This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: JoJWAdYsSR4+IiAnVUFfmP9FQWYSEoJTe5QJ3M4vLeA= Subject key identifier: 85:8E:4A:36:7E:83:0E:50:FD:52:E0:17:FD:93:B6:C2:76:E7:61:CF Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 65B90B8F364ACF23A9195DFB1A9DEFAF82F563FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 0138 Signing time: Fri 05 Dec 2025 09:10:00 +0000 Manifest this update: Fri 05 Dec 2025 09:05:00 +0000 Manifest next update: Mon 08 Dec 2025 18:48:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: +GIHyZInT9t0P1y+m7XSfVZUg2IZoWzpyCNMD0Xe1gc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b9:0b:8f:36:4a:cf:23:a9:19:5d:fb:1a:9d:ef:af:82:f5:63:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Dec 5 09:05:00 2025 GMT Not After : Dec 8 18:48:00 2025 GMT Subject: CN=858E4A367E830E50FD52E017FD93B6C276E761CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:07:1d:83:90:83:7a:2e:c0:33:47:c6:5a:72: b5:c7:bf:cb:03:23:e4:c9:ef:f5:ea:20:7a:cd:ef: 41:fe:3b:a8:5c:fc:c3:ab:54:d8:af:aa:ec:11:22: f1:5a:1f:b1:48:3a:08:6a:43:91:7b:c4:56:5a:1c: c4:4a:b7:bd:22:14:00:21:0e:db:ad:0d:89:96:01: dc:23:32:af:af:46:a7:e9:72:cd:99:92:50:c7:59: 4b:4a:91:5c:7f:58:0f:88:3b:46:ec:69:67:a6:7e: 39:14:76:5c:f3:6b:c4:94:a4:29:54:a8:01:2e:7c: 33:25:12:71:1f:1c:7e:3c:da:d7:78:f6:13:0b:5d: c9:b9:a9:fc:cf:6f:25:f5:9c:46:47:5b:f6:c5:78: 59:71:5a:2c:da:d6:6b:5c:cf:32:bb:07:21:84:14: 91:37:b7:99:94:72:ee:0e:2a:7b:2e:53:75:ea:ed: 2d:21:a5:59:40:3c:48:3c:77:57:9f:fa:14:eb:2d: 94:5d:35:dc:d6:76:12:70:25:2f:f8:be:c6:1f:ae: 61:cc:57:fe:6e:d5:f1:7d:0a:d9:a8:35:e9:cc:9b: 57:e7:9b:bc:27:e9:c0:e3:79:93:16:87:e7:7c:8d: 84:6d:6a:b0:43:a5:2a:d8:3f:2d:88:f3:64:c4:4b: 16:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8E:4A:36:7E:83:0E:50:FD:52:E0:17:FD:93:B6:C2:76:E7:61:CF X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a9:e8:66:81:27:a3:85:00:41:fc:44:39:cb:74:ef:2c:2f: 3b:fe:dd:1f:81:5f:90:1c:a7:56:e4:27:c4:2d:57:9a:ae:ae: 27:78:13:b1:7d:ed:14:dd:66:e2:71:69:0d:95:63:5b:51:d4: 59:cb:83:b6:d2:d0:86:ae:38:af:49:9c:a2:d9:12:91:a0:d3: aa:d0:0a:fa:8b:af:24:e2:bd:4b:d4:c1:dd:08:17:9f:2a:57: f5:91:28:04:e9:f9:49:95:cd:fe:35:19:30:b6:60:2e:a3:db: 65:85:0f:da:05:c1:43:ad:28:e5:6e:63:9e:44:fa:b4:3a:18: c1:d5:d6:f8:4c:f9:0f:08:aa:a1:c3:23:53:58:ab:52:62:83: f5:ec:af:73:cc:e4:1a:3a:dd:a2:72:bb:9e:30:43:75:35:9e: 37:4c:26:12:8d:06:d2:2d:a2:01:2a:19:d5:de:71:e4:d0:ff: 48:9a:bb:78:d8:be:1c:86:9e:97:7d:f6:ca:c9:23:fd:ec:9a: 35:69:ef:b9:67:04:0e:22:6f:c7:5b:b6:a5:d3:84:5f:e2:cf: 11:e5:fb:d0:6e:f2:77:64:66:47:f4:e6:0f:52:cb:4a:31:d1: 0b:3f:30:39:c9:80:c2:94:06:f9:de:73:03:58:ed:24:02:e3: 8d:48:4d:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbkLjzZKzyOpGV37Gp3vr4L1Y/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTEyMDUwOTA1MDBaFw0yNTEyMDgxODQ4MDBaMDMxMTAvBgNV BAMTKDg1OEU0QTM2N0U4MzBFNTBGRDUyRTAxN0ZEOTNCNkMyNzZFNzYxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChBx2DkIN6LsAzR8ZacrXHv8sD I+TJ7/XqIHrN70H+O6hc/MOrVNivquwRIvFaH7FIOghqQ5F7xFZaHMRKt70iFAAh DtutDYmWAdwjMq+vRqfpcs2ZklDHWUtKkVx/WA+IO0bsaWemfjkUdlzza8SUpClU qAEufDMlEnEfHH482td49hMLXcm5qfzPbyX1nEZHW/bFeFlxWiza1mtczzK7ByGE FJE3t5mUcu4OKnsuU3Xq7S0hpVlAPEg8d1ef+hTrLZRdNdzWdhJwJS/4vsYfrmHM V/5u1fF9CtmoNenMm1fnm7wn6cDjeZMWh+d8jYRtarBDpSrYPy2I82TESxaLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhY5KNn6DDlD9UuAX/ZO2wnbnYc8wHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESp6GaBJ6OFAEH8RDnLdO8sLzv+3R+BX5Ac p1bkJ8QtV5qurid4E7F97RTdZuJxaQ2VY1tR1FnLg7bS0IauOK9JnKLZEpGg06rQ CvqLryTivUvUwd0IF58qV/WRKATp+UmVzf41GTC2YC6j22WFD9oFwUOtKOVuY55E +rQ6GMHV1vhM+Q8IqqHDI1NYq1Jig/Xsr3PM5Bo63aJyu54wQ3U1njdMJhKNBtIt ogEqGdXeceTQ/0iau3jYvhyGnpd99srJI/3smjVp77lnBA4ib8dbtqXThF/izxHl +9Bu8ndkZkf05g9Sy0ox0Qs/MDnJgMKUBvnecwNY7SQC441ITSQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:02 2025 by rpki-client