This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: DR/SoMK4GApYLNghMdlKx+OWaBXJOOzIamJhcaDLn4g= Subject key identifier: BB:1A:8D:43:46:4E:C1:1A:4D:20:AF:97:5E:7E:00:E7:56:18:2C:F4 Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 44CEE4A89C82B65047A6C4559594117BDC46FB99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 0245 Signing time: Thu 04 Dec 2025 16:52:16 +0000 Manifest this update: Thu 04 Dec 2025 16:47:16 +0000 Manifest next update: Mon 08 Dec 2025 02:17:16 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=) 2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: IybIxo7lvMdZXhL2o0QSL8+ewOpUDRt0P/O4Mxk6I3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ce:e4:a8:9c:82:b6:50:47:a6:c4:55:95:94:11:7b:dc:46:fb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Dec 4 16:47:16 2025 GMT Not After : Dec 8 02:17:16 2025 GMT Subject: CN=BB1A8D43464EC11A4D20AF975E7E00E756182CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ca:eb:08:8c:c1:2a:db:3c:a8:cf:8a:46:88: 43:0c:03:26:06:b9:cd:63:db:d8:90:56:3b:50:97: a8:71:ca:e1:5f:d9:ae:9c:2d:e1:aa:d8:55:41:63: cc:95:bd:81:72:c9:c3:88:21:3e:0a:2e:96:1e:87: 2d:a3:f7:76:5c:1d:7b:fd:e3:d1:6f:56:27:70:5a: 3d:fc:c6:db:af:0a:81:04:07:6b:df:36:1e:9a:f2: 3a:d1:f8:86:dc:5f:7e:ab:58:8f:00:2f:a7:f7:0a: bc:b6:5d:e7:25:e1:71:51:58:4a:ef:02:13:d0:fe: 99:f3:a4:b9:71:0b:4e:60:46:c2:fd:3e:7a:13:a0: 83:30:a1:19:11:95:c1:5e:21:35:e8:c8:66:e4:60: 4d:33:d7:cc:df:c7:ba:4a:4d:a4:c6:e3:55:f9:b2: 57:03:d2:ba:5f:13:aa:2a:82:fb:7b:2a:65:a5:ce: 7d:13:3a:34:06:83:1b:5b:b6:ee:93:98:73:26:b0: 84:17:12:0b:44:aa:c8:0f:70:c7:88:30:c0:47:c3: 1c:5e:26:79:fc:d8:8f:9c:11:6c:35:f1:c2:73:d0: 4d:98:c2:06:4c:ab:e3:41:b3:7a:2f:43:46:f5:94: 07:6d:dc:61:ef:23:65:bc:cb:b6:43:ad:5e:ab:de: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:8D:43:46:4E:C1:1A:4D:20:AF:97:5E:7E:00:E7:56:18:2C:F4 X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:51:a3:a1:fc:c6:42:94:c9:df:ba:2a:07:77:e9:ce:52:47: 48:4f:3b:05:aa:7f:19:53:3e:8b:cc:da:f8:df:0d:a8:e5:a6: 5d:13:23:31:90:42:a3:b5:85:19:ab:35:2b:3d:3c:76:20:22: ae:99:31:cc:d4:6d:32:6f:26:fb:b9:67:1a:1b:6f:81:07:74: ed:a8:b7:48:cd:c3:a0:e2:77:61:df:4d:47:5e:07:58:23:e7: e4:95:7e:b9:42:40:c1:8c:87:45:b6:b4:99:f4:58:08:56:2a: a3:95:05:80:29:fc:15:85:52:3e:82:c2:2c:49:b5:ee:5a:32: 91:61:ec:ac:02:08:2e:d6:40:c6:ef:89:89:24:f0:a4:84:20: 79:e4:dc:8b:a0:c0:f0:73:c3:b9:b4:85:f2:9e:12:f3:1d:57: 70:de:e0:1d:52:30:ab:61:60:78:75:83:0a:45:32:04:f9:ca: 4c:98:ba:07:a7:5a:05:10:a9:79:3e:14:8c:a7:04:b2:db:a0: 9e:68:2f:3f:d2:9e:64:68:1e:c1:7e:a2:0b:96:ce:52:e0:f2: 80:14:15:a8:52:44:61:ee:88:0b:d8:6b:e6:f1:bb:d2:f7:69: 26:c0:23:2c:71:12:be:b4:a2:8b:4e:28:f9:94:3a:09:04:7b: da:d4:9d:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURM7kqJyCtlBHpsRVlZQRe9xG+5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNTEyMDQxNjQ3MTZaFw0yNTEyMDgwMjE3MTZaMDMxMTAvBgNV BAMTKEJCMUE4RDQzNDY0RUMxMUE0RDIwQUY5NzVFN0UwMEU3NTYxODJDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDryusIjMEq2zyoz4pGiEMMAyYG uc1j29iQVjtQl6hxyuFf2a6cLeGq2FVBY8yVvYFyycOIIT4KLpYehy2j93ZcHXv9 49FvVidwWj38xtuvCoEEB2vfNh6a8jrR+IbcX36rWI8AL6f3Cry2Xecl4XFRWErv AhPQ/pnzpLlxC05gRsL9PnoToIMwoRkRlcFeITXoyGbkYE0z18zfx7pKTaTG41X5 slcD0rpfE6oqgvt7KmWlzn0TOjQGgxtbtu6TmHMmsIQXEgtEqsgPcMeIMMBHwxxe Jnn82I+cEWw18cJz0E2YwgZMq+NBs3ovQ0b1lAdt3GHvI2W8y7ZDrV6r3ggPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuxqNQ0ZOwRpNIK+XXn4A51YYLPQwHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItRo6H8xkKUyd+6Kgd36c5SR0hPOwWqfxlT PovM2vjfDajlpl0TIzGQQqO1hRmrNSs9PHYgIq6ZMczUbTJvJvu5Zxobb4EHdO2o t0jNw6Did2HfTUdeB1gj5+SVfrlCQMGMh0W2tJn0WAhWKqOVBYAp/BWFUj6CwixJ te5aMpFh7KwCCC7WQMbviYkk8KSEIHnk3IugwPBzw7m0hfKeEvMdV3De4B1SMKth YHh1gwpFMgT5ykyYugenWgUQqXk+FIynBLLboJ5oLz/SnmRoHsF+oguWzlLg8oAU FahSRGHuiAvYa+bxu9L3aSbAIyxxEr60ootOKPmUOgkEe9rUncM= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:14 2025 by rpki-client