This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft File: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft (raw, json) Hash identifier: WQGIJnJAEUUiSKKXrPBZOhyQu90pPWyNc1IA9AnmFak= Subject key identifier: 8F:38:BD:3F:00:E1:72:BE:06:E5:E7:27:39:27:30:F9:26:3E:47:45 Authority key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F Certificate issuer: /CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Certificate serial: 4673FCEF9D27D116F9030EC730392F16D35A9C53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft Manifest number: E2 Signing time: Sat 06 Dec 2025 10:20:52 +0000 Manifest this update: Sat 06 Dec 2025 10:15:52 +0000 Manifest next update: Tue 09 Dec 2025 14:45:52 +0000 Files and hashes: 1: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: ddnEDu4ujzH2U+wrCuFYzTTZ0z5ZKNzjOcLkosVrgEM=) 2: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl (hash: MDE5Nd6fMXSFEOtanQxrFmh6szoh+BvX4NVMgxl8BTU=) 3: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: OBAMIR6o88w8OfvjKc+CvsxLTJpjUECRIBtfHRF/vnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:73:fc:ef:9d:27:d1:16:f9:03:0e:c7:30:39:2f:16:d3:5a:9c:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Validity Not Before: Dec 6 10:15:52 2025 GMT Not After : Dec 9 14:45:52 2025 GMT Subject: CN=8F38BD3F00E172BE06E5E727392730F9263E4745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:0a:2c:62:9a:51:a9:11:1a:4b:9b:2e:07: 99:75:d4:eb:18:d0:62:70:40:51:51:a3:7f:d0:a8: eb:01:bc:71:1e:7b:d8:a5:34:35:04:7d:24:14:1a: 7b:f5:69:99:74:2b:38:f6:1f:8b:11:f0:e3:a9:70: 28:84:bb:df:34:15:7b:88:18:1f:c4:fa:4b:e9:87: d7:f2:72:25:9a:0f:30:1c:f6:a4:c9:dc:ec:ff:e0: cb:30:cc:19:ec:2b:fe:d7:8d:c7:2a:98:74:76:71: c7:05:95:98:81:67:9c:2f:e4:37:4a:ce:a4:8a:7b: 2d:fc:0b:d5:b8:1f:a3:11:d7:8d:56:32:9f:1e:91: c9:54:75:c8:c8:2f:a0:c9:6f:a3:5f:f6:f1:49:35: dc:56:4f:2f:f8:73:d3:3c:90:f7:48:ba:7f:b7:08: f6:14:7c:7d:1e:3f:58:7e:c1:21:70:55:c7:5c:90: e0:c7:83:8b:4f:2a:45:bf:ac:51:ea:0e:03:b8:a3: 30:1b:78:9b:a8:cb:70:d3:2a:36:7a:3d:0c:f0:eb: 66:da:00:87:c3:46:64:91:4b:f8:ad:e9:c8:f2:9c: 9d:0c:64:97:f8:12:e8:9e:10:2e:00:48:27:f8:e1: ed:a8:1a:4e:b2:e3:68:2f:40:63:10:f7:7e:61:3f: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:38:BD:3F:00:E1:72:BE:06:E5:E7:27:39:27:30:F9:26:3E:47:45 X509v3 Authority Key Identifier: keyid:DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:27:4d:d7:f0:57:e8:27:f2:5e:9d:72:5f:e6:69:6b:59:3b: 7e:44:f8:3f:0f:21:b5:08:c1:fb:89:e9:e1:67:6a:13:62:0f: 8e:7c:6d:27:7e:10:33:9d:76:4d:81:4a:03:e1:ba:f1:5a:ce: d4:62:cc:c7:77:81:5b:6c:61:27:ac:3f:b1:fd:47:66:a0:0f: 35:5c:83:a8:a8:b0:7d:17:d1:37:0f:62:00:4f:61:aa:25:64: 07:70:21:3c:dc:fb:23:21:c9:3e:f5:76:3e:a3:08:a3:0f:2b: d3:3b:41:aa:fb:21:41:f9:20:19:13:42:62:59:26:9a:65:09: dd:e5:d3:df:d0:35:dc:ac:b5:5c:5d:16:d2:d5:0f:9b:3c:be: ca:2e:fc:23:ab:1c:52:6a:65:93:8c:8e:46:da:22:6f:28:bd: e0:e8:cd:10:f0:f1:08:8b:47:b9:ea:81:7c:e9:b4:d5:4b:55: 0a:02:b3:89:4b:14:d0:db:6a:d6:8a:a5:41:7e:89:89:eb:2a: 45:97:2a:c6:9e:78:f8:c9:d5:4b:3a:84:0c:bc:3b:35:3f:86: 60:d1:27:d0:55:59:d3:54:d9:c5:dc:a4:56:a7:2a:c5:9a:76: 71:ab:e4:b2:14:8f:1a:cd:a8:a2:95:a9:77:aa:ca:62:56:b8: 0a:aa:1c:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURnP8750n0Rb5Aw7HMDkvFtNanFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5 MkQ1REY2RjAeFw0yNTEyMDYxMDE1NTJaFw0yNTEyMDkxNDQ1NTJaMDMxMTAvBgNV BAMTKDhGMzhCRDNGMDBFMTcyQkUwNkU1RTcyNzM5MjczMEY5MjYzRTQ3NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFBQosYppRqREaS5suB5l11OsY 0GJwQFFRo3/QqOsBvHEee9ilNDUEfSQUGnv1aZl0Kzj2H4sR8OOpcCiEu980FXuI GB/E+kvph9fyciWaDzAc9qTJ3Oz/4MswzBnsK/7XjccqmHR2cccFlZiBZ5wv5DdK zqSKey38C9W4H6MR141WMp8ekclUdcjIL6DJb6Nf9vFJNdxWTy/4c9M8kPdIun+3 CPYUfH0eP1h+wSFwVcdckODHg4tPKkW/rFHqDgO4ozAbeJuoy3DTKjZ6PQzw62ba AIfDRmSRS/it6cjynJ0MZJf4EuieEC4ASCf44e2oGk6y42gvQGMQ935hP7aFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjzi9PwDhcr4G5ecnOScw+SY+R0UwHwYDVR0j BBgwFoAU25tNEnnmxksM3fWT+wBrOZLV328wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTlhYmIxYS1kNmMwLTQ1NGYtODcwYS04YmVlZGQ4MWZjZDIvMC9EQjlCNEQxMjc5 RTZDNjRCMENEREY1OTNGQjAwNkIzOTkyRDVERjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5MkQ1 REY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZC Mzk5MkQ1REY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALonTdfwV+gn8l6dcl/maWtZO35E+D8PIbUI wfuJ6eFnahNiD458bSd+EDOddk2BSgPhuvFaztRizMd3gVtsYSesP7H9R2agDzVc g6iosH0X0TcPYgBPYaolZAdwITzc+yMhyT71dj6jCKMPK9M7Qar7IUH5IBkTQmJZ JpplCd3l09/QNdystVxdFtLVD5s8vsou/COrHFJqZZOMjkbaIm8oveDozRDw8QiL R7nqgXzptNVLVQoCs4lLFNDbataKpUF+iYnrKkWXKsaeePjJ1Us6hAy8OzU/hmDR J9BVWdNU2cXcpFanKsWadnGr5LIUjxrNqKKVqXeqymJWuAqqHGw= -----END CERTIFICATE-----Generated at Sun Dec 7 03:12:32 2025 by rpki-client