This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: lmyrWQabWzGP19ROpuPCD9saBUnMGHAiTc8bNj7cfOQ= Subject key identifier: F7:0A:E5:87:90:19:1C:EC:B1:A3:7C:BA:B2:6D:6E:0C:ED:83:1B:34 Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 08348276B1895723E85AB88382359D97A4FF0437 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: 0103 Signing time: Fri 05 Dec 2025 22:11:08 +0000 Manifest this update: Fri 05 Dec 2025 22:06:08 +0000 Manifest next update: Tue 09 Dec 2025 06:14:08 +0000 Files and hashes: 1: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: 5QnTSlvCk726GieVYJxHVbjFxqMGOnNRBgYZOV3yvc0=) 2: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 3018KqaCeIgQPe+mGEUAX9QQkpcPilw0dwx6vwsisv4=) 3: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: 5yvzQ7Kfp7jxySRufw5o4VNUcGO1BIpsHpWpRQpNSNo=) 4: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 5HrjYhzGl966YcRXgphYt2j/Sbh0/oaXfGdM2Fz9Phg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:34:82:76:b1:89:57:23:e8:5a:b8:83:82:35:9d:97:a4:ff:04:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Dec 5 22:06:08 2025 GMT Not After : Dec 9 06:14:08 2025 GMT Subject: CN=F70AE58790191CECB1A37CBAB26D6E0CED831B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:b8:21:ac:e5:4d:a4:d8:cf:cf:e2:38:f2: 4b:40:7d:40:b2:ad:b3:b1:5a:38:67:b7:3d:a1:a3: 6c:92:b3:f2:48:37:fb:cd:3f:7e:79:df:e9:a8:24: 97:20:99:5c:54:de:ea:f8:a2:53:74:ee:01:d2:b4: 46:68:63:74:f9:96:59:d9:ee:19:d4:52:4f:cb:6e: 90:67:ca:16:50:33:7d:ab:4a:ae:dd:c2:6b:59:c7: c1:2c:f1:66:b3:bf:a8:a1:1a:d1:d1:f4:0d:ae:91: 76:68:ee:7d:5f:36:07:67:c0:81:e5:8b:b8:0e:e7: e2:12:c1:53:33:23:45:66:20:d0:a1:bc:3e:70:62: 93:ed:ba:ea:af:46:24:ba:3f:19:cc:33:eb:ab:87: 54:cd:a8:a6:b6:cd:f4:41:cb:ab:f9:15:cf:0f:e7: 3a:63:e6:67:d9:a2:8f:da:5e:7a:e6:a2:f2:9b:11: 9b:37:c9:2e:67:c2:2f:29:f9:b7:c5:2e:c6:4e:06: 57:fe:d9:40:f2:dd:ca:41:66:80:2c:98:fe:57:48: 19:9e:f3:28:12:f3:d2:f2:fb:1f:ff:f9:12:9b:62: bb:8c:85:29:0d:a2:93:d0:ce:5f:48:04:b8:6d:c0: 25:74:6c:d3:cc:81:40:8f:8a:fb:a2:8c:c5:44:ce: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0A:E5:87:90:19:1C:EC:B1:A3:7C:BA:B2:6D:6E:0C:ED:83:1B:34 X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:60:1b:ad:bd:c0:fc:67:33:08:2f:f9:e2:a8:a1:cd:4f:6d: b6:50:a7:d0:06:bd:19:d3:1f:ff:70:d5:33:10:8a:bb:5a:27: 55:dc:21:1a:60:11:3b:c2:be:95:18:fa:66:04:76:ab:05:16: 6e:d7:24:96:3d:8b:ee:b3:b4:27:c2:43:db:80:6a:42:f9:92: 52:84:d3:61:02:47:16:7f:f7:22:a2:d5:08:83:fd:39:08:33: be:f0:55:28:55:69:c6:88:34:d2:01:11:a0:27:f5:45:92:78: 08:b7:8e:6b:63:31:ce:2f:dc:b6:71:4b:34:d4:61:28:46:1e: c8:5d:14:5d:d0:24:e5:96:7b:47:22:b9:b8:ae:8b:18:aa:46: 2c:aa:e7:d9:21:9d:c7:fe:5b:f9:51:a5:54:16:07:d2:ac:0a: e7:c1:7e:9d:4f:bb:1c:b7:ef:8e:3b:d5:64:e1:67:38:a1:29: 91:2c:4b:95:8b:d8:76:3e:3b:28:3c:77:0e:e9:f1:19:cd:30: 97:77:cd:0b:f8:2d:32:6e:29:ab:59:3d:11:5b:a6:3a:23:83: 5e:fb:2d:79:9b:5f:72:25:04:de:ed:05:14:c1:5f:12:a7:4c: f3:c5:d9:64:d3:11:6a:97:e8:c4:df:5f:48:1a:35:42:76:25: 00:60:f2:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCDSCdrGJVyPoWriDgjWdl6T/BDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNTEyMDUyMjA2MDhaFw0yNTEyMDkwNjE0MDhaMDMxMTAvBgNV BAMTKEY3MEFFNTg3OTAxOTFDRUNCMUEzN0NCQUIyNkQ2RTBDRUQ4MzFCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRlrghrOVNpNjPz+I48ktAfUCy rbOxWjhntz2ho2ySs/JIN/vNP3553+moJJcgmVxU3ur4olN07gHStEZoY3T5llnZ 7hnUUk/LbpBnyhZQM32rSq7dwmtZx8Es8Wazv6ihGtHR9A2ukXZo7n1fNgdnwIHl i7gO5+ISwVMzI0VmINChvD5wYpPtuuqvRiS6PxnMM+urh1TNqKa2zfRBy6v5Fc8P 5zpj5mfZoo/aXnrmovKbEZs3yS5nwi8p+bfFLsZOBlf+2UDy3cpBZoAsmP5XSBme 8ygS89Ly+x//+RKbYruMhSkNopPQzl9IBLhtwCV0bNPMgUCPivuijMVEzqvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9wrlh5AZHOyxo3y6sm1uDO2DGzQwHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhgG629wPxnMwgv+eKooc1PbbZQp9AGvRnT H/9w1TMQirtaJ1XcIRpgETvCvpUY+mYEdqsFFm7XJJY9i+6ztCfCQ9uAakL5klKE 02ECRxZ/9yKi1QiD/TkIM77wVShVacaINNIBEaAn9UWSeAi3jmtjMc4v3LZxSzTU YShGHshdFF3QJOWWe0ciubiuixiqRiyq59khncf+W/lRpVQWB9KsCufBfp1Puxy3 74471WThZzihKZEsS5WL2HY+Oyg8dw7p8RnNMJd3zQv4LTJuKatZPRFbpjojg177 LXmbX3IlBN7tBRTBXxKnTPPF2WTTEWqX6MTfX0gaNUJ2JQBg8uE= -----END CERTIFICATE-----Generated at Sat Dec 6 14:46:28 2025 by rpki-client