This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft File: 1DD4F8984667E142BB9C6F1133AA56899352286C.mft (raw, json) Hash identifier: orgh6jV6OvZ5vGgk9ucK7shrhabhiSMxfM4q+VNW/xw= Subject key identifier: CA:01:97:ED:2F:A9:96:63:3F:40:37:6D:F4:B8:F2:4E:78:79:04:A5 Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C Certificate issuer: /CN=1DD4F8984667E142BB9C6F1133AA56899352286C Certificate serial: 4BAEE18C6A0384CC62C68C7D4D31F225DD97686E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft Manifest number: 022A Signing time: Tue 16 Dec 2025 10:12:20 +0000 Manifest this update: Tue 16 Dec 2025 10:07:20 +0000 Manifest next update: Fri 19 Dec 2025 19:40:20 +0000 Files and hashes: 1: 3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (hash: wfLjY3p90gmlaNyyJgSUiHlnW1A0eYIofnmRcN5XLWg=) 2: 1DD4F8984667E142BB9C6F1133AA56899352286C.crl (hash: gulWErhH5JaOqG/gmBm3M59vnCLXCwlB7uuKgAnvMFg=) 3: 3130332e3137382e38342e302f32342d3234203d3e20313439333138.roa (hash: sc/9k5RxrPoUKjA1WeRmsmulQQW2CkQ+ijXNT0b/Zmg=) 4: 3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (hash: q8DwNNKz74IoWEZzT+iAC/h08ft27LvacBdr8MXv1MI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 19:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ae:e1:8c:6a:03:84:cc:62:c6:8c:7d:4d:31:f2:25:dd:97:68:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C Validity Not Before: Dec 16 10:07:20 2025 GMT Not After : Dec 19 19:40:20 2025 GMT Subject: CN=CA0197ED2FA996633F40376DF4B8F24E787904A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:14:68:a2:a0:29:e1:a9:6a:40:79:41:43: c9:cd:62:4f:bf:ca:97:51:6e:a5:b6:43:60:07:b8: 92:cb:64:4f:b7:eb:36:63:b8:26:23:de:10:11:a0: 70:3b:74:02:c7:48:5b:34:1d:b5:f6:5f:a2:c3:ce: 47:63:d1:e6:3b:32:33:03:0b:65:61:fe:94:80:ba: 71:0c:8f:67:8a:fa:cd:38:6e:b5:94:49:2b:f0:fe: c8:c6:61:d3:80:93:0f:ed:ba:7b:59:54:42:cc:07: 10:2b:ce:c4:8e:34:69:4c:7b:7b:5e:26:85:23:4e: 72:4e:d2:40:34:47:52:7b:0c:23:6f:a7:b2:b4:6f: db:b7:48:2b:13:6f:80:1c:7b:09:9e:f8:69:cd:c2: a0:b0:de:c4:fe:03:55:93:b0:e1:9a:49:22:27:68: 21:cb:c5:15:49:5b:ed:3f:5e:6e:d4:a3:e5:50:82: e3:42:e8:70:b6:24:63:2f:e6:7d:c0:58:f5:7d:62: ed:c9:bf:34:e8:8c:a8:b8:e9:59:11:e1:6c:d9:f9: 87:bb:db:a6:71:2b:5a:63:94:a9:89:e0:66:ae:73: 9e:f3:ac:ea:44:d4:d2:55:3c:57:ce:46:48:e2:0d: 66:f5:aa:d5:ce:9f:6c:20:d7:43:76:54:e0:89:7d: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:01:97:ED:2F:A9:96:63:3F:40:37:6D:F4:B8:F2:4E:78:79:04:A5 X509v3 Authority Key Identifier: keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:56:bc:ba:4a:41:a9:a4:29:ff:8a:cc:de:6e:56:ae:a8:95: ef:4e:22:8d:da:13:ef:14:86:ec:04:70:49:73:82:2a:18:ee: 5b:1a:40:e6:39:55:89:9f:bd:a5:ca:45:bf:62:d2:ae:48:e6: 64:fe:33:0a:e2:97:f2:bd:2d:4a:88:b9:d9:c3:da:8d:be:11: 50:59:8a:a9:77:e1:8e:ea:1e:38:66:65:c8:e7:17:68:57:65: f0:b0:67:fe:97:ba:3f:de:4b:13:07:9d:5f:46:86:3c:e3:8c: 7e:fa:91:aa:54:3d:54:d3:65:95:79:c5:50:8c:67:2f:30:d3: a9:81:f0:c3:a9:ba:78:be:75:55:48:dc:03:0d:16:1e:b2:76: da:17:69:04:ca:e5:cb:f8:fc:71:99:4b:15:61:bd:04:cf:75: b1:f5:e7:0a:eb:90:6a:a6:24:45:93:3c:e3:ed:db:ad:6d:3c: a2:4a:5d:a2:d8:16:0b:d4:de:5b:11:22:57:31:f6:74:2d:45: cf:ab:f1:9f:be:29:96:d8:2b:43:c0:1d:e9:f9:36:43:df:cd: 11:cf:54:d4:91:fe:6a:66:aa:96:f1:19:54:2e:c0:88:c4:09: 7f:50:65:a1:b4:fd:ca:a1:11:7a:df:71:ed:68:62:23:4e:b5: 92:4e:25:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS67hjGoDhMxixox9TTHyJd2XaG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5 MzUyMjg2QzAeFw0yNTEyMTYxMDA3MjBaFw0yNTEyMTkxOTQwMjBaMDMxMTAvBgNV BAMTKENBMDE5N0VEMkZBOTk2NjMzRjQwMzc2REY0QjhGMjRFNzg3OTA0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYhRooqAp4alqQHlBQ8nNYk+/ ypdRbqW2Q2AHuJLLZE+36zZjuCYj3hARoHA7dALHSFs0HbX2X6LDzkdj0eY7MjMD C2Vh/pSAunEMj2eK+s04brWUSSvw/sjGYdOAkw/tuntZVELMBxArzsSONGlMe3te JoUjTnJO0kA0R1J7DCNvp7K0b9u3SCsTb4Acewme+GnNwqCw3sT+A1WTsOGaSSIn aCHLxRVJW+0/Xm7Uo+VQguNC6HC2JGMv5n3AWPV9Yu3JvzTojKi46VkR4WzZ+Ye7 26ZxK1pjlKmJ4Gauc57zrOpE1NJVPFfORkjiDWb1qtXOn2wg10N2VOCJfWz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygGX7S+plmM/QDdt9LjyTnh5BKUwHwYDVR0j BBgwFoAUHdT4mEZn4UK7nG8RM6pWiZNSKGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA3NWVmNi1hMjUxLTQ3ZGQtOGRkYS1jYWRmZjQ5N2E3ZTUvMC8xREQ0Rjg5ODQ2 NjdFMTQyQkI5QzZGMTEzM0FBNTY4OTkzNTIyODZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2ODk5MzUy Mjg2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwNzVlZjYtYTI1MS00N2RkLThk ZGEtY2FkZmY0OTdhN2U1LzAvMURENEY4OTg0NjY3RTE0MkJCOUM2RjExMzNBQTU2 ODk5MzUyMjg2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRWvLpKQamkKf+KzN5uVq6ole9OIo3aE+8U huwEcElzgioY7lsaQOY5VYmfvaXKRb9i0q5I5mT+Mwril/K9LUqIudnD2o2+EVBZ iql34Y7qHjhmZcjnF2hXZfCwZ/6Xuj/eSxMHnV9GhjzjjH76kapUPVTTZZV5xVCM Zy8w06mB8MOpuni+dVVI3AMNFh6ydtoXaQTK5cv4/HGZSxVhvQTPdbH15wrrkGqm JEWTPOPt261tPKJKXaLYFgvU3lsRIlcx9nQtRc+r8Z++KZbYK0PAHen5NkPfzRHP VNSR/mpmqpbxGVQuwIjECX9QZaG0/cqhEXrfce1oYiNOtZJOJXE= -----END CERTIFICATE-----Generated at Wed Dec 17 22:26:09 2025 by rpki-client