This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: 5oeKI1Mt+4gfiQYB8D7307OFaQL1ZwY55Qm0RDzZ6Rg= Subject key identifier: 3A:75:BC:98:B8:71:4F:98:90:D3:7B:9B:B5:8C:0C:69:FE:32:CF:B6 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 093ACEE94279D65E3B799126222B89A2180C2A4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 04B0 Signing time: Thu 04 Dec 2025 21:51:43 +0000 Manifest this update: Thu 04 Dec 2025 21:46:43 +0000 Manifest next update: Mon 08 Dec 2025 05:05:43 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: BKnpHekP1NFKUrDkwoI39+Rh38A610mQ9mDsfg+EpZ8=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: ngwq27xsuytU4jFUyyS/sbzfhiUNRTARsL/0hbNcALM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3a:ce:e9:42:79:d6:5e:3b:79:91:26:22:2b:89:a2:18:0c:2a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Dec 4 21:46:43 2025 GMT Not After : Dec 8 05:05:43 2025 GMT Subject: CN=3A75BC98B8714F9890D37B9BB58C0C69FE32CFB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:00:5a:9e:fa:db:c3:c4:98:a0:25:c6:a3:60: 1b:2a:d5:81:e4:f1:85:09:f3:13:57:84:9a:7f:a3: a0:1f:1a:b8:47:e7:53:fc:8c:6b:c7:b5:b0:20:bc: 0d:85:2f:5c:a3:3b:0a:a2:35:29:66:73:44:8f:23: d9:11:d5:24:52:e6:f7:fa:08:d8:0c:91:05:2b:89: ce:e8:8b:6a:e7:5c:d0:1b:b2:c9:1a:83:ac:fc:aa: 83:1e:27:52:eb:28:2d:23:40:13:7e:c1:ca:08:d6: 95:3c:13:64:4b:79:da:0d:40:0d:17:fa:9f:3e:63: be:6a:45:30:6c:60:e5:b9:cc:5e:6f:ce:96:43:38: 1d:24:d8:7d:4d:41:3e:47:1d:20:fa:8a:67:a4:37: 48:12:45:ba:94:ac:2a:f4:6d:1b:bd:2d:6a:e7:7a: d7:60:f8:9f:7e:86:11:68:c8:96:aa:c3:bc:c7:5b: ad:dc:c9:96:25:85:0c:d8:89:95:7d:a9:70:f2:25: 43:8d:38:75:b0:34:c1:12:b4:73:0d:a7:8d:c8:9b: 90:3a:7e:f0:73:cd:56:d4:9c:c6:f3:ed:fc:be:85: 37:08:f7:b9:6b:96:5e:50:c5:a3:08:e7:2d:fe:09: 78:9d:4f:cb:c1:66:bf:ae:4d:b0:af:ad:15:d9:4b: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:75:BC:98:B8:71:4F:98:90:D3:7B:9B:B5:8C:0C:69:FE:32:CF:B6 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:15:86:4d:34:6b:c0:d0:e1:6d:20:e9:4e:3b:2b:8e:ff:4d: ba:3b:01:b5:99:c7:0e:58:f7:a4:b5:95:9d:7b:68:ae:04:d6: 6c:31:14:05:3f:2f:49:c8:af:57:03:d3:a5:10:31:79:bd:14: 53:83:1d:4d:f8:7c:38:08:6b:44:39:af:56:42:89:81:b7:9a: 03:b6:bf:6d:f6:de:4f:09:07:0e:64:2c:03:c1:fb:7c:a7:25: 94:d5:17:ea:c5:e2:5a:7d:3c:4c:eb:36:10:51:b6:1b:52:3c: 72:94:c9:d1:f4:31:4a:fb:c2:24:76:23:4c:3d:89:00:bf:be: 01:a3:4b:0f:a8:5d:b7:08:59:8c:18:44:f9:88:ea:fb:48:ff: 91:0f:79:ed:43:48:52:55:d3:3c:0f:1f:51:67:0b:a4:33:30: 25:6f:36:90:24:f6:33:3d:28:76:af:3b:d3:48:d8:dc:5d:1a: 70:d1:af:18:04:62:27:78:5b:53:ab:67:4f:08:9f:3b:4a:ab: 4d:0b:a6:c2:34:7f:3d:bd:7a:1c:6b:b3:75:68:17:97:ae:b0: 28:81:8d:a8:ef:44:32:b2:0b:8b:8a:a4:ab:47:1c:2c:3a:82: e3:50:97:91:15:19:f7:7e:18:ee:eb:b6:5f:d7:22:3d:a9:bc: 02:88:a7:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTrO6UJ51l47eZEmIiuJohgMKkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTEyMDQyMTQ2NDNaFw0yNTEyMDgwNTA1NDNaMDMxMTAvBgNV BAMTKDNBNzVCQzk4Qjg3MTRGOTg5MEQzN0I5QkI1OEMwQzY5RkUzMkNGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAFqe+tvDxJigJcajYBsq1YHk 8YUJ8xNXhJp/o6AfGrhH51P8jGvHtbAgvA2FL1yjOwqiNSlmc0SPI9kR1SRS5vf6 CNgMkQUric7oi2rnXNAbsskag6z8qoMeJ1LrKC0jQBN+wcoI1pU8E2RLedoNQA0X +p8+Y75qRTBsYOW5zF5vzpZDOB0k2H1NQT5HHSD6imekN0gSRbqUrCr0bRu9LWrn etdg+J9+hhFoyJaqw7zHW63cyZYlhQzYiZV9qXDyJUONOHWwNMEStHMNp43Im5A6 fvBzzVbUnMbz7fy+hTcI97lrll5QxaMI5y3+CXidT8vBZr+uTbCvrRXZS8x/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOnW8mLhxT5iQ03ubtYwMaf4yz7YwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL0Vhk00a8DQ4W0g6U47K47/Tbo7AbWZxw5Y 96S1lZ17aK4E1mwxFAU/L0nIr1cD06UQMXm9FFODHU34fDgIa0Q5r1ZCiYG3mgO2 v2323k8JBw5kLAPB+3ynJZTVF+rF4lp9PEzrNhBRthtSPHKUydH0MUr7wiR2I0w9 iQC/vgGjSw+oXbcIWYwYRPmI6vtI/5EPee1DSFJV0zwPH1FnC6QzMCVvNpAk9jM9 KHavO9NI2NxdGnDRrxgEYid4W1OrZ08InztKq00LpsI0fz29ehxrs3VoF5eusCiB jajvRDKyC4uKpKtHHCw6guNQl5EVGfd+GO7rtl/XIj2pvAKIp2Q= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:53 2025 by rpki-client