This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: bDY005PvkW14ZjFn7XkK6WFp/nSDgkcdlrP/YB0ndNU= Subject key identifier: 0E:B3:25:66:5E:BC:2F:8A:6D:5F:49:83:49:55:4C:9A:80:66:20:A2 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 6A36FEC975601B48BEA4E5EA03B4BF3A782A882C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: E3 Signing time: Sun 07 Dec 2025 05:10:52 +0000 Manifest this update: Sun 07 Dec 2025 05:05:52 +0000 Manifest next update: Wed 10 Dec 2025 08:56:52 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: HR9CKhW2GysqN7TnTpOYgeC+VkWiMJHJefWXIolTMRQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:36:fe:c9:75:60:1b:48:be:a4:e5:ea:03:b4:bf:3a:78:2a:88:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Dec 7 05:05:52 2025 GMT Not After : Dec 10 08:56:52 2025 GMT Subject: CN=0EB325665EBC2F8A6D5F498349554C9A806620A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:ad:e7:8c:97:c6:ba:f0:2e:ca:08:66:7e: 74:58:a9:e3:04:2b:51:60:d2:91:2e:ac:da:59:f6: 18:24:41:46:c4:d6:53:41:1b:9d:52:d9:e0:69:4f: c0:9d:0c:80:1b:1d:be:bc:37:e9:7f:7d:05:db:f6: b3:b0:d6:ca:63:55:6c:fe:5a:56:f5:6f:85:1e:1b: 65:4a:2d:26:04:b1:ce:8e:1e:55:d5:7c:24:ba:af: a5:ce:ed:d8:1a:bb:d8:cf:15:6a:bb:d2:2b:f3:4c: 65:e4:82:56:ea:fd:25:a2:e6:ad:c6:06:dc:4b:ff: e5:01:4b:f5:82:11:1c:cd:5f:fd:ff:e0:4f:a8:29: ca:98:16:20:57:32:32:87:e1:e7:5e:07:89:be:c5: 36:31:b7:5d:e3:16:6e:28:74:fe:8a:5f:97:01:81: ce:79:3d:e1:f1:fd:85:89:4c:39:6f:bb:2b:0e:e0: d9:ed:e3:11:38:fe:1b:1c:79:38:ed:36:8b:81:be: 97:56:c9:92:7a:ed:e6:6d:01:19:bc:cc:ed:ee:48: 4c:d2:ba:73:74:2d:b9:ad:3a:20:68:49:c2:11:48: f5:4a:c8:25:5f:20:52:35:f6:20:33:85:71:b7:1d: e4:0d:d8:0d:fc:37:e0:e2:64:20:5f:5f:75:9d:48: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B3:25:66:5E:BC:2F:8A:6D:5F:49:83:49:55:4C:9A:80:66:20:A2 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b1:d2:89:a0:00:27:4c:d4:7f:75:f7:6c:36:65:19:1c:78: 44:f0:44:5e:ea:8f:ae:9c:c2:23:17:a6:39:3e:86:46:d2:26: 57:64:48:32:b7:21:71:84:dd:42:0b:b8:5e:22:93:5a:13:b5: d5:19:2b:d1:7f:51:80:1e:03:63:14:c1:c8:2f:89:58:94:90: c5:0c:b7:2e:89:d4:b9:63:01:2b:8e:56:4a:07:71:1f:ca:41: 5f:04:07:9f:df:e3:1f:05:2a:0b:9f:1b:4b:2a:54:7a:97:f1: a8:1b:a2:e6:a8:05:dc:e7:f1:30:d9:45:57:a0:fd:a4:f8:74: 5f:f0:d6:05:5e:ed:2e:df:57:19:9f:25:96:ba:6f:8c:d1:ef: 22:98:2e:c1:8b:73:e2:e2:3d:30:dc:ad:83:20:1f:59:0a:51: a8:b5:e4:6a:c4:b6:75:60:2e:3e:be:84:3c:c6:73:73:cf:ba: d6:a9:58:81:7b:b0:3f:3a:ed:bc:9b:d9:c2:2f:68:bd:ab:ad: 0b:fc:32:44:26:e5:bd:60:7c:2c:74:15:97:8c:e3:82:62:91: b4:4f:47:ab:5d:3c:48:23:7d:62:44:81:8d:64:ec:ba:db:3a: 56:b3:f7:00:59:1b:be:a4:64:e7:ab:16:c4:fe:88:33:d5:15: 58:d2:91:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajb+yXVgG0i+pOXqA7S/OngqiCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTEyMDcwNTA1NTJaFw0yNTEyMTAwODU2NTJaMDMxMTAvBgNV BAMTKDBFQjMyNTY2NUVCQzJGOEE2RDVGNDk4MzQ5NTU0QzlBODA2NjIwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EK3njJfGuvAuyghmfnRYqeME K1Fg0pEurNpZ9hgkQUbE1lNBG51S2eBpT8CdDIAbHb68N+l/fQXb9rOw1spjVWz+ Wlb1b4UeG2VKLSYEsc6OHlXVfCS6r6XO7dgau9jPFWq70ivzTGXkglbq/SWi5q3G BtxL/+UBS/WCERzNX/3/4E+oKcqYFiBXMjKH4edeB4m+xTYxt13jFm4odP6KX5cB gc55PeHx/YWJTDlvuysO4Nnt4xE4/hsceTjtNouBvpdWyZJ67eZtARm8zO3uSEzS unN0LbmtOiBoScIRSPVKyCVfIFI19iAzhXG3HeQN2A38N+DiZCBfX3WdSDQNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDrMlZl68L4ptX0mDSVVMmoBmIKIwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmx0omgACdM1H9192w2ZRkceETwRF7qj66c wiMXpjk+hkbSJldkSDK3IXGE3UILuF4ik1oTtdUZK9F/UYAeA2MUwcgviViUkMUM ty6J1LljASuOVkoHcR/KQV8EB5/f4x8FKgufG0sqVHqX8agbouaoBdzn8TDZRVeg /aT4dF/w1gVe7S7fVxmfJZa6b4zR7yKYLsGLc+LiPTDcrYMgH1kKUai15GrEtnVg Lj6+hDzGc3PPutapWIF7sD867byb2cIvaL2rrQv8MkQm5b1gfCx0FZeM44JikbRP R6tdPEgjfWJEgY1k7LrbOlaz9wBZG76kZOerFsT+iDPVFVjSkUw= -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:47 2025 by rpki-client