This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: ieWeJHC0S/clxG/Qi/7gQ0VCAEQKv5yRRuHfhnpsA/A= Subject key identifier: 54:E1:2B:AC:B3:51:DC:B0:29:D8:56:9D:27:06:8B:62:C4:96:49:A3 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 56A0DBF27A9EC841ED4C7489508D51E2AF4CF45C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 0292 Signing time: Sat 06 Dec 2025 12:31:10 +0000 Manifest this update: Sat 06 Dec 2025 12:26:10 +0000 Manifest next update: Tue 09 Dec 2025 18:00:10 +0000 Files and hashes: 1: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: hbds+8lLKRuQuv6Kp6835+9M8RZzt/kdkEojuHhSNJo=) 2: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PhBm6FHQzLYkuyoWbZnBV9HiHTGNLsKA9LefOpfbYek=) 3: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: 5tgjuzU09jqsB8+Ds22MwULKYbCeu3hfy4yQgPpxaYw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:a0:db:f2:7a:9e:c8:41:ed:4c:74:89:50:8d:51:e2:af:4c:f4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Dec 6 12:26:10 2025 GMT Not After : Dec 9 18:00:10 2025 GMT Subject: CN=54E12BACB351DCB029D8569D27068B62C49649A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:4f:df:bc:28:14:4a:8d:c3:e4:22:c1:4f: d7:4c:60:f6:6f:d5:31:6a:76:0e:6e:27:d0:90:c9: 82:ba:f4:4f:d2:32:76:1d:7c:f6:6f:de:0f:4e:3b: 66:03:da:cf:7a:07:87:f2:31:e8:a0:de:d7:7d:21: f6:08:16:9f:a9:a8:40:eb:9c:88:d2:86:a7:94:e8: f8:01:17:39:7f:0f:c4:a9:31:79:5a:05:63:79:ce: d7:d2:54:fd:ac:d1:59:96:f3:96:90:5f:ad:45:c6: 8e:75:54:01:81:2c:02:8c:f2:cf:db:04:e8:ef:41: 71:cf:71:00:35:a7:3c:41:c8:8d:3b:56:a0:78:44: c3:3a:41:69:6d:e3:3e:b4:e8:08:3c:53:7e:f7:7c: 7e:ad:02:55:a9:e8:af:58:5f:1b:eb:1d:eb:72:a2: d9:ac:dd:20:89:6a:dc:c8:94:ab:de:34:ea:d7:d7: 3d:a0:0e:be:cf:5e:12:2f:d4:92:76:e6:2d:08:c7: 8f:63:29:92:e0:26:68:bb:ba:36:94:5f:5a:3c:93: 01:68:fe:6d:36:2c:e2:96:8d:a3:c8:5d:d6:2f:72: 3e:11:0e:31:5b:5c:bb:04:60:19:b6:22:13:a0:5d: e4:da:d1:c3:77:56:a6:bc:d3:65:aa:31:e7:94:3d: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E1:2B:AC:B3:51:DC:B0:29:D8:56:9D:27:06:8B:62:C4:96:49:A3 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0a:2e:8d:43:82:05:d0:ad:88:0b:59:8f:7e:21:b7:56:66: 9d:79:ee:81:c2:79:e0:65:e2:1e:18:10:ee:f4:17:7b:fe:63: cc:9c:c7:ab:6d:34:45:53:41:23:0a:06:9e:41:36:bb:20:aa: 33:53:e3:27:b5:96:8f:9e:5b:7d:29:f7:c5:d5:65:fe:bf:47: 34:18:32:20:1e:81:8e:67:2d:14:70:14:3c:de:80:48:30:ff: a8:62:5d:59:ba:13:ef:97:e4:bb:e3:8f:87:52:65:1b:fb:11: a0:fc:5a:aa:00:78:a5:0d:7b:63:7c:ca:77:24:8a:e3:71:e1: 41:a0:1a:5e:1a:da:d5:da:13:1a:be:64:2f:3d:e1:90:bb:43: 52:55:61:54:a2:e4:29:d3:62:35:9d:e7:28:a4:b5:de:81:99: ab:82:bf:d1:91:30:ab:0b:5a:0c:b4:42:8a:72:d0:48:e7:74: 84:ab:9c:d2:92:1a:f7:af:01:7c:07:a8:5d:3e:50:35:e1:e4: 4a:5f:50:c6:d9:41:a4:63:f7:a6:ac:87:06:98:78:25:ce:0a: 4e:be:a6:f4:39:bd:1b:18:29:43:c1:73:65:e6:f6:3c:0d:b4: f4:3d:f2:1f:8f:ee:c5:a7:eb:df:33:5d:94:3b:53:54:d2:19: 0b:69:d2:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVqDb8nqeyEHtTHSJUI1R4q9M9FwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTEyMDYxMjI2MTBaFw0yNTEyMDkxODAwMTBaMDMxMTAvBgNV BAMTKDU0RTEyQkFDQjM1MURDQjAyOUQ4NTY5RDI3MDY4QjYyQzQ5NjQ5QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4U/fvCgUSo3D5CLBT9dMYPZv 1TFqdg5uJ9CQyYK69E/SMnYdfPZv3g9OO2YD2s96B4fyMeig3td9IfYIFp+pqEDr nIjShqeU6PgBFzl/D8SpMXlaBWN5ztfSVP2s0VmW85aQX61Fxo51VAGBLAKM8s/b BOjvQXHPcQA1pzxByI07VqB4RMM6QWlt4z606Ag8U373fH6tAlWp6K9YXxvrHety otms3SCJatzIlKveNOrX1z2gDr7PXhIv1JJ25i0Ix49jKZLgJmi7ujaUX1o8kwFo /m02LOKWjaPIXdYvcj4RDjFbXLsEYBm2IhOgXeTa0cN3Vqa802WqMeeUPePTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVOErrLNR3LAp2FadJwaLYsSWSaMwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0KLo1DggXQrYgLWY9+IbdWZp157oHCeeBl 4h4YEO70F3v+Y8ycx6ttNEVTQSMKBp5BNrsgqjNT4ye1lo+eW30p98XVZf6/RzQY MiAegY5nLRRwFDzegEgw/6hiXVm6E++X5Lvjj4dSZRv7EaD8WqoAeKUNe2N8ynck iuNx4UGgGl4a2tXaExq+ZC894ZC7Q1JVYVSi5CnTYjWd5yiktd6BmauCv9GRMKsL Wgy0Qopy0EjndISrnNKSGvevAXwHqF0+UDXh5EpfUMbZQaRj96ashwaYeCXOCk6+ pvQ5vRsYKUPBc2Xm9jwNtPQ98h+P7sWn698zXZQ7U1TSGQtp0q4= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:15 2025 by rpki-client