This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: n5abUH5ts77OzFRg9H0huiZx9+fsifvFc/2z3DfzECI= Subject key identifier: 84:C0:C9:48:D2:07:BC:79:2E:87:D7:7E:53:8C:63:5C:F0:16:31:37 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 773B23394B54937531E8D9F5B3C119AC1FEE270F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 0534 Signing time: Tue 16 Dec 2025 17:11:44 +0000 Manifest this update: Tue 16 Dec 2025 17:06:44 +0000 Manifest next update: Fri 19 Dec 2025 17:58:44 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 3: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 4: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: RsZT648EzlsSVilM9LNGKGdtJM/fxPblqEQxGWNyGjE=) 5: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 17:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:3b:23:39:4b:54:93:75:31:e8:d9:f5:b3:c1:19:ac:1f:ee:27:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Dec 16 17:06:44 2025 GMT Not After : Dec 19 17:58:44 2025 GMT Subject: CN=84C0C948D207BC792E87D77E538C635CF0163137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:a9:d0:56:77:2b:4f:2f:4f:29:76:8c:48: 24:3a:e0:21:44:47:fc:48:46:4b:90:c5:f2:53:0d: e5:e6:cd:7b:07:66:07:b0:9d:f3:9d:52:81:ac:2b: 4c:aa:45:6e:23:da:dc:2f:36:cf:af:50:0b:81:e9: 6e:04:04:19:85:e4:1d:e3:48:01:31:45:ae:ba:91: 3e:d9:f6:6e:bb:0c:8f:a5:61:a6:dc:0b:7e:12:53: 67:c9:6e:d4:c1:ef:db:a4:da:4e:85:78:e2:8b:e8: a6:78:43:76:39:78:ec:e5:fb:6d:37:5b:14:56:07: 02:67:62:3b:d9:44:3b:21:d5:f6:01:1d:82:87:75: c0:90:dd:88:bb:17:e8:0d:c2:c3:44:1c:08:29:d4: df:dd:2d:bf:05:6a:37:0a:3b:90:35:d7:5a:96:21: d6:36:a3:30:1e:91:cc:c3:2b:39:fc:d5:a1:92:8c: 25:10:b5:a0:a0:5a:cd:81:0d:2e:01:ee:c0:2c:b2: a0:27:46:ae:ec:48:a0:e9:ab:d2:d1:ae:f9:97:3f: 18:8d:c5:d4:66:f7:9f:8f:af:53:85:6f:76:24:51: 07:0b:de:52:d7:66:90:08:42:e1:b6:cd:42:07:22: 16:6d:c9:a7:00:2b:31:fa:da:94:7b:79:84:1c:6d: fb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C0:C9:48:D2:07:BC:79:2E:87:D7:7E:53:8C:63:5C:F0:16:31:37 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ba:3f:5b:20:51:ef:14:8e:19:e7:57:74:87:0e:4c:6e:7c: bb:5a:aa:25:3c:40:f8:e4:dd:ff:07:12:d2:e1:72:a8:67:03: a7:ed:a4:e9:0b:1e:90:a7:51:b0:8c:49:ad:e0:32:25:5e:c1: 7f:fb:1d:7c:eb:72:39:5b:fb:25:2e:ca:5f:eb:a3:a7:6b:0d: e2:14:a5:bb:ea:23:92:50:a6:82:e2:90:bd:23:29:2e:56:67: 9c:f4:1b:71:61:a7:11:de:35:47:38:52:d3:be:44:bb:f4:85: 98:d1:86:96:10:24:e6:9a:43:6e:e6:9c:7d:af:df:7f:e8:1e: 4a:8a:66:73:63:c4:16:16:fd:b4:13:de:4c:35:09:00:f3:ed: 2e:0c:36:e4:1a:ee:de:24:51:4e:63:f2:c6:02:d7:91:86:6e: a9:28:59:aa:65:d6:63:ed:46:ea:6b:0c:41:9f:20:9b:1d:21: 85:44:53:e9:fd:ee:c2:20:07:a2:8a:ca:83:18:1e:63:61:1b: ea:52:20:2e:fb:0c:af:4f:46:26:6f:44:f3:a5:8b:0a:ab:f0: 5e:5c:09:94:08:1c:10:5e:17:8d:03:c2:5d:09:db:7e:3f:38: b8:54:c7:17:f6:f5:d2:a6:26:80:31:38:fb:33:48:83:84:64: 94:d9:b8:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdzsjOUtUk3Ux6Nn1s8EZrB/uJw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTEyMTYxNzA2NDRaFw0yNTEyMTkxNzU4NDRaMDMxMTAvBgNV BAMTKDg0QzBDOTQ4RDIwN0JDNzkyRTg3RDc3RTUzOEM2MzVDRjAxNjMxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1manQVncrTy9PKXaMSCQ64CFE R/xIRkuQxfJTDeXmzXsHZgewnfOdUoGsK0yqRW4j2twvNs+vUAuB6W4EBBmF5B3j SAExRa66kT7Z9m67DI+lYabcC34SU2fJbtTB79uk2k6FeOKL6KZ4Q3Y5eOzl+203 WxRWBwJnYjvZRDsh1fYBHYKHdcCQ3Yi7F+gNwsNEHAgp1N/dLb8FajcKO5A111qW IdY2ozAekczDKzn81aGSjCUQtaCgWs2BDS4B7sAssqAnRq7sSKDpq9LRrvmXPxiN xdRm95+Pr1OFb3YkUQcL3lLXZpAIQuG2zUIHIhZtyacAKzH62pR7eYQcbfvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhMDJSNIHvHkuh9d+U4xjXPAWMTcwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACK6P1sgUe8UjhnnV3SHDkxufLtaqiU8QPjk 3f8HEtLhcqhnA6ftpOkLHpCnUbCMSa3gMiVewX/7HXzrcjlb+yUuyl/ro6drDeIU pbvqI5JQpoLikL0jKS5WZ5z0G3FhpxHeNUc4UtO+RLv0hZjRhpYQJOaaQ27mnH2v 33/oHkqKZnNjxBYW/bQT3kw1CQDz7S4MNuQa7t4kUU5j8sYC15GGbqkoWapl1mPt RuprDEGfIJsdIYVEU+n97sIgB6KKyoMYHmNhG+pSIC77DK9PRiZvRPOliwqr8F5c CZQIHBBeF40Dwl0J234/OLhUxxf29dKmJoAxOPszSIOEZJTZuHA= -----END CERTIFICATE-----Generated at Wed Dec 17 19:22:23 2025 by rpki-client