This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: Y81krH9XdUAKsQz6J5cnGPT3JopylMG8LKqnBWid+Us= Subject key identifier: B2:09:A0:92:52:D3:6B:3D:4A:F9:1A:9E:05:27:FB:37:95:B8:DF:A5 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 53DD298DCE77B4223FC92BF9485A09FD30B746DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 020C Signing time: Sat 06 Dec 2025 20:21:54 +0000 Manifest this update: Sat 06 Dec 2025 20:16:54 +0000 Manifest next update: Tue 09 Dec 2025 23:31:54 +0000 Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: Ori5VLFf6lr43wDgi/FVnSEBoBYcNTS+BelqkABrEIo=) 2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: wlhhz4T86+ShRU2p6Up+KvbeI0BWxilrsa27X54ni/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:dd:29:8d:ce:77:b4:22:3f:c9:2b:f9:48:5a:09:fd:30:b7:46:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: Dec 6 20:16:54 2025 GMT Not After : Dec 9 23:31:54 2025 GMT Subject: CN=B209A09252D36B3D4AF91A9E0527FB3795B8DFA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:c2:b1:0c:49:ed:de:f4:af:bd:73:f3:4d: 11:5d:e1:e0:12:91:f3:18:ad:c4:6b:1e:2a:d5:e0: 59:3f:86:80:0d:aa:fe:0a:27:6d:54:6f:32:23:7c: b9:13:ea:59:4d:c8:bc:2a:a5:39:b3:c9:74:19:b5: 03:b3:76:05:80:a3:18:31:25:d3:8c:66:be:8f:ec: e3:ce:02:cc:0a:a5:a2:fd:6a:4f:d6:be:08:23:63: 87:8c:77:b1:47:c7:07:62:aa:03:06:44:dd:a6:90: b7:36:60:6f:29:f5:24:e5:82:a3:be:12:36:e2:d7: 93:3c:69:3b:74:23:42:41:c5:ab:5c:6a:a9:89:65: 32:f4:a4:96:da:d6:93:a6:4a:2d:bd:83:d3:2f:9d: 80:43:d2:a8:78:09:f1:20:3b:86:b3:c4:98:76:d4: cc:ad:1e:7b:83:04:ef:51:c1:7c:10:cf:9d:3a:d3: cb:8e:e3:94:7b:1b:04:d8:d7:96:00:e6:18:ec:eb: f3:1b:c9:1c:84:16:df:8a:8f:c3:5b:e2:b6:95:a8: dd:b0:01:47:66:03:e3:57:ce:ab:4e:49:26:14:b4: a5:38:74:ff:a4:ad:7f:56:1a:f9:ee:bc:c4:cd:4a: c3:9e:c8:aa:96:dd:09:60:c5:c2:6b:eb:0c:46:35: da:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:A0:92:52:D3:6B:3D:4A:F9:1A:9E:05:27:FB:37:95:B8:DF:A5 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ad:1d:98:78:da:0c:5c:38:88:5a:b8:88:20:a3:98:47:35: 9e:40:c9:51:c2:61:fa:e3:38:67:8e:e4:ce:ad:99:ca:01:cc: be:43:46:f0:90:01:12:70:74:55:66:73:2f:f0:61:d4:78:df: e0:32:28:e4:5b:a5:c4:50:50:57:d9:41:fd:f4:73:fd:24:43: d4:29:64:29:ca:a0:1c:38:fc:44:58:d3:e5:1f:cf:92:19:e2: 63:b3:5e:d4:cf:a6:be:a2:75:cb:2b:a5:41:81:fb:d7:65:90: 1a:de:29:f2:c0:92:80:57:46:4c:2f:ea:54:51:da:22:6f:9b: 76:48:6f:b0:a5:3e:89:6c:04:70:01:be:6c:cc:99:8a:28:95: da:19:56:83:92:8d:78:a7:65:27:fe:cf:00:fb:d4:6b:74:7f: 04:bd:a2:53:c5:5f:31:f8:96:0e:50:63:47:3a:b7:2f:33:d1: 47:6d:ae:e4:41:d0:b7:f8:e4:d1:f1:c7:2e:b6:bc:12:f0:0c: 95:15:e8:28:84:4e:91:dc:36:56:8a:22:d8:e3:b6:e8:aa:2d: f7:89:bc:93:43:45:87:e6:04:dc:ea:4e:86:09:21:99:47:37: 9d:3d:3a:32:d5:de:a6:00:b8:b9:f0:2f:c4:e9:e4:99:8f:ca: cb:76:87:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU90pjc53tCI/ySv5SFoJ/TC3Rt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNTEyMDYyMDE2NTRaFw0yNTEyMDkyMzMxNTRaMDMxMTAvBgNV BAMTKEIyMDlBMDkyNTJEMzZCM0Q0QUY5MUE5RTA1MjdGQjM3OTVCOERGQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMj8KxDEnt3vSvvXPzTRFd4eAS kfMYrcRrHirV4Fk/hoANqv4KJ21UbzIjfLkT6llNyLwqpTmzyXQZtQOzdgWAoxgx JdOMZr6P7OPOAswKpaL9ak/WvggjY4eMd7FHxwdiqgMGRN2mkLc2YG8p9STlgqO+ Ejbi15M8aTt0I0JBxatcaqmJZTL0pJba1pOmSi29g9MvnYBD0qh4CfEgO4azxJh2 1MytHnuDBO9RwXwQz50608uO45R7GwTY15YA5hjs6/MbyRyEFt+Kj8Nb4raVqN2w AUdmA+NXzqtOSSYUtKU4dP+krX9WGvnuvMTNSsOeyKqW3QlgxcJr6wxGNdplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsgmgklLTaz1K+RqeBSf7N5W436UwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+tHZh42gxcOIhauIggo5hHNZ5AyVHCYfrj OGeO5M6tmcoBzL5DRvCQARJwdFVmcy/wYdR43+AyKORbpcRQUFfZQf30c/0kQ9Qp ZCnKoBw4/ERY0+Ufz5IZ4mOzXtTPpr6idcsrpUGB+9dlkBreKfLAkoBXRkwv6lRR 2iJvm3ZIb7ClPolsBHABvmzMmYooldoZVoOSjXinZSf+zwD71Gt0fwS9olPFXzH4 lg5QY0c6ty8z0UdtruRB0Lf45NHxxy62vBLwDJUV6CiETpHcNlaKItjjtuiqLfeJ vJNDRYfmBNzqToYJIZlHN509OjLV3qYAuLnwL8Tp5JmPyst2h08= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:52 2025 by rpki-client