This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft File: 56302D09256688774B85DCD3BAEEB0CB17E8884D.mft (raw, json) Hash identifier: IOGRhDTjwjwFfdhRnHWOSciMhAKxfm9cm+bX6mAaLBs= Subject key identifier: BE:B3:E1:B1:E9:1E:47:36:58:A4:07:C2:F2:4A:C5:84:68:B2:35:68 Authority key identifier: 56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D Certificate issuer: /CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Certificate serial: 31EED6860D78597A94434895763F05F441A8FD2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft Manifest number: D6 Signing time: Tue 16 Dec 2025 00:12:20 +0000 Manifest this update: Tue 16 Dec 2025 00:07:20 +0000 Manifest next update: Fri 19 Dec 2025 12:05:20 +0000 Files and hashes: 1: 3136302e32352e3132362e302f32332d3233203d3e20313532383338.roa (hash: gVISUrC0w0h01G2FHy4AG7111ikLnz8RrJKjXJHpEPg=) 2: 3136302e32352e3132372e302f32342d3234203d3e20313532383338.roa (hash: narOg/Y+HQu36n1a+2Amx/Ji0/PrZsxnYg1qBFxyHaM=) 3: 3136302e32352e3132362e302f32342d3234203d3e20313532383338.roa (hash: aFVZHS7nINB+JL7AEdDHRgxQQpnHeECBqD4GE79htH4=) 4: 56302D09256688774B85DCD3BAEEB0CB17E8884D.crl (hash: y2kbaJxcGmHd1mSNDBmYwHSVdnjTY9e2jC3NufS10XU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 12:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ee:d6:86:0d:78:59:7a:94:43:48:95:76:3f:05:f4:41:a8:fd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56302D09256688774B85DCD3BAEEB0CB17E8884D Validity Not Before: Dec 16 00:07:20 2025 GMT Not After : Dec 19 12:05:20 2025 GMT Subject: CN=BEB3E1B1E91E473658A407C2F24AC58468B23568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9c:79:0b:84:f6:bc:5f:c8:64:67:45:8e:9e: f0:84:9c:b3:ab:e7:d9:70:06:db:11:68:91:7f:9e: 2e:08:fa:92:fb:8d:13:13:26:e7:65:0a:c5:6f:a1: 56:a2:8c:b9:44:f3:6a:b2:ed:f7:2a:5b:eb:7d:fc: b4:2c:42:69:d9:3a:24:7c:c2:cd:ec:62:5f:da:cd: 02:a2:4a:52:69:99:97:22:20:0c:ad:66:6c:7d:33: 1d:34:44:34:8b:b1:72:b8:d7:5e:62:8c:d2:7e:fe: 07:8d:67:3f:2c:df:27:98:bf:0b:9e:7c:3b:fd:c1: c6:fd:5c:49:8c:7c:e9:05:39:d3:69:a0:49:17:d0: 5f:58:4b:67:a0:e2:22:76:d9:91:e9:35:37:92:3c: a3:56:3a:db:ac:f8:a3:b5:f3:44:e9:4a:02:6c:4a: 5a:31:6b:b7:31:de:32:7e:9f:fa:8a:65:c9:fd:a3: e0:39:06:99:e8:f8:4d:e8:08:91:6d:2a:0e:5a:ba: 3f:cb:ad:47:95:42:c5:25:7e:4d:59:f8:d0:c8:3a: ef:85:07:1d:36:f1:20:31:15:eb:4d:f6:19:5d:6e: 54:2e:fc:79:e7:bb:c2:8f:81:8a:ab:d6:b8:ff:33: b9:a5:50:82:6a:65:9e:7f:6d:06:68:c5:9a:5a:4c: af:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B3:E1:B1:E9:1E:47:36:58:A4:07:C2:F2:4A:C5:84:68:B2:35:68 X509v3 Authority Key Identifier: keyid:56:30:2D:09:25:66:88:77:4B:85:DC:D3:BA:EE:B0:CB:17:E8:88:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/56302D09256688774B85DCD3BAEEB0CB17E8884D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e206defa-fa43-4f93-93ce-39fdff81c19a/0/56302D09256688774B85DCD3BAEEB0CB17E8884D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:bf:7c:f9:04:58:1e:d6:01:45:23:1f:7f:21:6c:9a:ee:58: 87:be:cb:8b:14:f9:ef:17:b3:ae:01:30:21:9a:02:3c:fd:33: 92:f4:40:4b:d6:19:d0:a6:f9:d2:42:be:17:44:97:1b:ec:b3: da:66:0e:48:91:7b:0d:d9:23:2f:d4:74:c6:92:4d:f9:ec:61: 1e:f9:22:14:fa:1e:ad:ae:32:ab:ed:38:41:41:47:57:16:c9: 4e:9b:73:63:db:91:50:1e:fb:0d:3b:da:68:7a:41:f5:11:f2: 9f:06:5c:d2:14:24:5e:14:88:09:d8:94:cb:3b:dd:92:fe:b0: a5:12:c6:f1:26:be:99:d0:e4:e7:3b:7a:5a:20:77:cb:35:0b: c7:fd:60:ff:b7:59:37:0e:22:68:36:16:da:88:8d:3a:dd:b7: f1:74:92:f4:b0:87:d9:53:20:35:0e:80:98:8d:5b:85:f9:0d: c6:e9:1d:ab:59:4b:fa:7c:0a:0f:10:f6:fc:b8:e9:6e:01:33: 0a:14:d4:33:bf:d5:fc:74:69:95:cd:59:1e:6f:75:3a:17:91: 1a:a9:5a:8f:0f:f9:f5:54:e8:e9:b1:55:1c:be:4c:87:7e:c1: 43:50:68:8d:41:a4:77:df:cb:8c:d5:b4:ab:4a:dd:e2:58:d8: 9f:2a:f1:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMe7Whg14WXqUQ0iVdj8F9EGo/SswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0Ix N0U4ODg0RDAeFw0yNTEyMTYwMDA3MjBaFw0yNTEyMTkxMjA1MjBaMDMxMTAvBgNV BAMTKEJFQjNFMUIxRTkxRTQ3MzY1OEE0MDdDMkYyNEFDNTg0NjhCMjM1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsnHkLhPa8X8hkZ0WOnvCEnLOr 59lwBtsRaJF/ni4I+pL7jRMTJudlCsVvoVaijLlE82qy7fcqW+t9/LQsQmnZOiR8 ws3sYl/azQKiSlJpmZciIAytZmx9Mx00RDSLsXK4115ijNJ+/geNZz8s3yeYvwue fDv9wcb9XEmMfOkFOdNpoEkX0F9YS2eg4iJ22ZHpNTeSPKNWOtus+KO180TpSgJs Sloxa7cx3jJ+n/qKZcn9o+A5Bpno+E3oCJFtKg5auj/LrUeVQsUlfk1Z+NDIOu+F Bx028SAxFetN9hldblQu/Hnnu8KPgYqr1rj/M7mlUIJqZZ5/bQZoxZpaTK/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvrPhsekeRzZYpAfC8krFhGiyNWgwHwYDVR0j BBgwFoAUVjAtCSVmiHdLhdzTuu6wyxfoiE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjA2ZGVmYS1mYTQzLTRmOTMtOTNjZS0zOWZkZmY4MWMxOWEvMC81NjMwMkQwOTI1 NjY4ODc3NEI4NURDRDNCQUVFQjBDQjE3RTg4ODRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIwQ0IxN0U4 ODg0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTIwNmRlZmEtZmE0My00ZjkzLTkz Y2UtMzlmZGZmODFjMTlhLzAvNTYzMDJEMDkyNTY2ODg3NzRCODVEQ0QzQkFFRUIw Q0IxN0U4ODg0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6/fPkEWB7WAUUjH38hbJruWIe+y4sU+e8X s64BMCGaAjz9M5L0QEvWGdCm+dJCvhdElxvss9pmDkiRew3ZIy/UdMaSTfnsYR75 IhT6Hq2uMqvtOEFBR1cWyU6bc2PbkVAe+w072mh6QfUR8p8GXNIUJF4UiAnYlMs7 3ZL+sKUSxvEmvpnQ5Oc7elogd8s1C8f9YP+3WTcOImg2FtqIjTrdt/F0kvSwh9lT IDUOgJiNW4X5DcbpHatZS/p8Cg8Q9vy46W4BMwoU1DO/1fx0aZXNWR5vdToXkRqp Wo8P+fVU6OmxVRy+TId+wUNQaI1BpHffy4zVtKtK3eJY2J8q8eg= -----END CERTIFICATE-----Generated at Wed Dec 17 21:57:16 2025 by rpki-client