This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: HIKAcEpPvrpY6LjS6o2I4sWp47Y/Jql+8RIUD5Oh+rQ= Subject key identifier: D0:10:8E:8F:80:35:37:8A:12:5A:2A:FC:C0:22:22:DA:82:B6:8B:7C Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 601A8E16BC7D3896BA70A0111820B29B72BFF698 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: 015F Signing time: Sun 07 Dec 2025 00:11:09 +0000 Manifest this update: Sun 07 Dec 2025 00:06:09 +0000 Manifest next update: Wed 10 Dec 2025 09:22:09 +0000 Files and hashes: 1: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: dJaS59sTNR5P0zfWxcM9Q8SeRwLPq4ilnHYQElEDNMo=) 2: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=) 3: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: M6VZo6mAcX1uyUFRd0M8Obs7e4zojaF0zZl8qAV8G9o=) 4: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: gY0MYBLnrNGMInBtjBk2fVW/5Y8HTuVN7KMpfZNbvwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1a:8e:16:bc:7d:38:96:ba:70:a0:11:18:20:b2:9b:72:bf:f6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Dec 7 00:06:09 2025 GMT Not After : Dec 10 09:22:09 2025 GMT Subject: CN=D0108E8F8035378A125A2AFCC02222DA82B68B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:53:94:6b:93:73:33:eb:d9:91:08:64:01: ef:f1:12:cc:9d:16:12:ac:00:75:6c:d1:f8:e7:0c: f9:cf:d9:c5:18:6c:20:c5:50:36:91:cd:ca:4a:ac: b4:90:f8:d6:c3:6d:cf:42:1b:97:42:f0:91:46:c3: 27:bf:2c:be:07:a3:8e:63:6a:8d:9a:97:02:d3:79: 32:c6:86:32:53:73:c8:f7:d0:4b:82:b2:03:29:a0: ee:6b:b3:57:52:c5:c2:24:29:36:73:9b:21:d2:50: e2:6d:40:88:7f:53:a2:25:e8:32:83:22:0f:ab:9a: 17:47:08:66:72:a3:94:43:d3:72:fa:84:97:e3:b0: 25:5c:b3:af:07:cb:be:47:43:5b:f0:bb:61:ce:4a: 31:82:e3:4d:72:a4:79:ed:d8:9e:8a:5e:0f:c2:da: 1d:81:dc:94:52:d3:1c:3c:88:92:08:2c:9c:54:c8: 40:3c:6a:03:6a:a5:10:c4:ca:01:b8:65:11:51:b6: 50:a2:e3:ba:73:02:29:d2:f0:8c:44:0b:7c:b9:40: 4f:06:86:ed:49:ea:39:02:74:27:b1:8f:6f:c0:4f: 11:d7:a0:c3:8b:ca:b7:61:37:fd:e9:1e:0a:32:37: db:60:68:6b:50:fb:a2:69:b1:6e:21:7e:8a:6e:34: d9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:10:8E:8F:80:35:37:8A:12:5A:2A:FC:C0:22:22:DA:82:B6:8B:7C X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d4:12:ac:e1:26:66:4a:9d:3d:ce:60:86:d5:25:e4:21:fc: 97:e7:39:b7:b5:bf:0a:5d:78:cd:56:53:f0:c8:61:a7:fa:39: 93:c0:0d:75:96:ea:c0:b9:5a:75:f4:74:94:23:ae:e1:f7:9c: 57:b3:5b:e4:1a:af:ed:f5:5f:0a:cb:79:0b:78:53:7c:2d:2d: bc:f0:f8:1a:21:75:60:df:e0:22:86:99:0d:f8:4b:18:97:79: ef:65:71:76:c3:0e:92:7e:7a:78:6a:68:d3:f7:76:98:10:07: 4d:8d:3a:87:8f:5e:d8:93:a0:94:5a:66:28:f4:46:8d:cd:ad: 9b:0d:79:c7:bb:99:b4:06:c1:65:a2:62:be:7f:72:7d:5a:5e: c8:a0:1f:96:b7:7d:bc:7e:75:c6:99:fd:32:6d:55:28:53:f1: b8:c3:1d:9b:52:c5:58:88:81:82:fe:07:07:1a:a6:d0:2f:70: d9:a2:5e:1a:9c:1f:e1:3b:5d:58:0b:db:1d:98:fc:c7:96:85: f7:88:e6:ef:4b:64:96:c5:a9:a4:e9:86:26:86:41:14:4e:16: 40:18:89:b2:b3:92:20:e1:f3:04:d1:da:a1:bf:76:71:52:c9: 1a:bc:ef:bb:a8:28:31:3f:9b:80:81:06:bf:93:6f:f5:db:5c: 47:74:13:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBqOFrx9OJa6cKARGCCym3K/9pgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNTEyMDcwMDA2MDlaFw0yNTEyMTAwOTIyMDlaMDMxMTAvBgNV BAMTKEQwMTA4RThGODAzNTM3OEExMjVBMkFGQ0MwMjIyMkRBODJCNjhCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFFOUa5NzM+vZkQhkAe/xEsyd FhKsAHVs0fjnDPnP2cUYbCDFUDaRzcpKrLSQ+NbDbc9CG5dC8JFGwye/LL4Ho45j ao2alwLTeTLGhjJTc8j30EuCsgMpoO5rs1dSxcIkKTZzmyHSUOJtQIh/U6Il6DKD Ig+rmhdHCGZyo5RD03L6hJfjsCVcs68Hy75HQ1vwu2HOSjGC401ypHnt2J6KXg/C 2h2B3JRS0xw8iJIILJxUyEA8agNqpRDEygG4ZRFRtlCi47pzAinS8IxEC3y5QE8G hu1J6jkCdCexj2/ATxHXoMOLyrdhN/3pHgoyN9tgaGtQ+6JpsW4hfopuNNkBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BCOj4A1N4oSWir8wCIi2oK2i3wwHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTUEqzhJmZKnT3OYIbVJeQh/JfnObe1vwpd eM1WU/DIYaf6OZPADXWW6sC5WnX0dJQjruH3nFezW+Qar+31XwrLeQt4U3wtLbzw +BohdWDf4CKGmQ34SxiXee9lcXbDDpJ+enhqaNP3dpgQB02NOoePXtiToJRaZij0 Ro3NrZsNece7mbQGwWWiYr5/cn1aXsigH5a3fbx+dcaZ/TJtVShT8bjDHZtSxViI gYL+BwcaptAvcNmiXhqcH+E7XVgL2x2Y/MeWhfeI5u9LZJbFqaTphiaGQRROFkAY ibKzkiDh8wTR2qG/dnFSyRq877uoKDE/m4CBBr+Tb/XbXEd0Ezo= -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:21 2025 by rpki-client