This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: 9IUXmjgJXPfTEC0vlI/XWkSzT/yDSCJeo9DAuIt3wmM= Subject key identifier: 24:8C:5A:F7:F6:B9:27:DF:38:2B:A2:B6:E0:E6:6E:FE:D4:43:28:4A Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 0ED1E94827427E6E2D122520302FE76E321F56CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: A6 Signing time: Sat 06 Dec 2025 07:21:29 +0000 Manifest this update: Sat 06 Dec 2025 07:16:29 +0000 Manifest next update: Tue 09 Dec 2025 17:23:29 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: NWPdpnzjvUkWFT639EpYBF/gai4l8goVCGsjws+hbv0=) 2: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: j2jeNWrMnOWA3HVjk7O9Qz3LOhi+j72z4nmZQhM1gNs=) 3: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: yZWh1888ObQBCUjpStzb2Vs80gX/ZUDqeDwfnI1VwPI=) 4: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: amumi/WYE2A4FB3wGrZMgKCqFZMIGROo7mRPUcV+x9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d1:e9:48:27:42:7e:6e:2d:12:25:20:30:2f:e7:6e:32:1f:56:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Dec 6 07:16:29 2025 GMT Not After : Dec 9 17:23:29 2025 GMT Subject: CN=248C5AF7F6B927DF382BA2B6E0E66EFED443284A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:06:fe:8a:cc:42:df:01:fd:4f:7d:17:9f: 51:cb:11:f7:8b:44:36:d7:79:dd:5d:ed:fc:f2:2a: a4:d9:18:b5:e2:80:0d:b4:24:8f:66:40:5f:89:91: 3e:bf:cc:c0:f6:6a:dc:6e:d9:98:dc:c3:8e:c1:84: fc:54:4a:1f:27:60:c2:ef:b2:2d:69:cf:cd:75:f2: 38:04:80:f7:5e:65:6c:8d:9c:5a:f6:0f:d4:e8:de: 8c:07:bd:db:a4:69:46:97:ab:97:52:61:6e:e2:62: f9:28:37:03:21:25:74:54:6b:8f:9c:89:16:d8:57: d5:0d:4b:58:c0:2c:71:04:84:a2:6f:49:ee:cc:26: 49:f8:a8:f9:56:52:a8:81:ff:e7:ad:92:23:4f:ba: ef:38:05:be:d6:38:18:1f:4d:51:f5:8c:f0:36:79: de:9d:6b:8c:0b:f5:6c:13:c1:67:d2:1a:0d:90:12: c3:e0:e7:ab:29:61:ba:c2:a2:89:b1:5f:b8:25:84: ec:f8:52:23:02:bf:67:87:fc:a4:08:e3:8c:ee:d8: ec:c4:3f:f4:f3:cf:1e:6e:8e:0d:4e:52:4b:61:3f: 7b:0e:b7:a9:64:f5:32:6d:95:08:9f:b0:d7:0a:16: b3:13:50:ca:cf:9a:9c:a6:63:8a:35:07:cf:d7:17: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8C:5A:F7:F6:B9:27:DF:38:2B:A2:B6:E0:E6:6E:FE:D4:43:28:4A X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:06:fd:79:55:44:eb:56:73:ff:00:9b:4d:c7:51:16:2d:13: 7f:13:8c:7d:2b:fd:fb:91:94:09:4d:4d:1a:7a:7d:a1:67:e0: cf:55:a9:58:8f:36:87:c5:dc:7d:7b:28:c2:d0:76:6c:20:c5: 79:4d:48:4f:50:38:1d:b2:08:a2:92:66:12:01:f0:78:23:ee: 1e:0c:ff:9b:8e:31:77:a2:9d:37:d8:1b:b4:fa:9d:b6:0e:5e: 87:ff:78:db:93:21:48:b3:45:77:ae:77:34:5b:6d:a7:1f:e1: 3b:a9:e2:aa:93:b3:ad:34:98:b6:eb:9d:54:20:b1:90:2e:ca: 96:06:6f:b1:7b:3d:b7:7f:d6:b7:7d:60:d1:e5:3c:8b:c5:cc: 81:68:ad:2f:90:18:fd:d8:5f:a1:ea:e6:01:2f:78:ca:17:19: f1:b1:92:15:d3:c9:01:d5:fc:c0:25:aa:75:b0:93:7c:22:eb: 14:a2:2d:ac:bd:b4:94:33:b1:45:16:25:27:33:28:38:43:5c: 7f:3d:66:38:5f:fd:91:37:15:be:58:bd:45:61:a7:ce:d1:cf: 70:89:b0:cf:aa:6d:20:2b:8c:26:47:3d:f0:75:ec:98:d8:db: 00:4e:af:bd:7e:f8:9c:76:04:3d:ba:fd:15:0e:15:3f:8a:5d: 18:b3:92:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDtHpSCdCfm4tEiUgMC/nbjIfVswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTEyMDYwNzE2MjlaFw0yNTEyMDkxNzIzMjlaMDMxMTAvBgNV BAMTKDI0OEM1QUY3RjZCOTI3REYzODJCQTJCNkUwRTY2RUZFRDQ0MzI4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxegb+isxC3wH9T30Xn1HLEfeL RDbXed1d7fzyKqTZGLXigA20JI9mQF+JkT6/zMD2atxu2Zjcw47BhPxUSh8nYMLv si1pz8118jgEgPdeZWyNnFr2D9To3owHvdukaUaXq5dSYW7iYvkoNwMhJXRUa4+c iRbYV9UNS1jALHEEhKJvSe7MJkn4qPlWUqiB/+etkiNPuu84Bb7WOBgfTVH1jPA2 ed6da4wL9WwTwWfSGg2QEsPg56spYbrCoomxX7glhOz4UiMCv2eH/KQI44zu2OzE P/Tzzx5ujg1OUkthP3sOt6lk9TJtlQifsNcKFrMTUMrPmpymY4o1B8/XFyrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJIxa9/a5J984K6K24OZu/tRDKEowHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgG/XlVROtWc/8Am03HURYtE38TjH0r/fuR lAlNTRp6faFn4M9VqViPNofF3H17KMLQdmwgxXlNSE9QOB2yCKKSZhIB8Hgj7h4M /5uOMXeinTfYG7T6nbYOXof/eNuTIUizRXeudzRbbacf4Tup4qqTs600mLbrnVQg sZAuypYGb7F7Pbd/1rd9YNHlPIvFzIForS+QGP3YX6Hq5gEveMoXGfGxkhXTyQHV /MAlqnWwk3wi6xSiLay9tJQzsUUWJSczKDhDXH89Zjhf/ZE3Fb5YvUVhp87Rz3CJ sM+qbSArjCZHPfB17JjY2wBOr71++Jx2BD26/RUOFT+KXRizkmc= -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:14 2025 by rpki-client