This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: KvykMdG08tZXGJjp7m8KiAavT0vTIv4fqt2WdnLdcQY= Subject key identifier: DD:7F:8E:06:AD:A1:5B:97:BC:F9:4C:7F:52:79:E2:50:FD:6C:4E:0C Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 5CF843EE987E7E95BC82AE5CD245F8BEB23ECC3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 02C7 Signing time: Sat 06 Dec 2025 18:42:19 +0000 Manifest this update: Sat 06 Dec 2025 18:37:19 +0000 Manifest next update: Wed 10 Dec 2025 00:30:19 +0000 Files and hashes: 1: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: veFUUZaHhHDpj6KmBcnJnR41ugvnsdBmWkSb2+LTSCU=) 2: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: hcHqLlEY8qk44pdP0Wx71fJwLLSm4iKoEybPTGaxow8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f8:43:ee:98:7e:7e:95:bc:82:ae:5c:d2:45:f8:be:b2:3e:cc:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Dec 6 18:37:19 2025 GMT Not After : Dec 10 00:30:19 2025 GMT Subject: CN=DD7F8E06ADA15B97BCF94C7F5279E250FD6C4E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:7d:9d:bd:67:25:06:f9:f7:83:b3:ef:7f: ba:6c:5f:a5:6c:95:0f:7a:02:61:33:2c:0e:6d:e9: 67:61:bb:24:45:66:cd:fd:82:6e:7c:44:17:68:ff: cc:6f:e7:bd:72:b4:a3:e4:6a:51:3b:b4:b4:e9:92: 22:c4:c6:e3:81:94:c9:40:da:74:69:5d:83:93:9e: f5:0b:37:7a:ff:bc:c6:dc:0b:30:dd:c8:94:42:b1: 00:22:63:c2:42:12:45:4d:b0:11:d9:29:fa:70:52: fb:bb:13:d5:06:92:2f:77:be:d0:8a:69:f4:3f:79: 94:ad:4b:3c:ed:b4:e2:2c:48:20:0a:83:c4:27:66: 11:cb:b3:a1:7c:0f:09:86:25:20:2d:61:bf:27:18: 3a:2c:e7:fd:29:90:a4:1f:18:29:56:7c:55:2b:92: d6:66:d9:96:39:f5:20:32:8a:26:a1:1d:ed:4c:c7: 75:28:13:ad:f9:bc:b5:4a:88:db:39:9d:ad:5a:41: cf:8f:86:2c:de:e1:fe:ea:fd:25:73:aa:a8:f9:d7: a8:57:b7:3a:9c:c7:f2:76:e2:55:98:54:87:7d:fc: e6:0c:7b:d5:8d:5f:c9:3d:2b:5c:10:2c:fa:a1:57: ab:c6:3f:6d:9a:12:02:2d:42:f7:f9:05:06:90:60: 1d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7F:8E:06:AD:A1:5B:97:BC:F9:4C:7F:52:79:E2:50:FD:6C:4E:0C X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:da:d2:86:c1:77:c6:1f:19:0a:45:35:a2:df:f9:4d:7c:ed: 80:19:bb:5f:24:df:b8:a6:8b:41:9c:5a:00:2c:38:f2:e9:6c: f4:77:19:47:1a:14:31:29:35:60:c7:32:aa:3a:0f:11:7a:43: 54:0b:a7:e6:6a:be:0f:d5:33:db:24:70:6f:32:8d:69:06:2f: ce:13:e1:79:14:55:de:e2:c7:a2:c2:39:1b:36:b3:25:97:e9: 5e:87:16:2b:18:b4:6e:a9:09:32:c2:79:64:ca:c6:31:d9:ac: 5f:6b:25:05:4a:c7:e5:26:a8:21:97:f1:24:2c:91:fd:d5:d3: 34:d5:10:d2:02:f4:64:2d:5d:85:c8:10:bc:69:49:9e:1e:22: f9:19:33:6d:1c:92:6a:01:31:83:44:b4:2b:68:b1:83:fc:27: ca:94:19:f2:dc:4b:b4:61:48:e9:75:22:a2:43:b4:58:5f:de: ed:64:bb:e5:3f:c9:fb:3f:ad:da:ea:90:68:e2:4a:aa:f4:02: 77:2f:95:7f:6a:e0:d9:e1:28:7d:de:40:9b:45:40:85:20:66: 12:5a:af:ec:f1:94:d6:44:5b:e3:50:5c:77:0c:5d:ea:7e:45: 24:94:1a:1c:f9:9d:f7:cb:21:ed:79:c4:f4:01:29:0b:dd:17: d4:b0:57:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPhD7ph+fpW8gq5c0kX4vrI+zDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTEyMDYxODM3MTlaFw0yNTEyMTAwMDMwMTlaMDMxMTAvBgNV BAMTKEREN0Y4RTA2QURBMTVCOTdCQ0Y5NEM3RjUyNzlFMjUwRkQ2QzRFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXwX2dvWclBvn3g7Pvf7psX6Vs lQ96AmEzLA5t6WdhuyRFZs39gm58RBdo/8xv571ytKPkalE7tLTpkiLExuOBlMlA 2nRpXYOTnvULN3r/vMbcCzDdyJRCsQAiY8JCEkVNsBHZKfpwUvu7E9UGki93vtCK afQ/eZStSzzttOIsSCAKg8QnZhHLs6F8DwmGJSAtYb8nGDos5/0pkKQfGClWfFUr ktZm2ZY59SAyiiahHe1Mx3UoE635vLVKiNs5na1aQc+Phize4f7q/SVzqqj516hX tzqcx/J24lWYVId9/OYMe9WNX8k9K1wQLPqhV6vGP22aEgItQvf5BQaQYB29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3X+OBq2hW5e8+Ux/UnniUP1sTgwwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAza0obBd8YfGQpFNaLf+U187YAZu18k37im i0GcWgAsOPLpbPR3GUcaFDEpNWDHMqo6DxF6Q1QLp+Zqvg/VM9skcG8yjWkGL84T 4XkUVd7ix6LCORs2syWX6V6HFisYtG6pCTLCeWTKxjHZrF9rJQVKx+UmqCGX8SQs kf3V0zTVENIC9GQtXYXIELxpSZ4eIvkZM20ckmoBMYNEtCtosYP8J8qUGfLcS7Rh SOl1IqJDtFhf3u1ku+U/yfs/rdrqkGjiSqr0AncvlX9q4NnhKH3eQJtFQIUgZhJa r+zxlNZEW+NQXHcMXep+RSSUGhz5nffLIe15xPQBKQvdF9SwV8o= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:18 2025 by rpki-client