This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: oqocYvaeEUwDCCXMp34B3IvrZPgNFFVw1dilmW6yCTg= Subject key identifier: 6E:7B:29:F4:C1:2D:CF:F5:C0:12:8D:B5:42:21:EB:28:F2:DB:38:99 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 7622C1CE932EA034BAAC6BED42B8D56980C2BF3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 01E0 Signing time: Fri 05 Dec 2025 17:50:46 +0000 Manifest this update: Fri 05 Dec 2025 17:45:46 +0000 Manifest next update: Mon 08 Dec 2025 22:05:46 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: 33Z9yIh89yj77OfFifl2nC6z0lSGkDXvzAvcBBuZ1TI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:22:c1:ce:93:2e:a0:34:ba:ac:6b:ed:42:b8:d5:69:80:c2:bf:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Dec 5 17:45:46 2025 GMT Not After : Dec 8 22:05:46 2025 GMT Subject: CN=6E7B29F4C12DCFF5C0128DB54221EB28F2DB3899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:cc:c2:87:bb:05:e6:2d:5a:8e:e3:6a:84: fa:17:65:cb:1c:cf:ae:38:b5:dc:e7:ab:d4:44:58: a4:76:38:c2:9d:86:61:cc:2d:5b:9e:1f:de:ae:97: 96:b5:df:7e:23:37:7e:5f:19:72:34:08:f4:bf:de: 6b:2e:c7:9d:d3:65:3f:98:71:b2:58:1e:6f:81:cb: d7:a1:20:14:1b:6c:61:fe:56:58:c3:5f:44:b1:a9: 47:f2:18:2f:a8:be:44:ed:cd:c3:cf:4c:e5:d7:13: 22:dc:f3:dd:ed:1a:2d:8d:83:b6:08:f9:fd:47:b3: ca:10:e1:7e:09:75:cc:b6:42:66:00:76:95:55:ff: 96:e7:28:06:6c:d8:f6:eb:e0:0d:72:f8:8c:70:01: 5a:0f:69:50:db:19:39:49:c9:3c:30:00:01:63:20: df:9b:89:b4:f8:86:64:78:25:fd:16:2d:cd:1d:56: 7f:98:1e:af:16:c1:df:76:ca:ae:5f:6c:97:5e:93: c7:d7:8b:07:ac:21:85:d4:06:e5:09:4c:dc:df:00: 92:73:cd:d4:56:5d:48:6a:45:66:d5:60:02:d7:1c: 43:a5:99:d5:8e:57:8e:fd:ef:cf:3a:b6:4d:43:bf: 04:16:2e:e4:8e:c2:76:0c:78:97:50:20:1b:e7:6b: 8d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7B:29:F4:C1:2D:CF:F5:C0:12:8D:B5:42:21:EB:28:F2:DB:38:99 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:09:d7:96:08:98:53:49:21:1b:2f:a0:2f:ee:b7:51:ee:c8: 26:81:df:6a:91:7d:a3:cf:8e:0f:02:8a:20:0a:9e:84:e5:44: ce:1b:8c:c2:89:b6:e5:23:8b:90:4b:80:8d:25:4a:69:2d:08: 4c:0a:eb:d7:db:05:41:25:9f:8b:c4:d9:30:a3:12:18:bb:c2: 6a:84:61:ca:1f:6b:dc:76:b8:27:22:34:88:88:8c:68:e9:9e: 1c:b0:c4:d7:eb:92:48:f9:6a:6d:cf:92:60:84:47:cc:a3:67: 4a:52:d9:79:90:33:79:81:82:16:15:b5:26:cb:21:17:7e:70: 98:88:d5:d6:46:fb:86:86:03:3d:c0:ca:4d:25:ae:32:65:d0: 5a:c2:53:82:35:bf:06:ed:a8:41:5e:bb:d6:c6:91:2b:aa:87: 7a:7f:98:e0:6f:df:80:92:58:1d:b3:d4:51:41:88:04:f7:88: 75:fa:5f:3e:93:d8:c5:62:55:5e:13:b3:97:d1:cf:ab:88:11: 11:44:c2:ee:9d:bd:c6:54:15:7c:99:32:97:f6:9e:09:d2:06: ac:99:bc:5a:ac:be:8b:19:ed:76:41:2b:f2:17:41:8b:0e:9e: d9:4f:88:dd:9e:ec:b0:59:4b:ee:f2:e3:d2:64:c7:8e:3d:4e: cf:87:cc:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiLBzpMuoDS6rGvtQrjVaYDCvz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTEyMDUxNzQ1NDZaFw0yNTEyMDgyMjA1NDZaMDMxMTAvBgNV BAMTKDZFN0IyOUY0QzEyRENGRjVDMDEyOERCNTQyMjFFQjI4RjJEQjM4OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYczCh7sF5i1ajuNqhPoXZcsc z644tdznq9REWKR2OMKdhmHMLVueH96ul5a1334jN35fGXI0CPS/3msux53TZT+Y cbJYHm+By9ehIBQbbGH+VljDX0SxqUfyGC+ovkTtzcPPTOXXEyLc893tGi2Ng7YI +f1Hs8oQ4X4Jdcy2QmYAdpVV/5bnKAZs2Pbr4A1y+IxwAVoPaVDbGTlJyTwwAAFj IN+bibT4hmR4Jf0WLc0dVn+YHq8Wwd92yq5fbJdek8fXiwesIYXUBuUJTNzfAJJz zdRWXUhqRWbVYALXHEOlmdWOV4797886tk1DvwQWLuSOwnYMeJdQIBvna42lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbnsp9MEtz/XAEo21QiHrKPLbOJkwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkJ15YImFNJIRsvoC/ut1HuyCaB32qRfaPP jg8CiiAKnoTlRM4bjMKJtuUji5BLgI0lSmktCEwK69fbBUEln4vE2TCjEhi7wmqE Ycofa9x2uCciNIiIjGjpnhywxNfrkkj5am3PkmCER8yjZ0pS2XmQM3mBghYVtSbL IRd+cJiI1dZG+4aGAz3Ayk0lrjJl0FrCU4I1vwbtqEFeu9bGkSuqh3p/mOBv34CS WB2z1FFBiAT3iHX6Xz6T2MViVV4Ts5fRz6uIERFEwu6dvcZUFXyZMpf2ngnSBqyZ vFqsvosZ7XZBK/IXQYsOntlPiN2e7LBZS+7y49Jkx449Ts+HzBs= -----END CERTIFICATE-----Generated at Sun Dec 7 06:00:37 2025 by rpki-client