This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: lNGIEIrQz33KDY/qfFZNJAPqGx28/pw8WKt2hooT6bE= Subject key identifier: 7B:D0:EE:8E:20:EE:68:8D:C0:EA:B7:8E:81:A0:66:CA:4B:CB:DC:39 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 18EDEFBB539613FA6462ECCEC10C5C154CD44BDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 052F Signing time: Fri 05 Dec 2025 08:01:44 +0000 Manifest this update: Fri 05 Dec 2025 07:56:44 +0000 Manifest next update: Mon 08 Dec 2025 18:42:44 +0000 Files and hashes: 1: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: gOb/LUE+41Rsw1B9whYYxTVxgIDuLjHU7R8MrIypI2M=) 2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 3: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 4: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 5: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ed:ef:bb:53:96:13:fa:64:62:ec:ce:c1:0c:5c:15:4c:d4:4b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Dec 5 07:56:44 2025 GMT Not After : Dec 8 18:42:44 2025 GMT Subject: CN=7BD0EE8E20EE688DC0EAB78E81A066CA4BCBDC39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:36:08:aa:15:86:0f:d9:27:25:cd:ff:e7:7c: 5a:1b:c0:70:03:5e:ee:90:9a:0e:fb:1f:35:c8:bc: 5a:64:18:ce:43:25:76:36:86:53:5d:63:97:2d:6f: bc:d9:6d:ab:ee:89:f8:c7:5c:48:1c:dc:1b:47:49: 19:00:be:c5:fd:d8:54:f3:d4:19:1c:84:b0:e4:12: cb:c2:b3:26:ca:ab:72:13:28:95:cc:70:8c:c3:b8: 74:9a:41:61:7e:04:7a:8a:5e:eb:d2:a1:23:66:cb: 02:3d:a6:d3:31:9f:38:fa:c4:c5:0c:1f:a5:46:c9: 6c:a6:d1:3a:d7:25:46:f3:96:33:7f:e6:37:c4:97: 61:f9:8a:57:47:2f:b2:c3:a1:27:49:ac:64:c5:e0: b7:29:1e:68:1d:70:cf:13:df:d1:b0:00:02:7e:21: 88:08:56:b2:f8:09:3d:5b:3c:66:14:b8:02:d9:e2: 8a:65:fe:31:00:ac:c3:43:72:d3:bd:06:ef:da:58: 29:e6:05:30:98:f7:ad:bf:01:d1:24:ce:1c:26:c1: 38:46:e1:81:7d:2f:3d:d6:7a:fd:82:3f:b6:6c:2d: d3:24:fd:a7:9b:9e:3b:51:10:45:06:c6:bb:9a:6c: 56:f0:d3:cc:c8:13:7f:4c:c4:43:28:ff:5e:1b:49: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D0:EE:8E:20:EE:68:8D:C0:EA:B7:8E:81:A0:66:CA:4B:CB:DC:39 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a6:b5:cd:a9:0d:84:e9:84:91:8d:c0:57:c7:77:10:33:02: d1:ed:1c:88:0b:c0:10:e9:ff:da:07:81:0f:d6:7b:d6:34:3a: 07:2b:54:11:b0:b8:8b:a9:46:60:15:78:f2:fb:48:17:74:f7: 31:c1:72:43:cc:a7:cb:02:7b:97:50:fd:8c:eb:53:a3:cb:0a: c0:7f:5a:52:a3:87:df:ab:86:88:6d:6f:99:93:80:18:4b:29: cb:03:8b:d5:9d:06:57:f2:4f:22:8f:bd:30:5c:ba:43:9a:38: ed:04:6e:bb:17:a9:1e:25:91:87:81:35:f9:99:31:95:b7:68: 31:d5:d9:bf:1f:2c:61:f9:ed:7f:2e:de:71:18:3b:ef:ef:b9: b5:99:3e:21:e6:e0:f9:4b:81:f4:fe:31:82:02:a6:e6:eb:8f: 8c:e8:34:40:d6:7a:85:ba:60:7f:4b:25:35:d4:74:48:b1:61: c7:3a:31:6a:4a:f8:2a:ab:8f:7d:fa:60:1d:35:c6:9c:ec:ca: 56:2a:13:fd:c8:60:d6:82:70:3e:8c:70:f5:4a:b6:5c:8f:d9: c5:2d:d0:5e:a0:1b:49:f6:dd:b2:69:a1:54:c7:57:03:5a:a0: e2:6a:dd:61:70:c3:dc:a7:4e:5c:d9:2c:01:98:9b:05:d4:73: 49:02:d6:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGO3vu1OWE/pkYuzOwQxcFUzUS94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTEyMDUwNzU2NDRaFw0yNTEyMDgxODQyNDRaMDMxMTAvBgNV BAMTKDdCRDBFRThFMjBFRTY4OERDMEVBQjc4RTgxQTA2NkNBNEJDQkRDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqNgiqFYYP2Sclzf/nfFobwHAD Xu6Qmg77HzXIvFpkGM5DJXY2hlNdY5ctb7zZbavuifjHXEgc3BtHSRkAvsX92FTz 1BkchLDkEsvCsybKq3ITKJXMcIzDuHSaQWF+BHqKXuvSoSNmywI9ptMxnzj6xMUM H6VGyWym0TrXJUbzljN/5jfEl2H5ildHL7LDoSdJrGTF4LcpHmgdcM8T39GwAAJ+ IYgIVrL4CT1bPGYUuALZ4opl/jEArMNDctO9Bu/aWCnmBTCY962/AdEkzhwmwThG 4YF9Lz3Wev2CP7ZsLdMk/aebnjtREEUGxruabFbw08zIE39MxEMo/14bSbFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe9DujiDuaI3A6reOgaBmykvL3DkwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCmtc2pDYTphJGNwFfHdxAzAtHtHIgLwBDp /9oHgQ/We9Y0OgcrVBGwuIupRmAVePL7SBd09zHBckPMp8sCe5dQ/YzrU6PLCsB/ WlKjh9+rhohtb5mTgBhLKcsDi9WdBlfyTyKPvTBcukOaOO0EbrsXqR4lkYeBNfmZ MZW3aDHV2b8fLGH57X8u3nEYO+/vubWZPiHm4PlLgfT+MYICpubrj4zoNEDWeoW6 YH9LJTXUdEixYcc6MWpK+Cqrj336YB01xpzsylYqE/3IYNaCcD6McPVKtlyP2cUt 0F6gG0n23bJpoVTHVwNaoOJq3WFww9ynTlzZLAGYmwXUc0kC1pI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:46 2025 by rpki-client