This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft File: D456F5EAD8D734455DAEF896A9055409FF4A078F.mft (raw, json) Hash identifier: molVI4Zih/3D40B/v+o4sTzFdQ+FCm2qMsJjMxDjWb0= Subject key identifier: E3:A5:C8:33:F4:7B:39:35:F7:D6:9F:A6:2C:2B:56:3C:EE:12:43:28 Authority key identifier: D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F Certificate issuer: /CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Certificate serial: 22BECDF49CA8389AF2A133E060D6F21F17E50C06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft Manifest number: 01AA Signing time: Fri 05 Dec 2025 11:41:02 +0000 Manifest this update: Fri 05 Dec 2025 11:36:02 +0000 Manifest next update: Mon 08 Dec 2025 16:59:02 +0000 Files and hashes: 1: 3130332e32312e36342e302f32332d3233203d3e20313530393832.roa (hash: mrSmw0lReummAnMj3GqGpFEiphyO6pKxSdT7HNPj4CY=) 2: D456F5EAD8D734455DAEF896A9055409FF4A078F.crl (hash: 6JrpHyJ1RnjHwY/m8vG83BuMhmh3QEqh1pfCZgWyI7g=) 3: 323030313a6466323a356434303a3a2f34382d3438203d3e20313530393832.roa (hash: aaTI5DoDn0m6HY51IbL0xWwP9olw3MDvU4KJjwdfj4s=) 4: 3130332e32312e36352e302f32342d3234203d3e20313530393832.roa (hash: G0udRvsXHRRhLNPplYWvznvJttNcudpbxgcRCTJoJEc=) 5: 3130332e32312e36342e302f32342d3234203d3e20313530393832.roa (hash: yEfEIfYRzsgFdTFRadWVOvqbZaRYioWNk9NlZG+miqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:be:cd:f4:9c:a8:38:9a:f2:a1:33:e0:60:d6:f2:1f:17:e5:0c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D456F5EAD8D734455DAEF896A9055409FF4A078F Validity Not Before: Dec 5 11:36:02 2025 GMT Not After : Dec 8 16:59:02 2025 GMT Subject: CN=E3A5C833F47B3935F7D69FA62C2B563CEE124328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:0f:2f:24:09:8c:0a:5f:c1:70:08:1f:fc: 11:19:09:8b:3e:0f:6d:75:16:ba:90:ac:9a:92:91: 9d:cb:12:d2:70:2d:22:b6:79:a6:9c:cb:dd:f2:3c: 1a:85:05:12:5b:1d:f6:b0:74:90:97:38:d3:99:67: e7:90:55:02:b6:81:fe:6a:5d:c5:08:4a:ac:09:c5: 0a:fb:fd:9a:c0:26:c6:de:62:9e:63:75:c5:a1:10: 0b:af:09:74:7b:ab:22:0c:17:ee:9b:85:39:ac:e4: ba:a5:e8:4c:32:f5:a8:8d:d0:ea:7f:93:c2:b7:e1: dc:c4:63:d8:14:3a:0e:c7:a4:e1:1a:0c:6d:cd:5b: 9f:69:9d:62:f5:25:3e:4b:4c:f7:0e:be:d6:72:b8: 6e:9f:cd:25:20:a7:1e:75:5a:28:f5:1b:06:69:73: 41:ef:0d:b2:ac:65:e2:49:85:38:d8:49:a7:49:05: 76:29:02:7b:d8:bb:5a:41:80:b7:e7:03:9b:0d:1f: b0:5f:5b:39:1d:fe:87:cf:c1:64:05:42:a1:da:7a: 9b:bc:ea:a6:68:0f:77:bc:14:01:f1:2d:c3:dd:83: 9e:eb:f6:7e:42:b7:c2:f9:06:2b:bd:59:93:98:f1: 19:6a:28:b8:3d:6f:71:f3:61:04:67:a7:83:39:96: 2b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A5:C8:33:F4:7B:39:35:F7:D6:9F:A6:2C:2B:56:3C:EE:12:43:28 X509v3 Authority Key Identifier: keyid:D4:56:F5:EA:D8:D7:34:45:5D:AE:F8:96:A9:05:54:09:FF:4A:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D456F5EAD8D734455DAEF896A9055409FF4A078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6bec8e9-6568-478d-bd26-f6e777875511/0/D456F5EAD8D734455DAEF896A9055409FF4A078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:77:20:bb:2b:07:85:17:0e:df:ad:25:a8:55:b3:b4:61:fd: 28:9f:0d:0c:7c:dc:66:39:52:c6:8d:79:fc:a5:1c:f4:ff:0c: 12:ee:b7:0a:5c:d6:40:1c:a3:40:c2:95:67:4d:b6:f8:b9:b9: 0a:c0:e2:1b:be:4a:04:db:fa:73:b0:40:84:34:5c:7e:d3:00: 8f:0a:1d:66:12:63:53:14:62:64:75:2f:38:4b:54:00:7f:71: 97:42:ef:77:2a:1d:f4:3a:ac:57:52:22:5d:9c:c7:1e:52:55: f9:b5:b0:82:e4:7f:dc:a3:1d:eb:84:3d:72:8f:1b:5f:11:a7: 17:97:98:b6:b2:0e:62:f6:ab:ae:1c:95:37:35:a4:8b:5d:b3: 67:4e:f1:3b:a4:4b:4b:18:ae:52:6b:bc:15:a6:83:39:29:ca: 9b:43:f9:04:45:47:2c:cc:8b:46:63:63:bf:14:bc:41:df:9b: c3:57:44:51:05:83:e1:74:a0:9d:20:e5:a7:97:48:4f:67:6c: ea:e2:7e:83:dc:69:3e:5d:5a:9f:ba:19:e1:2e:d7:63:69:96: b7:96:bc:60:52:9c:2e:ab:8f:2e:1b:b9:33:59:01:ee:e0:18: 87:15:86:5d:4a:20:90:e2:68:a6:03:a4:2c:0e:cd:89:fa:8e: 9f:94:6d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIr7N9JyoOJryoTPgYNbyHxflDAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlG RjRBMDc4RjAeFw0yNTEyMDUxMTM2MDJaFw0yNTEyMDgxNjU5MDJaMDMxMTAvBgNV BAMTKEUzQTVDODMzRjQ3QjM5MzVGN0Q2OUZBNjJDMkI1NjNDRUUxMjQzMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cg8vJAmMCl/BcAgf/BEZCYs+ D211FrqQrJqSkZ3LEtJwLSK2eaacy93yPBqFBRJbHfawdJCXONOZZ+eQVQK2gf5q XcUISqwJxQr7/ZrAJsbeYp5jdcWhEAuvCXR7qyIMF+6bhTms5Lql6Ewy9aiN0Op/ k8K34dzEY9gUOg7HpOEaDG3NW59pnWL1JT5LTPcOvtZyuG6fzSUgpx51Wij1GwZp c0HvDbKsZeJJhTjYSadJBXYpAnvYu1pBgLfnA5sNH7BfWzkd/ofPwWQFQqHaepu8 6qZoD3e8FAHxLcPdg57r9n5Ct8L5Biu9WZOY8RlqKLg9b3HzYQRnp4M5liuRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU46XIM/R7OTX31p+mLCtWPO4SQygwHwYDVR0j BBgwFoAU1Fb16tjXNEVdrviWqQVUCf9KB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmJlYzhlOS02NTY4LTQ3OGQtYmQyNi1mNmU3Nzc4NzU1MTEvMC9ENDU2RjVFQUQ4 RDczNDQ1NURBRUY4OTZBOTA1NTQwOUZGNEEwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0MDlGRjRB MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZiZWM4ZTktNjU2OC00NzhkLWJk MjYtZjZlNzc3ODc1NTExLzAvRDQ1NkY1RUFEOEQ3MzQ0NTVEQUVGODk2QTkwNTU0 MDlGRjRBMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH13ILsrB4UXDt+tJahVs7Rh/SifDQx83GY5 UsaNefylHPT/DBLutwpc1kAco0DClWdNtvi5uQrA4hu+SgTb+nOwQIQ0XH7TAI8K HWYSY1MUYmR1LzhLVAB/cZdC73cqHfQ6rFdSIl2cxx5SVfm1sILkf9yjHeuEPXKP G18RpxeXmLayDmL2q64clTc1pItds2dO8TukS0sYrlJrvBWmgzkpyptD+QRFRyzM i0ZjY78UvEHfm8NXRFEFg+F0oJ0g5aeXSE9nbOrifoPcaT5dWp+6GeEu12NplreW vGBSnC6rjy4buTNZAe7gGIcVhl1KIJDiaKYDpCwOzYn6jp+UbVE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:58 2025 by rpki-client