This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: 2Ww7qWhAcvJ6GBzIA9gpIyAA8MMdsl33xuO2gxWKnjo= Subject key identifier: 42:50:D9:79:00:B5:1F:BD:D4:27:7F:37:9C:02:38:0E:02:97:4D:EE Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 0A9053AC19D494D98C620E2B9BFA1072F8316F82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 022D Signing time: Fri 05 Dec 2025 04:40:57 +0000 Manifest this update: Fri 05 Dec 2025 04:35:57 +0000 Manifest next update: Mon 08 Dec 2025 04:48:57 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: /FE0iFKkuw9ik5sI0qM/HI38hlYpuXhZbCwm00SF/P4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:90:53:ac:19:d4:94:d9:8c:62:0e:2b:9b:fa:10:72:f8:31:6f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Dec 5 04:35:57 2025 GMT Not After : Dec 8 04:48:57 2025 GMT Subject: CN=4250D97900B51FBDD4277F379C02380E02974DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:22:c0:70:36:4d:76:dc:f3:fd:d1:d4:16: f4:6e:f1:8f:27:d3:53:d4:5b:05:8a:f1:6d:00:c2: cd:19:cb:61:58:8f:54:e8:df:36:ec:ba:2b:84:10: 44:88:1c:cd:49:95:d7:43:04:e8:01:6c:27:0b:f1: d3:68:f9:1e:87:8b:5d:71:ee:5d:e6:17:33:f6:b4: b1:cc:0f:62:65:94:ee:dd:87:bc:e7:1e:5f:f8:33: ff:7f:f2:51:e6:a3:e0:76:cb:e0:2a:f6:b9:f9:c0: 47:a7:e3:e4:49:25:56:3f:72:ea:fe:3c:3e:97:c7: e7:15:9b:c7:78:50:d0:5c:32:18:7e:4e:ea:66:67: 6f:52:03:d7:b3:fc:ba:c0:0d:9e:63:d6:4f:14:e0: 59:22:9e:8f:c5:f7:91:ed:d3:af:75:88:9e:c1:e0: 2a:63:2b:a1:23:17:a5:5c:25:ed:ac:05:c9:7d:7d: 6a:d7:5d:a8:2d:8a:75:0c:52:4c:01:55:04:87:37: 14:62:9f:8c:b0:ee:b1:e0:fb:2d:5b:8a:e3:17:e8: 31:81:89:9f:06:44:46:b7:4f:85:b8:6b:ba:8b:17: c2:98:5a:a5:65:15:7b:a6:f4:4a:b3:d6:b7:2a:2b: 91:ee:06:bc:cf:29:4d:8a:a6:54:cc:40:76:72:b1: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:50:D9:79:00:B5:1F:BD:D4:27:7F:37:9C:02:38:0E:02:97:4D:EE X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:41:c8:d4:5a:b1:a7:8d:83:b3:f5:54:ff:d6:a8:41:83:07: 2f:43:b6:b1:d7:11:88:66:97:a5:0e:fa:02:fb:f5:9f:2a:e9: cf:4d:fa:6e:ae:09:df:9c:54:05:42:9b:33:ae:5e:4c:80:fe: 55:02:bd:d6:65:ec:0f:49:e5:45:9a:3f:72:b4:44:3a:df:d4: 3e:9e:e7:ef:ae:1c:3a:b5:71:40:e1:3e:47:10:98:77:0e:28: 94:47:fc:07:c4:eb:23:bc:65:e3:f8:f9:44:c6:44:57:8e:81: 3b:ae:1a:31:69:32:e5:11:22:41:a1:b2:60:ec:8d:f1:dc:67: f0:ae:ea:a2:20:02:9a:d7:74:c6:39:7c:1f:79:8c:81:e4:f8: 2a:23:f6:f6:22:92:09:89:d8:31:2a:29:17:af:48:16:25:d5: 9b:6c:94:bd:d2:9a:c6:6a:1a:6a:a1:77:ff:0a:58:fb:4e:75: a7:30:9e:0c:e3:ba:3f:74:f7:3b:a7:95:f0:ca:c0:7f:1d:5b: ec:e4:f5:79:03:0d:6c:34:18:2c:53:92:0a:60:31:d4:65:4d: 07:0b:3a:ca:82:c7:0f:05:27:be:fb:60:e5:da:e9:c0:af:7f: c1:38:df:6d:a3:81:9c:81:3e:24:08:ae:70:8d:0b:0f:eb:ea: ef:8f:83:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpBTrBnUlNmMYg4rm/oQcvgxb4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTEyMDUwNDM1NTdaFw0yNTEyMDgwNDQ4NTdaMDMxMTAvBgNV BAMTKDQyNTBEOTc5MDBCNTFGQkRENDI3N0YzNzlDMDIzODBFMDI5NzRERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgriLAcDZNdtzz/dHUFvRu8Y8n 01PUWwWK8W0Aws0Zy2FYj1To3zbsuiuEEESIHM1JlddDBOgBbCcL8dNo+R6Hi11x 7l3mFzP2tLHMD2JllO7dh7znHl/4M/9/8lHmo+B2y+Aq9rn5wEen4+RJJVY/cur+ PD6Xx+cVm8d4UNBcMhh+TupmZ29SA9ez/LrADZ5j1k8U4Fkino/F95Ht0691iJ7B 4CpjK6EjF6VcJe2sBcl9fWrXXagtinUMUkwBVQSHNxRin4yw7rHg+y1biuMX6DGB iZ8GREa3T4W4a7qLF8KYWqVlFXum9Eqz1rcqK5HuBrzPKU2KplTMQHZysf7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQlDZeQC1H73UJ383nAI4DgKXTe4wHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALxByNRasaeNg7P1VP/WqEGDBy9DtrHXEYhm l6UO+gL79Z8q6c9N+m6uCd+cVAVCmzOuXkyA/lUCvdZl7A9J5UWaP3K0RDrf1D6e 5++uHDq1cUDhPkcQmHcOKJRH/AfE6yO8ZeP4+UTGRFeOgTuuGjFpMuURIkGhsmDs jfHcZ/Cu6qIgAprXdMY5fB95jIHk+Coj9vYikgmJ2DEqKRevSBYl1ZtslL3SmsZq Gmqhd/8KWPtOdacwngzjuj909zunlfDKwH8dW+zk9XkDDWw0GCxTkgpgMdRlTQcL OsqCxw8FJ777YOXa6cCvf8E4322jgZyBPiQIrnCNCw/r6u+Pgws= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:42 2025 by rpki-client