This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: mwS3do5ONILUM57cr+Ajo00ic2ooGjKoMEgpYxPfoPE= Subject key identifier: F9:3F:6A:60:E6:D0:32:18:A7:12:1E:3B:76:9F:9F:55:7B:87:3D:51 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 763A90D5E68F97C92D7C17ED9D08B96FA3B3D59D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 052B Signing time: Sun 07 Dec 2025 04:51:29 +0000 Manifest this update: Sun 07 Dec 2025 04:46:29 +0000 Manifest next update: Wed 10 Dec 2025 12:05:29 +0000 Files and hashes: 1: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: t07eyKdDWGGPFaE0l7RAJS317z3/1+AWTAbSjGj//vA=) 2: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: obl90Ju8Uh49WHiF5evmIzEfZW09mIiXbUTRedxtitw=) 3: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: 6nfQfvYHsKjsaw/P97GpMinNY5TWkRYJKWFHck6y3/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3a:90:d5:e6:8f:97:c9:2d:7c:17:ed:9d:08:b9:6f:a3:b3:d5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Dec 7 04:46:29 2025 GMT Not After : Dec 10 12:05:29 2025 GMT Subject: CN=F93F6A60E6D03218A7121E3B769F9F557B873D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:27:d6:e0:86:1d:e0:13:6f:51:1f:ef:ec: e3:2f:a9:5c:4d:ba:5d:5a:7e:45:b5:29:45:9b:55: e2:13:8b:dc:e5:be:0d:5e:f3:6e:26:3c:9c:76:e1: 42:3c:ba:34:f1:13:ae:a6:96:eb:0f:2e:86:1a:30: 86:ac:d1:af:f9:d9:c7:df:8f:b6:97:31:0f:6e:da: e1:a8:d2:cd:67:64:c8:3f:44:f4:7b:81:94:a6:89: 31:1b:70:40:65:c2:d0:ed:91:0c:6f:c5:ee:dd:9f: ab:dd:4b:04:46:dc:aa:7f:6f:dd:ac:0d:c4:2b:0c: 42:f2:56:38:2b:98:f6:34:44:a8:f7:3b:7b:ba:7e: f4:0b:a6:bf:2d:1a:ee:5a:1b:92:02:b6:52:cc:6b: 52:17:d3:ab:19:89:23:3b:07:29:03:2c:24:9d:b0: dd:9c:b5:09:f4:ed:87:2c:5b:db:cd:3a:e1:cb:3a: 9d:77:44:a9:20:af:e1:37:9c:46:cb:05:89:20:bf: 24:95:b3:50:a8:c2:cd:8a:10:9f:ed:94:60:aa:7c: 00:26:28:0e:fe:60:a0:6a:01:31:e2:ea:6e:7c:7c: d5:73:78:78:19:ba:c2:bb:b3:64:4b:84:cb:0b:a6: 95:76:d9:aa:1a:61:a1:76:8e:9f:c8:cd:50:5b:c8: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3F:6A:60:E6:D0:32:18:A7:12:1E:3B:76:9F:9F:55:7B:87:3D:51 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c0:74:f6:59:a9:46:4b:64:39:47:5a:85:a9:f1:12:94:30: 0f:7c:59:bb:6b:a2:e5:df:8b:96:7f:69:0b:99:bd:d3:0f:46: 8a:c6:60:56:92:9f:7d:ea:bf:01:fd:9a:bf:1d:c9:ed:33:f0: ae:f9:15:96:d1:77:28:47:ce:e5:39:3a:2b:12:bc:3c:d8:ba: dc:ce:78:19:f0:a6:1c:4f:dc:06:40:2a:8b:f4:6b:c9:41:79: 6a:72:73:08:3f:6e:18:d4:ae:f2:3c:a3:ae:8e:2e:3c:3f:01: ca:be:3f:d6:fe:83:d8:0e:d3:d9:e0:f3:a3:6a:4a:88:3e:81: f3:1c:1a:81:72:25:d1:65:c0:94:ca:b3:cb:dc:1e:80:6c:65: cc:31:c1:eb:c4:11:a7:68:f5:b8:e1:bc:76:c9:1f:f9:64:30: df:b8:db:62:fa:fa:d4:8f:b6:bb:15:09:f2:37:40:f4:12:5e: 80:7d:2a:15:c5:96:b3:a0:78:af:ac:06:84:d6:c1:63:aa:7e: ae:5e:18:2c:1b:64:76:76:f8:61:44:7e:f0:90:6a:d7:d9:27: e5:81:1f:c0:f3:02:17:46:75:f0:94:7e:e2:51:53:ee:31:dd: 94:9d:e8:61:a6:84:3f:b1:08:4e:8c:42:1b:53:9e:e5:2b:76: 34:b5:ed:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdjqQ1eaPl8ktfBftnQi5b6Oz1Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNTEyMDcwNDQ2MjlaFw0yNTEyMTAxMjA1MjlaMDMxMTAvBgNV BAMTKEY5M0Y2QTYwRTZEMDMyMThBNzEyMUUzQjc2OUY5RjU1N0I4NzNENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiySfW4IYd4BNvUR/v7OMvqVxN ul1afkW1KUWbVeITi9zlvg1e824mPJx24UI8ujTxE66mlusPLoYaMIas0a/52cff j7aXMQ9u2uGo0s1nZMg/RPR7gZSmiTEbcEBlwtDtkQxvxe7dn6vdSwRG3Kp/b92s DcQrDELyVjgrmPY0RKj3O3u6fvQLpr8tGu5aG5ICtlLMa1IX06sZiSM7BykDLCSd sN2ctQn07YcsW9vNOuHLOp13RKkgr+E3nEbLBYkgvySVs1Cows2KEJ/tlGCqfAAm KA7+YKBqATHi6m58fNVzeHgZusK7s2RLhMsLppV22aoaYaF2jp/IzVBbyEzhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+T9qYObQMhinEh47dp+fVXuHPVEwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrAdPZZqUZLZDlHWoWp8RKUMA98WbtrouXf i5Z/aQuZvdMPRorGYFaSn33qvwH9mr8dye0z8K75FZbRdyhHzuU5OisSvDzYutzO eBnwphxP3AZAKov0a8lBeWpycwg/bhjUrvI8o66OLjw/Acq+P9b+g9gO09ng86Nq Sog+gfMcGoFyJdFlwJTKs8vcHoBsZcwxwevEEado9bjhvHbJH/lkMN+422L6+tSP trsVCfI3QPQSXoB9KhXFlrOgeK+sBoTWwWOqfq5eGCwbZHZ2+GFEfvCQatfZJ+WB H8DzAhdGdfCUfuJRU+4x3ZSd6GGmhD+xCE6MQhtTnuUrdjS17Wo= -----END CERTIFICATE-----Generated at Sun Dec 7 07:34:35 2025 by rpki-client