This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: 9jctw8Z7t9bNTp2z/BHMkkFuDHuFXV8+O4G6JU+sI6M= Subject key identifier: 42:65:CA:67:BC:80:68:33:67:3D:DE:C0:48:E7:81:D3:C0:83:53:1D Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 4DB05FF6031ADD3C2087079A3550B7DAD7E2BD45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 054A Signing time: Sat 06 Dec 2025 01:40:43 +0000 Manifest this update: Sat 06 Dec 2025 01:35:43 +0000 Manifest next update: Tue 09 Dec 2025 10:50:43 +0000 Files and hashes: 1: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: mC8qZhq+SdeM2ojdUBhrBCEiYEAMkPHQnSsIZoSwkD4=) 2: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) 3: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: l7AZH3jA2GmLB8CMnYtZbrYa/W+mf87m8c2rR1yPMgs=) 4: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: cRRAppEwNWUZNxFFrqVntnb4uz3yNuZo0Z65i1BCFzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:b0:5f:f6:03:1a:dd:3c:20:87:07:9a:35:50:b7:da:d7:e2:bd:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Dec 6 01:35:43 2025 GMT Not After : Dec 9 10:50:43 2025 GMT Subject: CN=4265CA67BC806833673DDEC048E781D3C083531D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:1c:9f:45:80:23:71:7c:47:79:1e:ab:76: 9d:cf:30:15:16:2d:cf:51:38:d2:f4:b7:23:3d:53: 6b:87:60:e0:b8:e2:3c:e9:28:4f:e9:dc:de:01:24: 35:58:b3:91:92:00:99:8e:18:3c:ae:f6:2f:69:d3: 2a:f1:2f:91:50:0b:dd:51:f9:61:1f:71:75:ad:e3: 6c:72:f7:a2:92:17:41:09:82:a3:32:75:ad:cc:9f: 0c:2f:97:de:c9:f2:f0:4a:06:b9:4e:cc:69:2c:28: f5:c3:2b:a6:fb:dc:d0:91:de:03:55:1c:4f:e0:a3: 7a:1d:91:6b:b1:86:1c:39:72:51:82:30:ff:a4:d9: 4d:a6:85:d6:c4:0b:49:9d:5e:67:dd:30:c5:d1:92: a3:f6:3e:09:d8:c9:3b:91:79:cb:c4:37:ca:c9:66: 25:27:ca:1d:10:5c:3b:ce:59:c1:0f:80:d2:e7:f2: b5:d1:e7:19:fb:3c:47:d6:fb:bb:03:73:2c:7c:58: 70:76:77:45:4f:8c:86:1c:b9:38:9d:28:dc:81:eb: ac:e7:29:aa:a9:e5:e7:b3:69:e7:cb:07:bd:e8:f5: 8f:75:c4:f0:11:49:62:70:69:5e:8f:6d:cf:04:e3: cc:90:5a:02:cb:13:4c:2d:f6:bb:7b:3e:93:4c:54: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:65:CA:67:BC:80:68:33:67:3D:DE:C0:48:E7:81:D3:C0:83:53:1D X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:0e:a7:12:6a:18:46:cf:d7:06:6a:24:df:95:84:1b:69:b1: 98:e7:9b:10:6e:45:23:39:28:aa:5b:0b:68:1d:d7:64:49:26: 0c:fe:0a:e5:a2:01:7e:c5:f2:43:10:9e:c2:b5:cb:d8:83:9e: b7:09:89:71:81:39:65:b3:84:dd:52:ad:d9:3d:98:3f:68:66: 38:72:fe:67:6d:ec:1d:1c:13:5a:a0:82:2e:ac:8c:bd:54:ae: 0c:2d:55:14:fc:97:72:96:74:48:5d:06:e1:96:e1:bc:d3:3e: 31:5e:7f:21:53:08:5f:c9:9d:e4:e3:f8:5c:e9:7b:58:df:c2: 70:b9:e8:41:8f:19:43:c6:b4:06:69:d4:a2:3b:0c:8b:69:30: 58:f0:66:2b:d1:48:71:cd:d0:e2:de:91:f8:d0:50:14:c6:13: 75:26:74:61:3d:24:bf:1c:0a:f8:e6:6d:e6:7b:84:c8:1d:51: 2e:f3:35:ad:a7:38:27:b8:1b:7b:80:6f:5c:0f:9e:a1:91:40: db:fa:32:bd:e4:58:32:9f:da:23:68:e2:20:58:13:29:22:85: 35:8b:b4:02:e8:7a:de:ed:04:f0:a2:e0:6f:7b:75:a7:4a:84: bd:d2:e2:c3:fe:fb:2e:10:df:f7:6e:f7:83:16:98:f8:8b:94: 20:04:cd:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTbBf9gMa3TwghweaNVC32tfivUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTEyMDYwMTM1NDNaFw0yNTEyMDkxMDUwNDNaMDMxMTAvBgNV BAMTKDQyNjVDQTY3QkM4MDY4MzM2NzNEREVDMDQ4RTc4MUQzQzA4MzUzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6ByfRYAjcXxHeR6rdp3PMBUW Lc9RONL0tyM9U2uHYOC44jzpKE/p3N4BJDVYs5GSAJmOGDyu9i9p0yrxL5FQC91R +WEfcXWt42xy96KSF0EJgqMyda3Mnwwvl97J8vBKBrlOzGksKPXDK6b73NCR3gNV HE/go3odkWuxhhw5clGCMP+k2U2mhdbEC0mdXmfdMMXRkqP2PgnYyTuRecvEN8rJ ZiUnyh0QXDvOWcEPgNLn8rXR5xn7PEfW+7sDcyx8WHB2d0VPjIYcuTidKNyB66zn Kaqp5eezaefLB73o9Y91xPARSWJwaV6Pbc8E48yQWgLLE0wt9rt7PpNMVAhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmXKZ7yAaDNnPd7ASOeB08CDUx0wHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcOpxJqGEbP1wZqJN+VhBtpsZjnmxBuRSM5 KKpbC2gd12RJJgz+CuWiAX7F8kMQnsK1y9iDnrcJiXGBOWWzhN1Srdk9mD9oZjhy /mdt7B0cE1qggi6sjL1UrgwtVRT8l3KWdEhdBuGW4bzTPjFefyFTCF/JneTj+Fzp e1jfwnC56EGPGUPGtAZp1KI7DItpMFjwZivRSHHN0OLekfjQUBTGE3UmdGE9JL8c CvjmbeZ7hMgdUS7zNa2nOCe4G3uAb1wPnqGRQNv6Mr3kWDKf2iNo4iBYEykihTWL tALoet7tBPCi4G97dadKhL3S4sP++y4Q3/du94MWmPiLlCAEzWQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:51 2025 by rpki-client