This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: 6TETcn2Rg6h1GthKMEew7cmCU4iRYP+e9hhw+OTs8VA= Subject key identifier: 28:38:7D:2D:BF:F4:A8:68:AE:33:B9:40:5A:47:2B:39:94:C2:71:70 Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 57013BFB53A8CB0ACB6CF83E2D645DFDE10D914B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 052B Signing time: Fri 05 Dec 2025 00:21:49 +0000 Manifest this update: Fri 05 Dec 2025 00:16:49 +0000 Manifest next update: Mon 08 Dec 2025 12:03:49 +0000 Files and hashes: 1: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: LeIArO2ugyFzqhOfzyY49jG0OfnapAFQ/XpIZTbnEek=) 2: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: 7oh7gLosxpigXZ1B5YXMaPZ1h+t8yrojfWYMj50/Mhg=) 3: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: ZqKxEMmHEVfl5YimhyN2/2zo1s284R/NpldqiUu1qdc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:01:3b:fb:53:a8:cb:0a:cb:6c:f8:3e:2d:64:5d:fd:e1:0d:91:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: Dec 5 00:16:49 2025 GMT Not After : Dec 8 12:03:49 2025 GMT Subject: CN=28387D2DBFF4A868AE33B9405A472B3994C27170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:99:45:ee:43:69:c0:43:ae:02:86:fc:f2: 4f:3e:2b:8f:a8:f4:09:44:5c:58:06:a2:75:3d:29: 03:0a:5b:6e:67:76:78:5a:8f:7d:b9:9b:15:b4:84: 4f:fb:f5:c8:9e:46:c9:9c:d0:0b:72:2d:07:63:7d: ef:a4:2b:a5:33:10:9c:5f:0f:33:31:f4:5f:85:b2: 27:7c:5d:56:4f:50:13:61:ba:a6:ca:67:ee:b6:8a: b9:36:70:a4:b8:31:8d:5d:dd:ad:20:d5:83:dc:12: f3:ba:95:15:7b:b7:a0:cc:76:19:6c:33:88:ac:83: 03:37:61:f8:1b:e2:b4:2f:dc:c7:71:63:d2:f5:a8: 08:dd:09:1c:ec:52:08:57:15:df:cf:1b:38:a2:0e: 61:79:61:a2:cc:c4:5b:4b:dd:8d:31:a5:03:53:80: e3:1e:a9:53:4a:f7:40:f1:25:6d:ad:37:68:d2:c3: 6c:4a:a6:7a:d1:97:2c:a0:1b:2b:e9:a9:bd:df:34: 57:a7:13:4a:ce:c8:da:6c:e7:2d:90:28:33:c3:ce: 05:91:93:a7:d7:71:f1:48:0e:65:97:08:72:73:75: 8b:dc:84:e1:ec:21:45:a9:93:2a:67:90:73:69:32: b0:de:34:ac:b9:32:e3:48:a1:2e:fc:89:fb:f7:6d: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:38:7D:2D:BF:F4:A8:68:AE:33:B9:40:5A:47:2B:39:94:C2:71:70 X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:54:6f:5b:ec:cb:ee:e6:c7:cb:56:a3:1c:c5:eb:d5:5d:c4: 1b:06:78:95:31:37:7c:24:bd:95:05:cc:5f:77:f4:99:04:77: a1:45:3e:12:0f:53:c1:69:ee:fd:9d:20:c5:b2:ae:0f:ca:7f: d5:0c:03:2c:cb:ea:79:3f:f1:52:07:65:e8:f8:4b:6c:81:36: 1d:8e:da:57:71:6c:8a:67:8d:33:ce:6c:7a:5c:a2:6b:c3:96: 4b:1a:46:3c:1c:37:24:f5:6f:7f:3a:15:b3:af:79:0b:90:19: 07:d9:04:a3:65:5c:0f:50:e6:29:d8:d3:7b:3f:52:1b:8a:63: cc:08:19:09:b8:de:25:fc:45:9d:b4:4e:3a:43:f3:15:ff:47: 3d:15:63:5e:cf:92:09:ff:ed:f2:c3:51:72:23:bc:83:bd:8c: 62:87:46:50:9a:6b:b4:c1:ba:bd:5d:83:9d:28:01:2a:57:85: 5c:41:67:24:d6:43:26:0b:43:31:46:5c:f8:f5:a8:41:f6:65: 0a:82:e2:bc:e8:cb:e7:82:d2:5c:9c:04:4c:2b:e2:66:27:91: 95:57:55:df:7e:3a:b9:40:b1:ef:89:bb:20:0b:3d:4b:05:86: 1f:a5:92:dc:22:28:66:1e:b8:71:10:67:8d:f6:29:9d:c0:23: da:f1:db:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwE7+1OoywrLbPg+LWRd/eENkUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNTEyMDUwMDE2NDlaFw0yNTEyMDgxMjAzNDlaMDMxMTAvBgNV BAMTKDI4Mzg3RDJEQkZGNEE4NjhBRTMzQjk0MDVBNDcyQjM5OTRDMjcxNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLZlF7kNpwEOuAob88k8+K4+o 9AlEXFgGonU9KQMKW25ndnhaj325mxW0hE/79cieRsmc0AtyLQdjfe+kK6UzEJxf DzMx9F+Fsid8XVZPUBNhuqbKZ+62irk2cKS4MY1d3a0g1YPcEvO6lRV7t6DMdhls M4isgwM3Yfgb4rQv3MdxY9L1qAjdCRzsUghXFd/PGziiDmF5YaLMxFtL3Y0xpQNT gOMeqVNK90DxJW2tN2jSw2xKpnrRlyygGyvpqb3fNFenE0rOyNps5y2QKDPDzgWR k6fXcfFIDmWXCHJzdYvchOHsIUWpkypnkHNpMrDeNKy5MuNIoS78ifv3bW/ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKDh9Lb/0qGiuM7lAWkcrOZTCcXAwHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtUb1vsy+7mx8tWoxzF69VdxBsGeJUxN3wk vZUFzF939JkEd6FFPhIPU8Fp7v2dIMWyrg/Kf9UMAyzL6nk/8VIHZej4S2yBNh2O 2ldxbIpnjTPObHpcomvDlksaRjwcNyT1b386FbOveQuQGQfZBKNlXA9Q5inY03s/ UhuKY8wIGQm43iX8RZ20TjpD8xX/Rz0VY17Pkgn/7fLDUXIjvIO9jGKHRlCaa7TB ur1dg50oASpXhVxBZyTWQyYLQzFGXPj1qEH2ZQqC4rzoy+eC0lycBEwr4mYnkZVX Vd9+OrlAse+JuyALPUsFhh+lktwiKGYeuHEQZ432KZ3AI9rx2+w= -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:02 2025 by rpki-client