This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: DZKVODtgLTnbcIUeSed7pav1A6Dp2yPvnHC1XCxZ6js= Subject key identifier: CD:D8:D5:70:DA:5B:F4:E5:27:BA:A4:91:85:1A:F7:A0:8D:35:30:6D Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 01A34255C0F933EE1CD54B9CDBE48F3877F2DB89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 01E5 Signing time: Fri 05 Dec 2025 08:31:31 +0000 Manifest this update: Fri 05 Dec 2025 08:26:31 +0000 Manifest next update: Mon 08 Dec 2025 09:33:31 +0000 Files and hashes: 1: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: WbgcAemfUr/WaWV4NJzSBFx+o8EoJ/udbhhfWwBxR6I=) 2: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: wXTznUQArBkuy9DW6FChuphpm7A6SXPjvzN1WzF38y4=) 3: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: zbB22SPSGIzSNxMNiCFVZyT4F2lSinkzc2FDuPh8hBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a3:42:55:c0:f9:33:ee:1c:d5:4b:9c:db:e4:8f:38:77:f2:db:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Dec 5 08:26:31 2025 GMT Not After : Dec 8 09:33:31 2025 GMT Subject: CN=CDD8D570DA5BF4E527BAA491851AF7A08D35306D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:96:fb:79:71:ab:42:28:e0:24:e4:de:fe: cf:8a:8c:b3:af:d1:e6:3d:c1:35:3b:33:78:66:fd: 30:b7:86:f5:5b:d6:8d:8d:29:b7:11:ce:c8:9f:06: 01:f4:50:2a:44:b3:f4:44:22:03:cf:d8:2f:9f:07: 2f:a1:3b:4d:51:77:d0:24:91:3a:29:15:d3:4b:30: aa:07:cb:74:9a:29:61:0e:3e:0d:71:27:f2:4d:63: f1:96:88:e3:6c:a4:ed:af:02:99:c9:1f:55:d6:1c: 26:26:6a:65:b1:93:53:82:66:b2:6d:9d:98:43:4b: 94:1c:96:c3:89:a9:72:ef:02:88:2a:3c:8d:f5:15: 3b:ee:d1:26:03:e3:89:80:dd:c4:c5:c4:d8:4b:a8: d8:a5:19:0b:41:a2:ca:7b:fe:82:13:dd:3c:5e:34: 68:a0:4d:f7:20:be:7f:7a:09:5f:e8:66:17:41:8e: 4f:3e:c5:2c:0b:d5:21:0b:44:63:f4:47:57:1f:72: fc:71:ea:7b:2e:80:06:20:12:06:d2:98:ad:67:be: ba:36:1e:af:89:7d:cc:21:7d:fe:73:27:2d:4c:2c: 56:c9:c0:36:05:e0:81:9d:69:c0:6f:63:92:13:8c: ca:f2:31:77:bb:5e:d7:48:e5:28:bc:7c:71:63:0a: f3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D8:D5:70:DA:5B:F4:E5:27:BA:A4:91:85:1A:F7:A0:8D:35:30:6D X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ce:3b:1f:f0:f9:96:dd:fe:12:eb:50:9b:cc:27:a3:07:52: ba:d4:f9:38:53:d5:ae:f1:3f:76:9c:cb:5a:43:49:d6:c7:cf: a0:1e:31:f5:16:75:02:09:cc:3d:d8:86:25:fe:79:2f:4c:20: b8:e5:d2:cd:ae:86:4e:5a:82:8a:a0:45:b9:9a:1e:5a:13:2f: 3b:b4:c7:19:c5:05:7d:67:70:3c:b7:e7:84:90:75:71:3d:be: 42:7e:7b:ba:e8:03:21:30:47:2a:88:24:bf:2b:a3:ba:87:a1: f6:3e:02:ce:06:e9:59:97:ad:61:a8:b3:ab:25:97:7f:2f:43: c1:ad:81:57:a9:43:c9:2b:f7:49:14:08:d5:88:69:b6:b5:7b: 6c:08:4a:e7:ad:c2:3e:2d:2a:0d:2e:8d:3e:4a:3a:a5:4a:86: b7:ff:dd:4e:7b:d9:17:ef:d2:93:38:c9:22:0e:96:8f:e6:1b: 2c:18:cf:f5:e4:2c:f6:5d:6a:1c:15:bc:5f:90:55:40:57:a3: de:77:08:8b:16:3a:fb:4d:5c:e4:06:e9:08:5d:c1:0a:6d:fa: da:67:e1:a3:08:39:e7:3a:0e:dc:6d:e2:11:c2:f0:92:6b:e9: 46:0a:65:8c:58:d3:3f:60:bf:58:ab:d4:65:b2:f1:33:17:2e: f7:c6:a4:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaNCVcD5M+4c1Uuc2+SPOHfy24kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNTEyMDUwODI2MzFaFw0yNTEyMDgwOTMzMzFaMDMxMTAvBgNV BAMTKENERDhENTcwREE1QkY0RTUyN0JBQTQ5MTg1MUFGN0EwOEQzNTMwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxf5b7eXGrQijgJOTe/s+KjLOv 0eY9wTU7M3hm/TC3hvVb1o2NKbcRzsifBgH0UCpEs/REIgPP2C+fBy+hO01Rd9Ak kTopFdNLMKoHy3SaKWEOPg1xJ/JNY/GWiONspO2vApnJH1XWHCYmamWxk1OCZrJt nZhDS5QclsOJqXLvAogqPI31FTvu0SYD44mA3cTFxNhLqNilGQtBosp7/oIT3Txe NGigTfcgvn96CV/oZhdBjk8+xSwL1SELRGP0R1cfcvxx6nsugAYgEgbSmK1nvro2 Hq+Jfcwhff5zJy1MLFbJwDYF4IGdacBvY5ITjMryMXe7XtdI5Si8fHFjCvOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzdjVcNpb9OUnuqSRhRr3oI01MG0wHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHOOx/w+Zbd/hLrUJvMJ6MHUrrU+ThT1a7x P3acy1pDSdbHz6AeMfUWdQIJzD3YhiX+eS9MILjl0s2uhk5agoqgRbmaHloTLzu0 xxnFBX1ncDy354SQdXE9vkJ+e7roAyEwRyqIJL8ro7qHofY+As4G6VmXrWGos6sl l38vQ8GtgVepQ8kr90kUCNWIaba1e2wISuetwj4tKg0ujT5KOqVKhrf/3U572Rfv 0pM4ySIOlo/mGywYz/XkLPZdahwVvF+QVUBXo953CIsWOvtNXOQG6QhdwQpt+tpn 4aMIOec6Dtxt4hHC8JJr6UYKZYxY0z9gv1ir1GWy8TMXLvfGpCQ= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:08 2025 by rpki-client