This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft File: DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft (raw, json) Hash identifier: gxvKLmUf4QmYnOGcRxsb0ivqM1SK3cYG/Li4aNFPCHE= Subject key identifier: DF:B6:4C:88:3D:77:3A:D4:F2:A2:65:52:3E:F8:AD:14:82:BF:F4:79 Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C Certificate issuer: /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Certificate serial: 50877A440FD818A6B93CE900E015B16A99CC7C30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft Manifest number: 037A Signing time: Thu 04 Dec 2025 14:21:33 +0000 Manifest this update: Thu 04 Dec 2025 14:16:33 +0000 Manifest next update: Mon 08 Dec 2025 01:10:33 +0000 Files and hashes: 1: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: Un4jBswELs85PKZIKBQlwX0Wi2V6PoeRbOj08OHDeeg=) 2: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: 6aMZ4xs6I3z2wIHDjzXkkCFtdMcUice/aLHdynSzMx8=) 3: DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl (hash: jgL4Ah6y6V2Z49KGxz4kdfGcL7+LCM+Un1QRwBOjrWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:87:7a:44:0f:d8:18:a6:b9:3c:e9:00:e0:15:b1:6a:99:cc:7c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Validity Not Before: Dec 4 14:16:33 2025 GMT Not After : Dec 8 01:10:33 2025 GMT Subject: CN=DFB64C883D773AD4F2A265523EF8AD1482BFF479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:94:bb:26:a4:f1:41:86:23:48:73:c4:28: 28:71:5e:78:7b:ef:5e:7e:27:5c:b4:a3:7f:50:5c: 37:21:9e:cf:a3:05:31:7b:dc:5d:ba:39:68:60:34: 86:e1:92:86:21:d0:34:83:c0:fc:df:7d:66:de:73: 26:de:54:1a:df:84:c8:e9:0d:53:8a:9a:c9:a0:17: 10:53:c7:94:88:95:fa:de:cc:3f:62:b0:67:e0:64: cd:2d:56:0f:da:fe:21:a4:a4:60:f2:c7:26:29:3f: c1:49:f2:a7:b9:29:13:c4:53:e6:35:82:8c:90:82: 84:43:58:aa:a4:0e:e2:05:51:38:b1:d1:0c:33:a1: cc:e8:b5:05:5b:c9:3f:a5:a3:4c:9d:52:f1:c3:da: 0d:0a:5f:ca:f1:28:5d:a4:a3:92:e3:b5:eb:e7:db: 1b:ff:6f:46:15:4b:c1:ea:e1:42:f4:40:1d:7f:fb: d2:73:db:72:33:5e:5b:af:54:62:a0:f4:f6:5f:3c: f9:f8:db:e4:c3:a3:72:0e:91:63:6a:17:da:f6:e6: 3a:b8:bd:43:aa:52:fa:31:69:74:81:53:db:95:32: 28:bd:35:c3:ad:22:b4:eb:a5:bc:c0:5f:50:b7:27: f1:b7:65:cb:52:0e:e9:41:c0:00:9b:d0:31:67:72: d0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B6:4C:88:3D:77:3A:D4:F2:A2:65:52:3E:F8:AD:14:82:BF:F4:79 X509v3 Authority Key Identifier: keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ff:68:d9:0f:66:91:81:b6:e6:4e:a0:9e:f3:08:43:ee:02: ab:3f:96:70:82:46:4f:41:14:da:c1:5d:44:41:fc:89:5f:fe: c4:d8:72:4a:d0:0d:41:3e:c9:7e:71:82:f4:80:21:32:ac:da: a8:ca:7c:61:3c:c2:a0:51:e1:d7:9f:9a:7c:30:07:47:0d:10: 4f:7c:73:59:3e:39:6e:d1:62:a2:b0:8d:8c:ab:a2:75:14:32: 9b:bc:cf:ae:ea:80:a4:d1:e4:b8:d9:2c:c9:9c:7d:cf:70:68: 04:7d:46:cc:da:e1:47:f5:65:77:73:55:71:0b:60:e0:ac:ee: 58:1e:ed:20:7a:82:5c:67:17:ea:fc:c8:bf:d7:c2:c0:18:75: 84:f4:7e:70:d6:80:ca:55:34:a3:e8:91:91:82:7d:df:5b:f4: 34:d5:26:21:e9:a0:64:02:0d:a8:7f:40:ca:e6:37:fa:66:86: e2:cd:0f:81:60:98:a6:9f:bf:ef:da:2d:94:e7:83:fe:d5:25: 6e:53:a7:28:6f:70:bd:50:93:23:e0:6e:74:be:36:25:32:91: 60:0d:ab:5d:31:bb:cb:32:a2:31:05:13:35:2e:08:74:98:4e: 95:f2:cd:ce:86:fc:7d:56:58:f3:71:49:8b:70:71:45:dc:e4: 0a:31:c2:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUId6RA/YGKa5POkA4BWxapnMfDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0ND MUY1MzA2QzAeFw0yNTEyMDQxNDE2MzNaFw0yNTEyMDgwMTEwMzNaMDMxMTAvBgNV BAMTKERGQjY0Qzg4M0Q3NzNBRDRGMkEyNjU1MjNFRjhBRDE0ODJCRkY0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIO5S7JqTxQYYjSHPEKChxXnh7 715+J1y0o39QXDchns+jBTF73F26OWhgNIbhkoYh0DSDwPzffWbecybeVBrfhMjp DVOKmsmgFxBTx5SIlfrezD9isGfgZM0tVg/a/iGkpGDyxyYpP8FJ8qe5KRPEU+Y1 goyQgoRDWKqkDuIFUTix0QwzoczotQVbyT+lo0ydUvHD2g0KX8rxKF2ko5Ljtevn 2xv/b0YVS8Hq4UL0QB1/+9Jz23IzXluvVGKg9PZfPPn42+TDo3IOkWNqF9r25jq4 vUOqUvoxaXSBU9uVMii9NcOtIrTrpbzAX1C3J/G3ZctSDulBwACb0DFnctC/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU37ZMiD13OtTyomVSPvitFIK/9HkwHwYDVR0j BBgwFoAU364RQY8hdaV9Adj4CmFJfMH1MGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODU1ZjQ1MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERkFFMTE0MThG MjE3NUE1N0QwMUQ4RjgwQTYxNDk3Q0MxRjUzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0NDMUY1 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5 N0NDMUY1MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFP/aNkPZpGBtuZOoJ7zCEPuAqs/lnCCRk9B FNrBXURB/Ilf/sTYckrQDUE+yX5xgvSAITKs2qjKfGE8wqBR4defmnwwB0cNEE98 c1k+OW7RYqKwjYyronUUMpu8z67qgKTR5LjZLMmcfc9waAR9Rsza4Uf1ZXdzVXEL YOCs7lge7SB6glxnF+r8yL/XwsAYdYT0fnDWgMpVNKPokZGCfd9b9DTVJiHpoGQC Dah/QMrmN/pmhuLND4FgmKafv+/aLZTng/7VJW5TpyhvcL1QkyPgbnS+NiUykWAN q10xu8syojEFEzUuCHSYTpXyzc6G/H1WWPNxSYtwcUXc5Aoxwk0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:52 2025 by rpki-client