This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: U24xaDjxLvmyxGbL30LmzzVR0VXWyoYkCIneE/zsGYM= Subject key identifier: AB:57:B8:56:B0:C9:59:2A:BB:95:1E:DF:43:46:FF:6D:A3:ED:93:EA Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 02FF16CF689FCCEF3B30F1054F2BF4299F3BC057 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: AA Signing time: Mon 15 Dec 2025 15:41:31 +0000 Manifest this update: Mon 15 Dec 2025 15:36:30 +0000 Manifest next update: Thu 18 Dec 2025 18:09:30 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: NWPdpnzjvUkWFT639EpYBF/gai4l8goVCGsjws+hbv0=) 2: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: OYlloQ5TDTtsJ/xyPK3fNPtxfcVKERaxl8i25uAzkY0=) 3: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: amumi/WYE2A4FB3wGrZMgKCqFZMIGROo7mRPUcV+x9E=) 4: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: j2jeNWrMnOWA3HVjk7O9Qz3LOhi+j72z4nmZQhM1gNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 18:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ff:16:cf:68:9f:cc:ef:3b:30:f1:05:4f:2b:f4:29:9f:3b:c0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Dec 15 15:36:30 2025 GMT Not After : Dec 18 18:09:30 2025 GMT Subject: CN=AB57B856B0C9592ABB951EDF4346FF6DA3ED93EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:25:ff:7d:70:aa:38:1f:ca:70:17:1e:d3: 05:0b:fe:63:2f:67:0d:67:46:fa:8a:09:ce:73:3f: 95:9c:b2:fd:c8:6e:e2:49:b8:ae:a3:b1:1a:f3:34: 9f:ee:4f:23:c9:17:0e:bd:d4:e1:5e:71:59:6b:18: 7c:92:15:89:ba:33:8a:d9:70:e7:e7:df:a7:25:f5: 77:c1:53:01:91:95:8f:8f:6f:a9:71:9f:e2:2d:87: 43:35:71:ca:4b:a0:a9:5f:08:12:e9:b7:6d:f8:49: 5b:fe:53:ed:08:3b:2e:e3:2a:a3:2e:62:22:fe:7c: fa:e9:25:1d:3a:ff:47:e5:ee:b1:32:55:78:7d:8a: 4b:f5:8f:ef:e6:43:71:96:56:38:fc:46:c2:e3:19: 9b:8e:ee:4a:fe:76:cc:91:9a:e5:f8:82:5f:ba:1e: 64:3d:a9:26:b7:49:60:91:48:66:19:4b:53:08:db: 23:5d:95:8b:f7:0e:ea:53:6c:0f:85:e7:52:e6:aa: 2f:45:5b:72:a0:e9:5f:09:cd:bf:38:69:f5:52:a0: 0f:6c:56:ca:8b:71:61:7b:47:88:a1:34:cf:05:6f: 0d:25:76:35:80:22:4e:18:02:6d:2c:7e:8b:93:6b: 92:38:46:80:26:53:86:77:a7:ca:69:7f:e0:a2:3a: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:57:B8:56:B0:C9:59:2A:BB:95:1E:DF:43:46:FF:6D:A3:ED:93:EA X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ca:ab:61:7b:87:04:13:cc:dc:6c:3a:5f:e8:5d:02:37:af: 01:21:22:cd:6e:07:ee:d8:8a:b0:21:b9:3f:b6:db:13:a2:b1: 29:a5:fb:31:07:d9:7b:41:99:05:ba:02:aa:7f:0d:d2:43:8a: da:41:53:7c:33:49:f3:6f:86:c6:2a:b6:0b:8c:26:b7:bf:3b: 9b:10:0f:15:ef:6e:6c:cc:0f:35:78:e8:c5:56:62:e3:cf:28: a1:dd:95:c2:e1:1d:4b:61:69:55:d2:c0:45:f0:ca:09:5d:3e: 49:1e:29:8b:9e:69:8d:9b:32:0f:bb:24:07:ce:7b:2d:e4:5d: db:ca:6f:62:5f:89:1a:fa:96:33:f7:d5:91:d5:c9:e2:2f:5e: 80:22:75:5d:fd:2e:1a:5a:72:88:21:29:46:62:cc:b2:a7:32: 5f:ee:3c:f3:92:40:5d:5c:ab:b7:af:32:91:58:3a:82:ce:58: 5d:de:a2:94:30:28:3c:86:7f:b4:35:86:75:9e:d4:72:4a:e1: d8:0c:b6:72:ea:2e:89:f3:fd:06:8a:32:85:49:c9:23:f3:8f: f4:76:4e:6f:da:af:75:41:ef:08:b2:81:ce:f3:80:6f:29:5f: b2:ea:d5:fa:42:10:c9:9e:b4:f0:a9:6a:4f:b9:ca:6d:81:83: b1:98:07:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAv8Wz2ifzO87MPEFTyv0KZ87wFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTEyMTUxNTM2MzBaFw0yNTEyMTgxODA5MzBaMDMxMTAvBgNV BAMTKEFCNTdCODU2QjBDOTU5MkFCQjk1MUVERjQzNDZGRjZEQTNFRDkzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWyX/fXCqOB/KcBce0wUL/mMv Zw1nRvqKCc5zP5Wcsv3IbuJJuK6jsRrzNJ/uTyPJFw691OFecVlrGHySFYm6M4rZ cOfn36cl9XfBUwGRlY+Pb6lxn+Ith0M1ccpLoKlfCBLpt234SVv+U+0IOy7jKqMu YiL+fPrpJR06/0fl7rEyVXh9ikv1j+/mQ3GWVjj8RsLjGZuO7kr+dsyRmuX4gl+6 HmQ9qSa3SWCRSGYZS1MI2yNdlYv3DupTbA+F51Lmqi9FW3Kg6V8Jzb84afVSoA9s VsqLcWF7R4ihNM8Fbw0ldjWAIk4YAm0sfouTa5I4RoAmU4Z3p8ppf+CiOtc7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1e4VrDJWSq7lR7fQ0b/baPtk+owHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTKq2F7hwQTzNxsOl/oXQI3rwEhIs1uB+7Y irAhuT+22xOisSml+zEH2XtBmQW6Aqp/DdJDitpBU3wzSfNvhsYqtguMJre/O5sQ DxXvbmzMDzV46MVWYuPPKKHdlcLhHUthaVXSwEXwygldPkkeKYueaY2bMg+7JAfO ey3kXdvKb2JfiRr6ljP31ZHVyeIvXoAidV39LhpacoghKUZizLKnMl/uPPOSQF1c q7evMpFYOoLOWF3eopQwKDyGf7Q1hnWe1HJK4dgMtnLqLonz/QaKMoVJySPzj/R2 Tm/ar3VB7wiygc7zgG8pX7Lq1fpCEMmetPCpak+5ym2Bg7GYB58= -----END CERTIFICATE-----Generated at Wed Dec 17 19:19:03 2025 by rpki-client