This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: UjQQzrU/mlnxsoMZGXA6gzu3kakVHbJmFUpnJBjhOvU= Subject key identifier: 7E:69:14:76:40:B1:3D:48:01:14:F0:FE:6E:D9:C7:E5:5C:C3:3A:D9 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 521013E258DAD04529DA40D54F102422969307AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: F3 Signing time: Sat 06 Dec 2025 06:42:02 +0000 Manifest this update: Sat 06 Dec 2025 06:37:02 +0000 Manifest next update: Tue 09 Dec 2025 12:55:02 +0000 Files and hashes: 1: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8=) 2: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: +teKINZvaHmO1Q+Kg4FSm38760XvHDKTZ7byNyW4UzY=) 3: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: LHGkoQCe6hA284MD/D2H9GCxGs8ZTWW3EaemrG0aLMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:10:13:e2:58:da:d0:45:29:da:40:d5:4f:10:24:22:96:93:07:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Dec 6 06:37:02 2025 GMT Not After : Dec 9 12:55:02 2025 GMT Subject: CN=7E69147640B13D480114F0FE6ED9C7E55CC33AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:04:67:14:66:67:be:d3:4a:78:95:6e:57:04: e9:da:51:04:f2:bf:bf:2d:74:ef:9f:d8:e7:d9:82: e7:d3:05:d7:a6:a2:fb:b3:76:31:b2:1c:51:fe:7a: c5:76:92:4f:a6:7c:da:76:02:be:1a:02:45:3a:15: b2:e0:44:0c:69:94:a6:e0:2e:c9:3f:2c:7b:96:b2: 02:2f:61:ae:cc:0b:5f:39:69:c6:70:0f:c9:1b:4a: 28:d1:ab:0a:e4:f1:16:29:9c:13:85:84:a7:74:aa: 30:7a:32:d9:44:2e:53:28:df:03:60:5e:e8:2d:97: f6:ba:20:11:f7:f6:99:c3:b4:16:90:f0:95:51:99: ea:74:fa:1e:df:01:9a:a9:67:09:25:ba:4c:41:db: 47:0d:79:2c:e9:5f:aa:2b:e2:7e:5c:d4:cf:b1:7e: d3:6f:a7:35:56:66:72:81:0c:f3:33:fa:86:55:e5: 8b:42:19:2a:1a:59:c1:ad:b4:45:6a:17:b7:d5:62: 6a:cb:a1:a6:80:a3:6f:b8:d8:2a:94:c4:83:0b:b4: 49:a8:87:86:cc:95:c4:a3:22:09:12:8d:fc:bf:fb: 8f:e0:a9:ed:c6:39:05:44:eb:ef:96:0d:4a:0f:60: 06:2f:0a:b6:f6:67:8c:bd:53:9e:13:86:4d:14:32: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:69:14:76:40:B1:3D:48:01:14:F0:FE:6E:D9:C7:E5:5C:C3:3A:D9 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:8d:b2:bc:88:60:4b:eb:a8:72:5e:ad:5f:e1:2a:44:d8:3c: 55:bc:60:78:d7:07:fb:2e:5c:38:4c:a3:5b:d3:e7:f4:79:b4: f4:24:fb:0c:5f:e6:fe:56:16:7e:a3:5d:10:6c:3c:50:54:0d: ba:bd:ae:d3:0e:dd:b0:31:87:16:62:79:19:88:6b:f6:7b:8d: 36:a0:8e:8f:d8:fd:17:10:ca:61:f4:ea:d5:41:05:a1:d5:b7: 51:4f:bd:59:c3:41:0b:e5:f5:5c:83:9d:4f:40:12:45:e3:e7: 39:45:fe:69:69:0a:c0:bf:cd:74:da:b9:8d:ab:ba:72:da:37: 89:f3:23:11:fb:54:4a:7c:9c:dd:0e:ee:82:21:16:66:5b:31: c6:33:82:c2:fe:4d:fa:b4:69:ee:57:b5:97:12:b6:39:03:b5: 5d:8a:e0:e8:e0:f1:02:9f:c8:c0:f4:4a:8f:2a:7d:b5:3e:a0: 71:d9:6c:99:4b:47:15:58:7a:33:d8:f0:26:c0:10:b5:86:78: 27:3a:47:4c:36:77:b3:7e:1e:34:b5:3f:6c:35:3b:50:34:29: eb:2d:8a:8f:31:9d:aa:dc:3f:74:65:9a:e5:04:0f:51:75:d1: cd:3e:f0:4f:f0:6e:f4:35:aa:2a:41:12:dd:08:83:d3:d9:79: 7d:1a:08:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhAT4lja0EUp2kDVTxAkIpaTB64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTEyMDYwNjM3MDJaFw0yNTEyMDkxMjU1MDJaMDMxMTAvBgNV BAMTKDdFNjkxNDc2NDBCMTNENDgwMTE0RjBGRTZFRDlDN0U1NUNDMzNBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZBGcUZme+00p4lW5XBOnaUQTy v78tdO+f2OfZgufTBdemovuzdjGyHFH+esV2kk+mfNp2Ar4aAkU6FbLgRAxplKbg Lsk/LHuWsgIvYa7MC185acZwD8kbSijRqwrk8RYpnBOFhKd0qjB6MtlELlMo3wNg Xugtl/a6IBH39pnDtBaQ8JVRmep0+h7fAZqpZwklukxB20cNeSzpX6or4n5c1M+x ftNvpzVWZnKBDPMz+oZV5YtCGSoaWcGttEVqF7fVYmrLoaaAo2+42CqUxIMLtEmo h4bMlcSjIgkSjfy/+4/gqe3GOQVE6++WDUoPYAYvCrb2Z4y9U54Thk0UMrKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfmkUdkCxPUgBFPD+btnH5VzDOtkwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyNsryIYEvrqHJerV/hKkTYPFW8YHjXB/su XDhMo1vT5/R5tPQk+wxf5v5WFn6jXRBsPFBUDbq9rtMO3bAxhxZieRmIa/Z7jTag jo/Y/RcQymH06tVBBaHVt1FPvVnDQQvl9VyDnU9AEkXj5zlF/mlpCsC/zXTauY2r unLaN4nzIxH7VEp8nN0O7oIhFmZbMcYzgsL+Tfq0ae5XtZcStjkDtV2K4Ojg8QKf yMD0So8qfbU+oHHZbJlLRxVYejPY8CbAELWGeCc6R0w2d7N+HjS1P2w1O1A0Kest io8xnarcP3RlmuUED1F10c0+8E/wbvQ1qipBEt0Ig9PZeX0aCGc= -----END CERTIFICATE-----Generated at Sun Dec 7 07:04:10 2025 by rpki-client