This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: KAr7czNRfHYpYu+xpg2Zbz7KzmWujeVjlAlMJS3CbZQ= Subject key identifier: 2C:40:B8:51:5F:C9:A9:EB:AF:CA:A4:59:B1:0C:C1:84:D5:D8:0C:EA Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 063D22FB2C150926A9B9300C0B968A065F9BEDF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 96 Signing time: Fri 05 Dec 2025 18:31:51 +0000 Manifest this update: Fri 05 Dec 2025 18:26:51 +0000 Manifest next update: Mon 08 Dec 2025 19:49:51 +0000 Files and hashes: 1: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: amyRoYQDjPI/ShW29bMLW5Zz3XMkMyg8Jr4/qdUUW1s=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3d:22:fb:2c:15:09:26:a9:b9:30:0c:0b:96:8a:06:5f:9b:ed:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Dec 5 18:26:51 2025 GMT Not After : Dec 8 19:49:51 2025 GMT Subject: CN=2C40B8515FC9A9EBAFCAA459B10CC184D5D80CEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d4:47:25:2d:c5:28:58:1f:95:b3:fa:4f:12: 4a:f8:fe:af:7f:f1:c8:45:e6:de:35:8f:b4:59:10: 36:67:b5:0f:c0:84:04:0f:79:04:8a:69:5f:ee:d0: ff:e9:37:f8:60:fe:5d:1d:83:62:4c:7a:e0:02:cb: da:3e:1f:f5:5f:7a:14:39:83:e5:84:e9:7a:4a:b4: 91:30:bd:23:fc:24:68:e7:7f:46:7b:29:77:30:bf: cb:ab:06:1e:ea:c5:5b:79:9f:f2:e0:3c:d1:cf:06: 6b:a2:46:c6:43:9c:5a:4f:51:86:68:af:b3:6b:f8: 82:b7:c1:8f:2b:94:6e:e1:aa:a6:5c:8b:a6:1e:af: 54:16:7e:4b:97:c9:c1:e3:90:b0:b3:60:37:80:1d: 4e:ff:34:54:60:39:fb:ce:07:9a:a9:a7:55:c2:3e: 71:22:97:e0:f4:cf:0f:c2:d4:f2:70:a3:fb:5b:4e: 9d:f0:75:b2:70:d3:b5:25:3f:95:d2:b5:0f:d0:1b: b3:7b:44:90:44:6c:e5:a2:0b:da:fe:71:7c:1d:8d: e3:e1:aa:44:55:c3:fb:b6:f3:aa:0c:1c:c9:e6:0f: 24:07:7e:60:2c:79:b9:1c:bc:4f:03:ce:03:cc:6b: 87:17:52:ab:93:2b:f6:98:fc:a6:82:a0:dc:3f:5e: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:40:B8:51:5F:C9:A9:EB:AF:CA:A4:59:B1:0C:C1:84:D5:D8:0C:EA X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c4:8c:9b:e9:b8:96:da:ae:eb:95:df:9e:f1:39:04:6c:a6: 9d:6d:9b:e7:8b:39:16:22:2f:21:a9:0b:18:b2:b3:8a:1a:c7: 55:03:bc:d2:35:3c:9a:a0:0e:a3:86:d8:88:9e:c1:e5:bd:2d: 38:bb:91:ca:4d:16:28:e5:29:fe:7b:16:40:8e:42:27:7a:4c: 69:04:ae:01:ff:63:c6:b3:fe:ae:0e:d0:ad:fc:5d:64:b4:8a: 12:b7:6a:53:b2:9f:4e:c0:ee:5e:01:f7:1e:10:b5:14:75:c5: 0e:d3:23:7b:85:79:d1:a2:8f:9c:d6:7b:cf:73:ed:82:69:5a: dc:99:3f:dd:a5:0a:d5:44:ca:dd:90:fe:97:24:1d:14:49:6a: 9a:4e:50:bf:f3:31:28:a7:6f:3f:0b:eb:a2:9f:ee:04:bd:e5: e9:de:04:34:9f:c2:75:be:72:17:81:41:b3:d3:7f:90:90:63: 2d:83:9e:6d:ef:b6:a9:d0:05:03:41:ec:16:01:4a:25:62:47: 22:3c:8a:70:c4:a1:57:04:d5:f8:bf:48:05:89:88:6a:ea:fc: 6b:25:67:e5:61:d2:67:ea:0c:10:a9:f4:16:bd:5d:2e:b1:83: 5a:0f:06:4c:45:61:f0:77:a9:66:d7:68:83:a9:f6:3b:63:28: 29:ac:66:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBj0i+ywVCSapuTAMC5aKBl+b7fMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTEyMDUxODI2NTFaFw0yNTEyMDgxOTQ5NTFaMDMxMTAvBgNV BAMTKDJDNDBCODUxNUZDOUE5RUJBRkNBQTQ1OUIxMENDMTg0RDVEODBDRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ1EclLcUoWB+Vs/pPEkr4/q9/ 8chF5t41j7RZEDZntQ/AhAQPeQSKaV/u0P/pN/hg/l0dg2JMeuACy9o+H/VfehQ5 g+WE6XpKtJEwvSP8JGjnf0Z7KXcwv8urBh7qxVt5n/LgPNHPBmuiRsZDnFpPUYZo r7Nr+IK3wY8rlG7hqqZci6Yer1QWfkuXycHjkLCzYDeAHU7/NFRgOfvOB5qpp1XC PnEil+D0zw/C1PJwo/tbTp3wdbJw07UlP5XStQ/QG7N7RJBEbOWiC9r+cXwdjePh qkRVw/u286oMHMnmDyQHfmAsebkcvE8DzgPMa4cXUquTK/aY/KaCoNw/XvOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULEC4UV/JqeuvyqRZsQzBhNXYDOowHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/EjJvpuJbaruuV357xOQRspp1tm+eLORYi LyGpCxiys4oax1UDvNI1PJqgDqOG2IieweW9LTi7kcpNFijlKf57FkCOQid6TGkE rgH/Y8az/q4O0K38XWS0ihK3alOyn07A7l4B9x4QtRR1xQ7TI3uFedGij5zWe89z 7YJpWtyZP92lCtVEyt2Q/pckHRRJappOUL/zMSinbz8L66Kf7gS95eneBDSfwnW+ cheBQbPTf5CQYy2Dnm3vtqnQBQNB7BYBSiViRyI8inDEoVcE1fi/SAWJiGrq/Gsl Z+Vh0mfqDBCp9Ba9XS6xg1oPBkxFYfB3qWbXaIOp9jtjKCmsZuc= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:05 2025 by rpki-client