This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: AECSov1SqEzk2ep7PzECNEYKh5j4CbXpt6dxF3Oaaeg= Subject key identifier: A5:44:08:A1:7B:2A:03:81:C6:C1:B5:54:99:90:72:0A:B3:B3:15:42 Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 5345BE1612527BF7B63CA8196BB4B1A9D8C905D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 052A Signing time: Sat 06 Dec 2025 22:21:17 +0000 Manifest this update: Sat 06 Dec 2025 22:16:17 +0000 Manifest next update: Wed 10 Dec 2025 05:24:17 +0000 Files and hashes: 1: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: HI0hJJXTQDhzD7pTczCRmyIdw4yYJFsaIwjzSTbxsrY=) 2: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: 2COjLCJ4YEuRoqvYvSrj9dQC5huF+G+dAbpMe2HpJLo=) 3: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: w7Chi4gZxBYt1ZeGb/YO7tH8OTI2H/0aS5PoiZEPc/Y=) 4: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iReeweCReiVdyDxdcHaFTjeSzHc3cSR3SFaF6DPJP8s=) 5: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: W2IYXy+JkbGpp85/sS2UKLUazxQpNz2N8iZifbHeJpI=) 6: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: /pdJmusGJ/QHqNKzfFViyNEzyhSMPLCUFyAyNkEu7A8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:45:be:16:12:52:7b:f7:b6:3c:a8:19:6b:b4:b1:a9:d8:c9:05:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: Dec 6 22:16:17 2025 GMT Not After : Dec 10 05:24:17 2025 GMT Subject: CN=A54408A17B2A0381C6C1B5549990720AB3B31542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:03:c4:bf:4b:55:55:2e:51:d1:84:1c:a8:23: 05:70:ca:91:45:79:a5:5e:a0:01:70:6e:14:7c:dd: 0d:8e:5a:f8:93:33:20:a7:01:65:93:70:f7:cf:af: 4a:0a:ab:12:5c:65:eb:43:30:35:af:5c:8b:54:b7: 0b:2b:ec:fa:6f:5d:82:1c:2b:cc:b4:be:0d:fc:9b: 9a:74:67:48:ae:74:15:8c:22:55:9d:3b:15:bf:86: c8:8d:76:39:97:0d:f3:10:15:03:43:4c:f4:83:42: d5:28:d7:59:55:38:87:33:32:9b:d6:62:d1:2d:6d: e2:72:c9:13:a6:92:ea:0c:51:2b:a6:a9:3f:e9:0e: 8d:08:55:81:4f:52:73:f0:9a:b8:35:aa:2b:5a:38: a9:fe:c2:4f:a6:3f:e5:05:60:3c:47:8e:6c:db:12: 46:dc:aa:dd:0f:5d:62:42:b7:94:3f:4c:bd:21:03: 90:6b:ec:10:5a:fe:d6:94:61:43:b5:04:ab:06:bf: aa:5c:14:a6:c0:67:b1:a0:6b:59:0f:ae:49:cb:c4: bb:bd:53:5c:41:d0:30:c8:7c:2c:d2:24:70:66:15: 60:f8:d3:62:3a:f7:1d:3d:bb:c4:ce:34:70:8e:f6: b0:37:ff:5e:71:2f:95:a9:9b:b3:18:b5:4b:b5:75: a4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:08:A1:7B:2A:03:81:C6:C1:B5:54:99:90:72:0A:B3:B3:15:42 X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:72:8e:e6:ca:a3:41:27:44:e7:53:84:dc:09:f8:a2:3d:68: 9d:56:f4:5d:ae:c1:13:dc:46:1d:eb:43:7d:94:41:25:0b:4d: 92:e7:06:e0:66:6c:c8:c5:af:3f:26:a3:a8:0e:8f:56:91:bd: c1:83:c0:42:80:9e:15:04:e0:e5:2d:1b:4d:f8:d9:3c:03:f0: ea:b2:91:36:71:95:2a:fb:3b:42:5f:88:a9:e1:f6:09:59:93: bc:a2:6a:01:e7:a0:53:24:4e:3a:e1:a7:b7:20:c0:53:b6:a6: 6d:4d:e2:86:72:72:b4:1e:49:9b:3b:25:2a:cd:32:a5:dd:16: fc:09:39:94:2e:8f:11:7a:4a:03:3e:c2:57:e2:04:96:6f:9d: 57:b0:74:d4:a9:76:55:72:37:22:08:e9:0a:04:a0:c9:28:83: 3c:0b:98:fb:07:6b:cc:80:84:6c:46:34:ec:13:9d:8c:94:de: 5d:01:11:70:02:55:63:2b:03:38:be:4d:c2:a2:e3:56:74:c8: 65:64:a1:fe:01:5d:2f:8a:f3:08:f8:f6:38:d0:f6:cb:66:3a: 34:7e:3a:49:da:61:71:2d:d4:68:bf:f0:45:41:9f:70:18:c1: a4:ab:a9:e4:15:17:06:bf:bb:a9:8a:1d:f0:8a:c6:be:09:7d: 2d:bb:ac:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0W+FhJSe/e2PKgZa7SxqdjJBdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNTEyMDYyMjE2MTdaFw0yNTEyMTAwNTI0MTdaMDMxMTAvBgNV BAMTKEE1NDQwOEExN0IyQTAzODFDNkMxQjU1NDk5OTA3MjBBQjNCMzE1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdA8S/S1VVLlHRhByoIwVwypFF eaVeoAFwbhR83Q2OWviTMyCnAWWTcPfPr0oKqxJcZetDMDWvXItUtwsr7PpvXYIc K8y0vg38m5p0Z0iudBWMIlWdOxW/hsiNdjmXDfMQFQNDTPSDQtUo11lVOIczMpvW YtEtbeJyyROmkuoMUSumqT/pDo0IVYFPUnPwmrg1qitaOKn+wk+mP+UFYDxHjmzb Ekbcqt0PXWJCt5Q/TL0hA5Br7BBa/taUYUO1BKsGv6pcFKbAZ7Gga1kPrknLxLu9 U1xB0DDIfCzSJHBmFWD402I69x09u8TONHCO9rA3/15xL5Wpm7MYtUu1daQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUQIoXsqA4HGwbVUmZByCrOzFUIwHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlyjubKo0EnROdThNwJ+KI9aJ1W9F2uwRPc Rh3rQ32UQSULTZLnBuBmbMjFrz8mo6gOj1aRvcGDwEKAnhUE4OUtG0342TwD8Oqy kTZxlSr7O0JfiKnh9glZk7yiagHnoFMkTjrhp7cgwFO2pm1N4oZycrQeSZs7JSrN MqXdFvwJOZQujxF6SgM+wlfiBJZvnVewdNSpdlVyNyII6QoEoMkogzwLmPsHa8yA hGxGNOwTnYyU3l0BEXACVWMrAzi+TcKi41Z0yGVkof4BXS+K8wj49jjQ9stmOjR+ OknaYXEt1Gi/8EVBn3AYwaSrqeQVFwa/u6mKHfCKxr4JfS27rJQ= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:04 2025 by rpki-client