This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: yAk2LNkE7kgAevZubWfEuWu20DFHQOTCvFe0hxbiamI= Subject key identifier: 2E:DB:E0:57:F1:FC:ED:78:B6:33:B8:16:F9:4F:5C:BE:61:D5:A2:B7 Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 0BD13E09FA3A76FDE82A50ABF81F9F952763F724 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 0259 Signing time: Sat 06 Dec 2025 20:02:33 +0000 Manifest this update: Sat 06 Dec 2025 19:57:33 +0000 Manifest next update: Tue 09 Dec 2025 21:22:33 +0000 Files and hashes: 1: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=) 2: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: KavW8tawX036r6Vgujpb35e+1tZVSDZISgNpAW08GdM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d1:3e:09:fa:3a:76:fd:e8:2a:50:ab:f8:1f:9f:95:27:63:f7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Dec 6 19:57:33 2025 GMT Not After : Dec 9 21:22:33 2025 GMT Subject: CN=2EDBE057F1FCED78B633B816F94F5CBE61D5A2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:37:55:f9:ce:65:ca:39:f0:86:2f:86:3c:09: 01:f2:16:a2:52:ff:ae:2f:7e:72:91:8d:af:74:f8: c6:04:18:b9:dd:12:bb:68:96:94:49:b1:fb:e2:19: 8a:8d:70:57:be:25:0b:07:eb:1c:31:95:c0:ee:63: 8c:6e:9a:ea:91:ff:a4:56:02:01:98:c5:67:ce:a8: 75:53:b1:3d:98:cb:fb:98:d8:59:ec:de:85:42:b3: d0:56:5f:6f:b5:0e:75:ce:c3:2b:d7:e6:af:3c:9c: 5f:d8:8d:86:9c:7f:2c:e4:c6:93:7f:e8:c0:97:fb: b8:e2:dd:79:6a:ef:a5:a7:9d:b8:e4:30:75:e4:0a: 5a:c7:f6:e3:05:ab:1e:a6:63:2e:c5:c8:dc:23:91: 40:a2:d2:3d:4c:8a:76:62:52:5b:9c:80:82:6a:94: e7:3c:2a:d6:34:64:93:ca:b5:d8:da:54:81:ce:71: 8b:5b:6e:58:02:bc:98:af:70:e2:24:09:29:91:d0: 43:6e:f8:53:58:85:42:1b:34:46:db:5b:e7:28:56: 71:f6:24:be:70:95:f1:0b:fb:1b:7e:a8:4e:d6:1d: 9b:70:75:93:66:be:c9:7c:b9:ce:13:3f:80:cf:83: fa:83:b9:18:c7:52:9e:90:1c:e2:17:8c:c2:a0:5e: 26:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DB:E0:57:F1:FC:ED:78:B6:33:B8:16:F9:4F:5C:BE:61:D5:A2:B7 X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ff:db:0c:75:cd:81:fe:c9:52:c8:df:13:f4:68:11:e4:8b: e3:42:56:a6:a5:4c:f1:e4:f7:3e:0f:4e:b5:0f:f3:70:ca:8a: 07:0b:90:c4:5e:75:30:be:6f:9e:10:4a:3e:ef:0d:ca:26:90: a6:88:8a:b3:91:84:f3:50:d6:84:c9:d3:19:27:a8:2c:52:f8: 62:0e:ac:2a:11:0a:54:e5:b7:8e:de:ea:0e:d0:44:5b:93:07: 13:82:ef:99:73:9f:78:8d:e5:88:d5:d4:ec:da:19:73:73:c1: b0:ea:42:d1:50:f1:20:96:af:8e:0c:85:3a:64:b3:b5:98:12: 11:45:fd:6a:c4:aa:d6:ee:cf:6b:eb:ec:03:c2:f3:3d:80:39: 9e:dc:d5:94:ff:32:fe:50:71:2b:cb:9f:b2:81:ee:c0:72:15: bc:9e:de:cc:c1:50:29:94:2d:61:4c:1f:a8:4d:43:cf:6f:be: e1:9a:22:1b:7d:aa:24:0f:f9:15:bf:db:92:f6:90:20:75:f6: a9:4c:f6:a9:64:7d:84:5b:bf:83:29:bb:69:9a:e6:1c:e6:91: 13:69:75:6e:42:8a:60:1f:ab:72:d2:15:eb:68:70:6b:08:7b: 1c:45:01:f0:74:8d:ef:8d:46:41:ac:bb:87:90:eb:8b:b0:75: a7:69:d8:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9E+Cfo6dv3oKlCr+B+flSdj9yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTEyMDYxOTU3MzNaFw0yNTEyMDkyMTIyMzNaMDMxMTAvBgNV BAMTKDJFREJFMDU3RjFGQ0VENzhCNjMzQjgxNkY5NEY1Q0JFNjFENUEyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRN1X5zmXKOfCGL4Y8CQHyFqJS /64vfnKRja90+MYEGLndErtolpRJsfviGYqNcFe+JQsH6xwxlcDuY4xumuqR/6RW AgGYxWfOqHVTsT2Yy/uY2Fns3oVCs9BWX2+1DnXOwyvX5q88nF/YjYacfyzkxpN/ 6MCX+7ji3Xlq76WnnbjkMHXkClrH9uMFqx6mYy7FyNwjkUCi0j1MinZiUlucgIJq lOc8KtY0ZJPKtdjaVIHOcYtbblgCvJivcOIkCSmR0ENu+FNYhUIbNEbbW+coVnH2 JL5wlfEL+xt+qE7WHZtwdZNmvsl8uc4TP4DPg/qDuRjHUp6QHOIXjMKgXiY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULtvgV/H87Xi2M7gW+U9cvmHVorcwHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJv/2wx1zYH+yVLI3xP0aBHki+NCVqalTPHk 9z4PTrUP83DKigcLkMRedTC+b54QSj7vDcomkKaIirORhPNQ1oTJ0xknqCxS+GIO rCoRClTlt47e6g7QRFuTBxOC75lzn3iN5YjV1OzaGXNzwbDqQtFQ8SCWr44MhTpk s7WYEhFF/WrEqtbuz2vr7APC8z2AOZ7c1ZT/Mv5QcSvLn7KB7sByFbye3szBUCmU LWFMH6hNQ89vvuGaIht9qiQP+RW/25L2kCB19qlM9qlkfYRbv4Mpu2ma5hzmkRNp dW5CimAfq3LSFetocGsIexxFAfB0je+NRkGsu4eQ64uwdadp2KQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:50 2025 by rpki-client