This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json) Hash identifier: qz7UCo1T1wGCoXK2LcBbIAwkiXvtdAndtb4LzJbZHjU= Subject key identifier: 22:8B:CE:D0:51:EB:27:A1:EA:81:5E:40:A7:7F:37:3C:BC:77:E1:E2 Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Certificate serial: 26633E2B880E5ACC27E5FDE712965F0A47B83174 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft Manifest number: D9 Signing time: Tue 16 Dec 2025 19:12:02 +0000 Manifest this update: Tue 16 Dec 2025 19:07:02 +0000 Manifest next update: Fri 19 Dec 2025 21:10:02 +0000 Files and hashes: 1: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: zVMyVBSRrF8H3L/HdxrAQtjuUvofywIio2GusyrAkeo=) 2: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: idjxpfeAxHssuGIMoqlSNQnvrimnNEAu/Mw7vVOi7mA=) 3: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 21:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:63:3e:2b:88:0e:5a:cc:27:e5:fd:e7:12:96:5f:0a:47:b8:31:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Validity Not Before: Dec 16 19:07:02 2025 GMT Not After : Dec 19 21:10:02 2025 GMT Subject: CN=228BCED051EB27A1EA815E40A77F373CBC77E1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:d0:5a:f1:ed:01:21:94:9e:2b:3b:17:d2: 80:8c:c2:97:08:7a:4b:a5:71:6d:7d:67:37:84:a6: 42:f9:a6:56:73:65:6c:7a:45:92:7c:5f:e3:e1:fb: be:44:d2:58:f4:90:6b:c0:bb:c9:b8:a8:b2:e0:2b: 55:04:79:21:a2:2c:19:6e:d8:39:9e:29:05:07:97: fe:d7:f5:2e:6a:c0:ca:a2:30:f6:27:0c:98:00:a5: f1:eb:71:0c:d6:0e:30:e4:fb:80:4d:46:01:52:f8: 46:d7:04:bc:14:20:a3:1e:9f:d5:08:ba:e0:dc:8a: 25:d7:3e:3e:d9:dd:e4:44:fe:01:98:9d:be:51:51: cb:0b:da:4d:22:9f:52:66:50:b6:3a:9f:fd:26:ab: a5:a6:a1:19:9d:ed:b5:71:f9:6e:3a:47:30:fb:5a: 04:65:f8:c6:a9:06:56:e5:0c:6a:14:56:40:d2:58: e7:1c:cb:b2:61:76:cc:e0:47:e0:25:9a:da:5d:cf: c5:93:df:a0:ad:94:be:26:84:e5:00:12:8a:c6:c2: 34:85:8e:44:ac:2f:2f:46:2d:11:80:95:a3:a0:89: 0c:2a:31:23:07:9e:a6:d6:7d:6e:c9:71:4c:74:32: c3:59:cb:3c:8c:d5:8a:cb:86:49:15:07:3e:6d:ad: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8B:CE:D0:51:EB:27:A1:EA:81:5E:40:A7:7F:37:3C:BC:77:E1:E2 X509v3 Authority Key Identifier: keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d4:cd:72:0b:86:82:88:67:3b:e8:dc:79:db:12:40:cf:22: 11:27:60:26:37:78:a2:c2:ce:93:d1:4b:c2:ac:74:96:e1:e4: 8a:56:33:b8:7e:ad:e0:79:26:db:b6:89:e9:c4:28:f0:a6:ee: d9:62:d8:58:1e:60:de:ee:2b:1a:4f:d5:7c:92:87:9b:f2:6a: de:0d:0d:7a:36:b8:54:93:04:35:e1:fa:00:55:18:7b:fc:c0: 4c:5d:35:6a:65:d5:1a:c1:82:15:16:3e:43:1c:20:b9:f8:3a: b3:37:43:43:03:cd:52:45:06:55:13:1a:66:3f:bf:77:eb:f0: 47:9e:13:6d:31:14:3b:26:42:4e:1d:40:43:6e:bf:c8:d5:89: c2:6d:f6:cd:10:71:51:77:38:74:12:ba:c5:ef:1b:2e:97:20: b0:1e:a4:ad:ae:b8:9c:7f:27:f4:e0:96:87:05:66:fe:1c:8c: fe:0d:db:6e:e5:9b:1d:db:85:8a:13:70:8c:88:46:f6:6c:79: d7:3f:37:e8:18:03:c4:d0:0a:e7:67:2f:c0:7d:d2:06:cb:9e: a4:59:76:f0:3d:cb:6e:ed:13:0a:4d:db:02:8b:82:dc:5f:8d: e7:e3:96:f4:4c:30:15:d1:8a:2a:df:18:42:34:87:8c:7e:23: 39:be:af:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmM+K4gOWswn5f3nEpZfCke4MXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw RkM3QzBERjAeFw0yNTEyMTYxOTA3MDJaFw0yNTEyMTkyMTEwMDJaMDMxMTAvBgNV BAMTKDIyOEJDRUQwNTFFQjI3QTFFQTgxNUU0MEE3N0YzNzNDQkM3N0UxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZ9Ba8e0BIZSeKzsX0oCMwpcI ekulcW19ZzeEpkL5plZzZWx6RZJ8X+Ph+75E0lj0kGvAu8m4qLLgK1UEeSGiLBlu 2DmeKQUHl/7X9S5qwMqiMPYnDJgApfHrcQzWDjDk+4BNRgFS+EbXBLwUIKMen9UI uuDciiXXPj7Z3eRE/gGYnb5RUcsL2k0in1JmULY6n/0mq6WmoRmd7bVx+W46RzD7 WgRl+MapBlblDGoUVkDSWOccy7JhdszgR+Almtpdz8WT36CtlL4mhOUAEorGwjSF jkSsLy9GLRGAlaOgiQwqMSMHnqbWfW7JcUx0MsNZyzyM1YrLhkkVBz5trfsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIovO0FHrJ6HqgV5Ap383PLx34eIwHwYDVR0j BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1 MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3 QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfUzXILhoKIZzvo3HnbEkDPIhEnYCY3eKLC zpPRS8KsdJbh5IpWM7h+reB5Jtu2ienEKPCm7tli2FgeYN7uKxpP1XySh5vyat4N DXo2uFSTBDXh+gBVGHv8wExdNWpl1RrBghUWPkMcILn4OrM3Q0MDzVJFBlUTGmY/ v3fr8EeeE20xFDsmQk4dQENuv8jVicJt9s0QcVF3OHQSusXvGy6XILAepK2uuJx/ J/TglocFZv4cjP4N227lmx3bhYoTcIyIRvZsedc/N+gYA8TQCudnL8B90gbLnqRZ dvA9y27tEwpN2wKLgtxfjefjlvRMMBXRiirfGEI0h4x+Izm+r6Q= -----END CERTIFICATE-----Generated at Wed Dec 17 13:48:17 2025 by rpki-client