This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: 8PdYpAQeaaLacYNs9GGFgBENTiqLjB5HTaRxVD62OQc= Subject key identifier: ED:4A:69:B3:B6:11:EE:6F:90:26:6D:A4:DD:C0:03:BD:ED:81:10:E9 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 237B775C3E65C727BCA5DECA317BAA673417C792 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 01F7 Signing time: Thu 04 Dec 2025 23:31:42 +0000 Manifest this update: Thu 04 Dec 2025 23:26:42 +0000 Manifest next update: Mon 08 Dec 2025 05:16:42 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: ciKu8dCk6SL9cJzlQjoBLW4A9m1b6zJyBrpplt112QE=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7b:77:5c:3e:65:c7:27:bc:a5:de:ca:31:7b:aa:67:34:17:c7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Dec 4 23:26:42 2025 GMT Not After : Dec 8 05:16:42 2025 GMT Subject: CN=ED4A69B3B611EE6F90266DA4DDC003BDED8110E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:41:73:f5:a1:9c:6f:a1:2b:54:e0:aa:bd: 7c:03:e1:d6:a9:fb:09:eb:1c:3d:86:81:23:2f:d3: 24:67:60:d0:1e:2f:12:cd:29:55:84:ca:d7:60:0a: 58:62:b7:48:ef:30:54:b9:9f:79:fb:58:99:fd:48: c5:25:66:1b:96:16:e0:f2:2a:ba:89:63:c9:4f:3e: 8d:00:50:93:84:e8:04:42:99:cb:f6:f8:82:74:a2: 55:c6:5c:da:e5:d0:75:eb:68:7d:48:9f:a4:cf:42: c7:47:28:7d:1b:34:aa:a5:95:27:66:dc:9f:58:f1: a2:a3:ab:3b:8a:58:73:21:ef:bc:a7:4e:b4:f7:23: 04:29:e3:d8:8d:21:a0:b9:f3:10:62:d7:20:16:2d: 03:e9:a3:93:04:0d:c6:8c:c4:d6:dd:a8:6f:76:88: 37:77:9c:97:48:01:4a:3f:d5:01:41:67:87:ff:c5: 91:10:0c:56:cd:0f:fc:73:c7:7a:f0:41:19:ba:e1: a1:ff:ac:56:a1:19:9d:3a:54:1e:46:cb:09:cf:fd: 14:4c:9d:b6:a1:63:16:3c:e4:3b:eb:73:46:78:05: b2:c7:bc:9c:65:e2:16:2c:60:2e:5f:58:fd:4a:c0: 17:21:e8:e4:aa:77:2f:fe:20:d7:73:e6:e1:56:bf: 66:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4A:69:B3:B6:11:EE:6F:90:26:6D:A4:DD:C0:03:BD:ED:81:10:E9 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:71:de:d8:51:29:5d:10:e8:ea:56:ab:a8:53:3b:53:35:87: ea:3c:09:ad:56:25:8a:e5:c3:95:3b:aa:e8:ae:94:f9:17:8a: fb:26:37:d2:7b:47:f8:9c:11:75:8e:fa:14:62:90:c4:bf:48: da:ae:56:c0:05:e8:8d:0a:f1:bf:d0:6a:60:6d:3c:d1:ce:b4: cc:3c:5a:f1:6a:28:fd:ab:b5:bb:de:67:1a:c7:4e:fa:94:3e: 0f:02:bf:0b:72:9d:8a:fe:f1:1f:db:62:bd:50:4d:46:b9:4e: 94:ae:58:05:76:4e:f4:8a:eb:7c:b6:f0:7b:17:a8:6d:1f:5c: 59:50:e1:27:9b:9d:bd:bd:34:fd:12:79:18:c1:36:54:bd:82: 06:4e:37:af:13:96:c7:1c:35:1e:9c:69:06:bc:2b:72:91:8a: 02:b8:1b:df:8c:3b:e0:01:5e:26:c6:7c:d4:38:ea:10:36:dd: 37:6e:ae:13:3b:6f:7d:8c:61:06:c2:5b:48:c1:7e:7f:b9:ff: 55:a0:55:1d:da:58:43:e7:85:d4:1a:94:dc:6b:8a:41:41:a5: 2c:23:ee:02:26:0c:f1:c4:3e:f6:8b:50:99:54:79:5c:5a:9e: ef:47:57:46:81:ed:3c:6c:7f:62:14:e1:69:54:5c:98:a1:28: 78:9a:16:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3t3XD5lxye8pd7KMXuqZzQXx5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNTEyMDQyMzI2NDJaFw0yNTEyMDgwNTE2NDJaMDMxMTAvBgNV BAMTKEVENEE2OUIzQjYxMUVFNkY5MDI2NkRBNEREQzAwM0JERUQ4MTEwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6c0Fz9aGcb6ErVOCqvXwD4dap +wnrHD2GgSMv0yRnYNAeLxLNKVWEytdgClhit0jvMFS5n3n7WJn9SMUlZhuWFuDy KrqJY8lPPo0AUJOE6ARCmcv2+IJ0olXGXNrl0HXraH1In6TPQsdHKH0bNKqllSdm 3J9Y8aKjqzuKWHMh77ynTrT3IwQp49iNIaC58xBi1yAWLQPpo5MEDcaMxNbdqG92 iDd3nJdIAUo/1QFBZ4f/xZEQDFbND/xzx3rwQRm64aH/rFahGZ06VB5GywnP/RRM nbahYxY85Dvrc0Z4BbLHvJxl4hYsYC5fWP1KwBch6OSqdy/+INdz5uFWv2bTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Upps7YR7m+QJm2k3cADve2BEOkwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBx3thRKV0Q6OpWq6hTO1M1h+o8Ca1WJYrl w5U7quiulPkXivsmN9J7R/icEXWO+hRikMS/SNquVsAF6I0K8b/QamBtPNHOtMw8 WvFqKP2rtbveZxrHTvqUPg8CvwtynYr+8R/bYr1QTUa5TpSuWAV2TvSK63y28HsX qG0fXFlQ4Sebnb29NP0SeRjBNlS9ggZON68TlsccNR6caQa8K3KRigK4G9+MO+AB XibGfNQ46hA23TdurhM7b32MYQbCW0jBfn+5/1WgVR3aWEPnhdQalNxrikFBpSwj 7gImDPHEPvaLUJlUeVxanu9HV0aB7Txsf2IU4WlUXJihKHiaFok= -----END CERTIFICATE-----Generated at Sun Dec 7 05:13:57 2025 by rpki-client