This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft File: CD93E5B741D83CA78E83C5AD92156B086BC05233.mft (raw, json) Hash identifier: 2KlOFUUugj6umCqErHWSU5RAL2fy9pXyUCxxgcu/qpI= Subject key identifier: 8D:6A:5E:F0:0B:A4:BA:8D:AA:28:9E:D2:88:06:BC:7F:61:75:25:84 Authority key identifier: CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 Certificate issuer: /CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Certificate serial: 4F5DD601B59E1B8739A5E04E7E8F4AD779FC05E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft Manifest number: 02CC Signing time: Wed 17 Dec 2025 23:42:19 +0000 Manifest this update: Wed 17 Dec 2025 23:37:19 +0000 Manifest next update: Sun 21 Dec 2025 03:52:19 +0000 Files and hashes: 1: 3130332e3135382e3139362e302f32342d3234203d3e20313431313333.roa (hash: veFUUZaHhHDpj6KmBcnJnR41ugvnsdBmWkSb2+LTSCU=) 2: CD93E5B741D83CA78E83C5AD92156B086BC05233.crl (hash: 5KzvCSi0BXpTw6mrjT+Zj2CKZqeTTdvEj25iFeI6fck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5d:d6:01:b5:9e:1b:87:39:a5:e0:4e:7e:8f:4a:d7:79:fc:05:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD93E5B741D83CA78E83C5AD92156B086BC05233 Validity Not Before: Dec 17 23:37:19 2025 GMT Not After : Dec 21 03:52:19 2025 GMT Subject: CN=8D6A5EF00BA4BA8DAA289ED28806BC7F61752584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:0a:c4:c1:4e:75:7b:19:04:14:f3:66:04: 94:90:7d:c7:ea:11:fd:9b:c2:f2:e2:d8:2a:2f:2d: 59:92:4c:40:6a:02:b5:44:bc:ba:d5:31:76:15:ee: 64:f4:ed:b3:7a:89:20:79:e6:f2:d9:8b:2d:36:97: 19:71:cc:15:af:a7:c4:b8:07:5b:43:60:f6:8f:2e: 68:08:a5:0b:12:50:5b:0a:22:5e:80:44:2d:e0:61: 5b:1a:1d:da:13:1e:5b:4b:b1:b4:1a:99:ea:32:a5: e4:44:2b:38:42:28:8e:21:ad:d0:9e:84:c1:9b:a5: bf:02:50:b1:b1:e4:9c:81:86:01:91:05:6e:71:bc: fb:ae:46:90:6e:c5:42:c5:82:11:9c:f7:c1:f8:2a: 27:89:e1:a1:df:ed:3a:1a:02:48:ac:ed:53:23:da: af:2f:cc:fe:42:42:c8:04:c3:f4:9e:5b:33:cf:b6: 4c:89:5d:a6:75:cf:c3:aa:2f:b9:b2:8d:8c:7f:b6: 61:7c:52:fa:61:ce:23:4f:61:ce:50:6a:5f:2d:ab: db:35:99:f8:35:1f:92:d4:78:7e:c5:7e:a1:eb:f0: 9c:98:bb:b4:74:b2:cd:5d:d8:47:f1:b6:c4:2d:54: d9:62:dd:7f:f6:a2:0f:1b:be:b0:9e:d3:b6:5a:a8: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:5E:F0:0B:A4:BA:8D:AA:28:9E:D2:88:06:BC:7F:61:75:25:84 X509v3 Authority Key Identifier: keyid:CD:93:E5:B7:41:D8:3C:A7:8E:83:C5:AD:92:15:6B:08:6B:C0:52:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD93E5B741D83CA78E83C5AD92156B086BC05233.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfddcb4b-6d8e-459b-8aa2-99a60886256a/0/CD93E5B741D83CA78E83C5AD92156B086BC05233.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f2:aa:7f:07:5b:3f:66:27:83:f3:8b:2f:75:52:4b:c8:85: 49:97:ff:b2:17:61:8a:e5:d0:fa:a9:22:60:d5:66:ff:64:e7: 2b:c9:33:ba:9a:9a:d4:fe:fe:11:0d:80:ae:d0:8d:54:04:13: b9:91:62:39:9e:17:ec:19:48:30:f3:fc:2a:3d:98:24:14:a2: 40:a9:aa:ac:c4:c3:a2:ad:70:56:76:6a:d7:9b:ac:25:59:29: 89:e7:75:6f:a7:15:c1:18:b9:9d:be:bb:49:7f:3d:18:c5:0a: 98:f4:cb:28:72:76:d0:ff:66:67:08:24:e8:82:ce:76:cd:c0: ba:2e:54:6b:7b:29:a5:a3:b1:6a:83:f4:cb:18:66:5c:61:d0: a1:2a:4c:0a:7d:10:3f:bf:ce:da:51:5a:16:ce:94:ca:b3:14: f6:8e:8f:40:41:ff:22:ea:70:31:4d:9f:d0:7d:a4:e7:11:a3: de:fd:56:32:b1:d4:4f:24:87:73:d5:02:68:77:1f:99:dc:c0: 4e:c3:23:b5:49:f1:86:08:b4:e8:94:9c:55:cd:d1:f5:48:84: e0:42:8e:e0:c9:df:1c:eb:2f:4d:88:76:06:85:91:8d:82:4b: f8:64:22:9c:d6:38:f3:da:ba:21:9a:63:8d:11:c0:6e:97:66: 09:3b:03:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT13WAbWeG4c5peBOfo9K13n8BecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2 QkMwNTIzMzAeFw0yNTEyMTcyMzM3MTlaFw0yNTEyMjEwMzUyMTlaMDMxMTAvBgNV BAMTKDhENkE1RUYwMEJBNEJBOERBQTI4OUVEMjg4MDZCQzdGNjE3NTI1ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNQrEwU51exkEFPNmBJSQfcfq Ef2bwvLi2CovLVmSTEBqArVEvLrVMXYV7mT07bN6iSB55vLZiy02lxlxzBWvp8S4 B1tDYPaPLmgIpQsSUFsKIl6ARC3gYVsaHdoTHltLsbQameoypeREKzhCKI4hrdCe hMGbpb8CULGx5JyBhgGRBW5xvPuuRpBuxULFghGc98H4KieJ4aHf7ToaAkis7VMj 2q8vzP5CQsgEw/SeWzPPtkyJXaZ1z8OqL7myjYx/tmF8UvphziNPYc5Qal8tq9s1 mfg1H5LUeH7FfqHr8JyYu7R0ss1d2EfxtsQtVNli3X/2og8bvrCe07ZaqCCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjWpe8Aukuo2qKJ7SiAa8f2F1JYQwHwYDVR0j BBgwFoAUzZPlt0HYPKeOg8WtkhVrCGvAUjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmRkY2I0Yi02ZDhlLTQ1OWItOGFhMi05OWE2MDg4NjI1NmEvMC9DRDkzRTVCNzQx RDgzQ0E3OEU4M0M1QUQ5MjE1NkIwODZCQzA1MjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZCMDg2QkMw NTIzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZkZGNiNGItNmQ4ZS00NTliLThh YTItOTlhNjA4ODYyNTZhLzAvQ0Q5M0U1Qjc0MUQ4M0NBNzhFODNDNUFEOTIxNTZC MDg2QkMwNTIzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTyqn8HWz9mJ4Pziy91UkvIhUmX/7IXYYrl 0PqpImDVZv9k5yvJM7qamtT+/hENgK7QjVQEE7mRYjmeF+wZSDDz/Co9mCQUokCp qqzEw6KtcFZ2atebrCVZKYnndW+nFcEYuZ2+u0l/PRjFCpj0yyhydtD/ZmcIJOiC znbNwLouVGt7KaWjsWqD9MsYZlxh0KEqTAp9ED+/ztpRWhbOlMqzFPaOj0BB/yLq cDFNn9B9pOcRo979VjKx1E8kh3PVAmh3H5ncwE7DI7VJ8YYItOiUnFXN0fVIhOBC juDJ3xzrL02IdgaFkY2CS/hkIpzWOPPauiGaY40RwG6XZgk7A0I= -----END CERTIFICATE-----Generated at Thu Dec 18 11:24:50 2025 by rpki-client