This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: 0rWdHQhVy7TqrwkhPuJtgfED2qJMu8FZQq22Hr/Hzlc= Subject key identifier: 79:02:1A:5D:3F:A4:5B:4E:29:8F:00:EB:B0:AD:C1:0E:D8:AA:7C:4D Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 443441F992218BF89F66F7EDCD6137B39C4C485C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: 010A Signing time: Thu 04 Dec 2025 16:20:38 +0000 Manifest this update: Thu 04 Dec 2025 16:15:38 +0000 Manifest next update: Mon 08 Dec 2025 03:46:38 +0000 Files and hashes: 1: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) 2: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: c276IgRAFkFoZcOeYb6tMouVR3a3lOdghHFdhv7jnMU=) 3: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 03:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:34:41:f9:92:21:8b:f8:9f:66:f7:ed:cd:61:37:b3:9c:4c:48:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Dec 4 16:15:38 2025 GMT Not After : Dec 8 03:46:38 2025 GMT Subject: CN=79021A5D3FA45B4E298F00EBB0ADC10ED8AA7C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:29:25:aa:2f:33:4d:00:ad:8a:9e:4b:50: 68:1b:b5:31:2e:77:6a:ad:40:92:d8:68:c4:e2:f6: cd:c7:24:ef:60:ad:16:b9:c9:15:c6:27:98:48:f2: 1b:0b:d6:86:c0:74:34:58:14:61:ed:dd:f4:ec:1d: e7:5f:f5:5d:81:d3:76:ea:94:94:69:a4:6c:3d:7d: c1:c5:5d:f1:69:82:e9:45:ab:dc:42:40:df:e1:4d: 0a:1b:de:9f:52:a5:c7:1b:c1:8a:2d:c5:79:5e:c1: d8:36:6c:d7:89:1d:4d:c8:44:77:97:11:eb:2b:b3: 65:89:9a:46:bb:04:e8:78:d6:7a:d9:c1:0b:7a:42: 56:9e:9f:70:79:a9:03:dd:cf:52:cd:e4:7b:6a:70: 52:2a:01:07:6d:d2:0c:6b:2e:56:96:75:96:e4:91: fc:0d:f5:12:89:05:8c:49:02:0f:9b:83:e6:ac:2f: a7:5c:ca:f1:b0:1b:3a:88:3a:87:ba:2c:ac:de:b7: 47:40:e0:b9:99:7c:c6:46:7e:c5:b6:93:a8:10:02: 5f:7a:33:a6:c9:47:21:77:d1:3a:cc:98:59:f8:dd: 8b:9f:6d:f2:ab:0d:ec:e2:67:04:96:3a:aa:39:70: 1c:a6:87:19:84:2f:b4:a2:a3:a8:69:8a:13:3a:3e: 7d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:02:1A:5D:3F:A4:5B:4E:29:8F:00:EB:B0:AD:C1:0E:D8:AA:7C:4D X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:df:2a:56:82:98:bf:83:5a:d1:f7:67:53:3b:10:33:57:04: b0:cd:9d:a8:be:d9:7b:b2:01:f7:e1:0d:24:bf:30:37:f5:bf: be:0e:e4:e4:68:6c:07:67:2c:d3:76:b7:05:da:c4:d0:ee:5a: 29:d8:32:95:72:27:ea:a8:9b:f8:60:b6:97:9d:0a:be:ee:b6: e7:68:f9:5d:84:d5:42:6e:8a:05:f7:52:ec:f8:01:06:c0:51: 94:b6:ee:a2:9e:b3:5a:a3:be:aa:f4:1a:76:87:00:e3:5d:f1: f2:97:a4:10:a4:eb:46:04:2c:d1:6e:4e:47:3f:90:ac:c4:67: e4:45:55:85:1c:c5:4b:75:f8:fc:79:b1:e2:3c:86:d4:df:b5: 47:fe:c3:58:18:62:5a:ee:dc:22:99:62:bf:51:ac:8c:11:75: da:47:9a:ac:52:ff:c5:c4:51:09:ee:29:7d:7d:35:97:bb:89: 40:d2:84:bd:33:96:99:da:4d:16:da:60:ad:3c:ef:b3:c1:07: 3b:ad:73:5f:c5:cd:39:c1:73:05:9d:fd:42:61:60:fc:8e:39: 17:43:be:22:65:df:0f:6c:e0:6f:4a:dc:3c:01:f4:80:a8:2b: 75:fa:69:68:63:fa:a4:68:3e:21:f9:94:e2:42:83:7c:1d:1d: d3:2c:01:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDRB+ZIhi/ifZvftzWE3s5xMSFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTEyMDQxNjE1MzhaFw0yNTEyMDgwMzQ2MzhaMDMxMTAvBgNV BAMTKDc5MDIxQTVEM0ZBNDVCNEUyOThGMDBFQkIwQURDMTBFRDhBQTdDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9Sklqi8zTQCtip5LUGgbtTEu d2qtQJLYaMTi9s3HJO9grRa5yRXGJ5hI8hsL1obAdDRYFGHt3fTsHedf9V2B03bq lJRppGw9fcHFXfFpgulFq9xCQN/hTQob3p9SpccbwYotxXlewdg2bNeJHU3IRHeX Eesrs2WJmka7BOh41nrZwQt6Qlaen3B5qQPdz1LN5HtqcFIqAQdt0gxrLlaWdZbk kfwN9RKJBYxJAg+bg+asL6dcyvGwGzqIOoe6LKzet0dA4LmZfMZGfsW2k6gQAl96 M6bJRyF30TrMmFn43YufbfKrDeziZwSWOqo5cBymhxmEL7Sio6hpihM6Pn2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQIaXT+kW04pjwDrsK3BDtiqfE0wHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbfKlaCmL+DWtH3Z1M7EDNXBLDNnai+2Xuy AffhDSS/MDf1v74O5ORobAdnLNN2twXaxNDuWinYMpVyJ+qom/hgtpedCr7utudo +V2E1UJuigX3Uuz4AQbAUZS27qKes1qjvqr0GnaHAONd8fKXpBCk60YELNFuTkc/ kKzEZ+RFVYUcxUt1+Px5seI8htTftUf+w1gYYlru3CKZYr9RrIwRddpHmqxS/8XE UQnuKX19NZe7iUDShL0zlpnaTRbaYK0877PBBzutc1/FzTnBcwWd/UJhYPyOORdD viJl3w9s4G9K3DwB9ICoK3X6aWhj+qRoPiH5lOJCg3wdHdMsARw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:17 2025 by rpki-client