This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft File: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft (raw, json) Hash identifier: NZImhwMsPXJX7U7Le/PqlHQYQLGijkcE0gT0mxR82W0= Subject key identifier: 90:78:4E:5E:78:1C:68:CC:59:94:65:93:18:A2:F6:73:93:AE:B6:58 Authority key identifier: 0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C Certificate issuer: /CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Certificate serial: 35C5060181155E3959E81501CC7866C82A13E5A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft Manifest number: 0155 Signing time: Fri 05 Dec 2025 09:51:33 +0000 Manifest this update: Fri 05 Dec 2025 09:46:33 +0000 Manifest next update: Mon 08 Dec 2025 17:46:33 +0000 Files and hashes: 1: 0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl (hash: UJubJPEemp7QtoH4yCBs9yqlAf9n4Y0sqsUH40U9jEw=) 2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: DWfEMEPWxsUozNiwbgr8ihU7QhgizyAKxGEXUL32Nzc=) 3: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: +5s73n1GRDKOs1PLsu8AmlmjjmE1TE3hQKNaKdkD1e0=) 4: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: vmmdKTzGdj+WW7oR5Y7BlF5cHcjcyn2ZeY0vBD9tiWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c5:06:01:81:15:5e:39:59:e8:15:01:cc:78:66:c8:2a:13:e5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D800491C03BFB579D58FFC7A24CAA8710845A9C Validity Not Before: Dec 5 09:46:33 2025 GMT Not After : Dec 8 17:46:33 2025 GMT Subject: CN=90784E5E781C68CC5994659318A2F67393AEB658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:97:42:cc:f8:be:5d:96:59:aa:d5:86:13:02: d5:bd:14:3f:ec:2d:4e:d5:1a:1a:ca:9f:a3:ee:f1: 05:43:d9:7a:b3:6a:cd:e0:c0:ce:1f:0f:ac:2b:ae: dd:84:ec:ab:99:df:19:12:f1:fd:1a:6d:49:5a:3b: 10:a7:49:b8:b6:44:e2:6f:21:27:91:29:87:20:24: 33:d2:df:df:70:2c:b7:e7:3c:31:9b:af:a3:32:af: 63:0e:b9:34:7b:54:4f:ad:e2:7e:02:7b:3d:e4:d5: cc:0a:59:0c:5c:91:3c:45:d6:9a:ed:ba:b9:52:5f: 42:51:90:57:16:34:9e:9c:ef:62:e6:8f:8c:4f:24: 7b:76:7b:dd:2f:dc:04:df:98:fa:a4:0a:7c:e6:9a: 55:74:7c:ab:ae:aa:c0:07:9e:4b:2d:e8:1e:6e:54: 2b:b5:fb:d9:63:5e:16:ab:a4:30:2f:29:57:5e:df: 19:93:74:7c:fc:6e:16:c3:eb:9d:8b:a0:f9:ed:c9: cf:fd:e5:b5:73:4f:9e:73:e6:fa:ef:82:cc:b7:35: 06:79:e6:3e:9d:ff:b3:58:f8:6d:4f:a8:80:9c:2c: ea:ee:99:71:11:b1:75:59:2c:7d:d2:b2:87:54:e8: 28:e7:f4:53:b3:47:08:cc:b3:84:20:c8:c6:cb:80: e6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:78:4E:5E:78:1C:68:CC:59:94:65:93:18:A2:F6:73:93:AE:B6:58 X509v3 Authority Key Identifier: keyid:0D:80:04:91:C0:3B:FB:57:9D:58:FF:C7:A2:4C:AA:87:10:84:5A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D800491C03BFB579D58FFC7A24CAA8710845A9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca96f458-ce5e-41a2-a232-9964f4988a06/0/0D800491C03BFB579D58FFC7A24CAA8710845A9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:2d:76:ec:2d:a9:1d:87:c9:13:96:dd:e5:cd:76:b2:9d:be: 53:1d:26:de:99:6c:27:14:e9:17:7f:78:2b:92:7e:d9:ff:51: 30:15:84:3e:50:81:d2:2c:f6:2d:1c:81:92:0d:f7:c7:52:cb: 3a:fa:6a:75:90:a7:65:53:1a:36:21:bb:f8:6f:09:69:70:ea: 66:c3:78:b9:94:70:9b:d0:0b:30:4d:ad:2f:38:6b:fa:32:6a: 22:56:26:6a:d7:ff:70:f7:fe:c4:be:3d:94:41:43:c7:5b:55: f7:9d:07:fd:bf:af:d9:a7:da:4b:94:10:ca:4c:a1:f9:b5:5b: 36:32:c2:e2:3b:69:22:47:60:3c:56:f9:4b:2d:e6:f2:c3:b9: 76:a8:2c:58:a9:a2:b2:6a:a6:08:ea:dd:d6:58:11:00:7d:12: 65:3d:19:6b:cd:9f:03:37:84:a2:ed:40:78:02:02:07:5d:37: dc:84:7a:0b:16:73:20:f7:08:ca:01:56:ac:e6:25:93:4b:d9: b3:95:ff:cb:17:98:16:66:86:64:1c:6d:d4:01:58:1a:6a:ea: 5a:e7:83:30:15:d1:9b:70:39:b9:6f:25:aa:f8:07:f1:cb:7d: 63:cc:74:1a:32:6f:f7:6e:d4:28:6c:0d:e2:2f:e7:d3:5f:93: b5:64:ff:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNcUGAYEVXjlZ6BUBzHhmyCoT5aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcx MDg0NUE5QzAeFw0yNTEyMDUwOTQ2MzNaFw0yNTEyMDgxNzQ2MzNaMDMxMTAvBgNV BAMTKDkwNzg0RTVFNzgxQzY4Q0M1OTk0NjU5MzE4QTJGNjczOTNBRUI2NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxl0LM+L5dllmq1YYTAtW9FD/s LU7VGhrKn6Pu8QVD2Xqzas3gwM4fD6wrrt2E7KuZ3xkS8f0abUlaOxCnSbi2ROJv ISeRKYcgJDPS399wLLfnPDGbr6Myr2MOuTR7VE+t4n4Cez3k1cwKWQxckTxF1prt urlSX0JRkFcWNJ6c72Lmj4xPJHt2e90v3ATfmPqkCnzmmlV0fKuuqsAHnkst6B5u VCu1+9ljXharpDAvKVde3xmTdHz8bhbD652LoPntyc/95bVzT55z5vrvgsy3NQZ5 5j6d/7NY+G1PqICcLOrumXERsXVZLH3SsodU6Cjn9FOzRwjMs4QgyMbLgOaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkHhOXngcaMxZlGWTGKL2c5OutlgwHwYDVR0j BBgwFoAUDYAEkcA7+1edWP/HokyqhxCEWpwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTk2ZjQ1OC1jZTVlLTQxYTItYTIzMi05OTY0ZjQ5ODhhMDYvMC8wRDgwMDQ5MUMw M0JGQjU3OUQ1OEZGQzdBMjRDQUE4NzEwODQ1QTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FBODcxMDg0 NUE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E5NmY0NTgtY2U1ZS00MWEyLWEy MzItOTk2NGY0OTg4YTA2LzAvMEQ4MDA0OTFDMDNCRkI1NzlENThGRkM3QTI0Q0FB ODcxMDg0NUE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4tduwtqR2HyROW3eXNdrKdvlMdJt6ZbCcU 6Rd/eCuSftn/UTAVhD5QgdIs9i0cgZIN98dSyzr6anWQp2VTGjYhu/hvCWlw6mbD eLmUcJvQCzBNrS84a/oyaiJWJmrX/3D3/sS+PZRBQ8dbVfedB/2/r9mn2kuUEMpM ofm1WzYywuI7aSJHYDxW+Ust5vLDuXaoLFiporJqpgjq3dZYEQB9EmU9GWvNnwM3 hKLtQHgCAgddN9yEegsWcyD3CMoBVqzmJZNL2bOV/8sXmBZmhmQcbdQBWBpq6lrn gzAV0ZtwOblvJar4B/HLfWPMdBoyb/du1ChsDeIv59Nfk7Vk/+Q= -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:47 2025 by rpki-client