This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: Z7xc2Qyc+SBtZ9sYIxx19U7r9hh7tz4z4mci5OXwklg= Subject key identifier: E7:F7:21:95:4E:09:BD:BC:05:06:28:E6:0E:16:DF:D8:1B:37:61:DA Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 76863457598D8E412B9650BC87300E68CDDE1371 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: AE Signing time: Mon 08 Dec 2025 06:51:42 +0000 Manifest this update: Mon 08 Dec 2025 06:46:42 +0000 Manifest next update: Thu 11 Dec 2025 13:53:42 +0000 Files and hashes: 1: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: c3W1mcouwab8bHRJIKzFKmFGuvZhsR8dJjN7SkX4oYw=) 2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: Qqyhh99wvN9qzOgai05gzAsYuhy6QSvltygf/7XId1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 09:57:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:86:34:57:59:8d:8e:41:2b:96:50:bc:87:30:0e:68:cd:de:13:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Dec 8 06:46:42 2025 GMT Not After : Dec 11 13:53:42 2025 GMT Subject: CN=E7F721954E09BDBC050628E60E16DFD81B3761DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:56:6e:fd:e6:54:34:c5:32:4d:15:bd:07: 68:86:57:52:3c:37:88:f0:e5:38:de:93:fd:45:31: 83:7f:67:e0:d6:20:3c:41:ac:36:1b:5d:ff:bd:ab: 05:da:65:df:b8:10:5f:f2:c6:56:a8:09:b2:90:39: 28:f3:57:ee:fd:c1:0c:6c:06:44:6b:b0:7d:3d:d9: 1f:dc:56:8b:b8:ca:83:e2:ed:b1:47:f9:ea:45:26: 22:f6:89:f3:2a:3e:40:bb:31:73:8a:77:ec:5f:af: b0:29:5a:2c:86:72:74:5c:af:d5:16:d2:62:13:9f: a7:d5:d7:a4:27:34:a0:b4:f3:2b:70:5d:e0:3c:47: 23:60:66:ef:a2:73:12:a2:71:a9:4c:0a:a2:21:56: 81:97:e4:57:44:a6:60:a3:e2:04:0c:48:63:e1:0c: 0d:9c:3b:e8:db:52:9e:48:99:ea:4d:20:aa:c7:38: 66:a9:8e:c9:49:9b:68:a6:92:77:09:cd:d5:38:d1: 79:13:45:da:15:01:f7:44:43:21:36:2d:2e:88:b2: ad:14:56:ee:64:27:d2:cd:a1:6b:64:11:cc:1b:f3: 96:76:37:90:2b:2f:bf:9e:4d:97:1c:12:1a:c6:01: 2e:24:23:b2:10:58:e1:57:87:98:7e:d4:4e:c5:da: cd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F7:21:95:4E:09:BD:BC:05:06:28:E6:0E:16:DF:D8:1B:37:61:DA X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e6:1f:32:66:88:2e:59:28:74:9b:3e:34:ee:77:34:03:d5: 73:c0:e1:6f:f2:24:db:6f:9f:16:d0:1e:07:8d:41:f9:aa:2c: 70:b2:5f:65:9f:31:66:00:0a:d5:52:12:a2:e2:0e:f7:1c:b6: 7d:e9:55:84:85:d5:8d:c0:ba:2c:78:90:f5:1c:cf:b5:46:43: 16:3e:32:33:fb:7b:51:27:1f:2d:e0:25:ac:22:44:42:4b:91: 5b:f5:83:e4:ef:b4:da:71:e4:d8:de:90:ee:c8:6d:13:7c:8f: 2f:e8:8e:8b:ae:7b:ff:b1:61:96:0a:a1:6e:44:c3:15:7f:1d: 77:04:0b:60:ed:ed:14:7f:e9:c4:b5:2b:64:7c:fd:80:27:3c: 78:e3:bd:33:cc:78:17:02:3d:08:db:fa:7a:bf:2f:a8:64:1d: 27:66:cc:df:ca:b4:83:41:92:ca:e0:eb:98:9d:99:d4:9a:f2: 2c:a9:f1:9c:81:90:bf:8c:47:08:b7:46:f1:a2:87:0a:ea:05: ea:1b:19:20:98:26:eb:a0:5b:da:4d:b0:cd:ef:4b:ab:53:d4: b2:82:22:4f:24:59:b8:74:23:ca:95:08:c8:0c:15:17:d5:4d: 0c:6a:7a:5a:01:ce:e6:7a:0d:b2:3c:c9:0d:d4:fb:da:6a:55: 9c:82:bf:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoY0V1mNjkErllC8hzAOaM3eE3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNTEyMDgwNjQ2NDJaFw0yNTEyMTExMzUzNDJaMDMxMTAvBgNV BAMTKEU3RjcyMTk1NEUwOUJEQkMwNTA2MjhFNjBFMTZERkQ4MUIzNzYxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf+VZu/eZUNMUyTRW9B2iGV1I8 N4jw5Tjek/1FMYN/Z+DWIDxBrDYbXf+9qwXaZd+4EF/yxlaoCbKQOSjzV+79wQxs BkRrsH092R/cVou4yoPi7bFH+epFJiL2ifMqPkC7MXOKd+xfr7ApWiyGcnRcr9UW 0mITn6fV16QnNKC08ytwXeA8RyNgZu+icxKicalMCqIhVoGX5FdEpmCj4gQMSGPh DA2cO+jbUp5ImepNIKrHOGapjslJm2imkncJzdU40XkTRdoVAfdEQyE2LS6Isq0U Vu5kJ9LNoWtkEcwb85Z2N5ArL7+eTZccEhrGAS4kI7IQWOFXh5h+1E7F2s07AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/chlU4JvbwFBijmDhbf2Bs3YdowHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTmHzJmiC5ZKHSbPjTudzQD1XPA4W/yJNtv nxbQHgeNQfmqLHCyX2WfMWYACtVSEqLiDvcctn3pVYSF1Y3Auix4kPUcz7VGQxY+ MjP7e1EnHy3gJawiREJLkVv1g+TvtNpx5NjekO7IbRN8jy/ojouue/+xYZYKoW5E wxV/HXcEC2Dt7RR/6cS1K2R8/YAnPHjjvTPMeBcCPQjb+nq/L6hkHSdmzN/KtINB ksrg65idmdSa8iyp8ZyBkL+MRwi3RvGihwrqBeobGSCYJuugW9pNsM3vS6tT1LKC Ik8kWbh0I8qVCMgMFRfVTQxqeloBzuZ6DbI8yQ3U+9pqVZyCv6o= -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:40 2025 by rpki-client