This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: xcWhiVRBybIict+ezX0UnlK+ACDazeMz6/vRaDPC6ek= Subject key identifier: 22:EA:1C:89:9F:AD:81:57:94:FE:69:FE:96:9F:8D:65:40:A8:58:37 Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 54F08A9D8ACC0BB68B2BE09DAFFEA553723E44DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 022C Signing time: Sat 06 Dec 2025 14:12:21 +0000 Manifest this update: Sat 06 Dec 2025 14:07:21 +0000 Manifest next update: Tue 09 Dec 2025 19:48:21 +0000 Files and hashes: 1: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: mwSeTU3wZbv3Jrb4MmvZEk3ZCKIqhNblgNb6Csl5JRA=) 2: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) 3: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 4: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f0:8a:9d:8a:cc:0b:b6:8b:2b:e0:9d:af:fe:a5:53:72:3e:44:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Dec 6 14:07:21 2025 GMT Not After : Dec 9 19:48:21 2025 GMT Subject: CN=22EA1C899FAD815794FE69FE969F8D6540A85837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3c:84:f9:0b:2f:b3:68:0d:dd:65:97:13:ca: 75:75:89:e3:da:61:ae:66:0c:e5:89:20:75:a4:88: c9:ce:0e:ae:96:c8:17:fc:51:4e:84:de:d1:6d:44: 7b:e5:c3:71:94:b3:95:0b:74:f3:9f:50:e9:b6:c9: d3:91:71:c0:a5:04:65:d5:2e:18:ad:35:0b:8c:1d: 00:b5:4b:9f:91:26:a7:ee:96:a4:2d:ad:fc:36:a1: 94:55:d6:3d:f0:ca:9a:10:46:f8:e1:34:8d:49:de: a3:10:51:fb:b6:f5:af:5a:43:10:17:e5:a3:19:38: 69:fe:37:5b:e0:57:e1:22:20:83:93:0a:46:9e:cd: 89:4e:38:fa:06:fc:5a:23:49:cd:c3:28:fb:cd:08: 28:e2:0c:a4:ce:0b:1c:41:9b:8a:ae:73:17:65:a3: 7f:4e:87:1e:a6:89:0e:2b:1d:86:0c:d2:fd:c8:7a: a3:21:73:7b:e9:5d:a1:7a:8c:45:7c:da:1b:81:c9: 3f:cb:c4:28:34:2b:05:7b:f9:fd:ab:0b:6f:d9:99: cf:c4:ef:c1:a4:82:27:34:dc:20:43:34:84:fc:a1: 39:a1:2b:3e:5b:55:10:ed:3a:11:8b:54:4b:3b:12: 87:62:e2:4a:75:40:12:bb:9c:59:75:bd:52:3f:57: 1c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EA:1C:89:9F:AD:81:57:94:FE:69:FE:96:9F:8D:65:40:A8:58:37 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:71:45:cf:27:6e:5f:d9:75:4f:dd:ab:e4:cc:68:63:d1:28: e1:f3:d9:19:d7:99:f7:34:0e:6f:d1:a7:d6:bb:13:08:13:7e: a8:67:6c:ac:f6:a5:3d:77:7a:0c:be:f3:29:b2:cb:14:4a:46: 55:53:fe:79:70:b2:88:e4:84:ed:38:ab:f8:a7:2b:d2:87:5e: 76:cd:75:3a:cc:7e:6b:6e:15:bd:43:43:c5:70:40:cb:d5:72: 5e:e1:62:2a:92:da:d6:5c:94:83:7a:dd:65:04:a7:07:d6:f6: 57:c3:a7:cf:a2:ed:58:b8:5b:86:d0:09:3d:21:87:a2:ba:83: 37:23:f3:12:58:57:2c:11:fe:12:4f:08:8f:25:08:35:2a:4b: fe:03:6b:86:4e:10:d6:26:45:e7:1c:36:4d:63:c7:fc:cb:e0: 70:15:4e:d2:a1:58:fa:e7:df:0c:98:93:f9:2c:68:aa:ff:bf: b4:6e:92:7b:b7:ba:19:28:ea:ef:d2:23:74:c8:ee:67:f9:5c: ed:c7:ca:3e:eb:b2:09:f7:d2:45:03:bf:6d:ed:cb:66:b3:f4: c7:1e:36:9f:37:a7:fa:87:36:96:94:9e:bd:31:16:39:29:05: fc:1b:23:26:9e:73:4a:6c:4a:58:8d:ca:90:53:3a:0b:fb:dd: d0:ce:fb:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPCKnYrMC7aLK+Cdr/6lU3I+RN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTEyMDYxNDA3MjFaFw0yNTEyMDkxOTQ4MjFaMDMxMTAvBgNV BAMTKDIyRUExQzg5OUZBRDgxNTc5NEZFNjlGRTk2OUY4RDY1NDBBODU4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPIT5Cy+zaA3dZZcTynV1iePa Ya5mDOWJIHWkiMnODq6WyBf8UU6E3tFtRHvlw3GUs5ULdPOfUOm2ydORccClBGXV LhitNQuMHQC1S5+RJqfulqQtrfw2oZRV1j3wypoQRvjhNI1J3qMQUfu29a9aQxAX 5aMZOGn+N1vgV+EiIIOTCkaezYlOOPoG/FojSc3DKPvNCCjiDKTOCxxBm4qucxdl o39Ohx6miQ4rHYYM0v3IeqMhc3vpXaF6jEV82huByT/LxCg0KwV7+f2rC2/Zmc/E 78Gkgic03CBDNIT8oTmhKz5bVRDtOhGLVEs7Eodi4kp1QBK7nFl1vVI/VxzfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIuociZ+tgVeU/mn+lp+NZUCoWDcwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlxRc8nbl/ZdU/dq+TMaGPRKOHz2RnXmfc0 Dm/Rp9a7EwgTfqhnbKz2pT13egy+8ymyyxRKRlVT/nlwsojkhO04q/inK9KHXnbN dTrMfmtuFb1DQ8VwQMvVcl7hYiqS2tZclIN63WUEpwfW9lfDp8+i7Vi4W4bQCT0h h6K6gzcj8xJYVywR/hJPCI8lCDUqS/4Da4ZOENYmReccNk1jx/zL4HAVTtKhWPrn 3wyYk/ksaKr/v7Ruknu3uhko6u/SI3TI7mf5XO3Hyj7rsgn30kUDv23ty2az9Mce Np83p/qHNpaUnr0xFjkpBfwbIyaec0psSliNypBTOgv73dDO+5o= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:33 2025 by rpki-client