This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft File: DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft (raw, json) Hash identifier: oOz80hvMbbr3SWGGy/w2ifG1Lg6DHKAbS981hArDMqk= Subject key identifier: 64:E1:DD:50:0F:A8:43:8A:13:D6:10:09:AD:8F:EA:12:56:7D:9A:58 Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 Certificate issuer: /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Certificate serial: 123F3D20100E6A99EFB0C77A9C88984EC30EC076 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft Manifest number: E4 Signing time: Fri 05 Dec 2025 08:21:58 +0000 Manifest this update: Fri 05 Dec 2025 08:16:58 +0000 Manifest next update: Mon 08 Dec 2025 15:13:58 +0000 Files and hashes: 1: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: BIDljILBNKsrSwzyZxnTSaIaANst4K6p4IMi96hI1tI=) 2: DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl (hash: h6+69PNqp9WwkQLERBJ7RQnwxWk1AvMc6yw6S0qA0qM=) 3: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: yOguTTJn/ofmmFRzNxB5PQD5Wur97XppCIr80azCbnE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3f:3d:20:10:0e:6a:99:ef:b0:c7:7a:9c:88:98:4e:c3:0e:c0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Validity Not Before: Dec 5 08:16:58 2025 GMT Not After : Dec 8 15:13:58 2025 GMT Subject: CN=64E1DD500FA8438A13D61009AD8FEA12567D9A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:84:07:63:8a:63:30:fb:70:b6:01:2c:3f:12: 05:8e:61:5c:70:14:68:30:b6:12:49:ac:e7:58:8b: db:17:23:f3:c0:25:85:2b:df:7c:28:50:47:45:1e: 6f:19:be:41:27:4a:11:d4:6d:3b:2b:7b:fd:78:14: a4:65:ac:95:97:34:54:ae:8f:73:3f:39:e5:41:a9: 05:2c:a9:a8:1f:80:3a:af:71:e3:52:ca:a7:c4:bb: ad:7c:f9:db:31:2c:45:0d:f9:2f:88:bb:f8:87:2f: c3:ea:f4:3a:02:8d:6b:1d:bf:40:62:b9:ac:55:bb: 4c:76:3a:fa:a2:26:92:33:27:dd:df:6d:8a:d1:b6: a5:5b:ca:1c:fd:91:ba:eb:78:52:28:1e:fc:6e:d3: ca:96:e4:73:fe:cb:eb:6f:81:af:57:1e:ab:5d:de: b9:a1:91:03:ab:d0:9d:6d:c2:c7:77:ac:de:62:71: 2c:00:21:6e:74:b7:81:24:e3:37:31:3a:3f:2a:98: 83:3c:15:cb:dc:fa:f1:c8:98:2e:94:a6:e8:ff:14: a7:eb:e9:ec:44:10:cf:4a:c6:f7:ed:57:cc:29:98: 76:92:83:d3:f8:bd:de:47:bf:02:62:66:c8:63:4d: 62:12:d6:f6:dc:19:73:67:54:5c:f4:f3:45:0e:6b: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E1:DD:50:0F:A8:43:8A:13:D6:10:09:AD:8F:EA:12:56:7D:9A:58 X509v3 Authority Key Identifier: keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ba:6b:e4:3b:a0:a4:6b:63:a3:a6:b0:33:b7:c0:15:0f:20: 63:46:d8:64:ea:42:61:11:1c:14:8c:4e:19:a9:57:58:43:af: e6:c4:34:96:cc:b8:67:46:0a:61:b4:33:c2:ca:32:f2:7f:09: 92:69:af:1c:52:e1:17:73:90:76:fd:dd:bf:47:92:40:94:99: 13:49:e3:45:c2:ee:11:96:c1:63:cf:c1:67:3f:34:80:6c:e2: 19:99:fe:08:99:8a:c8:ae:f3:c3:10:58:f7:94:05:1e:0f:69: a7:b3:5f:e7:2f:ac:06:79:77:4e:03:0e:c8:b0:a3:43:e3:b4: 31:43:37:93:fd:ef:2b:60:a4:ff:c1:44:95:50:64:aa:d8:b6: 94:47:58:9a:e2:bb:ac:ed:10:0c:56:8f:b8:4c:05:9e:70:13: be:88:24:22:f4:d7:69:af:0c:0a:46:56:9b:28:4f:7b:19:53: ac:b1:36:4f:26:04:df:8a:89:75:d4:1e:4d:dc:2f:d7:03:2b: 96:7d:9b:2a:49:dc:84:66:50:30:d0:d7:4a:a2:ec:6a:a2:7a: 90:d5:e7:e3:52:b1:34:b3:ba:44:4f:09:65:c8:8a:0e:0b:ae: e2:c0:fb:b1:77:68:57:ab:b3:cc:b2:a3:88:c6:d1:84:97:bd: 38:37:fb:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEj89IBAOapnvsMd6nIiYTsMOwHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYw RDJDNDYyMzAeFw0yNTEyMDUwODE2NThaFw0yNTEyMDgxNTEzNThaMDMxMTAvBgNV BAMTKDY0RTFERDUwMEZBODQzOEExM0Q2MTAwOUFEOEZFQTEyNTY3RDlBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhAdjimMw+3C2ASw/EgWOYVxw FGgwthJJrOdYi9sXI/PAJYUr33woUEdFHm8ZvkEnShHUbTsre/14FKRlrJWXNFSu j3M/OeVBqQUsqagfgDqvceNSyqfEu618+dsxLEUN+S+Iu/iHL8Pq9DoCjWsdv0Bi uaxVu0x2OvqiJpIzJ93fbYrRtqVbyhz9kbrreFIoHvxu08qW5HP+y+tvga9XHqtd 3rmhkQOr0J1twsd3rN5icSwAIW50t4Ek4zcxOj8qmIM8Fcvc+vHImC6Upuj/FKfr 6exEEM9KxvftV8wpmHaSg9P4vd5HvwJiZshjTWIS1vbcGXNnVFz080UOa1rbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZOHdUA+oQ4oT1hAJrY/qElZ9mlgwHwYDVR0j BBgwFoAU2nN+i7njUZ8Z5gjcPoOfNg0sRiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjBiY2RjMy0wZmVhLTQ3NDctOTkwNy02NTY0ODZiYWU4ZGEvMC9EQTczN0U4QkI5 RTM1MTlGMTlFNjA4REMzRTgzOUYzNjBEMkM0NjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYwRDJD NDYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlG MzYwRDJDNDYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIm6a+Q7oKRrY6OmsDO3wBUPIGNG2GTqQmER HBSMThmpV1hDr+bENJbMuGdGCmG0M8LKMvJ/CZJprxxS4RdzkHb93b9HkkCUmRNJ 40XC7hGWwWPPwWc/NIBs4hmZ/giZisiu88MQWPeUBR4PaaezX+cvrAZ5d04DDsiw o0PjtDFDN5P97ytgpP/BRJVQZKrYtpRHWJriu6ztEAxWj7hMBZ5wE76IJCL012mv DApGVpsoT3sZU6yxNk8mBN+KiXXUHk3cL9cDK5Z9mypJ3IRmUDDQ10qi7GqiepDV 5+NSsTSzukRPCWXIig4LruLA+7F3aFers8yyo4jG0YSXvTg3+0Q= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:42 2025 by rpki-client