: db:6e:9b:82:46:13:5b:95:b1:8c:d5:33:12:43:35: b0:4e:80:fb:de:b0:fb:e0:1e:c3:07:39:f5:24:f5: 05:8e:00:51:53:43:a0:2c:29:af:e8:73:6f:45:e4: ad:92:8e:20:bf:ac:24:8d:f7:fa:13:89:98:fd:dc: 01:b6:9b:61:b0:b2:1c:61:81:11:50:3b:de:35:47: 48:d5:7d:96:cb:f3:96:48:a7:9b:39:29:4e:8b:0a: fb:8d:5a:33:96:44:eb:a4:87:a4:95:3b:4a:85:ac: 32:d3:a3:45:f3:ec:68:44:7d:46:cf:5e:c2:0e:46: 1d:62:63:f0:ae:c2:27:6d:96:2f:81:46:fa:b3:1d: 48:70:f8:3a:bb:2c:e8:e8:60:98:55:fb:de:a5:b4: 4b:c1:84:ca:74:9b:cc:be:64:eb:a3:67:34:1f:b4: 06:fb:1c:b2:73:7d:9a:18:b6:99:50:ec:12:51:91: 48:5d:6d:7c:b9:38:38:76:fa:f2:cc:63:20:90:24: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CA:CF:87:7D:23:04:88:60:36:C3:A1:C4:51:CB:D1:6E:B8:30:FA X509v3 Authority Key Identifier: keyid:DD:4F:B2:C1:0E:F3:28:AC:D9:71:AC:7F:3B:A4:0F:3A:52:F8:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c640f672-76d4-4158-aedf-6df0af29f35b/0/DD4FB2C10EF328ACD971AC7F3BA40F3A52F8D4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d9:04:d2:bd:2e:b3:0f:63:c5:7e:d9:ad:79:c3:e8:1e:fc: 1c:7d:5b:14:3e:c0:2d:9b:d5:76:44:16:61:53:d2:d0:61:28: 9c:2c:66:a8:89:5a:9f:dd:64:df:e4:e2:c7:31:7b:69:1d:87: a2:88:b2:80:ab:bb:60:4a:06:fd:6f:93:69:00:76:2b:8a:47: 5a:c6:5e:90:31:96:57:53:54:d5:ec:b8:57:11:58:8f:88:bb: 79:99:56:69:b3:6d:7a:d2:71:16:77:2b:f0:c3:59:90:a6:a3: 20:18:5c:4a:6a:b1:db:0c:d8:82:55:06:47:2c:1e:2b:86:cd: d9:5b:b3:2e:f5:aa:40:37:00:45:49:46:32:05:fa:ed:3b:ea: f3:91:bc:31:95:32:47:0c:4b:dd:32:9d:eb:07:2b:21:85:7c: fd:91:9a:ae:27:8b:c1:22:79:bd:30:3a:56:8b:ad:9f:8b:88: 71:07:47:bf:9e:90:2b:2c:66:a0:a6:59:9b:b5:6e:47:3e:63: 34:82:06:1e:93:69:f4:1b:02:be:13:c5:2a:2f:25:61:82:6b: 55:d2:17:98:1b:06:17:e9:a3:bb:7a:3a:9d:79:1c:1a:71:9d: df:07:43:e8:c4:96:f1:3a:5c:95:e2:d9:d5:50:e8:f7:b5:4a: 19:43:98:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXC1ZEtcEbGdCvcKLGJQYCsVThowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1 MkY4RDRDOTAeFw0yNTEyMDYxOTI1NDZaFw0yNTEyMTAwMDIyNDZaMDMxMTAvBgNV BAMTKEMwQ0FDRjg3N0QyMzA0ODg2MDM2QzNBMUM0NTFDQkQxNkVCODMwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWaOzpDSwlvcDqV1Eokt106JWG S4HBiEBoI+uVoiuWpzs4eYYQaqUS3RdVzzyT3m8PGdYcbIJfzkHhFdtum4JGE1uV sYzVMxJDNbBOgPvesPvgHsMHOfUk9QWOAFFTQ6AsKa/oc29F5K2SjiC/rCSN9/oT iZj93AG2m2GwshxhgRFQO941R0jVfZbL85ZIp5s5KU6LCvuNWjOWROukh6SVO0qF rDLTo0Xz7GhEfUbPXsIORh1iY/Cuwidtli+BRvqzHUhw+Dq7LOjoYJhV+96ltEvB hMp0m8y+ZOujZzQftAb7HLJzfZoYtplQ7BJRkUhdbXy5ODh2+vLMYyCQJEwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwMrPh30jBIhgNsOhxFHL0W64MPowHwYDVR0j BBgwFoAU3U+ywQ7zKKzZcax/O6QPOlL41MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQwZjY3Mi03NmQ0LTQxNTgtYWVkZi02ZGYwYWYyOWYzNWIvMC9ERDRGQjJDMTBF RjMyOEFDRDk3MUFDN0YzQkE0MEYzQTUyRjhENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBGM0E1MkY4 RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0MGY2NzItNzZkNC00MTU4LWFl ZGYtNmRmMGFmMjlmMzViLzAvREQ0RkIyQzEwRUYzMjhBQ0Q5NzFBQzdGM0JBNDBG M0E1MkY4RDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTZBNK9LrMPY8V+2a15w+ge/Bx9WxQ+wC2b 1XZEFmFT0tBhKJwsZqiJWp/dZN/k4scxe2kdh6KIsoCru2BKBv1vk2kAdiuKR1rG XpAxlldTVNXsuFcRWI+Iu3mZVmmzbXrScRZ3K/DDWZCmoyAYXEpqsdsM2IJVBkcs HiuGzdlbsy71qkA3AEVJRjIF+u076vORvDGVMkcMS90ynesHKyGFfP2Rmq4ni8Ei eb0wOlaLrZ+LiHEHR7+ekCssZqCmWZu1bkc+YzSCBh6TafQbAr4TxSovJWGCa1XS F5gbBhfpo7t6Op15HBpxnd8HQ+jElvE6XJXi2dVQ6Pe1ShlDmDI= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:23 2025 by rpki-client